This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/vXZf4hzOxMlTqye3wOYv9zQskpM.roa File: vXZf4hzOxMlTqye3wOYv9zQskpM.roa (raw, json) Hash identifier: DTEu7PUowzvEyLZ8bsaNUYNVwOYQCOwpUrQUnmPsLoU= Subject key identifier: BD:76:5F:E2:1C:CE:C4:C9:53:AB:27:B7:C0:E6:2F:F7:34:2C:92:93 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758F22FB32DFB1FA357331108FF8789 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/vXZf4hzOxMlTqye3wOYv9zQskpM.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216223 IP address blocks: 2a0f:5707:ab40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f2:2f:b3:2d:fb:1f:a3:57:33:11:08:ff:87:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd765fe21ccec4c953ab27b7c0e62ff7342c9293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3d:ab:cc:92:7d:75:eb:36:53:e4:f3:45:1b: 2d:70:26:09:36:7b:02:b8:e5:c6:73:18:e2:ff:65: 4c:77:e5:2e:96:ef:c6:fd:a7:37:2e:e2:69:7e:64: 0c:37:9d:b0:7e:d8:dc:cd:47:fc:87:72:9f:cd:f5: 70:13:7c:74:ad:65:2a:d4:f9:9f:db:52:fb:0e:84: 4c:40:12:7f:d7:7b:40:b7:97:8c:1b:80:e8:42:1a: ba:fc:9b:b8:d7:71:42:3e:0d:41:46:e6:32:74:6c: 7d:c4:d9:76:86:10:7f:30:31:93:27:65:69:22:2c: 58:f8:94:b9:a9:4a:33:3e:38:c5:3b:9e:f5:7d:85: 0d:30:e8:86:3a:11:71:25:2b:3c:2c:cc:d6:63:35: 85:99:58:4e:a4:77:07:a1:53:47:de:b9:45:9e:60: 28:e9:61:a3:f3:92:5e:19:33:f7:72:53:1c:e9:41: 0f:5c:f0:ef:04:5f:03:98:9b:ee:28:87:3b:7d:f5: 82:46:47:4f:da:52:4a:50:c2:45:48:56:eb:b6:06: df:06:75:3a:52:f9:d1:c1:23:d5:ba:d9:75:0f:ff: 43:39:f7:84:6d:1d:56:df:ae:b2:9a:85:63:be:2b: f5:cf:83:59:a9:6a:bc:41:68:9f:a1:58:f3:08:5e: 65:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:76:5F:E2:1C:CE:C4:C9:53:AB:27:B7:C0:E6:2F:F7:34:2C:92:93 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/vXZf4hzOxMlTqye3wOYv9zQskpM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:ab40::/44 Signature Algorithm: sha256WithRSAEncryption ba:72:6a:10:c6:68:ea:44:c6:bc:26:35:b1:0c:9e:86:42:7a: 6b:0b:0e:2e:de:8f:62:a2:80:bc:4a:1b:fc:39:00:b5:4d:e5: 6f:fa:a7:7f:f0:bc:bd:21:0b:1e:0c:c4:72:88:ab:53:2a:52: 4f:11:b2:27:9d:29:d5:02:51:40:a3:e7:38:c9:9e:df:08:18: 7c:42:c0:78:43:73:3e:9c:57:c6:a8:8b:3b:12:34:0d:41:21: d9:71:15:0c:73:0c:cd:13:68:f1:15:6f:c9:76:94:e7:14:fc: fe:f6:d5:20:45:4e:77:b9:c7:cc:4d:b4:cb:c3:32:b2:20:c0: f2:1b:de:55:47:f9:0a:dc:44:20:e1:6c:cf:0e:e9:dc:44:92: 23:a8:f1:58:00:b2:fe:de:39:31:50:ef:e4:9a:d2:e4:72:f9: 7b:52:e4:85:69:66:5c:90:1e:35:4c:02:19:44:c9:61:0b:1e: 27:43:ac:c5:67:90:8b:04:a4:29:ad:a5:82:32:7c:e7:65:f8: 86:2a:c6:e8:e2:b3:f3:3d:3d:e1:61:02:1e:a0:74:0b:7c:d8: 88:09:f3:6d:b1:62:67:55:13:31:bc:bf:f2:7d:e4:b5:ad:82: ba:6f:97:ba:03:d3:55:e8:10:3b:92:c3:fe:40:65:69:38:fb: 69:f6:05:35 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WPIvsy37H6NXMxEI/4eJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDc2NWZlMjFjY2VjNGM5NTNhYjI3YjdjMGU2MmZmNzM0MmM5MjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j2rzJJ9des2U+TzRRstcCYJNnsC uOXGcxji/2VMd+Uulu/G/ac3LuJpfmQMN52wftjczUf8h3KfzfVwE3x0rWUq1Pmf 21L7DoRMQBJ/13tAt5eMG4DoQhq6/Ju413FCPg1BRuYydGx9xNl2hhB/MDGTJ2Vp IixY+JS5qUozPjjFO571fYUNMOiGOhFxJSs8LMzWYzWFmVhOpHcHoVNH3rlFnmAo 6WGj85JeGTP3clMc6UEPXPDvBF8DmJvuKIc7ffWCRkdP2lJKUMJFSFbrtgbfBnU6 UvnRwSPVutl1D/9DOfeEbR1W366ymoVjviv1z4NZqWq8QWifoVjzCF5lgQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFL12X+IczsTJU6snt8DmL/c0LJKTMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvdlhaZjRoek94TWxUcXllM3dPWXY5elFza3BNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6tA MA0GCSqGSIb3DQEBCwUAA4IBAQC6cmoQxmjqRMa8JjWxDJ6GQnprCw4u3o9iooC8 Shv8OQC1TeVv+qd/8Ly9IQseDMRyiKtTKlJPEbInnSnVAlFAo+c4yZ7fCBh8QsB4 Q3M+nFfGqIs7EjQNQSHZcRUMcwzNE2jxFW/JdpTnFPz+9tUgRU53ucfMTbTLwzKy IMDyG95VR/kK3EQg4WzPDuncRJIjqPFYALL+3jkxUO/kmtLkcvl7UuSFaWZckB41 TAIZRMlhCx4nQ6zFZ5CLBKQpraWCMnznZfiGKsbo4rPzPT3hYQIeoHQLfNiICfNt sWJnVRMxvL/yfeS1rYK6b5e6A9NV6BA7ksP+QGVpOPtp9gU1 -----END CERTIFICATE-----Generated at Sun Jan 25 17:00:23 2026 by rpki-client