This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/viJ7gwHZZkl8aycoxbcENmaZJk0.roa File: viJ7gwHZZkl8aycoxbcENmaZJk0.roa (raw, json) Hash identifier: kFhg4Qul4VuaLn8GNiNuWw7f2bf4xMblv/3oeMcLjc4= Subject key identifier: BE:22:7B:83:01:D9:66:49:7C:6B:27:28:C5:B7:04:36:66:99:26:4D Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169 Certificate serial: 019B7F1519A576B786DC902398A1D51C8CD0 Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/viJ7gwHZZkl8aycoxbcENmaZJk0.roa Signing time: Fri 02 Jan 2026 14:20:47 +0000 ROA not before: Fri 02 Jan 2026 14:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42163 IP address blocks: 2a00:94c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:19:a5:76:b7:86:dc:90:23:98:a1:d5:1c:8c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169 Validity Not Before: Jan 2 14:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be227b8301d966497c6b2728c5b704366699264d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8e:6c:ef:0f:ef:7c:b2:ad:46:3a:4a:18:4d: 06:a8:bd:ca:cd:6f:ec:98:86:d3:7f:94:18:09:4d: 74:ba:d6:ec:8f:08:ca:07:80:58:72:e1:cc:96:d7: d6:73:5c:da:d7:c2:a4:c2:3f:43:07:c6:84:7d:91: 9b:52:70:81:96:10:26:ad:ee:94:4e:af:ed:d9:b9: 33:da:6a:d9:ae:8a:1f:c2:ca:c0:82:d2:57:a9:0c: af:a1:1c:60:bf:ef:e8:3d:29:73:df:9c:93:06:65: ed:2b:97:a4:5a:b6:b3:5a:2a:8c:6f:39:74:3e:ca: b6:29:1d:c3:d7:e3:06:35:ee:86:e9:e9:4d:dc:4f: 15:2f:c3:ad:46:76:14:7c:2e:a8:75:fb:0c:94:c5: a7:6b:1c:6f:3b:d0:53:cb:bf:56:1e:25:6f:98:14: 7b:88:af:13:92:f6:b8:67:ef:a4:f5:46:e3:2c:38: 2f:5d:f5:5b:9e:55:ce:8e:24:43:ad:dc:78:cc:fa: cf:1c:80:0c:45:4b:91:89:85:32:8b:68:b3:83:d5: d6:f3:50:a1:5c:88:9d:65:81:47:99:5a:7b:97:c7: 2f:65:cb:37:66:46:9b:4a:bb:0d:4a:11:ec:dd:6d: 38:ac:99:2d:aa:cf:d5:ea:99:34:c5:c4:6b:b7:6b: 7c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:22:7B:83:01:D9:66:49:7C:6B:27:28:C5:B7:04:36:66:99:26:4D X509v3 Authority Key Identifier: keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/viJ7gwHZZkl8aycoxbcENmaZJk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:94c0::/32 Signature Algorithm: sha256WithRSAEncryption 4f:a1:63:81:2f:ec:e2:c8:f2:a8:5c:f4:db:2f:3d:ff:d7:e9: 67:dd:65:d3:60:00:fa:5c:34:57:cd:c7:50:2a:0d:6a:a8:15: 7a:96:62:12:34:ef:ac:d4:4c:ca:e0:92:20:97:36:68:d7:0b: 99:79:8c:a5:87:bb:a9:6f:e1:00:c6:6f:8b:5b:ef:96:85:30: 2e:1f:2b:01:fe:39:dd:51:3c:31:b6:d9:a5:f5:bd:3e:3d:a9: 92:69:38:79:1c:db:f4:9a:5d:fd:9a:7f:9e:29:de:89:90:98: be:c8:32:1c:3e:b8:42:5e:5b:2c:33:7b:ff:54:0a:a3:2f:25: 57:95:f9:ef:aa:c2:54:29:16:cc:a9:f8:36:ff:3b:61:0d:29: f7:90:1e:a6:7f:c3:6d:64:4d:b9:4c:48:e8:90:c8:93:e4:5d: 78:2b:d1:0c:8b:b2:0a:78:1e:8a:93:8d:c8:23:e9:b6:f8:b3: bd:e7:51:f2:1f:16:87:ce:bc:2e:9a:73:ce:4b:94:da:25:90: 3e:6c:22:e0:00:6e:17:d3:26:97:c2:51:fb:bb:29:9e:d5:73: da:6e:54:9d:59:42:68:9b:98:23:fb:35:b4:9e:73:87:94:0a: 1a:1c:b5:b0:9b:5e:59:3e:ee:b1:5d:c9:fe:67:a7:57:ff:5d: 8a:74:0a:08 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/FRmldreG3JAjmKHVHIzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyM2Q5MzA1NGYwNjNjZjhhMjkxODYxNzM1ZjkwMDU5YWI5 ZWMxNjkwHhcNMjYwMTAyMTQyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTIyN2I4MzAxZDk2NjQ5N2M2YjI3MjhjNWI3MDQzNjY2OTkyNjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI5s7w/vfLKtRjpKGE0GqL3KzW/s mIbTf5QYCU10utbsjwjKB4BYcuHMltfWc1za18Kkwj9DB8aEfZGbUnCBlhAmre6U Tq/t2bkz2mrZroofwsrAgtJXqQyvoRxgv+/oPSlz35yTBmXtK5ekWrazWiqMbzl0 Psq2KR3D1+MGNe6G6elN3E8VL8OtRnYUfC6odfsMlMWnaxxvO9BTy79WHiVvmBR7 iK8Tkva4Z++k9UbjLDgvXfVbnlXOjiRDrdx4zPrPHIAMRUuRiYUyi2izg9XW81Ch XIidZYFHmVp7l8cvZcs3ZkabSrsNShHs3W04rJktqs/V6pk0xcRrt2t8JwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFL4ie4MB2WZJfGsnKMW3BDZmmSZNMB8GA1UdIwQY MBaAFEI9kwVPBjz4opGGFzX5AFmrnsFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgt NWYxYjY5MDQ4ZmUyLzEvdmlKN2d3SFpaa2w4YXljb3hiY0VObWFaSmswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgtNWYxYjY5MDQ4ZmUy LzEvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgCUwDAN BgkqhkiG9w0BAQsFAAOCAQEAT6FjgS/s4sjyqFz02y89/9fpZ91l02AA+lw0V83H UCoNaqgVepZiEjTvrNRMyuCSIJc2aNcLmXmMpYe7qW/hAMZvi1vvloUwLh8rAf45 3VE8MbbZpfW9Pj2pkmk4eRzb9Jpd/Zp/nineiZCYvsgyHD64Ql5bLDN7/1QKoy8l V5X576rCVCkWzKn4Nv87YQ0p95Aepn/DbWRNuUxI6JDIk+RdeCvRDIuyCngeipON yCPptvizvedR8h8Wh868LppzzkuU2iWQPmwi4ABuF9Mml8JR+7spntVz2m5UnVlC aJuYI/s1tJ5zh5QKGhy1sJteWT7usV3J/menV/9dinQKCA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:20 2026 by rpki-client