This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/vBzA80tCE3u8TKLNToKoyYeQeAI.roa File: vBzA80tCE3u8TKLNToKoyYeQeAI.roa (raw, json) Hash identifier: FFSpx5stq8bhMC4WjZdaZ4JT80YeU74SiqISYMwwlOs= Subject key identifier: BC:1C:C0:F3:4B:42:13:7B:BC:4C:A2:CD:4E:82:A8:C9:87:90:78:02 Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F15127EBC952C53ECF609C63764723B Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/vBzA80tCE3u8TKLNToKoyYeQeAI.roa Signing time: Fri 02 Jan 2026 14:20:45 +0000 ROA not before: Fri 02 Jan 2026 14:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209874 IP address blocks: 2a14:c380:500::/48 maxlen: 48 2a14:c380:700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:12:7e:bc:95:2c:53:ec:f6:09:c6:37:64:72:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc1cc0f34b42137bbc4ca2cd4e82a8c987907802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:31:c3:f9:e7:1c:cc:79:3e:08:c3:e9:08:83: 36:0a:af:7f:ac:70:99:3f:66:14:24:2c:8b:a3:fa: ee:80:7e:d9:b5:e8:19:3d:21:8b:b3:91:96:0a:ec: 9c:b8:7c:dc:27:07:0c:eb:3d:1f:86:45:15:e8:fb: a6:2a:d0:0d:84:a6:b6:43:fa:e8:01:39:07:29:2a: 33:4e:33:a4:d9:c2:8c:07:ba:a5:32:be:6f:de:1d: 14:7f:c2:12:15:31:57:24:64:74:09:25:bb:a4:2b: e4:3e:28:30:86:a0:9a:04:e4:9f:5d:a2:14:79:26: bb:a3:cf:a9:27:c9:bc:16:c4:9d:9f:cb:3c:79:3c: 99:0c:b0:96:af:16:da:4b:f8:ee:75:9e:c8:4a:29: 97:e4:76:69:b4:94:94:c8:e4:2e:2d:fb:e6:e6:75: c2:98:73:6e:64:e4:bb:54:d7:e3:ea:60:04:c4:dc: 28:79:9e:23:88:0b:e7:0f:9b:c4:14:e1:9b:1d:bc: f2:2e:6b:78:90:72:35:00:52:38:46:30:ca:7b:c9: a7:34:cf:44:97:b9:f9:cb:80:6f:ee:02:83:03:f2: f2:64:fc:96:f2:d0:8c:6b:2a:9e:29:3a:e9:18:19: 85:05:fd:7a:5a:96:a0:9e:8f:6b:1d:6a:46:f7:2c: 7b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1C:C0:F3:4B:42:13:7B:BC:4C:A2:CD:4E:82:A8:C9:87:90:78:02 X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/vBzA80tCE3u8TKLNToKoyYeQeAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:500::/48 2a14:c380:700::/40 Signature Algorithm: sha256WithRSAEncryption 8b:f3:d9:14:ed:f8:d3:22:e1:23:cc:9d:f7:91:b4:fe:4e:f4: 02:4d:38:c7:6f:e3:72:c9:ee:32:2a:d1:fa:31:d5:39:67:3b: bc:88:c6:8b:b1:81:c8:f6:4f:9a:19:57:37:55:ba:ae:c3:74: 9d:4d:11:24:7e:b7:11:1c:fa:91:89:f9:3b:73:98:53:65:ce: 9f:ac:90:5c:14:c6:be:a5:74:49:7e:ae:7a:b7:04:1d:05:04: 0e:25:f6:36:e0:70:e0:d4:d9:a5:d0:1c:92:8d:e3:4e:4e:a9: 29:06:7e:b0:40:bb:98:bf:88:a8:ab:20:2c:0f:80:25:14:9d: 47:d7:35:e8:f5:8a:e8:f7:34:94:46:51:32:e2:6e:ab:1e:56: 6c:7e:78:1c:4c:66:fd:c6:2e:76:32:bd:bb:1a:d1:fa:3b:6e: 4e:db:ca:1c:3d:0e:d8:96:33:6f:af:35:04:06:a2:1f:1f:52: 6a:a3:0e:64:5d:c9:9d:4b:5a:72:17:6a:db:44:5c:24:e1:d1: e9:1b:c8:e7:8d:62:fc:e8:c9:e4:d0:fd:9b:24:8e:87:05:0a: 73:d8:8b:f2:48:92:94:1e:e2:7b:fa:95:65:bf:2a:4b:dd:be: f2:bc:e2:ce:1a:0d:74:4a:2a:7d:b8:05:9d:ff:69:84:6c:b3: fd:1c:ff:54 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt/FRJ+vJUsU+z2CcY3ZHI7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzFjYzBmMzRiNDIxMzdiYmM0Y2EyY2Q0ZTgyYThjOTg3OTA3ODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijHD+ecczHk+CMPpCIM2Cq9/rHCZ P2YUJCyLo/rugH7ZtegZPSGLs5GWCuycuHzcJwcM6z0fhkUV6PumKtANhKa2Q/ro ATkHKSozTjOk2cKMB7qlMr5v3h0Uf8ISFTFXJGR0CSW7pCvkPigwhqCaBOSfXaIU eSa7o8+pJ8m8FsSdn8s8eTyZDLCWrxbaS/judZ7ISimX5HZptJSUyOQuLfvm5nXC mHNuZOS7VNfj6mAExNwoeZ4jiAvnD5vEFOGbHbzyLmt4kHI1AFI4RjDKe8mnNM9E l7n5y4Bv7gKDA/LyZPyW8tCMayqeKTrpGBmFBf16Wpagno9rHWpG9yx7QQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFLwcwPNLQhN7vEyizU6CqMmHkHgCMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvdkJ6QTgwdENFM3U4VEtMTlRvS295WWVRZUFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKhTDgAUA AwYAKhTDgAcwDQYJKoZIhvcNAQELBQADggEBAIvz2RTt+NMi4SPMnfeRtP5O9AJN OMdv43LJ7jIq0fox1TlnO7yIxouxgcj2T5oZVzdVuq7DdJ1NESR+txEc+pGJ+Ttz mFNlzp+skFwUxr6ldEl+rnq3BB0FBA4l9jbgcODU2aXQHJKN405OqSkGfrBAu5i/ iKirICwPgCUUnUfXNej1iuj3NJRGUTLibqseVmx+eBxMZv3GLnYyvbsa0fo7bk7b yhw9DtiWM2+vNQQGoh8fUmqjDmRdyZ1LWnIXattEXCTh0ekbyOeNYvzoyeTQ/Zsk jocFCnPYi/JIkpQe4nv6lWW/KkvdvvK84s4aDXRKKn24BZ3/aYRss/0c/1Q= -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:22 2026 by rpki-client