This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/VGYXm9SrAnPQDO4KzyfYQTctcKE.roa File: VGYXm9SrAnPQDO4KzyfYQTctcKE.roa (raw, json) Hash identifier: t6wWWjbtPwKCRrEiQDaW7hfJLS6tTVFXTMhhJiW17DM= Subject key identifier: 54:66:17:9B:D4:AB:02:73:D0:0C:EE:0A:CF:27:D8:41:37:2D:70:A1 Certificate issuer: /CN=07d44a52778aa65f736e72436003f6654f268318 Certificate serial: 019B797E94C098FCCFF8019EB2AAB0C3FBAA Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/VGYXm9SrAnPQDO4KzyfYQTctcKE.roa Signing time: Thu 01 Jan 2026 12:18:17 +0000 ROA not before: Thu 01 Jan 2026 12:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12303 IP address blocks: 2001:738:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:94:c0:98:fc:cf:f8:01:9e:b2:aa:b0:c3:fb:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07d44a52778aa65f736e72436003f6654f268318 Validity Not Before: Jan 1 12:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5466179bd4ab0273d00cee0acf27d841372d70a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:38:14:34:96:43:0c:4f:ae:8f:04:b1:99:45: 91:ff:da:51:8e:f7:7c:b3:03:68:9c:cf:a8:c8:ec: 9b:0a:72:4a:44:ed:af:93:63:68:87:1f:89:e0:14: 5b:47:a2:b7:ee:f3:50:ff:43:53:d8:e0:0c:84:cd: 23:26:7b:f0:c5:a3:37:2b:68:39:b7:d4:10:f3:31: 8b:81:92:da:12:8a:8c:7f:ce:f5:3a:73:69:44:63: fb:dc:6d:1f:6d:7b:d3:f3:ad:61:c9:dd:ed:1b:a5: 9b:9e:f2:1e:fd:0f:ef:32:28:e4:7a:a7:b9:7d:f3: f4:8f:c9:dc:9e:2f:9e:a0:17:c6:2f:d9:61:50:9e: 50:17:bf:97:17:49:74:90:1d:0d:9b:6b:b3:2e:d5: 62:de:4d:a0:27:bd:74:e1:e8:5c:4a:6e:16:0e:7c: f6:d1:96:ee:ff:5e:82:fd:ba:42:04:c8:03:b2:63: e0:56:5a:66:aa:78:0d:e6:19:e7:92:f3:f3:b9:28: 7d:b3:e2:1e:32:e0:e7:02:a5:86:99:e0:9a:26:05: df:e5:5a:25:61:ac:05:18:4e:d8:bd:26:79:d8:fa: 7f:f2:8a:68:1b:4d:81:13:26:67:e1:ac:c5:30:12: 0e:cd:4e:b3:88:5d:33:f0:e4:d7:11:cf:0c:ee:5d: 86:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:66:17:9B:D4:AB:02:73:D0:0C:EE:0A:CF:27:D8:41:37:2D:70:A1 X509v3 Authority Key Identifier: keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/VGYXm9SrAnPQDO4KzyfYQTctcKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:738:4::/48 Signature Algorithm: sha256WithRSAEncryption 29:b1:66:37:d9:c1:51:d0:f7:b4:8e:49:4a:1b:d1:9d:6d:7d: f4:83:5e:e1:a0:5e:3a:26:55:c8:30:01:ad:d1:0d:b9:db:ce: 6b:32:89:bc:3f:c0:18:bd:e4:aa:9c:27:da:5a:c8:7d:67:8a: 41:a7:40:ed:55:8e:a1:a1:3e:20:d2:0f:37:fa:62:78:b1:23: eb:0f:07:67:30:4f:97:3d:18:5c:ac:55:a1:57:47:74:30:72: 1b:1f:26:f8:8a:56:47:5d:af:cd:83:fe:14:16:09:6e:12:81: 4e:e4:5f:e4:99:b7:7f:60:5a:e2:f0:a7:c6:b9:61:0e:a2:b6: 9f:53:a0:ad:d3:27:62:55:e8:a3:5e:10:45:de:50:0f:1d:69: a6:21:3f:c3:04:51:ab:6b:bf:67:5b:45:52:0e:50:55:72:0d: 3d:24:24:8c:4f:f3:fe:e2:42:85:72:71:22:ff:b0:b5:45:d3: f5:5b:7d:87:ea:ec:8c:ec:72:cc:8c:03:c9:63:38:55:a1:31: 6d:72:3a:e8:a3:6d:86:bd:27:2f:13:2b:c0:fc:94:70:42:21: 7c:9d:c4:97:49:9a:27:48:47:ff:a6:59:8c:9d:dc:89:1f:c5: 23:8e:03:2d:5f:61:2a:97:d3:f0:96:2e:43:b1:93:26:dd:39: 2b:ae:81:c0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fpTAmPzP+AGesqqww/uqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZDQ0YTUyNzc4YWE2NWY3MzZlNzI0MzYwMDNmNjY1NGYy NjgzMTgwHhcNMjYwMTAxMTIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDY2MTc5YmQ0YWIwMjczZDAwY2VlMGFjZjI3ZDg0MTM3MmQ3MGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzgUNJZDDE+ujwSxmUWR/9pRjvd8 swNonM+oyOybCnJKRO2vk2Nohx+J4BRbR6K37vNQ/0NT2OAMhM0jJnvwxaM3K2g5 t9QQ8zGLgZLaEoqMf871OnNpRGP73G0fbXvT861hyd3tG6WbnvIe/Q/vMijkeqe5 ffP0j8ncni+eoBfGL9lhUJ5QF7+XF0l0kB0Nm2uzLtVi3k2gJ7104ehcSm4WDnz2 0Zbu/16C/bpCBMgDsmPgVlpmqngN5hnnkvPzuSh9s+IeMuDnAqWGmeCaJgXf5Vol YawFGE7YvSZ52Pp/8opoG02BEyZn4azFMBIOzU6ziF0z8OTXEc8M7l2GiwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFRmF5vUqwJz0AzuCs8n2EE3LXChMB8GA1UdIwQY MBaAFAfUSlJ3iqZfc25yQ2AD9mVPJoMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlSS1VuZUtwbDl6Ym5KRFlBUDJaVThtZ3hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84MTNjYmMtNGZhNC00NjQ2LWE4ZGIt MWQyOGE2MGUwZTMwLzEvVkdZWG05U3JBblBRRE80S3p5ZllRVGN0Y0tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS84MTNjYmMtNGZhNC00NjQ2LWE4ZGItMWQyOGE2MGUwZTMw LzEvQjlSS1VuZUtwbDl6Ym5KRFlBUDJaVThtZ3hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEHOAAE MA0GCSqGSIb3DQEBCwUAA4IBAQApsWY32cFR0Pe0jklKG9GdbX30g17hoF46JlXI MAGt0Q25285rMom8P8AYveSqnCfaWsh9Z4pBp0DtVY6hoT4g0g83+mJ4sSPrDwdn ME+XPRhcrFWhV0d0MHIbHyb4ilZHXa/Ng/4UFgluEoFO5F/kmbd/YFri8KfGuWEO orafU6Ct0ydiVeijXhBF3lAPHWmmIT/DBFGra79nW0VSDlBVcg09JCSMT/P+4kKF cnEi/7C1RdP1W32H6uyM7HLMjAPJYzhVoTFtcjroo22GvScvEyvA/JRwQiF8ncSX SZonSEf/plmMndyJH8UjjgMtX2Eql9Pwli5DsZMm3TkrroHA -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:42 2026 by rpki-client