This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/vJiRTEd6tTiZDm_JR7rLwIox0zw.roa File: vJiRTEd6tTiZDm_JR7rLwIox0zw.roa (raw, json) Hash identifier: IYF63rRulzFNBpbGnH/dDmLviCvKmUvwCJNoi515Gao= Subject key identifier: BC:98:91:4C:47:7A:B5:38:99:0E:6F:C9:47:BA:CB:C0:8A:31:D3:3C Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 019B7EA6A49F80EAA40769FA87A29DFA0C73 Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/vJiRTEd6tTiZDm_JR7rLwIox0zw.roa Signing time: Fri 02 Jan 2026 12:20:08 +0000 ROA not before: Fri 02 Jan 2026 12:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398849 IP address blocks: 157.23.224.0/20 maxlen: 24 2a0e:bbc0:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a4:9f:80:ea:a4:07:69:fa:87:a2:9d:fa:0c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Jan 2 12:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc98914c477ab538990e6fc947bacbc08a31d33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fd:ed:5d:21:e1:c0:f7:24:4a:8d:2c:bd:af: ef:08:62:c1:2d:cb:72:3c:11:e8:62:f1:e6:4d:a2: 6f:6b:f3:ec:2e:0e:ea:57:0b:d0:29:94:ec:34:37: 1b:8e:6b:f4:33:de:cd:4b:3d:70:cb:21:e5:e7:cc: 95:75:f8:c8:2e:0b:21:6b:a7:42:b0:15:66:bf:1c: f2:5e:e3:78:99:de:b1:32:82:e4:57:7a:d8:a9:9d: d3:82:cf:55:15:64:ad:03:41:dd:36:ae:23:af:5b: d4:fd:ee:22:6d:0f:27:9a:2e:c9:00:c6:60:f1:6f: 3c:23:f3:e5:b6:79:9f:0b:61:81:b8:8e:55:40:d7: a9:29:26:07:df:8d:a8:59:92:93:13:02:2e:f8:08: a7:ed:f2:51:12:61:61:66:82:33:e7:83:0a:65:49: d7:44:e1:3f:b2:99:ed:ae:78:a9:08:16:59:8b:80: 0a:fd:de:11:85:b9:4c:b8:b5:c1:b0:0e:34:fc:92: 0e:90:7b:eb:80:cc:7a:ec:e5:b3:ce:85:f2:60:0d: a8:ec:c1:6e:e0:2f:b9:12:98:13:d9:c6:3f:37:16: 14:ff:be:31:18:a5:f7:ca:44:3e:00:c1:68:98:de: 46:d3:8b:8a:20:94:0c:e1:de:7d:6e:16:ca:5c:3b: ed:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:98:91:4C:47:7A:B5:38:99:0E:6F:C9:47:BA:CB:C0:8A:31:D3:3C X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/vJiRTEd6tTiZDm_JR7rLwIox0zw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.23.224.0/20 IPv6: 2a0e:bbc0:8000::/40 Signature Algorithm: sha256WithRSAEncryption 60:da:a1:f1:44:aa:d6:64:f7:3a:1d:c8:a2:6d:94:1e:f5:6a: 92:02:19:ce:53:43:dc:77:9c:29:3f:d6:61:c0:50:96:e0:14: 53:b1:93:7d:0c:e8:5d:a5:d3:34:ac:e3:4e:cb:ad:3b:c8:86: c8:af:1a:7b:5f:e9:59:a4:f9:f4:1e:21:0c:81:e6:57:31:de: 0d:27:0d:7a:d6:e0:84:47:4a:35:8c:5c:21:64:3a:7c:3a:98: fc:53:2b:f6:31:c6:34:8f:83:55:ae:dd:43:17:01:fd:4e:55: 8c:3a:eb:cc:5d:bc:bd:d3:f8:c2:5b:3e:a2:d5:74:96:6c:cd: ca:97:03:1b:bf:b1:66:ed:41:b2:92:4f:16:3a:fd:19:7e:a1: a1:56:68:35:68:7c:06:f2:b1:3f:61:d6:77:f2:46:95:0c:34: ae:e8:bf:40:27:97:cd:b9:9b:7a:a2:f1:43:1b:8b:01:7a:41: 32:3d:07:3d:0f:18:30:a5:94:28:a5:4f:19:1f:1c:1b:81:72: 6e:42:4a:f8:45:7c:fd:d7:1b:cc:33:fe:de:2b:81:96:dc:ec: cf:f4:65:48:3d:46:8d:ca:24:90:a0:24:5b:bf:42:cb:05:54: 4a:3c:c6:b6:13:de:49:2a:75:71:64:f8:56:4c:4d:18:1f:9c: ef:42:86:2b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt+pqSfgOqkB2n6h6Kd+gxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjYwMTAyMTIyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzk4OTE0YzQ3N2FiNTM4OTkwZTZmYzk0N2JhY2JjMDhhMzFkMzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf3tXSHhwPckSo0sva/vCGLBLcty PBHoYvHmTaJva/PsLg7qVwvQKZTsNDcbjmv0M97NSz1wyyHl58yVdfjILgsha6dC sBVmvxzyXuN4md6xMoLkV3rYqZ3Tgs9VFWStA0HdNq4jr1vU/e4ibQ8nmi7JAMZg 8W88I/PltnmfC2GBuI5VQNepKSYH342oWZKTEwIu+Ain7fJREmFhZoIz54MKZUnX ROE/spntrnipCBZZi4AK/d4RhblMuLXBsA40/JIOkHvrgMx67OWzzoXyYA2o7MFu 4C+5EpgT2cY/NxYU/74xGKX3ykQ+AMFomN5G04uKIJQM4d59bhbKXDvt5QIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFLyYkUxHerU4mQ5vyUe6y8CKMdM8MB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdkppUlRFZDZ0VGlaRG1fSlI3ckx3SW94MHp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEnRfgMA4E AgACMAgDBgAqDrvAgDANBgkqhkiG9w0BAQsFAAOCAQEAYNqh8USq1mT3Oh3Iom2U HvVqkgIZzlND3HecKT/WYcBQluAUU7GTfQzoXaXTNKzjTsutO8iGyK8ae1/pWaT5 9B4hDIHmVzHeDScNetbghEdKNYxcIWQ6fDqY/FMr9jHGNI+DVa7dQxcB/U5VjDrr zF28vdP4wls+otV0lmzNypcDG7+xZu1BspJPFjr9GX6hoVZoNWh8BvKxP2HWd/JG lQw0rui/QCeXzbmbeqLxQxuLAXpBMj0HPQ8YMKWUKKVPGR8cG4FybkJK+EV8/dcb zDP+3iuBltzsz/RlSD1GjcokkKAkW79CywVUSjzGthPeSSp1cWT4VkxNGB+c70KG Kw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:10:30 2026 by rpki-client