This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/VaLOykeeFU8I2YIJdyOEx8ZVuUc.roa File: VaLOykeeFU8I2YIJdyOEx8ZVuUc.roa (raw, json) Hash identifier: kAYhfT6Miw9r4z05yf2O6XBU1ToH3EWuwwXPo6D2N2A= Subject key identifier: 55:A2:CE:CA:47:9E:15:4F:08:D9:82:09:77:23:84:C7:C6:55:B9:47 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019B77C7656F5BFF1668B7D60F4092694D5E Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/VaLOykeeFU8I2YIJdyOEx8ZVuUc.roa Signing time: Thu 01 Jan 2026 04:18:34 +0000 ROA not before: Thu 01 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44812 IP address blocks: 2a0d:3046::/32 maxlen: 32 2a0e:4584::/32 maxlen: 32 2a11:9885::/32 maxlen: 32 2a12:9502::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:65:6f:5b:ff:16:68:b7:d6:0f:40:92:69:4d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55a2ceca479e154f08d98209772384c7c655b947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:56:1b:67:ef:d2:92:da:af:19:88:6e:34:96: 25:9e:5f:50:ff:5e:34:21:b8:a7:f6:d7:19:7b:f6: 21:61:d0:d0:94:6c:0d:b9:1b:29:ef:8c:d7:22:a9: f7:45:0b:d7:8f:20:9d:17:79:42:88:99:96:6f:44: 38:46:34:4d:fe:1f:d3:df:87:92:08:8e:08:36:82: 7c:53:33:c4:2e:5f:72:26:3c:36:9e:66:c3:39:e6: 3e:ac:54:14:db:a8:03:ad:ee:f3:49:b3:0c:05:b1: a6:50:43:46:dd:ba:cd:7d:ff:82:35:cd:aa:ea:15: 0c:12:fc:2c:49:93:aa:cb:bc:6f:4d:85:a5:24:54: d5:1a:05:b5:6f:aa:8e:b4:64:4a:1d:05:89:7d:fa: e6:84:f2:a9:b8:89:75:0e:19:24:6a:73:f9:fa:1c: 34:17:a4:41:ac:25:d6:7c:86:d0:ec:9f:44:55:d4: 8c:c4:55:71:20:d1:c0:b5:7c:fc:f5:4a:19:a8:d0: 42:98:33:6e:f0:50:a8:5f:55:c1:fc:3b:2a:9f:f5: f5:89:38:8a:ef:67:d6:50:9b:ca:b7:47:58:50:18: 47:6d:d1:c9:47:b8:48:6f:48:ac:9b:0e:e3:58:a9: ec:db:5d:e7:37:26:9b:e1:17:0e:62:94:8a:54:98: ff:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A2:CE:CA:47:9E:15:4F:08:D9:82:09:77:23:84:C7:C6:55:B9:47 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/VaLOykeeFU8I2YIJdyOEx8ZVuUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:3046::/32 2a0e:4584::/32 2a11:9885::/32 2a12:9502::/32 Signature Algorithm: sha256WithRSAEncryption 97:7e:c4:51:0b:02:80:21:a4:14:d4:9b:fb:f5:d9:fc:1a:6e: 5c:1f:a2:3b:f8:3e:5d:bf:85:5a:5f:30:0b:29:7f:1a:ce:e2: 9e:47:69:5e:14:ad:7c:f4:fb:a3:a6:59:f6:3d:97:30:d6:ef: d4:74:c9:89:1d:f0:66:d0:72:8a:30:e4:59:40:e1:bb:8f:69: 4f:21:9e:0d:67:2f:f5:18:25:85:26:f3:3b:9b:ed:1d:ed:9c: 5a:46:27:9a:8e:72:b7:46:64:8c:39:b8:55:0f:e7:33:fb:4f: b3:1b:53:17:71:2d:29:26:27:a3:27:27:77:4d:f7:ae:7f:c1: 32:28:22:a2:e4:55:6a:f2:49:2b:8d:c7:2c:62:c1:99:79:b9: 2b:ce:d5:3a:9f:97:2d:d6:ec:e8:08:cc:91:b9:ca:49:71:3c: 55:19:06:ee:2e:47:3e:1c:0f:e0:c6:42:ce:d0:b7:95:c5:a2: 78:96:e5:5e:cd:13:6b:3d:2e:e3:75:12:94:c1:13:52:fa:24: fc:a9:63:3e:29:07:5d:ca:f1:f8:af:bd:66:05:d9:f1:22:5e: 59:55:e2:90:a1:a4:e0:8c:ad:77:2f:37:e4:75:8d:cd:e1:45: d6:92:3a:41:76:68:7e:2b:ed:0c:a9:db:f6:25:31:1b:2e:bf: a0:35:5d:d5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt3x2VvW/8WaLfWD0CSaU1eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWEyY2VjYTQ3OWUxNTRmMDhkOTgyMDk3NzIzODRjN2M2NTViOTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFYbZ+/SktqvGYhuNJYlnl9Q/140 Ibin9tcZe/YhYdDQlGwNuRsp74zXIqn3RQvXjyCdF3lCiJmWb0Q4RjRN/h/T34eS CI4INoJ8UzPELl9yJjw2nmbDOeY+rFQU26gDre7zSbMMBbGmUENG3brNff+CNc2q 6hUMEvwsSZOqy7xvTYWlJFTVGgW1b6qOtGRKHQWJffrmhPKpuIl1DhkkanP5+hw0 F6RBrCXWfIbQ7J9EVdSMxFVxINHAtXz89UoZqNBCmDNu8FCoX1XB/Dsqn/X1iTiK 72fWUJvKt0dYUBhHbdHJR7hIb0ismw7jWKns213nNyab4RcOYpSKVJj/qQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFFWizspHnhVPCNmCCXcjhMfGVblHMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvVmFMT3lrZWVGVThJMllJSmR5T0V4OFpWdVVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUAKg0wRgMF ACoORYQDBQAqEZiFAwUAKhKVAjANBgkqhkiG9w0BAQsFAAOCAQEAl37EUQsCgCGk FNSb+/XZ/BpuXB+iO/g+Xb+FWl8wCyl/Gs7inkdpXhStfPT7o6ZZ9j2XMNbv1HTJ iR3wZtByijDkWUDhu49pTyGeDWcv9RglhSbzO5vtHe2cWkYnmo5yt0ZkjDm4VQ/n M/tPsxtTF3EtKSYnoycnd033rn/BMigiouRVavJJK43HLGLBmXm5K87VOp+XLdbs 6AjMkbnKSXE8VRkG7i5HPhwP4MZCztC3lcWieJblXs0Taz0u43USlMETUvok/Klj PikHXcrx+K+9ZgXZ8SJeWVXikKGk4Iytdy835HWNzeFF1pI6QXZofivtDKnb9iUx Gy6/oDVd1Q== -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:57 2026 by rpki-client