This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/VaU_FJNN0SPug5fmKDhZ2YZw5wQ.roa File: VaU_FJNN0SPug5fmKDhZ2YZw5wQ.roa (raw, json) Hash identifier: tXVOE7siNlB3oT+rp3t9G6RC5d1jo+/FpEUK7TJG8wU= Subject key identifier: 55:A5:3F:14:93:4D:D1:23:EE:83:97:E6:28:38:59:D9:86:70:E7:04 Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441 Certificate serial: 019B7BA4BF1CA0C0FDE5B3BEB8C0028C23E9 Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/VaU_FJNN0SPug5fmKDhZ2YZw5wQ.roa Signing time: Thu 01 Jan 2026 22:19:12 +0000 ROA not before: Thu 01 Jan 2026 22:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207754 IP address blocks: 2001:678:1054::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:bf:1c:a0:c0:fd:e5:b3:be:b8:c0:02:8c:23:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441 Validity Not Before: Jan 1 22:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55a53f14934dd123ee8397e6283859d98670e704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:26:5a:86:8f:e5:40:15:d0:4e:d3:c6:a7: 6c:09:fa:35:cf:2c:29:4e:00:65:d7:73:2c:b5:9f: f8:22:68:e8:a5:b4:18:75:7a:da:0a:24:70:9c:ec: 62:d8:bf:b8:92:ec:a5:c3:e5:4d:05:52:91:be:59: 9b:b7:ab:75:b4:a3:a8:67:72:34:04:a7:e2:62:a9: 3a:62:5b:b3:71:5c:ad:b7:e5:1d:0b:93:91:6c:70: 6f:f7:74:a5:25:3c:de:f7:84:8a:ca:8c:91:20:31: 8b:9e:b0:12:24:8d:c3:98:f6:85:33:a6:24:a0:19: 32:e5:61:27:8e:bc:a0:fd:94:2c:95:b3:bd:43:d3: 04:53:59:c1:4d:a6:33:b1:33:16:40:06:b2:11:1e: 70:09:87:de:86:61:62:1d:87:eb:16:b6:35:81:c8: dc:ea:5a:8c:bb:18:87:0a:7d:76:ad:e9:4e:8e:eb: 0b:99:52:19:84:c6:04:cd:3a:36:c0:f7:02:d5:83: 30:92:56:ac:1c:d8:20:da:77:02:4d:0f:d9:32:54: ef:15:30:20:70:42:c3:26:6a:81:70:6e:3e:54:b9: d1:d6:8e:96:9f:c6:50:f2:a7:3d:c4:56:e9:64:e0: f8:b1:93:e4:76:b3:90:48:2c:63:64:c3:42:0a:49: b9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A5:3F:14:93:4D:D1:23:EE:83:97:E6:28:38:59:D9:86:70:E7:04 X509v3 Authority Key Identifier: keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/VaU_FJNN0SPug5fmKDhZ2YZw5wQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1054::/48 Signature Algorithm: sha256WithRSAEncryption 1a:3e:de:e6:18:ea:f8:f2:04:c9:d2:d5:dd:03:cd:45:71:ba: c0:a4:34:7e:07:43:0d:ca:c5:ef:90:4c:39:6b:ad:23:19:f8: e6:10:36:fd:0d:cc:d7:01:d8:b7:ae:54:ad:65:5d:9e:c2:9f: 4e:ca:80:fb:2d:b8:e0:f8:05:18:1b:2b:00:d4:bb:15:fe:28: b9:6b:5e:72:6e:61:3b:7a:e2:f1:68:98:41:b0:0b:72:c0:1c: cc:12:f5:3f:fc:ff:c0:63:8c:55:50:51:39:3d:d4:46:69:d2: 97:72:24:5f:d1:5e:55:92:d6:8d:4f:31:16:fc:b0:d3:b4:df: 84:c2:f7:bc:4d:f4:36:d2:43:b8:46:0f:77:61:7d:6e:a2:d4: 80:60:47:dd:6e:c5:5e:12:79:3a:74:f1:48:b2:43:96:cf:58: 29:a6:e1:24:a2:99:1f:0a:6f:25:34:72:c0:c6:33:4b:16:ce: ba:16:01:14:00:a0:15:00:79:16:6e:39:5d:12:50:52:d9:16: 8c:8e:14:c6:eb:74:0d:a9:15:25:f4:c6:4c:1d:ed:42:29:69: bd:86:a1:dd:0e:18:19:1e:47:e4:30:02:65:43:89:2b:33:ba: 97:45:6c:91:57:05:ee:90:88:45:93:ae:70:bf:83:d8:8a:0e: af:47:61:cc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7pL8coMD95bO+uMACjCPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNGJmZjVjZDJlMTFkMDRmNzUzZGRhMmI2N2I0ZDg3MmY2 Yzg0NDEwHhcNMjYwMTAxMjIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWE1M2YxNDkzNGRkMTIzZWU4Mzk3ZTYyODM4NTlkOTg2NzBlNzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUomWoaP5UAV0E7TxqdsCfo1zywp TgBl13MstZ/4ImjopbQYdXraCiRwnOxi2L+4kuylw+VNBVKRvlmbt6t1tKOoZ3I0 BKfiYqk6YluzcVytt+UdC5ORbHBv93SlJTze94SKyoyRIDGLnrASJI3DmPaFM6Yk oBky5WEnjryg/ZQslbO9Q9MEU1nBTaYzsTMWQAayER5wCYfehmFiHYfrFrY1gcjc 6lqMuxiHCn12relOjusLmVIZhMYEzTo2wPcC1YMwklasHNgg2ncCTQ/ZMlTvFTAg cELDJmqBcG4+VLnR1o6Wn8ZQ8qc9xFbpZOD4sZPkdrOQSCxjZMNCCkm5CQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFWlPxSTTdEj7oOX5ig4WdmGcOcEMB8GA1UdIwQY MBaAFHpL/1zS4R0E91PdorZ7TYcvbIRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wMGI3NjQtYTFiOS00MDY2LWE2NTMt NzA0MWU5NTg1ZGViLzEvVmFVX0ZKTk4wU1B1ZzVmbUtEaFoyWVp3NXdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8wMGI3NjQtYTFiOS00MDY2LWE2NTMtNzA0MWU5NTg1ZGVi LzEvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBBU MA0GCSqGSIb3DQEBCwUAA4IBAQAaPt7mGOr48gTJ0tXdA81FcbrApDR+B0MNysXv kEw5a60jGfjmEDb9DczXAdi3rlStZV2ewp9OyoD7Lbjg+AUYGysA1LsV/ii5a15y bmE7euLxaJhBsAtywBzMEvU//P/AY4xVUFE5PdRGadKXciRf0V5VktaNTzEW/LDT tN+Ewve8TfQ20kO4Rg93YX1uotSAYEfdbsVeEnk6dPFIskOWz1gppuEkopkfCm8l NHLAxjNLFs66FgEUAKAVAHkWbjldElBS2RaMjhTG63QNqRUl9MZMHe1CKWm9hqHd DhgZHkfkMAJlQ4krM7qXRWyRVwXukIhFk65wv4PYig6vR2HM -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:50 2026 by rpki-client