This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Vaa0ZoiDGKk6g5S1K8exhvOjuso.roa File: Vaa0ZoiDGKk6g5S1K8exhvOjuso.roa (raw, json) Hash identifier: 0JlsZcX72VxzLBMarlq5cR72GCSjJdlrkx349OBiKdo= Subject key identifier: 55:A6:B4:66:88:83:18:A9:3A:83:94:B5:2B:C7:B1:86:F3:A3:BA:CA Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Certificate serial: 019B7FF283875024CDB07C4D3EF00F5A9CEA Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Vaa0ZoiDGKk6g5S1K8exhvOjuso.roa Signing time: Fri 02 Jan 2026 18:22:38 +0000 ROA not before: Fri 02 Jan 2026 18:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206817 IP address blocks: 5.129.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:83:87:50:24:cd:b0:7c:4d:3e:f0:0f:5a:9c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Validity Not Before: Jan 2 18:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55a6b466888318a93a8394b52bc7b186f3a3baca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:89:50:e0:b4:50:32:a3:b2:4c:55:99:5b: a8:41:16:38:7f:6b:76:f0:52:e9:34:65:eb:41:e5: 6e:8b:47:ab:cc:2f:8e:0f:01:5c:dc:c8:07:02:09: 01:b6:76:b5:bd:7f:a0:fd:a2:b1:52:6b:7c:a5:46: 55:89:37:45:45:b7:11:d4:0c:87:d0:18:40:e3:78: 5f:de:bf:ae:c0:e8:3f:ad:6e:71:16:6a:28:1a:51: bb:b3:fe:b0:2a:48:11:7f:12:9b:a1:b4:3e:85:75: 6d:65:cc:9f:a6:1b:fd:d4:2e:ba:1c:2b:5d:d4:2d: 5e:9b:85:a6:8c:82:ae:af:0a:76:23:6e:8b:fc:04: 44:e0:29:0a:05:56:7f:71:f0:8b:cc:83:b7:b6:be: ae:dd:40:7e:a7:3f:98:8d:55:a1:d9:31:0e:20:b9: 38:d6:56:6c:5c:df:ed:92:f8:63:2c:06:9d:e3:e7: 4d:ac:e8:2e:a3:a5:3a:f6:7d:7b:e3:7c:1d:d5:b4: 7a:b8:ca:51:72:31:6e:1d:d0:49:b6:a4:46:60:a1: d1:bf:d7:18:74:b0:22:b5:40:46:e4:c3:cc:ca:4a: 5a:6f:3c:0f:8b:eb:98:60:ec:a5:82:fa:97:1b:dd: cf:11:1e:5f:6a:8f:de:45:38:44:6e:c3:e0:a8:ac: 85:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A6:B4:66:88:83:18:A9:3A:83:94:B5:2B:C7:B1:86:F3:A3:BA:CA X509v3 Authority Key Identifier: keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Vaa0ZoiDGKk6g5S1K8exhvOjuso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.129.180.0/24 Signature Algorithm: sha256WithRSAEncryption 47:0e:ad:25:01:36:90:d0:10:b4:49:7e:85:69:5b:ef:1f:c4: 0c:92:2e:08:9c:30:a1:90:bd:d6:0e:53:f1:08:79:d0:a3:f3: 5c:2c:c2:01:5a:28:31:9b:e3:4b:3b:46:d1:d6:b0:49:0e:08: cc:76:1e:ac:8f:8b:6d:f4:28:e7:ca:7d:5d:1d:34:19:09:3c: cc:e3:ba:7c:9a:23:36:67:1f:af:b1:04:66:ec:8e:9a:8b:9f: e1:e6:54:da:e6:b3:ac:3b:9c:4a:a2:0b:5a:25:f9:2d:68:b3: fa:a2:06:69:a1:95:67:64:0c:12:f7:c8:1f:b3:cd:63:f3:ac: 90:48:8a:ca:c6:d9:f2:15:0d:43:0f:22:a3:09:a4:e7:da:1d: b2:28:a3:64:cd:02:b3:df:5b:ca:4c:5b:97:3c:17:76:46:14: f2:6d:55:e4:5c:7c:79:50:82:d3:71:2a:5d:58:d2:27:8d:7c: 84:7a:36:7a:b3:c7:f3:f8:44:e0:9a:45:f0:18:1e:71:5d:ff: 42:3a:36:b8:cd:56:fd:32:7d:a4:41:e5:56:bf:a7:eb:d7:bd: 2b:b9:33:49:52:10:41:0b:14:eb:cc:00:d5:56:c1:68:88:b7: fa:e6:fe:14:c9:94:fa:fe:30:e0:00:74:26:91:25:07:5f:c5: de:7e:4a:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8oOHUCTNsHxNPvAPWpzqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2 ZmI1OTMwHhcNMjYwMTAyMTgyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWE2YjQ2Njg4ODMxOGE5M2E4Mzk0YjUyYmM3YjE4NmYzYTNiYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcmJUOC0UDKjskxVmVuoQRY4f2t2 8FLpNGXrQeVui0erzC+ODwFc3MgHAgkBtna1vX+g/aKxUmt8pUZViTdFRbcR1AyH 0BhA43hf3r+uwOg/rW5xFmooGlG7s/6wKkgRfxKbobQ+hXVtZcyfphv91C66HCtd 1C1em4WmjIKurwp2I26L/ARE4CkKBVZ/cfCLzIO3tr6u3UB+pz+YjVWh2TEOILk4 1lZsXN/tkvhjLAad4+dNrOguo6U69n1743wd1bR6uMpRcjFuHdBJtqRGYKHRv9cY dLAitUBG5MPMykpabzwPi+uYYOylgvqXG93PER5fao/eRThEbsPgqKyF0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFWmtGaIgxipOoOUtSvHsYbzo7rKMB8GA1UdIwQY MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt MjE3MGM1YzFkM2VkLzEvVmFhMFpvaURHS2s2ZzVTMUs4ZXhodk9qdXNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABYG0MA0G CSqGSIb3DQEBCwUAA4IBAQBHDq0lATaQ0BC0SX6FaVvvH8QMki4InDChkL3WDlPx CHnQo/NcLMIBWigxm+NLO0bR1rBJDgjMdh6sj4tt9Cjnyn1dHTQZCTzM47p8miM2 Zx+vsQRm7I6ai5/h5lTa5rOsO5xKogtaJfktaLP6ogZpoZVnZAwS98gfs81j86yQ SIrKxtnyFQ1DDyKjCaTn2h2yKKNkzQKz31vKTFuXPBd2RhTybVXkXHx5UILTcSpd WNInjXyEejZ6s8fz+ETgmkXwGB5xXf9COja4zVb9Mn2kQeVWv6fr170ruTNJUhBB CxTrzADVVsFoiLf65v4UyZT6/jDgAHQmkSUHX8Xefko5 -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:32 2026 by rpki-client