This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa File: V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa (raw, json) Hash identifier: cKOWN1Y85BplWaYgItYhxxODhX9O9HAW97DEPTPY4i8= Subject key identifier: 57:E6:82:AB:37:DB:D5:AE:67:AF:5F:03:A5:DA:39:F5:37:4E:27:6A Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019B7BA36DD5E771EC90D8A0DD76A68931D6 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa Signing time: Thu 01 Jan 2026 22:17:46 +0000 ROA not before: Thu 01 Jan 2026 22:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202279 IP address blocks: 128.0.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6d:d5:e7:71:ec:90:d8:a0:dd:76:a6:89:31:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Jan 1 22:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57e682ab37dbd5ae67af5f03a5da39f5374e276a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:72:fb:eb:4b:d9:28:35:4a:d7:ec:8e:75:0b: 92:2a:a6:1e:ff:0b:f2:58:5b:7d:c0:a6:a2:89:62: 7c:e9:b9:9b:6d:bb:37:a9:cf:c2:c6:0f:07:47:b7: 02:3d:12:86:9b:b7:bf:bd:79:bf:83:96:a2:62:93: 9d:5b:f2:67:7e:a3:b7:f9:2d:df:51:fa:95:f4:4e: 8f:48:d4:33:18:18:ae:80:21:e8:8e:99:6e:ec:a4: 64:fa:94:fa:f8:eb:76:fa:a5:b0:d0:f3:99:0b:1f: 37:36:e5:19:70:74:eb:3d:94:57:8a:df:5a:c6:a2: 61:b9:71:2c:de:99:69:37:f3:9a:f0:1f:b2:ca:94: c6:8d:7e:80:a0:f4:5e:e7:78:ef:92:1e:f6:1b:d8: 21:cf:c2:9a:da:d1:07:de:78:30:b0:49:c8:ff:ce: 80:2a:80:33:9a:ee:0a:e1:00:da:58:8f:c9:33:8b: 19:65:af:b3:90:cc:a5:71:d8:72:e7:83:7e:16:1b: 68:a4:a9:fd:06:40:9a:f8:0d:8a:f7:f6:0f:e1:5b: 79:aa:fd:af:59:e1:f1:ab:46:22:aa:6f:f1:be:92: a4:3c:37:ff:97:76:aa:da:3d:2e:f4:68:4b:eb:cd: e0:30:78:bd:f7:14:67:c5:59:47:80:a4:ee:bb:61: 74:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E6:82:AB:37:DB:D5:AE:67:AF:5F:03:A5:DA:39:F5:37:4E:27:6A X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.0.80.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:7b:b8:90:c2:9b:04:71:fc:ad:7c:6d:18:94:a6:a4:8d:34: a3:5a:f5:24:44:5b:12:f4:f9:fa:db:cb:53:bd:1e:80:ae:46: 56:3b:7c:70:6c:51:38:c6:98:13:f5:4d:f8:7b:a0:17:bf:f7: 3d:25:cb:38:c5:33:7e:41:2a:d2:fd:cf:f5:b3:a5:4d:d1:6d: 37:78:d7:52:be:32:9c:40:b2:4a:cb:99:f7:1d:32:77:cd:e0: 55:06:f6:c9:22:78:f2:2d:37:63:45:c9:e3:91:12:77:40:61: 69:56:d4:20:19:af:cb:c6:9b:87:52:6d:f3:3c:79:7e:3f:06: ba:2a:b2:3f:bc:38:40:fd:83:cf:dd:d5:19:75:97:3e:0b:2b: 80:68:aa:e0:d3:41:70:b6:c3:ea:2c:8a:7f:15:90:ba:66:23: f5:a9:08:18:f4:75:1d:7e:1c:85:14:a4:75:49:bd:03:17:8a: 9e:c7:23:dd:f0:22:f7:8b:a5:3b:2a:d2:75:56:b3:6e:45:98: 30:e4:7f:06:4f:ab:d7:8f:73:82:0d:01:eb:5b:35:5e:07:75: f1:63:e1:33:a8:c3:08:85:30:23:28:08:2e:d6:a8:04:bf:45: 35:69:ca:05:db:eb:11:c0:8a:dc:6c:ac:ef:1e:a5:22:ec:dd: c6:05:19:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o23V53HskNig3XamiTHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYwMTAxMjIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2U2ODJhYjM3ZGJkNWFlNjdhZjVmMDNhNWRhMzlmNTM3NGUyNzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HL760vZKDVK1+yOdQuSKqYe/wvy WFt9wKaiiWJ86bmbbbs3qc/Cxg8HR7cCPRKGm7e/vXm/g5aiYpOdW/JnfqO3+S3f UfqV9E6PSNQzGBiugCHojplu7KRk+pT6+Ot2+qWw0POZCx83NuUZcHTrPZRXit9a xqJhuXEs3plpN/Oa8B+yypTGjX6AoPRe53jvkh72G9ghz8Ka2tEH3ngwsEnI/86A KoAzmu4K4QDaWI/JM4sZZa+zkMylcdhy54N+FhtopKn9BkCa+A2K9/YP4Vt5qv2v WeHxq0Yiqm/xvpKkPDf/l3aq2j0u9GhL683gMHi99xRnxVlHgKTuu2F0ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFfmgqs329WuZ69fA6XaOfU3TidqMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvVi1hQ3F6ZmIxYTVucjE4RHBkbzU5VGRPSjJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgABQMA0G CSqGSIb3DQEBCwUAA4IBAQAte7iQwpsEcfytfG0YlKakjTSjWvUkRFsS9Pn628tT vR6ArkZWO3xwbFE4xpgT9U34e6AXv/c9Jcs4xTN+QSrS/c/1s6VN0W03eNdSvjKc QLJKy5n3HTJ3zeBVBvbJInjyLTdjRcnjkRJ3QGFpVtQgGa/LxpuHUm3zPHl+Pwa6 KrI/vDhA/YPP3dUZdZc+CyuAaKrg00FwtsPqLIp/FZC6ZiP1qQgY9HUdfhyFFKR1 Sb0DF4qexyPd8CL3i6U7KtJ1VrNuRZgw5H8GT6vXj3OCDQHrWzVeB3XxY+EzqMMI hTAjKAgu1qgEv0U1acoF2+sRwIrcbKzvHqUi7N3GBRkI -----END CERTIFICATE-----Generated at Mon Jan 26 11:05:05 2026 by rpki-client