This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/vsAq2ox79fGO3Ta6QC_1orZGKIY.roa File: vsAq2ox79fGO3Ta6QC_1orZGKIY.roa (raw, json) Hash identifier: 11wmgbpdweQHKnUalimrWFHED8Za8q31JapGPV4qcP8= Subject key identifier: BE:C0:2A:DA:8C:7B:F5:F1:8E:DD:36:BA:40:2F:F5:A2:B6:46:28:86 Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Certificate serial: 019B7BA33C0F5388C9E8E49D75D4A4941D02 Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/vsAq2ox79fGO3Ta6QC_1orZGKIY.roa Signing time: Thu 01 Jan 2026 22:17:33 +0000 ROA not before: Thu 01 Jan 2026 22:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213426 IP address blocks: 2a09:9340:1801::/48 maxlen: 48 2a09:9340:1805::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:3c:0f:53:88:c9:e8:e4:9d:75:d4:a4:94:1d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Validity Not Before: Jan 1 22:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bec02ada8c7bf5f18edd36ba402ff5a2b6462886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3f:48:3e:d0:ab:fa:b8:4d:31:e4:69:af:f5: 73:b2:db:b1:85:b4:21:a6:bf:74:ec:4e:9d:1d:64: 01:61:e6:1e:49:45:40:62:30:80:1e:c2:c3:0e:1e: f0:95:98:b2:27:d5:9c:72:96:67:92:a3:1c:d8:22: 61:83:df:40:e4:e6:6d:ab:71:cf:52:75:04:a8:17: ec:07:66:89:82:00:e7:67:e4:aa:59:75:95:84:8b: 59:88:a4:b8:4c:94:55:45:6d:ea:84:f1:6b:e6:8d: 82:c5:89:a5:55:d1:7f:5c:ef:6b:b7:65:75:13:6a: ca:ed:48:f3:c2:e9:ea:d4:59:98:a3:72:63:6a:66: 8e:2e:16:c8:d9:74:3f:11:49:af:7d:c4:f9:20:49: 1c:86:28:a0:7a:98:90:16:27:cc:e7:f8:67:26:61: aa:09:45:2a:72:fe:ea:8c:5f:82:0d:5c:ec:f7:e2: c2:07:50:c5:0e:96:f3:39:73:2c:cb:4d:47:e9:65: ee:17:78:b4:9b:ee:d7:4e:1f:04:05:65:f8:54:5b: f0:ea:ca:53:02:96:4f:21:2a:3f:fc:27:92:e3:1e: 4a:c0:5b:5e:b1:c4:c6:13:cb:57:01:1f:5b:b1:9a: bf:7e:4a:59:7f:fb:4c:ee:7d:4c:8d:a3:c2:fd:0c: fc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C0:2A:DA:8C:7B:F5:F1:8E:DD:36:BA:40:2F:F5:A2:B6:46:28:86 X509v3 Authority Key Identifier: keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/vsAq2ox79fGO3Ta6QC_1orZGKIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:9340:1801::/48 2a09:9340:1805::/48 Signature Algorithm: sha256WithRSAEncryption 38:13:09:0e:53:95:76:84:2e:be:80:19:b0:39:99:7b:bc:35: f7:4e:a4:c4:47:5d:cb:d4:26:5f:67:6c:22:e9:a9:50:df:42: 3d:ac:a1:c6:9d:19:f7:da:f1:23:ad:44:2d:cf:df:e3:45:90: 99:80:1e:27:10:84:39:93:73:03:f3:a2:46:d5:ee:38:23:a1: fa:d5:e2:c3:73:2a:b4:d0:d9:b1:75:7e:65:c0:8a:eb:1b:52: da:a5:87:c6:ea:b0:26:17:40:f6:0d:ac:28:7b:8c:a5:a6:3e: c5:c9:75:8b:30:8e:02:ff:33:90:67:c2:dd:08:d1:16:f9:65: 9e:91:06:ed:69:c3:86:c1:b7:c6:c1:4f:ee:76:a6:a3:a8:de: ff:25:38:ee:1f:02:9e:ff:fb:eb:79:c0:0c:cc:62:fd:86:97: ae:62:57:72:90:e7:ce:70:62:0a:28:e2:1c:eb:4f:55:8c:f8: e9:8a:26:65:1a:2b:36:96:da:d7:7f:ee:f9:c2:14:d9:64:97: 43:fb:98:58:0d:7d:d1:6b:1b:58:ce:e5:cf:d6:94:35:27:35: bf:72:f8:ac:93:c0:9e:a8:48:c5:2a:fd:2d:96:5b:08:b3:04: 29:29:8d:4d:4b:a0:9c:e4:6d:d9:ac:1e:46:21:a3:c5:26:88: 1d:3e:2b:8c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7ozwPU4jJ6OSdddSklB0CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWY2MWY2NjA4ZjlhOWVhYzE0YjE4MjI0ODU0ODA3YmNk YzEzMjQwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWMwMmFkYThjN2JmNWYxOGVkZDM2YmE0MDJmZjVhMmI2NDYyODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T9IPtCr+rhNMeRpr/VzstuxhbQh pr907E6dHWQBYeYeSUVAYjCAHsLDDh7wlZiyJ9WccpZnkqMc2CJhg99A5OZtq3HP UnUEqBfsB2aJggDnZ+SqWXWVhItZiKS4TJRVRW3qhPFr5o2CxYmlVdF/XO9rt2V1 E2rK7Ujzwunq1FmYo3JjamaOLhbI2XQ/EUmvfcT5IEkchiigepiQFifM5/hnJmGq CUUqcv7qjF+CDVzs9+LCB1DFDpbzOXMsy01H6WXuF3i0m+7XTh8EBWX4VFvw6spT ApZPISo//CeS4x5KwFtescTGE8tXAR9bsZq/fkpZf/tM7n1MjaPC/Qz8/QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFL7AKtqMe/Xxjt02ukAv9aK2RiiGMB8GA1UdIwQY MBaAFI2vYfZgj5qerBSxgiSFSAe83BMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUt ZmIyNGJlNzVhM2Y0LzEvdnNBcTJveDc5ZkdPM1RhNlFDXzFvclpHS0lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUtZmIyNGJlNzVhM2Y0 LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgmTQBgB AwcAKgmTQBgFMA0GCSqGSIb3DQEBCwUAA4IBAQA4EwkOU5V2hC6+gBmwOZl7vDX3 TqTER13L1CZfZ2wi6alQ30I9rKHGnRn32vEjrUQtz9/jRZCZgB4nEIQ5k3MD86JG 1e44I6H61eLDcyq00NmxdX5lwIrrG1LapYfG6rAmF0D2Dawoe4ylpj7FyXWLMI4C /zOQZ8LdCNEW+WWekQbtacOGwbfGwU/udqajqN7/JTjuHwKe//vrecAMzGL9hpeu YldykOfOcGIKKOIc609VjPjpiiZlGis2ltrXf+75whTZZJdD+5hYDX3RaxtYzuXP 1pQ1JzW/cvisk8CeqEjFKv0tllsIswQpKY1NS6Cc5G3ZrB5GIaPFJogdPiuM -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:05 2026 by rpki-client