This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/vF0VYWecbrRxbZK9c56uBdCo4ik.roa File: vF0VYWecbrRxbZK9c56uBdCo4ik.roa (raw, json) Hash identifier: GSJ2HtyoNkdo5nkx3DTM8Av/uYVGzIaDwGAeMRt+F5E= Subject key identifier: BC:5D:15:61:67:9C:6E:B4:71:6D:92:BD:73:9E:AE:05:D0:A8:E2:29 Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Certificate serial: 019B78345618C803AC02EFCDF1926145A478 Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/vF0VYWecbrRxbZK9c56uBdCo4ik.roa Signing time: Thu 01 Jan 2026 06:17:34 +0000 ROA not before: Thu 01 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212330 IP address blocks: 2a04:2dc0:1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:56:18:c8:03:ac:02:ef:cd:f1:92:61:45:a4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Validity Not Before: Jan 1 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc5d1561679c6eb4716d92bd739eae05d0a8e229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:86:c2:23:9f:99:c7:a8:0d:a1:50:08:6c: 62:ad:b4:86:7c:e3:58:63:89:0f:3f:ac:75:87:42: c6:45:55:56:74:94:c8:c7:91:95:ac:31:60:da:0b: a4:cd:c1:7b:08:04:18:74:3d:ed:99:bd:18:51:63: d5:31:c9:eb:04:ae:98:a9:90:d3:9c:39:89:1f:c7: 76:6e:e4:69:72:b5:d2:e1:31:5d:5f:ca:e0:16:1f: 35:c9:09:25:66:04:5d:fa:72:0c:dd:fa:ab:2c:2e: 29:1a:16:ba:6f:79:c0:bc:67:8f:79:60:7c:e9:93: a7:b3:98:08:8f:c8:88:cb:c0:1c:09:c7:7b:09:3c: f5:0a:39:25:5a:aa:9d:5d:d3:4a:c8:87:d3:f8:fc: e4:e1:50:37:12:b2:d2:ff:88:35:c9:38:ea:c8:32: 27:d0:d2:e6:ff:16:ab:a7:91:11:1a:59:e4:dc:11: 26:05:1a:67:9b:d5:28:5f:92:1b:40:71:d7:12:19: b3:7e:01:cc:61:68:75:45:af:a5:26:2a:b7:2d:5f: 07:7f:d4:6e:cc:a2:ba:c1:68:9e:85:30:e6:44:a9: 10:33:a4:31:1b:27:03:9d:6f:37:3d:69:8c:3b:c2: 1d:ff:f7:5a:90:f5:41:b0:dc:b0:ea:1c:43:b1:4e: 37:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5D:15:61:67:9C:6E:B4:71:6D:92:BD:73:9E:AE:05:D0:A8:E2:29 X509v3 Authority Key Identifier: keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/vF0VYWecbrRxbZK9c56uBdCo4ik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:2dc0:1d::/48 Signature Algorithm: sha256WithRSAEncryption 22:fd:d4:5d:88:ec:00:2c:89:1e:9f:2d:f3:11:10:db:7d:18: a2:b6:3f:a9:5f:d5:fb:f1:be:92:1d:21:13:01:12:98:ed:b1: dc:6e:2d:ee:48:f0:e3:17:62:7f:45:a6:fc:05:e7:00:fb:f6: 6c:a3:05:67:1e:a8:1b:ff:b8:77:64:db:7e:07:cb:2c:79:3b: f2:b8:2d:16:05:4b:03:2c:ed:96:4f:35:f8:15:43:38:44:f8: 4f:83:98:66:d6:ba:b6:dc:42:94:a3:0f:a0:2c:7f:eb:86:6e: 9a:82:04:99:48:b7:f7:d7:a1:07:c8:ad:84:bf:58:f8:a1:54: 2b:ac:20:18:5c:c0:25:43:04:87:50:23:bd:b1:33:48:b7:5b: 2a:16:8a:6c:b6:0c:3b:3e:9e:27:a6:2f:b3:d8:79:00:7e:25: e6:41:9b:95:ea:40:06:03:b4:66:9d:22:20:f2:c9:c8:0d:52: 20:b7:ff:fa:3c:f2:3c:de:41:75:cd:9f:20:06:01:bd:22:ea: 07:70:83:ee:e4:a2:c9:b5:af:15:85:b1:9b:d7:aa:bc:d0:6b: 5a:df:6a:95:ef:95:4c:c9:d5:8e:50:56:d2:f7:26:aa:82:1e: 34:42:80:be:cc:6d:49:d0:78:23:ad:b5:bc:c2:25:f9:bd:35: b0:b6:67:07 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt4NFYYyAOsAu/N8ZJhRaR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy MzMyMmMwHhcNMjYwMTAxMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzVkMTU2MTY3OWM2ZWI0NzE2ZDkyYmQ3MzllYWUwNWQwYThlMjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd2GwiOfmceoDaFQCGxirbSGfONY Y4kPP6x1h0LGRVVWdJTIx5GVrDFg2gukzcF7CAQYdD3tmb0YUWPVMcnrBK6YqZDT nDmJH8d2buRpcrXS4TFdX8rgFh81yQklZgRd+nIM3fqrLC4pGha6b3nAvGePeWB8 6ZOns5gIj8iIy8AcCcd7CTz1CjklWqqdXdNKyIfT+Pzk4VA3ErLS/4g1yTjqyDIn 0NLm/xarp5ERGlnk3BEmBRpnm9UoX5IbQHHXEhmzfgHMYWh1Ra+lJiq3LV8Hf9Ru zKK6wWiehTDmRKkQM6QxGycDnW83PWmMO8Id//dakPVBsNyw6hxDsU43mQIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFLxdFWFnnG60cW2SvXOergXQqOIpMB8GA1UdIwQY MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0 LWE0OWU1YzY2MzNiZC8xL3ZGMFZZV2VjYnJSeGJaSzljNTZ1QmRDbzRpay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0LWE0OWU1YzY2MzNi ZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBC3A AB0wDQYJKoZIhvcNAQELBQADggEBACL91F2I7AAsiR6fLfMRENt9GKK2P6lf1fvx vpIdIRMBEpjtsdxuLe5I8OMXYn9FpvwF5wD79myjBWceqBv/uHdk234Hyyx5O/K4 LRYFSwMs7ZZPNfgVQzhE+E+DmGbWurbcQpSjD6Asf+uGbpqCBJlIt/fXoQfIrYS/ WPihVCusIBhcwCVDBIdQI72xM0i3WyoWimy2DDs+niemL7PYeQB+JeZBm5XqQAYD tGadIiDyycgNUiC3//o88jzeQXXNnyAGAb0i6gdwg+7kosm1rxWFsZvXqrzQa1rf apXvlUzJ1Y5QVtL3JqqCHjRCgL7MbUnQeCOttbzCJfm9NbC2Zwc= -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:18 2026 by rpki-client