This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/vlOzrXADwVbr-4L_grlu0PIS3Rk.roa File: vlOzrXADwVbr-4L_grlu0PIS3Rk.roa (raw, json) Hash identifier: 3PRB7VQuDMBjsXiJij2GAncqz8RGuTBHCw9ZZ/+ej1Y= Subject key identifier: BE:53:B3:AD:70:03:C1:56:EB:FB:82:FF:82:B9:6E:D0:F2:12:DD:19 Certificate issuer: /CN=b561ab100017a6125316fcc613384aafbde60189 Certificate serial: 019B7C132DBF47ECC009CE29A7A191EA7BF2 Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/vlOzrXADwVbr-4L_grlu0PIS3Rk.roa Signing time: Fri 02 Jan 2026 00:19:50 +0000 ROA not before: Fri 02 Jan 2026 00:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1103 IP address blocks: 192.42.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2d:bf:47:ec:c0:09:ce:29:a7:a1:91:ea:7b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b561ab100017a6125316fcc613384aafbde60189 Validity Not Before: Jan 2 00:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be53b3ad7003c156ebfb82ff82b96ed0f212dd19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a9:f9:ab:b0:5f:0d:50:85:31:ac:2d:04:b3: 1d:16:e7:fb:39:df:2e:b1:89:65:80:38:b5:f3:1b: fb:95:19:96:e2:56:ae:f8:98:9b:d2:01:50:8a:1d: c4:dd:22:18:e9:2a:ee:68:c8:f1:01:4e:e3:b8:9e: cf:74:0a:01:a3:31:7c:5e:30:62:58:f2:fd:80:e7: ce:a8:e9:1f:57:3f:74:cf:4d:9e:e7:e8:5a:17:4e: 4c:2d:a1:b0:03:b5:c7:09:3a:3d:53:4b:f5:b9:d5: 5a:db:fc:ca:1d:8a:69:9d:ce:db:06:83:42:97:64: 2d:8e:0e:57:92:fb:f5:69:c2:3c:46:2b:8b:88:ca: 94:c5:f9:28:26:cf:78:72:9c:00:ac:a5:7d:83:52: bf:a9:b5:ba:cf:82:c1:99:07:15:f0:84:aa:70:59: ae:f5:98:5a:57:51:36:a2:95:2f:0c:6d:81:5b:58: 4a:7d:00:fa:3c:af:00:d7:3c:43:d2:e9:96:a8:c7: 22:45:23:d9:55:11:f1:a3:8b:8d:1c:7f:0f:0e:a1: f8:a6:28:ac:26:39:49:96:50:6c:92:a8:4e:fe:97: 7c:2c:b1:58:ed:8c:95:0b:17:b2:51:50:d0:be:50: c8:65:db:17:7e:90:bc:58:3e:02:14:74:89:43:6b: 48:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:53:B3:AD:70:03:C1:56:EB:FB:82:FF:82:B9:6E:D0:F2:12:DD:19 X509v3 Authority Key Identifier: keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/vlOzrXADwVbr-4L_grlu0PIS3Rk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.42.124.0/22 Signature Algorithm: sha256WithRSAEncryption 57:74:97:a6:46:fa:66:22:b1:5a:f2:4a:dd:0b:f8:23:e9:9b: ce:6f:7f:d0:ac:a7:92:b2:6a:e1:e9:46:52:9d:be:7e:9d:0a: fd:5e:94:fd:fd:24:ce:5c:02:a8:9a:6d:98:5a:08:b6:9f:25: 01:9e:77:73:72:bd:f0:e3:4e:aa:5f:92:dd:06:bc:2a:98:19: 40:95:a4:15:4b:04:8e:03:26:10:ac:c2:8d:87:42:17:3b:87: 1c:57:ac:8f:ce:ab:3b:97:91:42:fe:cf:45:ac:a8:bd:6a:eb: 37:9c:d5:95:cc:a7:d1:d0:a3:45:cc:d8:e0:40:1a:e5:8b:eb: 95:94:77:aa:03:d4:68:50:b5:3c:5b:0d:4c:6a:4c:88:c8:b2: 58:1f:83:e0:de:04:e1:51:8b:cd:86:a6:94:be:c1:5f:70:07: c9:f4:18:81:8b:b8:e0:a1:c2:9c:1f:93:7b:dd:a7:cc:48:1a: 5c:29:de:76:e4:4f:0f:ff:20:57:95:36:7b:c3:96:2d:14:1d: e8:c0:7c:e7:21:f3:53:06:7e:2b:3a:b0:32:6b:f1:7e:8e:99: 34:31:d4:51:79:97:96:af:99:89:29:fe:d4:44:8b:8d:9a:09: 5d:02:4d:f4:df:a6:64:f2:08:33:fb:d1:3c:f4:7b:65:28:72: ab:14:98:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ey2/R+zACc4pp6GR6nvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NjFhYjEwMDAxN2E2MTI1MzE2ZmNjNjEzMzg0YWFmYmRl NjAxODkwHhcNMjYwMTAyMDAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTUzYjNhZDcwMDNjMTU2ZWJmYjgyZmY4MmI5NmVkMGYyMTJkZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6an5q7BfDVCFMawtBLMdFuf7Od8u sYllgDi18xv7lRmW4lau+Jib0gFQih3E3SIY6SruaMjxAU7juJ7PdAoBozF8XjBi WPL9gOfOqOkfVz90z02e5+haF05MLaGwA7XHCTo9U0v1udVa2/zKHYppnc7bBoNC l2Qtjg5Xkvv1acI8RiuLiMqUxfkoJs94cpwArKV9g1K/qbW6z4LBmQcV8ISqcFmu 9ZhaV1E2opUvDG2BW1hKfQD6PK8A1zxD0umWqMciRSPZVRHxo4uNHH8PDqH4piis JjlJllBskqhO/pd8LLFY7YyVCxeyUVDQvlDIZdsXfpC8WD4CFHSJQ2tI/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL5Ts61wA8FW6/uC/4K5btDyEt0ZMB8GA1UdIwQY MBaAFLVhqxAAF6YSUxb8xhM4Sq+95gGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFdHckVBQVhwaEpURnZ6R0V6aEtyNzNtQVlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84MGVlOGYtODY3YS00YjI1LWFlNWQt OTJiOWRhYTAwMzc5LzEvdmxPenJYQUR3VmJyLTRMX2dybHUwUElTM1JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS84MGVlOGYtODY3YS00YjI1LWFlNWQtOTJiOWRhYTAwMzc5 LzEvdFdHckVBQVhwaEpURnZ6R0V6aEtyNzNtQVlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwCp8MA0G CSqGSIb3DQEBCwUAA4IBAQBXdJemRvpmIrFa8krdC/gj6ZvOb3/QrKeSsmrh6UZS nb5+nQr9XpT9/STOXAKomm2YWgi2nyUBnndzcr3w406qX5LdBrwqmBlAlaQVSwSO AyYQrMKNh0IXO4ccV6yPzqs7l5FC/s9FrKi9aus3nNWVzKfR0KNFzNjgQBrli+uV lHeqA9RoULU8Ww1MakyIyLJYH4Pg3gThUYvNhqaUvsFfcAfJ9BiBi7jgocKcH5N7 3afMSBpcKd525E8P/yBXlTZ7w5YtFB3owHznIfNTBn4rOrAya/F+jpk0MdRReZeW r5mJKf7URIuNmgldAk3036Zk8ggz+9E89HtlKHKrFJhO -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:01 2026 by rpki-client