This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/vHv3grLhsL3LXc-xD1rnHznkiNc.roa File: vHv3grLhsL3LXc-xD1rnHznkiNc.roa (raw, json) Hash identifier: 1B8P3zbfNsnRQ4BM3TGB8f+ii6bodRHadKkmAMlajpE= Subject key identifier: BC:7B:F7:82:B2:E1:B0:BD:CB:5D:CF:B1:0F:5A:E7:1F:39:E4:88:D7 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15C6E47AFCC9ACCEFF39F239F077D7 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/vHv3grLhsL3LXc-xD1rnHznkiNc.roa Signing time: Fri 02 Jan 2026 14:21:32 +0000 ROA not before: Fri 02 Jan 2026 14:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205884 IP address blocks: 2a09:57c0::/29 maxlen: 29 2a09:59c0::/29 maxlen: 29 2a09:5bc0::/29 maxlen: 29 2a0e:b00::/29 maxlen: 29 2a0e:2800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c6:e4:7a:fc:c9:ac:ce:ff:39:f2:39:f0:77:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc7bf782b2e1b0bdcb5dcfb10f5ae71f39e488d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8a:01:db:6d:be:fc:ca:52:b7:f0:2b:a5:47: f1:19:b1:4f:fe:e8:0a:de:13:2b:85:f9:7b:7b:1f: c3:54:4e:7d:68:c2:1b:b3:8d:4e:5f:89:d3:b0:71: f8:80:60:26:47:2b:50:ad:5c:1b:a9:eb:c5:3d:67: 11:99:d1:45:54:06:4c:a4:c4:c0:de:0c:33:e3:b6: bc:07:9e:cb:de:cb:61:1d:c0:56:21:42:13:f5:f5: 06:a4:86:39:03:17:2b:d6:e0:16:20:65:58:ca:db: 3a:2e:84:ad:38:7b:3a:7e:62:9a:aa:fa:2e:70:22: fb:52:95:fc:64:b6:90:06:c3:f7:89:b4:75:69:7a: 6c:b4:72:d3:99:06:36:c1:02:38:56:11:b7:8e:4c: 2a:d6:51:e2:b9:79:d1:6c:bb:5f:9e:bd:ae:69:7b: 5e:f3:8c:5c:fb:e2:cc:05:a7:c3:3e:8c:71:1d:d7: 18:d7:3e:05:38:1e:e7:89:20:0e:61:46:d6:36:58: cc:ec:44:57:7b:57:3f:22:9d:3d:f0:ec:11:70:39: dc:54:49:5e:0c:90:f6:b3:de:f0:80:2f:dd:95:8a: 6d:43:6b:4c:6a:c3:af:33:78:92:4d:ed:87:3c:20: 23:da:3a:51:f3:55:f8:98:69:0e:b1:84:a6:4a:47: 8f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7B:F7:82:B2:E1:B0:BD:CB:5D:CF:B1:0F:5A:E7:1F:39:E4:88:D7 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/vHv3grLhsL3LXc-xD1rnHznkiNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:57c0::/29 2a09:59c0::/29 2a09:5bc0::/29 2a0e:b00::/29 2a0e:2800::/29 Signature Algorithm: sha256WithRSAEncryption 74:10:7e:1d:af:8a:a0:31:3e:71:ad:f3:81:cb:c8:09:e9:6a: 85:cb:04:69:d9:d3:b6:15:39:57:a6:dc:df:87:39:59:43:e7: d0:8e:f2:46:8a:c5:cf:2e:b9:64:f5:d8:76:05:a2:5a:f0:e8: 3a:fa:41:2b:6e:12:0d:4f:71:2f:35:cf:4b:45:e1:fb:a6:42: 77:5a:5a:25:0d:88:c6:11:8f:01:aa:45:1d:70:15:ef:51:2c: 0c:8e:ee:f2:da:61:b6:1e:17:f8:e5:e5:f9:d0:35:ff:2a:07: 02:f9:b9:29:f5:65:2e:ee:1f:49:ec:83:44:b2:10:9f:d5:60: ce:7f:29:ac:0a:e8:4f:29:bf:d9:b4:84:56:44:01:b8:6b:75: 9f:f9:9e:3c:1a:3c:f5:f9:75:31:fa:fb:81:c2:b8:eb:cc:d6: 86:86:33:2b:1b:c0:5e:2b:b6:fd:02:ad:46:1d:88:9f:6e:8f: 88:70:2d:fa:02:92:19:de:dc:e1:de:03:43:4a:d9:08:d5:15: a3:59:a3:37:3d:29:87:4d:bc:85:22:51:aa:4b:b7:e8:c2:9a: 75:8c:2c:68:48:d9:48:fc:29:6e:d5:d4:48:58:4d:78:70:18: a6:1d:cd:5b:91:ae:91:55:0b:5f:35:e5:f6:6b:84:14:bb:07: 36:b2:3c:c5 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt/FcbkevzJrM7/OfI58HfXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzdiZjc4MmIyZTFiMGJkY2I1ZGNmYjEwZjVhZTcxZjM5ZTQ4OGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlooB222+/MpSt/ArpUfxGbFP/ugK 3hMrhfl7ex/DVE59aMIbs41OX4nTsHH4gGAmRytQrVwbqevFPWcRmdFFVAZMpMTA 3gwz47a8B57L3sthHcBWIUIT9fUGpIY5Axcr1uAWIGVYyts6LoStOHs6fmKaqvou cCL7UpX8ZLaQBsP3ibR1aXpstHLTmQY2wQI4VhG3jkwq1lHiuXnRbLtfnr2uaXte 84xc++LMBafDPoxxHdcY1z4FOB7niSAOYUbWNljM7ERXe1c/Ip098OwRcDncVEle DJD2s97wgC/dlYptQ2tMasOvM3iSTe2HPCAj2jpR81X4mGkOsYSmSkeP6wIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFLx794Ky4bC9y13PsQ9a5x855IjXMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvdkh2M2dyTGhzTDNMWGMteEQxcm5Iem5raU5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUDKglXwAMF AyoJWcADBQMqCVvAAwUDKg4LAAMFAyoOKAAwDQYJKoZIhvcNAQELBQADggEBAHQQ fh2viqAxPnGt84HLyAnpaoXLBGnZ07YVOVem3N+HOVlD59CO8kaKxc8uuWT12HYF olrw6Dr6QStuEg1PcS81z0tF4fumQndaWiUNiMYRjwGqRR1wFe9RLAyO7vLaYbYe F/jl5fnQNf8qBwL5uSn1ZS7uH0nsg0SyEJ/VYM5/KawK6E8pv9m0hFZEAbhrdZ/5 njwaPPX5dTH6+4HCuOvM1oaGMysbwF4rtv0CrUYdiJ9uj4hwLfoCkhne3OHeA0NK 2QjVFaNZozc9KYdNvIUiUapLt+jCmnWMLGhI2Uj8KW7V1EhYTXhwGKYdzVuRrpFV C1815fZrhBS7BzayPMU= -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:54 2026 by rpki-client