This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/VxqY9hge4yhpeLneW8Fa4dOhCk0.roa File: VxqY9hge4yhpeLneW8Fa4dOhCk0.roa (raw, json) Hash identifier: KCZgdow3ZiDkdxOQ56I7vQE27GAqjRLay1T3XQ9tUrg= Subject key identifier: 57:1A:98:F6:18:1E:E3:28:69:78:B9:DE:5B:C1:5A:E1:D3:A1:0A:4D Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAFC7082C03755F4CA05E8A6B9F636 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/VxqY9hge4yhpeLneW8Fa4dOhCk0.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207569 IP address blocks: 159.255.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fc:70:82:c0:37:55:f4:ca:05:e8:a6:b9:f6:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=571a98f6181ee3286978b9de5bc15ae1d3a10a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:46:79:c9:2c:4e:76:85:8c:b4:14:9e:ae: 1d:9e:d7:b0:d2:e2:95:0d:8c:28:d4:4c:b9:d8:d8: 80:6e:06:cc:c4:dc:08:51:e4:d0:1e:5f:7e:65:c0: d7:f4:c2:55:22:a7:63:e2:42:62:7c:fa:1b:d6:50: 6c:ab:d8:11:c9:3a:b6:3b:b3:6d:ad:25:e2:7f:06: fe:13:c0:d2:54:83:3c:ec:cf:c0:07:cf:15:90:c9: 66:1e:ed:8a:cb:3a:bd:07:d6:77:03:97:74:d5:9f: 3d:db:78:2f:5b:19:9a:9c:18:dd:a5:5f:06:35:7e: 1b:a2:9e:b7:dd:dd:ab:c3:cb:28:ca:da:8a:93:17: c6:cf:6a:d9:80:b3:61:25:f1:8b:11:a3:14:dd:ec: 90:d2:e1:dd:f1:29:52:91:63:cd:eb:c7:d4:9c:03: 04:41:28:63:6e:91:25:29:cb:cb:68:1e:fa:30:7c: a3:b6:96:5a:e1:f4:20:af:7f:38:49:06:e9:32:9e: 02:68:3a:25:5c:0f:0c:79:28:ce:3a:63:9d:e3:44: b3:51:e9:4b:d1:83:77:43:33:44:87:8d:8b:b8:aa: ba:db:bf:f6:8c:80:33:d7:70:a5:e5:67:b8:bc:20: 06:af:b5:80:b2:08:23:71:0c:47:ca:76:26:d4:59: 84:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1A:98:F6:18:1E:E3:28:69:78:B9:DE:5B:C1:5A:E1:D3:A1:0A:4D X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/VxqY9hge4yhpeLneW8Fa4dOhCk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.255.32.0/23 Signature Algorithm: sha256WithRSAEncryption 11:88:78:b9:a5:fe:41:48:d9:b3:34:02:db:30:44:15:1f:b6: e3:a7:f4:7d:33:ae:3d:d7:f1:13:d8:18:0f:8b:1b:cf:87:62: 1b:4c:67:23:b7:52:a0:c5:25:c5:3e:bd:ab:55:15:0c:5a:44: 31:46:bf:3c:cf:80:72:78:95:9c:f6:68:35:29:c8:3b:ec:0e: 36:11:62:67:92:ab:8e:30:72:0b:b1:74:52:1b:c6:63:72:fe: 5a:e5:db:19:f1:b4:37:fc:8f:e2:76:cf:85:bc:0f:89:e0:40: 72:4e:c7:9b:1a:73:81:b3:4e:0c:16:ab:01:d1:b8:bd:7c:f3: fa:ee:8e:85:cf:bd:0f:ae:29:8e:57:a0:f2:99:a8:5d:1e:a7: 37:26:41:00:47:45:46:9f:1a:9a:a1:fb:3e:c2:cc:0b:78:75: ca:9a:60:83:9c:9b:a6:1f:6e:bc:54:6c:e5:8c:3c:61:d6:b4: 78:27:80:c0:6c:b2:ba:20:af:93:9a:44:d8:e2:44:9d:53:29: c1:e8:86:64:aa:e4:d9:42:86:67:6d:96:bb:57:23:24:d8:5d: 43:f0:bb:0f:ef:fc:9d:43:07:76:f6:c2:0d:d8:b8:ec:2c:1b: a9:75:d1:f1:c2:8a:ea:1c:ca:ec:18:ee:0a:25:f8:7a:94:52: 69:eb:31:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vxwgsA3VfTKBeimufY2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzFhOThmNjE4MWVlMzI4Njk3OGI5ZGU1YmMxNWFlMWQzYTEwYTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwBGecksTnaFjLQUnq4dntew0uKV DYwo1Ey52NiAbgbMxNwIUeTQHl9+ZcDX9MJVIqdj4kJifPob1lBsq9gRyTq2O7Nt rSXifwb+E8DSVIM87M/AB88VkMlmHu2Kyzq9B9Z3A5d01Z8923gvWxmanBjdpV8G NX4bop633d2rw8soytqKkxfGz2rZgLNhJfGLEaMU3eyQ0uHd8SlSkWPN68fUnAME QShjbpElKcvLaB76MHyjtpZa4fQgr384SQbpMp4CaDolXA8MeSjOOmOd40SzUelL 0YN3QzNEh42LuKq627/2jIAz13Cl5We4vCAGr7WAsggjcQxHynYm1FmEqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFcamPYYHuMoaXi53lvBWuHToQpNMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvVnhxWTloZ2U0eWhwZUxuZVc4RmE0ZE9oQ2swLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBn/8gMA0G CSqGSIb3DQEBCwUAA4IBAQARiHi5pf5BSNmzNALbMEQVH7bjp/R9M6491/ET2BgP ixvPh2IbTGcjt1KgxSXFPr2rVRUMWkQxRr88z4ByeJWc9mg1Kcg77A42EWJnkquO MHILsXRSG8Zjcv5a5dsZ8bQ3/I/ids+FvA+J4EByTsebGnOBs04MFqsB0bi9fPP6 7o6Fz70PrimOV6DymahdHqc3JkEAR0VGnxqaofs+wswLeHXKmmCDnJumH268VGzl jDxh1rR4J4DAbLK6IK+TmkTY4kSdUynB6IZkquTZQoZnbZa7VyMk2F1D8LsP7/yd Qwd29sIN2LjsLBupddHxworqHMrsGO4KJfh6lFJp6zGx -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:50 2026 by rpki-client