This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/vxGSClUEKdIXCUT1_00M4kOwUk0.roa File: vxGSClUEKdIXCUT1_00M4kOwUk0.roa (raw, json) Hash identifier: i237stsz2i1XaEU/WNLhg4As1B9TcbIPHRPFCYv5Hu0= Subject key identifier: BF:11:92:0A:55:04:29:D2:17:09:44:F5:FF:4D:0C:E2:43:B0:52:4D Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019BEFC60485D0868A1AA3958B3B6E855470 Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/vxGSClUEKdIXCUT1_00M4kOwUk0.roa Signing time: Sat 24 Jan 2026 11:31:30 +0000 ROA not before: Sat 24 Jan 2026 11:31:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215310 IP address blocks: 2a05:f680::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ef:c6:04:85:d0:86:8a:1a:a3:95:8b:3b:6e:85:54:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Jan 24 11:31:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf11920a550429d2170944f5ff4d0ce243b0524d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:b5:70:bd:22:d4:09:d7:cc:d4:04:f9:8c: ce:30:78:b5:f1:1d:f0:ce:a2:4d:db:43:e9:1a:ae: f6:50:64:d0:61:8c:76:4d:0d:85:9a:ed:b1:d3:d3: 2d:fe:e2:2b:79:ea:ab:74:c1:e4:09:bd:c4:e1:bd: 43:ab:c7:36:e0:f1:d5:65:6b:b1:78:a4:55:ad:33: 7f:af:8d:1c:71:7e:42:73:c6:1e:00:9d:49:40:00: 79:60:ee:77:38:01:7a:00:2d:b6:d3:7d:fc:d6:21: 6c:f6:6c:96:98:11:2b:0f:22:a5:dc:90:f4:5c:96: d6:21:41:18:84:d1:99:a5:61:31:39:fa:61:75:5e: a0:02:4e:b1:73:45:3a:76:d5:18:19:49:a1:19:77: 4b:94:1b:18:f8:0a:a7:c6:19:c8:83:d1:56:6a:fb: 0d:da:5c:d8:85:81:f5:5a:29:f9:59:1b:4d:5d:bf: b4:95:82:a2:f5:10:33:a5:00:a5:c2:4f:ab:96:d5: fd:4c:91:5c:9b:e9:02:47:43:ae:3c:2d:11:d4:b9: f3:3d:af:ff:6c:e8:dc:a6:13:7b:3c:33:c6:7e:aa: 6b:bf:56:eb:65:e0:b1:fc:f4:8d:a7:a6:b5:42:63: 48:a2:b2:7c:3c:a3:ab:2b:53:62:e2:fe:a0:36:2f: df:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:11:92:0A:55:04:29:D2:17:09:44:F5:FF:4D:0C:E2:43:B0:52:4D X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/vxGSClUEKdIXCUT1_00M4kOwUk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:f680::/32 Signature Algorithm: sha256WithRSAEncryption 11:ea:c3:a8:19:7c:16:96:a6:25:28:4e:f8:07:8b:48:91:7e: 7c:75:da:31:95:60:d2:23:4f:7b:29:d5:c8:a8:0d:d3:48:16: 4e:0e:ae:1e:b3:2c:85:cd:b3:65:1a:07:14:79:55:fa:21:7a: 3c:c6:1a:b9:54:6b:6a:ac:86:b2:51:2e:d4:18:1b:6b:eb:6e: 40:ba:c9:d8:07:d1:55:d4:4d:de:76:7d:4c:91:5d:0d:ce:19: 3d:b6:aa:77:64:ff:83:b4:54:09:b4:4b:40:3b:6f:23:dc:6a: 6d:a6:0d:6d:a4:cc:98:fb:e5:b1:77:64:7c:f1:da:cb:eb:e4: da:7c:fe:bf:0c:03:ff:7e:27:fb:d8:be:19:71:83:30:e9:65: dc:37:61:b2:6a:af:e1:b4:e6:ba:51:29:b7:f6:59:c5:6e:45: 9d:0c:34:0a:a9:db:70:21:4c:e0:a9:0f:b7:99:75:80:31:6b: cb:35:bb:c4:a6:e7:e9:9b:c1:ec:f6:8f:2e:e7:fc:5d:1f:0e: 38:5d:08:3e:61:5c:db:1b:92:15:f0:a6:86:34:35:7f:0a:11: e8:54:b7:6c:4d:bb:b5:e1:c6:45:d1:ea:52:6b:f9:55:a9:fd: d5:84:f1:94:2f:65:a2:31:fc:69:72:31:8a:33:06:22:03:3d: 2a:f2:cc:bf -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZvvxgSF0IaKGqOViztuhVRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwMTI0MTEzMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjExOTIwYTU1MDQyOWQyMTcwOTQ0ZjVmZjRkMGNlMjQzYjA1MjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsei1cL0i1AnXzNQE+YzOMHi18R3w zqJN20PpGq72UGTQYYx2TQ2Fmu2x09Mt/uIreeqrdMHkCb3E4b1Dq8c24PHVZWux eKRVrTN/r40ccX5Cc8YeAJ1JQAB5YO53OAF6AC2203381iFs9myWmBErDyKl3JD0 XJbWIUEYhNGZpWExOfphdV6gAk6xc0U6dtUYGUmhGXdLlBsY+AqnxhnIg9FWavsN 2lzYhYH1Win5WRtNXb+0lYKi9RAzpQClwk+rltX9TJFcm+kCR0OuPC0R1LnzPa// bOjcphN7PDPGfqprv1brZeCx/PSNp6a1QmNIorJ8PKOrK1Ni4v6gNi/fRwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFL8RkgpVBCnSFwlE9f9NDOJDsFJNMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvdnhHU0NsVUVLZElYQ1VUMV8wME00a093VWswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgX2gDAN BgkqhkiG9w0BAQsFAAOCAQEAEerDqBl8FpamJShO+AeLSJF+fHXaMZVg0iNPeynV yKgN00gWTg6uHrMshc2zZRoHFHlV+iF6PMYauVRraqyGslEu1Bgba+tuQLrJ2AfR VdRN3nZ9TJFdDc4ZPbaqd2T/g7RUCbRLQDtvI9xqbaYNbaTMmPvlsXdkfPHay+vk 2nz+vwwD/34n+9i+GXGDMOll3Ddhsmqv4bTmulEpt/ZZxW5FnQw0CqnbcCFM4KkP t5l1gDFryzW7xKbn6ZvB7PaPLuf8XR8OOF0IPmFc2xuSFfCmhjQ1fwoR6FS3bE27 teHGRdHqUmv5Van91YTxlC9lojH8aXIxijMGIgM9KvLMvw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:15 2026 by rpki-client