This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/vVdF_OjODbTzABBMrZJNL6HATG0.roa File: vVdF_OjODbTzABBMrZJNL6HATG0.roa (raw, json) Hash identifier: 6Xi4Si5ACt8P945uIvxhtizp837m5PqkOcKHPhoyDt8= Subject key identifier: BD:57:45:FC:E8:CE:0D:B4:F3:00:10:4C:AD:92:4D:2F:A1:C0:4C:6D Certificate issuer: /CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0 Certificate serial: 019B7BA433FA3B3ADD467BF58F91BE72BBC8 Authority key identifier: A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/vVdF_OjODbTzABBMrZJNL6HATG0.roa Signing time: Thu 01 Jan 2026 22:18:37 +0000 ROA not before: Thu 01 Jan 2026 22:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33886 IP address blocks: 2a01:298:d34d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:33:fa:3b:3a:dd:46:7b:f5:8f:91:be:72:bb:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0 Validity Not Before: Jan 1 22:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd5745fce8ce0db4f300104cad924d2fa1c04c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fc:3b:e0:36:3f:33:fc:8c:5a:4a:78:1d:dc: 2a:99:ca:7c:eb:cd:20:10:32:20:ce:a8:20:4d:86: cc:d0:e5:e7:b4:ad:a0:d9:44:99:49:b2:4f:f9:b0: 78:0a:e7:f7:7f:50:a4:7b:7f:de:fd:db:fe:68:5c: e5:fe:4c:61:97:0c:9a:9a:7e:a5:5a:33:ad:54:69: 51:7a:c4:96:b2:61:cf:9b:1e:85:36:bd:d5:21:59: 0a:16:f4:61:4b:88:2c:d2:0f:52:c7:b9:05:84:ef: 61:f0:07:82:4e:20:37:5e:28:04:0b:70:56:db:fc: 41:35:60:06:a3:43:4d:df:6e:b0:02:c8:bd:cf:98: a3:45:3e:08:ff:73:cc:a3:e8:df:77:6b:fd:1c:97: 3b:14:9d:12:3b:9b:d3:02:cc:f2:2d:b6:c3:e1:d5: b1:34:6d:1a:91:09:e4:50:ec:ec:34:5c:2b:92:fa: 41:db:bd:04:6f:16:d9:1a:cc:81:03:7f:1f:c2:c7: 7d:41:85:48:69:80:5c:bd:c6:42:ff:26:8a:9c:33: 3b:34:d6:5e:69:4a:b5:a4:82:6b:30:95:63:b7:be: 73:16:5e:85:41:7b:b5:9a:69:51:9b:e8:20:60:0f: aa:78:96:43:de:db:d8:2e:43:b8:0b:25:9f:d1:ef: 12:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:57:45:FC:E8:CE:0D:B4:F3:00:10:4C:AD:92:4D:2F:A1:C0:4C:6D X509v3 Authority Key Identifier: keyid:A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/vVdF_OjODbTzABBMrZJNL6HATG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:298:d34d::/48 Signature Algorithm: sha256WithRSAEncryption 6d:88:ea:e8:53:11:6e:92:15:eb:fd:c2:ee:fa:ba:04:66:eb: ea:8b:14:7e:59:4e:77:0f:d5:c0:a1:65:16:0b:43:06:ab:cd: 44:14:81:e3:49:85:24:42:9b:aa:7b:d9:2d:f9:ea:b8:75:c1: 88:71:60:60:e6:98:17:7d:81:d3:76:2c:51:8e:5f:08:f9:75: d2:5b:e2:3c:b6:f0:de:d9:49:69:7f:c4:a8:a8:be:4d:5f:66: 06:2f:61:32:b0:b2:ad:e0:bf:c6:40:be:51:d3:92:56:f0:0a: 6c:df:5d:1c:57:f5:44:ef:6f:6d:79:5c:12:02:73:f5:e6:ef: b6:79:c6:d8:6b:a1:1e:04:05:1e:2a:06:7b:91:4c:35:6a:58: 99:bc:f3:4c:a4:48:d8:9b:9b:41:02:75:cd:8e:8b:34:ff:4e: 92:9c:ec:7e:7a:68:74:4e:b4:bd:34:9b:2b:7d:df:80:c3:93: ef:ac:c0:a7:14:69:dd:49:88:d1:fa:84:39:9a:3b:fb:7d:2b: a7:c0:91:f6:85:76:48:30:43:54:52:9d:73:f3:ac:a7:82:42: 33:62:f5:37:76:a7:aa:c1:9b:cc:66:28:d1:63:6f:93:fa:6b: f6:45:a2:da:e3:48:3a:6d:cb:17:0d:88:d6:7a:5c:4c:b9:f3: fa:d4:32:da -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7pDP6OzrdRnv1j5G+crvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NzY3YmM1ZmJjYmNlZmIxYzFjNzQ3YmIwZWI1MzM3ZGFi NjkxYzAwHhcNMjYwMTAxMjIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDU3NDVmY2U4Y2UwZGI0ZjMwMDEwNGNhZDkyNGQyZmExYzA0YzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vw74DY/M/yMWkp4Hdwqmcp8680g EDIgzqggTYbM0OXntK2g2USZSbJP+bB4Cuf3f1Cke3/e/dv+aFzl/kxhlwyamn6l WjOtVGlResSWsmHPmx6FNr3VIVkKFvRhS4gs0g9Sx7kFhO9h8AeCTiA3XigEC3BW 2/xBNWAGo0NN326wAsi9z5ijRT4I/3PMo+jfd2v9HJc7FJ0SO5vTAszyLbbD4dWx NG0akQnkUOzsNFwrkvpB270EbxbZGsyBA38fwsd9QYVIaYBcvcZC/yaKnDM7NNZe aUq1pIJrMJVjt75zFl6FQXu1mmlRm+ggYA+qeJZD3tvYLkO4CyWf0e8SIwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFL1XRfzozg208wAQTK2STS+hwExtMB8GA1UdIwQY MBaAFKR2e8X7y877HBx0e7DrUzfatpHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEhaN3hmdkx6dnNjSEhSN3NPdFROOXEya2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS84MDY1ZDUtMDRkMC00M2U1LWEyZjQt MDQxYTQ4ZDIxMjNmLzEvdlZkRl9Pak9EYlR6QUJCTXJaSk5MNkhBVEcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS84MDY1ZDUtMDRkMC00M2U1LWEyZjQtMDQxYTQ4ZDIxMjNm LzEvcEhaN3hmdkx6dnNjSEhSN3NPdFROOXEya2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgECmNNN MA0GCSqGSIb3DQEBCwUAA4IBAQBtiOroUxFukhXr/cLu+roEZuvqixR+WU53D9XA oWUWC0MGq81EFIHjSYUkQpuqe9kt+eq4dcGIcWBg5pgXfYHTdixRjl8I+XXSW+I8 tvDe2Ulpf8SoqL5NX2YGL2EysLKt4L/GQL5R05JW8Aps310cV/VE729teVwSAnP1 5u+2ecbYa6EeBAUeKgZ7kUw1aliZvPNMpEjYm5tBAnXNjos0/06SnOx+emh0TrS9 NJsrfd+Aw5PvrMCnFGndSYjR+oQ5mjv7fSunwJH2hXZIMENUUp1z86yngkIzYvU3 dqeqwZvMZijRY2+T+mv2RaLa40g6bcsXDYjWelxMufP61DLa -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:44 2026 by rpki-client