This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/VgvXtd9BaySK0ysVplVgpTAeH9U.roa File: VgvXtd9BaySK0ysVplVgpTAeH9U.roa (raw, json) Hash identifier: dVUZ0Dbu8vblcVhCd2TsccUEvCfVb7zJ+f8eZfMhHgE= Subject key identifier: 56:0B:D7:B5:DF:41:6B:24:8A:D3:2B:15:A6:55:60:A5:30:1E:1F:D5 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1B786302BC224296D135A6741ABDC Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/VgvXtd9BaySK0ysVplVgpTAeH9U.roa Signing time: Fri 02 Jan 2026 18:21:46 +0000 ROA not before: Fri 02 Jan 2026 18:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199580 IP address blocks: 2a03:5840:f4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b7:86:30:2b:c2:24:29:6d:13:5a:67:41:ab:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=560bd7b5df416b248ad32b15a65560a5301e1fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:79:cc:66:f4:a8:8e:2c:21:3b:aa:2c:7a:0f: ae:c9:cc:da:4a:6a:26:e2:fe:56:ad:63:85:59:a1: a6:53:f1:ca:32:af:7d:46:35:bc:c6:34:6f:78:fd: 6f:b2:e7:28:c9:28:80:4e:3b:98:e1:39:7a:af:05: d9:e3:be:ed:a8:d4:4d:1a:5d:6a:71:ae:fd:23:6a: 21:9b:da:91:b7:5c:fc:04:a3:b9:54:e7:b4:34:01: a4:63:cb:f0:c8:6c:a6:c4:14:83:83:dd:98:61:01: c5:05:a2:94:4a:a0:4b:17:66:95:d2:5b:8b:2f:2d: 26:4e:e1:2a:7e:76:b9:71:94:49:03:76:07:d2:af: 99:c5:f9:5b:11:34:12:7d:12:03:35:83:f4:96:4e: b6:20:50:a9:86:7a:23:48:98:f0:a7:a5:1b:69:24: 7e:9b:61:fd:14:97:88:5a:86:44:f4:0d:7f:42:a3: 05:1f:3e:b7:ab:e4:00:85:43:2f:e4:69:0b:f8:58: 06:69:b4:12:a5:54:9f:3e:6f:72:d5:2e:24:07:c7: d4:d3:20:f7:a7:df:ef:46:65:81:cb:1e:20:0f:8b: b4:34:5a:86:fc:f5:0b:d8:58:b5:4a:c1:a0:7a:af: a4:18:c7:34:57:fe:67:19:aa:25:39:24:32:b7:c2: 14:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0B:D7:B5:DF:41:6B:24:8A:D3:2B:15:A6:55:60:A5:30:1E:1F:D5 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/VgvXtd9BaySK0ysVplVgpTAeH9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:f4::/48 Signature Algorithm: sha256WithRSAEncryption b1:8a:33:38:56:b8:d7:7e:71:57:3e:e9:58:6a:6a:f0:8a:45: 1c:e1:22:b1:6d:5c:0d:26:40:f4:04:43:18:dd:d4:7f:24:b5: 9b:1a:5a:19:cb:da:79:71:9f:aa:aa:b6:5b:bd:b7:19:87:7f: a5:5f:af:4e:21:d6:96:fc:70:5e:da:45:f6:0c:ca:b8:1e:d6: 03:bc:82:31:0e:16:d6:5e:c3:4b:6b:44:5a:e3:92:95:96:53: 95:c3:78:28:fc:5e:85:b1:b9:ec:6d:c4:1a:c2:dc:f4:39:d7: 6a:b2:19:ab:b0:ce:88:81:8c:c1:38:f9:34:0d:51:8d:fc:94: 3b:4c:15:b7:f8:37:22:86:24:d4:98:ee:c5:17:ac:02:4f:34: 43:64:94:e7:85:ef:cf:f3:59:fc:07:e4:7d:c2:27:71:bb:31: 71:c3:7a:22:b8:52:b7:73:68:21:00:8f:db:4a:98:4e:ae:b5: 62:fb:8e:07:fe:ba:57:b5:89:9f:35:17:bf:12:e2:49:aa:c8: 3e:69:65:bd:ef:2f:42:73:18:ac:a0:c4:d3:00:32:00:17:17: e8:09:ce:52:1e:e9:c4:d7:d4:57:5b:07:8d:13:5d:da:52:d1: 60:26:c2:13:48:a9:14:b0:1d:f8:25:3d:84:07:72:02:67:72: c9:d0:ae:f6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8beGMCvCJCltE1pnQavcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjBiZDdiNWRmNDE2YjI0OGFkMzJiMTVhNjU1NjBhNTMwMWUxZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXnMZvSojiwhO6oseg+uyczaSmom 4v5WrWOFWaGmU/HKMq99RjW8xjRveP1vsucoySiATjuY4Tl6rwXZ477tqNRNGl1q ca79I2ohm9qRt1z8BKO5VOe0NAGkY8vwyGymxBSDg92YYQHFBaKUSqBLF2aV0luL Ly0mTuEqfna5cZRJA3YH0q+ZxflbETQSfRIDNYP0lk62IFCphnojSJjwp6UbaSR+ m2H9FJeIWoZE9A1/QqMFHz63q+QAhUMv5GkL+FgGabQSpVSfPm9y1S4kB8fU0yD3 p9/vRmWByx4gD4u0NFqG/PUL2Fi1SsGgeq+kGMc0V/5nGaolOSQyt8IUbQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFYL17XfQWskitMrFaZVYKUwHh/VMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvVmd2WHRkOUJheVNLMHlzVnBsVmdwVEFlSDlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAD0 MA0GCSqGSIb3DQEBCwUAA4IBAQCxijM4VrjXfnFXPulYamrwikUc4SKxbVwNJkD0 BEMY3dR/JLWbGloZy9p5cZ+qqrZbvbcZh3+lX69OIdaW/HBe2kX2DMq4HtYDvIIx DhbWXsNLa0Ra45KVllOVw3go/F6FsbnsbcQawtz0OddqshmrsM6IgYzBOPk0DVGN /JQ7TBW3+DcihiTUmO7FF6wCTzRDZJTnhe/P81n8B+R9widxuzFxw3oiuFK3c2gh AI/bSphOrrVi+44H/rpXtYmfNRe/EuJJqsg+aWW97y9CcxisoMTTADIAFxfoCc5S HunE19RXWweNE13aUtFgJsITSKkUsB34JT2EB3ICZ3LJ0K72 -----END CERTIFICATE-----Generated at Fri Jan 23 15:22:27 2026 by rpki-client