This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/bVi4keCowD2fh_vLEGiCaZ_PG2E.roa File: bVi4keCowD2fh_vLEGiCaZ_PG2E.roa (raw, json) Hash identifier: PcIs7Ni9PquaFgRIU/Xw9DwjNZAbOaylXmPNW0BTawQ= Subject key identifier: 6D:58:B8:91:E0:A8:C0:3D:9F:87:FB:CB:10:68:82:69:9F:CF:1B:61 Certificate issuer: /CN=7587902ce7a6a334a4e0db73e721989015d6489b Certificate serial: 019B7CEE38DB84B482746DC4B8D1B0D69C1F Authority key identifier: 75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/bVi4keCowD2fh_vLEGiCaZ_PG2E.roa Signing time: Fri 02 Jan 2026 04:19:05 +0000 ROA not before: Fri 02 Jan 2026 04:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207111 IP address blocks: 2001:67c:770::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:38:db:84:b4:82:74:6d:c4:b8:d1:b0:d6:9c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7587902ce7a6a334a4e0db73e721989015d6489b Validity Not Before: Jan 2 04:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d58b891e0a8c03d9f87fbcb106882699fcf1b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:64:38:37:1d:3b:03:35:d3:86:ed:ff:5e: 36:f1:8c:cf:32:53:4c:28:9e:a6:83:82:47:b0:a1: 61:38:eb:6f:27:fc:fc:89:1a:8f:a8:89:ee:8b:d7: 70:0b:bf:a6:d3:0b:07:b9:1f:31:b7:74:f8:b6:ae: 84:f3:4e:e1:b6:c7:2c:07:4c:06:d4:74:11:8e:5d: 9a:f2:85:cf:aa:d0:8d:d5:91:1b:1f:45:e0:3c:b9: 0f:63:0d:5b:96:7a:c4:52:43:71:5a:f8:c8:f3:c7: 98:1e:93:c7:0c:51:3c:ca:9d:b8:e4:18:8e:91:1a: ab:92:f2:f0:f0:33:5d:a8:c2:78:78:2f:2d:cb:8e: bd:32:6c:ec:b1:52:ac:a0:f9:a3:04:f1:cf:d4:87: be:ce:f8:f2:7f:e0:e5:9a:d5:93:84:04:e3:03:40: 3a:e7:cc:ff:b6:ef:57:18:ad:a4:0d:09:cb:db:ae: 04:e8:59:cd:1f:e2:3f:fa:aa:53:ea:5d:fb:3e:5c: b8:55:f2:b5:28:2e:59:12:6b:93:21:18:00:94:19: fc:00:76:7c:43:56:79:48:66:a9:0a:e3:52:89:34: ee:cd:62:a1:53:4b:b6:23:2e:57:33:be:29:ae:67: ee:12:5a:98:e2:86:75:a6:4c:79:9e:77:0c:a0:88: 2e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:58:B8:91:E0:A8:C0:3D:9F:87:FB:CB:10:68:82:69:9F:CF:1B:61 X509v3 Authority Key Identifier: keyid:75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/bVi4keCowD2fh_vLEGiCaZ_PG2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:770::/48 Signature Algorithm: sha256WithRSAEncryption 82:24:22:9c:d9:4a:63:f7:da:31:d7:2b:18:d5:1e:91:75:83: 83:42:4f:c7:ed:6e:47:e6:9c:68:6d:b1:75:78:98:97:52:13: ca:81:96:a6:c0:66:22:ad:65:db:fd:c5:f3:57:5f:a5:56:5d: 0b:49:53:f7:09:df:1a:0d:db:20:e7:50:91:84:8e:ab:fd:ea: db:20:44:8b:e2:9f:43:ba:b8:37:7d:5c:90:c2:07:c2:6e:c6: 26:a9:59:2d:a1:bc:d0:44:d3:49:3f:04:e7:ec:9c:92:05:57: 5f:9e:5e:8e:1e:18:50:16:51:0f:94:7a:ff:ad:e1:89:1d:58: ef:d7:a4:66:04:f6:49:a7:99:84:db:92:75:ef:ce:ce:77:36: 4c:2d:57:85:d2:3f:25:11:02:f2:63:47:32:20:43:c1:19:16: ab:b3:45:c1:3a:f4:91:93:58:71:6e:33:92:07:ae:e4:8a:69: 0d:32:50:53:1e:90:03:a0:7d:a2:49:92:75:0e:15:71:49:bd: f2:97:76:41:75:c3:7b:9c:3c:29:56:6e:f6:55:04:c2:ce:b2: 53:4f:fc:53:6c:37:13:b9:bc:07:49:3f:77:41:80:e6:a2:3c: 79:8a:50:bd:ee:7c:7c:50:88:cc:82:05:55:22:8b:f1:6e:7d: 58:8a:11:47 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87jjbhLSCdG3EuNGw1pwfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ODc5MDJjZTdhNmEzMzRhNGUwZGI3M2U3MjE5ODkwMTVk NjQ4OWIwHhcNMjYwMTAyMDQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDU4Yjg5MWUwYThjMDNkOWY4N2ZiY2IxMDY4ODI2OTlmY2YxYjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8BkODcdOwM104bt/1428YzPMlNM KJ6mg4JHsKFhOOtvJ/z8iRqPqInui9dwC7+m0wsHuR8xt3T4tq6E807htscsB0wG 1HQRjl2a8oXPqtCN1ZEbH0XgPLkPYw1blnrEUkNxWvjI88eYHpPHDFE8yp245BiO kRqrkvLw8DNdqMJ4eC8ty469MmzssVKsoPmjBPHP1Ie+zvjyf+DlmtWThATjA0A6 58z/tu9XGK2kDQnL264E6FnNH+I/+qpT6l37Ply4VfK1KC5ZEmuTIRgAlBn8AHZ8 Q1Z5SGapCuNSiTTuzWKhU0u2Iy5XM74prmfuElqY4oZ1pkx5nncMoIguQwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG1YuJHgqMA9n4f7yxBogmmfzxthMB8GA1UdIwQY MBaAFHWHkCznpqM0pODbc+chmJAV1kibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80ZGU5YmEtMGE2Yi00N2Y4LTk3NzAt ZjkyMDE5Mzc1YmM4LzEvYlZpNGtlQ293RDJmaF92TEVHaUNhWl9QRzJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy80ZGU5YmEtMGE2Yi00N2Y4LTk3NzAtZjkyMDE5Mzc1YmM4 LzEvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAdw MA0GCSqGSIb3DQEBCwUAA4IBAQCCJCKc2Upj99ox1ysY1R6RdYODQk/H7W5H5pxo bbF1eJiXUhPKgZamwGYirWXb/cXzV1+lVl0LSVP3Cd8aDdsg51CRhI6r/erbIESL 4p9Durg3fVyQwgfCbsYmqVktobzQRNNJPwTn7JySBVdfnl6OHhhQFlEPlHr/reGJ HVjv16RmBPZJp5mE25J1787OdzZMLVeF0j8lEQLyY0cyIEPBGRars0XBOvSRk1hx bjOSB67kimkNMlBTHpADoH2iSZJ1DhVxSb3yl3ZBdcN7nDwpVm72VQTCzrJTT/xT bDcTubwHST93QYDmojx5ilC97nx8UIjMggVVIovxbn1YihFH -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:35 2026 by rpki-client