This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/V0ZbvO-Kau_hina_xax1FtPv3HU.roa File: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (raw, json) Hash identifier: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI= Subject key identifier: 57:46:5B:BC:EF:8A:6A:EF:E1:8A:76:BF:C5:AC:75:16:D3:EF:DC:75 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019B797ED4A9FBD59DDD048908A11C0BFB7A Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/V0ZbvO-Kau_hina_xax1FtPv3HU.roa Signing time: Thu 01 Jan 2026 12:18:33 +0000 ROA not before: Thu 01 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214923 IP address blocks: 2a03:9381:7::/48 maxlen: 48 2a03:9381:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d4:a9:fb:d5:9d:dd:04:89:08:a1:1c:0b:fb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57465bbcef8a6aefe18a76bfc5ac7516d3efdc75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ef:74:3d:51:0b:0f:50:2e:a5:b5:29:cb:ca: f9:6d:9d:c7:4b:58:02:80:b5:fa:9a:9d:0f:1a:4f: bd:28:05:f7:25:17:f6:8a:62:ab:3d:75:19:c6:31: 70:6f:40:6c:2d:8f:35:68:18:45:08:4e:3c:e8:f8: 0b:88:d2:7a:cd:86:56:19:cd:9e:f6:e8:6f:cc:90: 15:01:ad:a8:3f:64:7c:5a:16:1c:1b:d6:05:d7:fe: b3:94:68:3b:15:ce:ec:7d:75:32:26:3a:6a:be:c8: 34:c3:6d:13:c0:fd:0b:f0:bd:4b:8d:78:b5:5c:9e: fd:db:d1:c7:7d:eb:28:e4:91:ae:52:ef:67:fb:90: b0:2a:1f:62:37:25:1d:ee:65:f9:dc:90:88:72:3d: 1b:3d:2b:0c:4e:78:b2:3d:32:70:64:7a:a9:ce:d5: 06:71:3f:38:29:42:75:c3:6e:e7:05:70:72:53:71: 49:54:51:fe:28:d2:a3:8b:1a:41:a7:0c:7a:d8:ec: c5:b4:4e:85:ab:f3:c8:fe:61:45:41:73:f2:48:19: fc:d6:bf:c8:a3:37:24:0a:58:1e:6d:08:5a:85:38: e8:4a:55:86:7e:25:ef:e5:1e:6d:5c:f2:42:44:2b: 6e:90:6a:f9:2b:c5:8f:cd:75:f5:70:a3:45:a1:2c: ad:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:46:5B:BC:EF:8A:6A:EF:E1:8A:76:BF:C5:AC:75:16:D3:EF:DC:75 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/V0ZbvO-Kau_hina_xax1FtPv3HU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:9381:7::-2a03:9381:8:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 25:13:66:de:ff:59:19:3d:13:b2:b9:45:e9:9f:17:0d:66:55: 9c:89:27:dc:f9:df:98:9d:3e:87:f9:ee:2f:21:0a:cc:5d:12: a6:2e:00:53:1a:cd:48:11:07:f2:b0:16:87:25:14:35:42:1a: f2:36:be:d3:8e:d4:c3:e0:d3:7f:41:d6:80:6f:17:cf:7e:73: 9a:63:2e:a4:e1:e9:3d:de:ef:cb:ef:b4:7a:3f:2a:0d:03:97: 71:f0:e2:ca:ea:22:c3:93:e1:c8:bf:32:14:03:3e:6f:15:fd: 37:cd:b3:88:7f:2d:c5:de:53:f7:b3:7a:f8:a3:a8:25:b5:eb: 64:72:fd:81:b8:85:e6:74:6b:f2:a8:f3:9a:2d:d8:c4:02:21: d4:9c:16:80:bf:27:c7:85:a2:bc:7f:86:74:a0:a6:0d:5b:d8: be:f0:bb:75:9a:ab:dc:a5:ea:88:3d:52:3f:12:d2:66:6d:a4: 79:98:80:73:16:dc:41:7d:1f:16:88:02:9f:bb:88:a3:30:4b: ed:5c:dc:10:0d:5b:2c:89:c6:9d:c0:cc:e8:3b:14:18:f4:2e: 45:c0:01:6c:54:70:73:19:71:df:30:20:ff:40:07:98:5d:9a: e4:33:b7:25:af:c9:d2:87:e5:2a:f1:93:b8:02:8e:56:f7:5d: 32:15:7b:cf -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5ftSp+9Wd3QSJCKEcC/t6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzQ2NWJiY2VmOGE2YWVmZTE4YTc2YmZjNWFjNzUxNmQzZWZkYzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+90PVELD1AupbUpy8r5bZ3HS1gC gLX6mp0PGk+9KAX3JRf2imKrPXUZxjFwb0BsLY81aBhFCE486PgLiNJ6zYZWGc2e 9uhvzJAVAa2oP2R8WhYcG9YF1/6zlGg7Fc7sfXUyJjpqvsg0w20TwP0L8L1LjXi1 XJ7929HHfeso5JGuUu9n+5CwKh9iNyUd7mX53JCIcj0bPSsMTniyPTJwZHqpztUG cT84KUJ1w27nBXByU3FJVFH+KNKjixpBpwx62OzFtE6Fq/PI/mFFQXPySBn81r/I ozckClgebQhahTjoSlWGfiXv5R5tXPJCRCtukGr5K8WPzXX1cKNFoSytMQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFdGW7zvimrv4Yp2v8WsdRbT79x1MB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEvVjBaYnZPLUthdV9oaW5hX3hheDFGdFB2M0hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqA5OB AAcDBwAqA5OBAAgwDQYJKoZIhvcNAQELBQADggEBACUTZt7/WRk9E7K5RemfFw1m VZyJJ9z535idPof57i8hCsxdEqYuAFMazUgRB/KwFoclFDVCGvI2vtOO1MPg039B 1oBvF89+c5pjLqTh6T3e78vvtHo/Kg0Dl3Hw4srqIsOT4ci/MhQDPm8V/TfNs4h/ LcXeU/ezevijqCW162Ry/YG4heZ0a/Ko85ot2MQCIdScFoC/J8eForx/hnSgpg1b 2L7wu3Waq9yl6og9Uj8S0mZtpHmYgHMW3EF9HxaIAp+7iKMwS+1c3BANWyyJxp3A zOg7FBj0LkXAAWxUcHMZcd8wIP9AB5hdmuQztyWvydKH5Srxk7gCjlb3XTIVe88= -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:21 2026 by rpki-client