This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/_vA_4IgHYmJvs5d5FwYed13XPO8.roa File: _vA_4IgHYmJvs5d5FwYed13XPO8.roa (raw, json) Hash identifier: DM2Nb8aEZSMQFHhLIwMpeuKnBXqz05Nz1b7/nuo2ED0= Subject key identifier: FE:F0:3F:E0:88:07:62:62:6F:B3:97:79:17:06:1E:77:5D:D7:3C:EF Certificate issuer: /CN=315955c4af3eb1a8d3400a86625e365c26298d6a Certificate serial: 019B7CEE3931E3E934B604B51C2D6727B9CC Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/_vA_4IgHYmJvs5d5FwYed13XPO8.roa Signing time: Fri 02 Jan 2026 04:19:05 +0000 ROA not before: Fri 02 Jan 2026 04:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213873 IP address blocks: 2a0f:3400:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:39:31:e3:e9:34:b6:04:b5:1c:2d:67:27:b9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a Validity Not Before: Jan 2 04:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fef03fe0880762626fb3977917061e775dd73cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:b3:ef:05:f5:a8:9d:60:85:6a:2f:08:33: b7:7c:a0:86:de:e9:03:51:46:84:a4:1e:f6:dc:75: b7:88:a7:26:40:cf:54:4e:d3:0e:01:4d:bf:fc:70: df:42:94:b3:28:27:f6:c0:8e:ac:c1:32:99:7c:2f: 24:98:24:71:0d:01:df:0f:26:7f:ce:ae:43:76:ed: 26:47:51:62:6d:89:a9:d3:5b:44:f5:62:6d:ae:57: 40:6c:68:ba:07:8e:f7:49:38:95:eb:86:eb:43:2d: 81:b8:74:92:b0:83:61:df:dc:4d:fb:1b:40:04:c8: 4f:40:14:87:6d:cb:42:03:f4:e0:b0:01:11:49:d2: 81:68:95:15:e9:67:1a:3f:d1:44:1a:4d:83:9b:8a: 79:4c:2e:db:35:ec:c0:4a:ac:4f:6f:5f:87:6e:e4: b0:c5:00:f6:5b:bb:93:d8:77:0e:3a:b1:df:e3:60: 64:7b:5f:17:86:0a:00:8e:9e:e0:fa:b0:22:d7:69: e4:26:ac:8c:1d:2a:41:19:d6:da:0d:a1:ff:3b:f9: 44:c1:7d:b7:10:e6:49:b8:75:0c:b4:13:98:52:84: 64:78:19:a7:4c:78:eb:3b:38:d9:aa:fb:5a:ca:0c: a3:9a:5e:cd:a9:35:04:45:a6:64:80:ec:73:9a:4e: 2a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F0:3F:E0:88:07:62:62:6F:B3:97:79:17:06:1E:77:5D:D7:3C:EF X509v3 Authority Key Identifier: keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/_vA_4IgHYmJvs5d5FwYed13XPO8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:3400:300::/40 Signature Algorithm: sha256WithRSAEncryption 7f:c2:8d:06:69:d3:ad:80:58:29:41:8d:08:8c:7c:f8:d9:f0: 96:e7:c0:88:94:6d:d8:ba:33:4b:52:0e:89:e5:25:4c:b4:3c: d6:7d:b2:e9:d8:01:4e:0e:19:82:e9:eb:af:78:05:7a:f6:23: 9f:62:c9:03:62:f0:be:13:58:ca:2c:aa:af:d7:81:e0:80:12: 38:2e:e9:82:68:38:22:50:9a:bd:05:e1:58:0d:c6:5c:bf:59: 39:6b:19:f7:bc:c3:2d:27:53:5a:7a:7f:ec:56:17:1f:c8:67: df:eb:38:39:15:d8:6d:de:ba:3a:43:ce:4e:6f:dd:76:b0:24: 5a:05:1b:a1:6b:75:7c:14:80:2a:b6:ab:69:1d:7c:91:a0:06: 05:51:58:6b:36:a2:58:36:07:71:f2:57:81:25:7d:58:dd:67: 57:b5:8e:75:d8:ca:e2:9f:08:d5:03:9a:51:57:64:11:ca:d2: d9:46:72:e3:05:33:60:ec:77:4c:d0:d5:98:39:48:c0:13:42: c4:e2:0c:a5:1c:67:9d:94:05:0e:0c:31:5c:be:a7:a0:a7:3e: dd:d8:41:24:ab:b7:01:42:8d:d4:ec:fb:7c:e0:87:53:af:a7: 0e:ee:d3:e9:6b:9c:2d:4d:c5:32:b7:27:07:71:49:f2:dd:be: 09:5f:f6:a2 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt87jkx4+k0tgS1HC1nJ7nMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNTk1NWM0YWYzZWIxYThkMzQwMGE4NjYyNWUzNjVjMjYy OThkNmEwHhcNMjYwMTAyMDQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWYwM2ZlMDg4MDc2MjYyNmZiMzk3NzkxNzA2MWU3NzVkZDczY2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOyz7wX1qJ1ghWovCDO3fKCG3ukD UUaEpB723HW3iKcmQM9UTtMOAU2//HDfQpSzKCf2wI6swTKZfC8kmCRxDQHfDyZ/ zq5Ddu0mR1FibYmp01tE9WJtrldAbGi6B473STiV64brQy2BuHSSsINh39xN+xtA BMhPQBSHbctCA/TgsAERSdKBaJUV6WcaP9FEGk2Dm4p5TC7bNezASqxPb1+HbuSw xQD2W7uT2HcOOrHf42Bke18XhgoAjp7g+rAi12nkJqyMHSpBGdbaDaH/O/lEwX23 EOZJuHUMtBOYUoRkeBmnTHjrOzjZqvtaygyjml7NqTUERaZkgOxzmk4qfQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFP7wP+CIB2Jib7OXeRcGHndd1zzvMB8GA1UdIwQY MBaAFDFZVcSvPrGo00AKhmJeNlwmKY1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVZsVnhLOC1zYWpUUUFxR1lsNDJYQ1lwaldvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yMWM2MWEtZDZiMS00YWNhLTk3ODIt OTczNDgzMzZmMzNhLzEvX3ZBXzRJZ0hZbUp2czVkNUZ3WWVkMTNYUE84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yMWM2MWEtZDZiMS00YWNhLTk3ODItOTczNDgzMzZmMzNh LzEvTVZsVnhLOC1zYWpUUUFxR1lsNDJYQ1lwaldvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg80AAMw DQYJKoZIhvcNAQELBQADggEBAH/CjQZp062AWClBjQiMfPjZ8JbnwIiUbdi6M0tS DonlJUy0PNZ9sunYAU4OGYLp6694BXr2I59iyQNi8L4TWMosqq/XgeCAEjgu6YJo OCJQmr0F4VgNxly/WTlrGfe8wy0nU1p6f+xWFx/IZ9/rODkV2G3eujpDzk5v3Xaw JFoFG6FrdXwUgCq2q2kdfJGgBgVRWGs2olg2B3HyV4ElfVjdZ1e1jnXYyuKfCNUD mlFXZBHK0tlGcuMFM2Dsd0zQ1Zg5SMATQsTiDKUcZ52UBQ4MMVy+p6CnPt3YQSSr twFCjdTs+3zgh1Ovpw7u0+lrnC1NxTK3JwdxSfLdvglf9qI= -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:32 2026 by rpki-client