This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/VSrC1QP0T_UaXaaEFdbsOmUjBh0.roa File: VSrC1QP0T_UaXaaEFdbsOmUjBh0.roa (raw, json) Hash identifier: zTpZ/xLPhwOsaGOqgGhoR4AJouaTmVoH7QdVIfFBLJc= Subject key identifier: 55:2A:C2:D5:03:F4:4F:F5:1A:5D:A6:84:15:D6:EC:3A:65:23:06:1D Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019B797EA3AB9502653FA5AB053AFA003A8D Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/VSrC1QP0T_UaXaaEFdbsOmUjBh0.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28886 IP address blocks: 217.28.48.0/20 maxlen: 20 2a02:2880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a3:ab:95:02:65:3f:a5:ab:05:3a:fa:00:3a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=552ac2d503f44ff51a5da68415d6ec3a6523061d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0a:1a:da:33:a3:f4:9d:32:84:d8:1c:57:2a: e3:29:54:2a:0c:c3:09:30:4c:13:e9:b7:13:bf:64: 01:e0:f5:91:ae:b9:ea:28:db:3b:03:54:79:91:a3: a2:34:cc:d5:b7:d9:25:e4:e1:f0:0b:8b:81:09:67: ee:bf:48:18:68:1e:75:ae:f8:6f:45:81:7b:bb:21: 8c:86:69:ad:5e:7c:90:b8:57:4d:c0:d1:10:f6:12: 7a:b6:e5:1d:72:aa:8a:06:75:5e:61:88:f5:10:76: 46:75:18:94:8a:d2:ae:16:fe:0f:34:9b:e5:08:74: af:35:93:04:be:64:9f:a3:84:f2:87:43:1b:f4:ff: ba:bb:a1:7b:67:b2:ed:2d:56:d8:bd:f2:5b:00:26: a6:cc:12:da:e8:9a:87:a1:bb:e5:61:a8:93:d8:96: fd:4b:9f:19:d9:3a:5a:cc:3d:a3:7f:fd:33:8d:68: 1d:e8:1a:de:e4:e1:01:80:1d:3f:7d:c7:43:17:02: 00:60:07:13:10:74:96:4f:e1:8f:3c:ee:e6:a2:3e: ea:0e:4e:b2:b9:e5:bd:c7:3c:43:2b:1d:6e:f1:4d: 4b:01:07:ee:b5:12:dc:0b:33:fd:c0:26:c8:e1:9e: eb:d6:2f:f7:7b:73:12:c5:60:2f:59:13:35:6f:9f: 78:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2A:C2:D5:03:F4:4F:F5:1A:5D:A6:84:15:D6:EC:3A:65:23:06:1D X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/VSrC1QP0T_UaXaaEFdbsOmUjBh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.28.48.0/20 IPv6: 2a02:2880::/32 Signature Algorithm: sha256WithRSAEncryption 48:88:73:fd:c3:78:cf:13:d5:c9:04:bb:56:a6:6b:47:22:be: c6:e2:98:39:c5:9c:21:ed:f5:40:6d:44:8d:1f:55:e7:e3:a1: 3a:7e:33:e4:c2:d5:35:98:d4:16:c7:ba:84:2d:86:31:72:89: f7:d5:40:af:9b:74:9e:f5:47:c0:a4:e8:73:bb:db:f8:c6:99: 6a:60:58:a7:d5:77:dc:18:45:ba:78:42:49:12:99:55:9c:c0: 77:86:39:bb:b6:f2:8f:08:ca:4d:ff:a7:0a:08:6c:41:9e:c4: 09:23:2e:24:f8:7f:7c:66:bc:6d:13:b0:f4:48:c3:c9:3d:da: 2f:81:be:fd:22:5a:58:22:30:2c:8d:cb:9e:13:1a:0e:4e:51: 32:c6:7c:f1:af:a2:4b:e1:f3:56:bf:f5:05:cd:e3:7b:9e:94: 34:0a:34:2a:e2:4c:fa:87:59:3d:06:c3:23:85:29:02:10:8e: e1:bd:54:84:28:f1:96:c3:55:d4:40:96:59:57:6d:26:7f:a4: 2e:09:ce:7b:53:01:81:32:94:d9:d1:5b:92:d2:74:1c:c7:99: 4f:71:0f:ca:ff:de:93:e6:50:74:74:09:6b:f3:24:c1:54:9e: 27:e6:2a:dd:47:27:20:34:ab:83:fd:50:f2:ad:ee:13:4c:67: 46:1b:97:f7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fqOrlQJlP6WrBTr6ADqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTJhYzJkNTAzZjQ0ZmY1MWE1ZGE2ODQxNWQ2ZWMzYTY1MjMwNjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6goa2jOj9J0yhNgcVyrjKVQqDMMJ MEwT6bcTv2QB4PWRrrnqKNs7A1R5kaOiNMzVt9kl5OHwC4uBCWfuv0gYaB51rvhv RYF7uyGMhmmtXnyQuFdNwNEQ9hJ6tuUdcqqKBnVeYYj1EHZGdRiUitKuFv4PNJvl CHSvNZMEvmSfo4Tyh0Mb9P+6u6F7Z7LtLVbYvfJbACamzBLa6JqHobvlYaiT2Jb9 S58Z2TpazD2jf/0zjWgd6Bre5OEBgB0/fcdDFwIAYAcTEHSWT+GPPO7moj7qDk6y ueW9xzxDKx1u8U1LAQfutRLcCzP9wCbI4Z7r1i/3e3MSxWAvWRM1b594GwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFUqwtUD9E/1Gl2mhBXW7DplIwYdMB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvVlNyQzFRUDBUX1VhWGFhRUZkYnNPbVVqQmgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE2RwwMA0E AgACMAcDBQAqAiiAMA0GCSqGSIb3DQEBCwUAA4IBAQBIiHP9w3jPE9XJBLtWpmtH Ir7G4pg5xZwh7fVAbUSNH1Xn46E6fjPkwtU1mNQWx7qELYYxcon31UCvm3Se9UfA pOhzu9v4xplqYFin1XfcGEW6eEJJEplVnMB3hjm7tvKPCMpN/6cKCGxBnsQJIy4k +H98ZrxtE7D0SMPJPdovgb79IlpYIjAsjcueExoOTlEyxnzxr6JL4fNWv/UFzeN7 npQ0CjQq4kz6h1k9BsMjhSkCEI7hvVSEKPGWw1XUQJZZV20mf6QuCc57UwGBMpTZ 0VuS0nQcx5lPcQ/K/96T5lB0dAlr8yTBVJ4n5irdRycgNKuD/VDyre4TTGdGG5f3 -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:34 2026 by rpki-client