This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/VOyxth9qspwPWVU5GtsemH5xu5Y.roa File: VOyxth9qspwPWVU5GtsemH5xu5Y.roa (raw, json) Hash identifier: /TitFEmWF3mLbju9cYq96a2uGnq7dFetaj8cDGfX6bo= Subject key identifier: 54:EC:B1:B6:1F:6A:B2:9C:0F:59:55:39:1A:DB:1E:98:7E:71:BB:96 Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8EAD9E9FACCA00DDA644DC6727375 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/VOyxth9qspwPWVU5GtsemH5xu5Y.roa Signing time: Thu 01 Jan 2026 18:19:06 +0000 ROA not before: Thu 01 Jan 2026 18:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210675 IP address blocks: 2a00:7180:8014::/46 maxlen: 46 2a04:800:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ea:d9:e9:fa:cc:a0:0d:da:64:4d:c6:72:73:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54ecb1b61f6ab29c0f5955391adb1e987e71bb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:67:73:38:8e:92:05:98:ff:7d:23:91:d2: 72:af:1c:15:60:10:8c:8a:3f:bc:d2:d3:d6:ab:04: 45:cf:cc:2c:d0:3d:21:58:65:29:c0:0c:4c:26:44: fb:73:79:04:24:6e:3c:a5:87:3a:a6:a8:38:a1:91: da:a6:c0:1f:42:b6:92:2a:7a:fb:eb:8b:8f:f6:70: 80:77:65:e3:18:c9:39:44:5f:9a:ce:88:fc:b9:69: 1d:ce:60:25:2f:2b:80:d2:e2:67:c7:6a:33:82:29: ff:ac:91:36:e2:35:f3:63:ee:d7:97:04:28:03:a5: 13:f5:1d:60:76:ad:9c:ce:57:5a:12:5f:4e:30:94: 15:24:01:41:73:78:cf:92:54:91:0e:45:b0:10:25: ac:15:50:c9:a1:81:b4:cf:02:95:c3:f8:f2:d8:d3: 31:97:35:d5:fe:77:42:f5:23:fe:f2:ff:46:5d:41: 71:2b:6f:ec:f4:1b:6a:cd:2d:06:8f:46:ee:d1:81: 07:ea:62:9f:c7:cf:20:1d:e7:e8:31:82:60:d7:0d: c7:9f:2d:87:1b:a7:10:c3:42:28:ad:7b:43:7d:45: 29:6e:8c:c9:a7:21:f4:f3:95:b0:7d:bd:c5:09:a0: bb:59:f4:90:fe:7d:f1:24:99:05:52:d7:46:03:40: 5c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EC:B1:B6:1F:6A:B2:9C:0F:59:55:39:1A:DB:1E:98:7E:71:BB:96 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/VOyxth9qspwPWVU5GtsemH5xu5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:7180:8014::/46 2a04:800:4000::/36 Signature Algorithm: sha256WithRSAEncryption 2e:2a:fa:af:c1:ee:04:1e:9c:0b:0d:be:f6:78:cc:35:53:fe: 25:13:ff:b5:9c:34:3e:8c:68:22:1f:6f:04:bc:0c:83:30:d5: 3f:0e:8d:61:df:b1:68:47:da:5d:b9:32:55:44:e2:f2:d6:3c: c4:b8:c8:68:d4:aa:9b:17:89:47:26:aa:1c:bd:a1:22:a9:5d: 87:b2:3b:55:1f:f2:d2:5d:7c:ee:15:30:95:b8:09:d7:52:2c: 4f:bc:2a:89:14:ca:47:cd:2a:e4:7b:43:b2:1f:d1:eb:34:d7: 3f:57:15:7a:45:38:ca:99:17:1b:a1:57:65:22:50:e0:29:70: 4c:17:ee:21:7e:97:78:88:86:f2:c2:7e:bb:8b:94:65:04:b9: de:76:68:2f:b3:fa:b2:3e:9d:44:5c:11:43:62:7e:2d:fe:a0: 07:f6:dd:9f:92:41:85:2a:4c:7e:f3:85:fe:b6:39:d2:88:c0: b5:73:5f:4d:4c:27:cc:5b:c1:1c:f5:0a:69:ea:2c:e9:d1:94: 50:61:42:cf:b8:5e:84:fc:b2:84:bd:fb:52:ce:99:d6:8f:d6: ed:ff:ec:5e:fd:53:ee:91:a1:f3:2e:1f:a6:58:b0:17:5b:c3: d6:9d:96:3c:48:eb:c3:6c:fe:a7:57:5c:37:11:bc:dd:cc:fa: 8a:04:4f:43 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt6yOrZ6frMoA3aZE3GcnN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGVjYjFiNjFmNmFiMjljMGY1OTU1MzkxYWRiMWU5ODdlNzFiYjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjhncziOkgWY/30jkdJyrxwVYBCM ij+80tPWqwRFz8ws0D0hWGUpwAxMJkT7c3kEJG48pYc6pqg4oZHapsAfQraSKnr7 64uP9nCAd2XjGMk5RF+azoj8uWkdzmAlLyuA0uJnx2ozgin/rJE24jXzY+7XlwQo A6UT9R1gdq2czldaEl9OMJQVJAFBc3jPklSRDkWwECWsFVDJoYG0zwKVw/jy2NMx lzXV/ndC9SP+8v9GXUFxK2/s9BtqzS0Gj0bu0YEH6mKfx88gHefoMYJg1w3Hny2H G6cQw0IorXtDfUUpbozJpyH085Wwfb3FCaC7WfSQ/n3xJJkFUtdGA0BcxwIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFFTssbYfarKcD1lVORrbHph+cbuWMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvVk95eHRoOXFzcHdQV1ZVNUd0c2VtSDV4dTVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcCKgBxgIAU AwYEKgQIAEAwDQYJKoZIhvcNAQELBQADggEBAC4q+q/B7gQenAsNvvZ4zDVT/iUT /7WcND6MaCIfbwS8DIMw1T8OjWHfsWhH2l25MlVE4vLWPMS4yGjUqpsXiUcmqhy9 oSKpXYeyO1Uf8tJdfO4VMJW4CddSLE+8KokUykfNKuR7Q7If0es01z9XFXpFOMqZ FxuhV2UiUOApcEwX7iF+l3iIhvLCfruLlGUEud52aC+z+rI+nURcEUNifi3+oAf2 3Z+SQYUqTH7zhf62OdKIwLVzX01MJ8xbwRz1CmnqLOnRlFBhQs+4XoT8soS9+1LO mdaP1u3/7F79U+6RofMuH6ZYsBdbw9adljxI68Ns/qdXXDcRvN3M+ooET0M= -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:00 2026 by rpki-client