This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/wV3RZHUZxTmDpkws_j0dB6wmvV0.roa File: wV3RZHUZxTmDpkws_j0dB6wmvV0.roa (raw, json) Hash identifier: 46jbtO1joeShuyzvvWhT+82K4uiYD5eZiKy/x8muQf8= Subject key identifier: C1:5D:D1:64:75:19:C5:39:83:A6:4C:2C:FE:3D:1D:07:AC:26:BD:5D Certificate issuer: /CN=b7153d151db7afeebe043be45f2d6fd407fc5dd4 Certificate serial: 019BBE30F8D5463A2776BBBE29D6F5664D18 Authority key identifier: B7:15:3D:15:1D:B7:AF:EE:BE:04:3B:E4:5F:2D:6F:D4:07:FC:5D:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/wV3RZHUZxTmDpkws_j0dB6wmvV0.roa Signing time: Wed 14 Jan 2026 20:27:18 +0000 ROA not before: Wed 14 Jan 2026 20:27:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204160 IP address blocks: 2a0f:9040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:be:30:f8:d5:46:3a:27:76:bb:be:29:d6:f5:66:4d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7153d151db7afeebe043be45f2d6fd407fc5dd4 Validity Not Before: Jan 14 20:27:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c15dd1647519c53983a64c2cfe3d1d07ac26bd5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7d:88:34:76:69:d8:17:8e:8f:30:c0:0c:63: f3:60:0f:d0:ff:f5:40:e7:c7:89:97:0d:31:32:b6: ee:05:eb:5f:50:bc:11:95:95:e2:a5:33:ad:60:2c: db:93:c1:24:cc:e4:54:81:05:b9:d8:e3:a7:6c:90: 81:b1:7c:9c:60:ae:bd:fd:41:a4:8a:23:5e:9e:1f: 3f:27:6f:90:ee:dc:c3:e5:8e:08:97:b9:f2:73:b2: 7c:2f:98:3c:ed:5f:a5:0a:cb:16:e9:b2:9e:9b:66: 95:8e:22:3e:89:af:2c:6b:d7:f5:3c:57:d0:1d:2c: 02:21:b2:88:85:2f:1b:cd:83:b5:f4:36:83:c3:2f: b3:7e:6e:69:c8:be:09:26:f8:e8:1f:5a:e2:1d:26: a3:2a:c6:d7:93:ae:99:f9:03:ba:63:a0:02:d1:57: 43:94:be:e5:b5:9b:8f:43:47:11:d6:8f:2c:cb:33: a1:cb:fb:35:97:96:d0:43:45:de:33:25:eb:3a:81: 1a:2f:ed:00:19:86:0a:b3:15:cd:3b:03:6f:3d:ee: c3:0c:c8:c1:00:10:2b:0e:60:3e:99:17:38:35:5f: 46:76:58:44:2a:85:df:d5:17:11:0a:b8:0e:6a:1f: ac:33:d4:b0:1f:aa:bb:0a:5c:bf:31:ec:82:7d:c4: a7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5D:D1:64:75:19:C5:39:83:A6:4C:2C:FE:3D:1D:07:AC:26:BD:5D X509v3 Authority Key Identifier: keyid:B7:15:3D:15:1D:B7:AF:EE:BE:04:3B:E4:5F:2D:6F:D4:07:FC:5D:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/wV3RZHUZxTmDpkws_j0dB6wmvV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9040::/29 Signature Algorithm: sha256WithRSAEncryption c4:92:76:8b:d9:86:e2:d9:d7:aa:42:56:11:30:a5:1c:68:31: be:68:ec:7e:ac:7f:60:a1:15:22:64:8b:02:d2:34:b4:29:9c: b0:47:99:16:d5:c8:00:27:d7:73:2c:0d:f9:6c:90:2c:65:fe: 71:67:e3:08:ad:9b:1c:9e:cf:07:2b:59:5f:e7:6c:7a:27:08: a2:44:d7:c6:2e:b6:10:d1:5e:3c:31:3f:4b:33:d0:d4:78:1f: 33:1b:0b:09:ee:87:f4:18:bd:ab:98:78:55:6e:8d:e8:ca:64: 2e:f3:79:6e:b9:bd:26:36:64:74:68:62:84:3c:08:be:3c:0a: e6:ed:ee:a9:86:52:66:0a:8a:48:7e:05:53:18:94:f2:ef:4d: 29:00:2f:6e:6a:6b:1f:3a:60:a3:cc:e1:0e:f9:c5:a1:d0:70: 2d:33:bd:8f:f0:d1:ea:2c:08:32:f0:c0:81:b1:3b:9f:b7:8b: f9:ec:6b:25:f9:95:cb:c9:c5:fa:23:6a:c6:3f:66:33:32:9f: ad:88:a8:7d:c5:af:8c:0d:46:07:62:d1:cd:86:9e:74:1f:10: 77:52:df:1b:3d:d2:36:3c:62:5e:0f:89:17:05:09:3c:e1:43: 4f:ae:3b:bc:4e:be:58:7b:72:da:9c:cc:44:90:3d:33:5d:79: 3e:0f:da:81 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZu+MPjVRjondru+Kdb1Zk0YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTUzZDE1MWRiN2FmZWViZTA0M2JlNDVmMmQ2ZmQ0MDdm YzVkZDQwHhcNMjYwMTE0MjAyNzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTVkZDE2NDc1MTljNTM5ODNhNjRjMmNmZTNkMWQwN2FjMjZiZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt32INHZp2BeOjzDADGPzYA/Q//VA 58eJlw0xMrbuBetfULwRlZXipTOtYCzbk8EkzORUgQW52OOnbJCBsXycYK69/UGk iiNenh8/J2+Q7tzD5Y4Il7nyc7J8L5g87V+lCssW6bKem2aVjiI+ia8sa9f1PFfQ HSwCIbKIhS8bzYO19DaDwy+zfm5pyL4JJvjoH1riHSajKsbXk66Z+QO6Y6AC0VdD lL7ltZuPQ0cR1o8syzOhy/s1l5bQQ0XeMyXrOoEaL+0AGYYKsxXNOwNvPe7DDMjB ABArDmA+mRc4NV9GdlhEKoXf1RcRCrgOah+sM9SwH6q7Cly/MeyCfcSn6wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMFd0WR1GcU5g6ZMLP49HQesJr1dMB8GA1UdIwQY MBaAFLcVPRUdt6/uvgQ75F8tb9QH/F3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhVOUZSMjNyLTYtQkR2a1h5MXYxQWY4WGRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MThjMWYtZjhjOS00ZDg5LWI5MDct NTMxZmI5MWUzODNiLzEvd1YzUlpIVVp4VG1EcGt3c19qMGRCNndtdlYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MThjMWYtZjhjOS00ZDg5LWI5MDctNTMxZmI5MWUzODNi LzEvdHhVOUZSMjNyLTYtQkR2a1h5MXYxQWY4WGRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg+QQDAN BgkqhkiG9w0BAQsFAAOCAQEAxJJ2i9mG4tnXqkJWETClHGgxvmjsfqx/YKEVImSL AtI0tCmcsEeZFtXIACfXcywN+WyQLGX+cWfjCK2bHJ7PBytZX+dseicIokTXxi62 ENFePDE/SzPQ1HgfMxsLCe6H9Bi9q5h4VW6N6MpkLvN5brm9JjZkdGhihDwIvjwK 5u3uqYZSZgqKSH4FUxiU8u9NKQAvbmprHzpgo8zhDvnFodBwLTO9j/DR6iwIMvDA gbE7n7eL+exrJfmVy8nF+iNqxj9mMzKfrYiofcWvjA1GB2LRzYaedB8Qd1LfGz3S NjxiXg+JFwUJPOFDT647vE6+WHty2pzMRJA9M115Pg/agQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:39 2026 by rpki-client