This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/Vdh3_1j9N9qxue8CD8c8TlPKZXA.roa File: Vdh3_1j9N9qxue8CD8c8TlPKZXA.roa (raw, json) Hash identifier: DKeEzZKgIArxoLoLfWTEY4XadPn2TLkkEnTA5gJhx7I= Subject key identifier: 55:D8:77:FF:58:FD:37:DA:B1:B9:EF:02:0F:C7:3C:4E:53:CA:65:70 Certificate issuer: /CN=2d5894923bb002a434128810607dfb526722004f Certificate serial: 019B797F0667020F56E77A9B906D58DBA3B1 Authority key identifier: 2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/Vdh3_1j9N9qxue8CD8c8TlPKZXA.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41863 IP address blocks: 193.34.16.0/22 maxlen: 24 2001:678:b64::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:06:67:02:0f:56:e7:7a:9b:90:6d:58:db:a3:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d5894923bb002a434128810607dfb526722004f Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55d877ff58fd37dab1b9ef020fc73c4e53ca6570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:15:4a:14:56:3e:a6:5c:ff:b4:00:cb:c3:c3: f1:92:a0:17:53:5a:ee:51:97:bc:fd:a0:21:36:5a: 42:c0:a5:36:14:63:5b:e9:56:29:a1:71:c8:60:f0: 5f:9c:82:94:f9:06:e1:d1:a5:3f:57:92:f1:16:3c: 29:ee:7d:98:46:9a:da:72:bb:f8:9c:f5:bf:39:1e: 7a:cd:df:61:1a:1e:e7:20:66:49:67:a1:a0:a7:3e: ae:9c:e3:a2:a8:0c:09:88:f6:56:50:e7:68:b2:9d: 74:5b:4b:b9:66:17:72:3c:51:26:83:81:f5:78:f5: 43:99:07:fc:da:25:24:1a:8d:98:12:8b:2d:b3:f8: 6a:f5:84:55:13:ef:30:d6:bd:ee:45:55:57:ac:e2: 94:4d:95:86:0b:e2:f5:b7:aa:e2:7a:48:c0:6c:46: b4:ba:2c:4b:c4:c2:00:49:ab:9b:56:1a:72:de:13: b3:b7:ec:e1:82:58:61:b8:ad:31:a9:93:d2:3d:62: 1e:ac:94:1d:11:18:7f:92:15:fa:21:69:90:d0:99: f2:85:30:58:a9:d7:f3:6c:0e:ad:18:00:f3:f7:16: 9f:cd:2b:ee:d7:82:8f:99:a1:c6:d4:8e:3d:6b:c8: 02:4e:2f:85:4e:2d:e5:b0:ac:65:c3:94:1a:2a:59: 6a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D8:77:FF:58:FD:37:DA:B1:B9:EF:02:0F:C7:3C:4E:53:CA:65:70 X509v3 Authority Key Identifier: keyid:2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/Vdh3_1j9N9qxue8CD8c8TlPKZXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.16.0/22 IPv6: 2001:678:b64::/48 Signature Algorithm: sha256WithRSAEncryption 47:5c:40:03:87:fe:71:2a:b6:b8:12:3b:0e:2e:e0:43:bf:05: 68:88:56:dd:dd:a0:4b:49:ef:61:2a:67:df:58:18:02:46:89: 11:d5:03:bc:98:58:d4:97:d2:23:a3:2b:15:75:41:dd:11:44: eb:ff:1d:b7:c0:47:8e:5b:cb:44:d4:a3:5a:57:63:5c:72:c5: 87:f1:33:04:0f:3b:d7:c8:ed:58:65:30:9e:97:57:e5:7f:53: 7e:57:3b:1d:6e:b1:05:43:47:3f:a9:3a:ef:89:26:68:cb:e7: 36:98:14:08:44:38:ba:fc:31:f3:d5:87:a8:ca:85:58:3d:c6: 88:96:4b:0d:26:84:50:1a:75:65:5d:f3:29:ba:ad:01:0e:5e: 7d:d1:53:0c:5b:91:00:24:55:09:20:8c:a7:f8:26:ea:c7:de: 4e:13:3b:e3:16:bb:8c:02:1d:d0:f5:ce:33:17:81:a7:77:46: 59:0c:70:0f:ff:50:99:d6:46:bd:83:09:a8:12:a0:38:2e:dc: 06:45:9f:bd:ec:ca:58:1c:cc:74:56:5f:ad:eb:39:4c:31:9e: 6d:27:bc:5a:33:01:54:03:9a:3c:c2:dc:e0:66:5c:41:8a:5f: 82:00:2a:d5:f2:e0:27:7b:5d:08:eb:7b:c1:e5:2f:7b:6e:ee: 25:73:75:5c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fwZnAg9W53qbkG1Y26OxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNTg5NDkyM2JiMDAyYTQzNDEyODgxMDYwN2RmYjUyNjcy MjAwNGYwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWQ4NzdmZjU4ZmQzN2RhYjFiOWVmMDIwZmM3M2M0ZTUzY2E2NTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxVKFFY+plz/tADLw8PxkqAXU1ru UZe8/aAhNlpCwKU2FGNb6VYpoXHIYPBfnIKU+Qbh0aU/V5LxFjwp7n2YRpracrv4 nPW/OR56zd9hGh7nIGZJZ6Ggpz6unOOiqAwJiPZWUOdosp10W0u5ZhdyPFEmg4H1 ePVDmQf82iUkGo2YEosts/hq9YRVE+8w1r3uRVVXrOKUTZWGC+L1t6riekjAbEa0 uixLxMIASaubVhpy3hOzt+zhglhhuK0xqZPSPWIerJQdERh/khX6IWmQ0JnyhTBY qdfzbA6tGADz9xafzSvu14KPmaHG1I49a8gCTi+FTi3lsKxlw5QaKllqzQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFXYd/9Y/TfasbnvAg/HPE5TymVwMB8GA1UdIwQY MBaAFC1YlJI7sAKkNBKIEGB9+1JnIgBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84YTUzNTMtMTRmMS00MGY2LWE0ODIt YWVlNTkyN2I0ZGQyLzEvVmRoM18xajlOOXF4dWU4Q0Q4YzhUbFBLWlhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84YTUzNTMtMTRmMS00MGY2LWE0ODItYWVlNTkyN2I0ZGQy LzEvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwSIQMA8E AgACMAkDBwAgAQZ4C2QwDQYJKoZIhvcNAQELBQADggEBAEdcQAOH/nEqtrgSOw4u 4EO/BWiIVt3doEtJ72EqZ99YGAJGiRHVA7yYWNSX0iOjKxV1Qd0RROv/HbfAR45b y0TUo1pXY1xyxYfxMwQPO9fI7VhlMJ6XV+V/U35XOx1usQVDRz+pOu+JJmjL5zaY FAhEOLr8MfPVh6jKhVg9xoiWSw0mhFAadWVd8ym6rQEOXn3RUwxbkQAkVQkgjKf4 JurH3k4TO+MWu4wCHdD1zjMXgad3RlkMcA//UJnWRr2DCagSoDgu3AZFn73sylgc zHRWX63rOUwxnm0nvFozAVQDmjzC3OBmXEGKX4IAKtXy4Cd7XQjre8HlL3tu7iVz dVw= -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:39 2026 by rpki-client