This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Vcg0WJAJXQ3ujqUZVJVG2w10kbM.roa File: Vcg0WJAJXQ3ujqUZVJVG2w10kbM.roa (raw, json) Hash identifier: 2rEWfFlvuQ1YxSeLQAAYJ6cLhQDeqoo7duxOmBp4UWE= Subject key identifier: 55:C8:34:58:90:09:5D:0D:EE:8E:A5:19:54:95:46:DB:0D:74:91:B3 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA71C6B155F04ACBF20CABA8338C197 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Vcg0WJAJXQ3ujqUZVJVG2w10kbM.roa Signing time: Fri 02 Jan 2026 12:20:39 +0000 ROA not before: Fri 02 Jan 2026 12:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399646 IP address blocks: 2a0c:9a40:908f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1c:6b:15:5f:04:ac:bf:20:ca:ba:83:38:c1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55c8345890095d0dee8ea519549546db0d7491b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f2:37:f1:e3:7c:d1:db:c7:9f:4b:45:02:dd: 4e:3d:9b:32:35:38:63:9a:07:99:b5:68:70:49:56: 2b:27:0e:6f:ea:fe:28:48:58:0a:25:e7:bc:6b:24: 4e:8f:84:01:72:cc:ae:8e:a8:bb:64:5e:52:2a:4c: b7:d9:f1:a1:d9:85:ac:f1:a3:3b:b0:3a:ad:df:82: 0a:33:75:66:a9:ea:52:e8:53:4f:a2:54:80:ff:53: 45:a7:b6:f6:2a:eb:22:45:73:8e:fa:15:6f:6d:a6: d2:97:36:7b:d4:2b:f8:05:95:a7:27:83:5a:45:55: 9c:0d:b8:99:e0:e8:8e:82:ae:69:85:18:33:47:0c: f2:65:33:7d:ae:5e:92:15:d1:91:b4:43:1c:ea:e9: 7a:7b:9c:17:04:cf:4b:df:d1:f9:1e:85:43:01:c0: 31:4e:91:42:04:0f:6c:51:36:4b:3e:65:b8:be:d5: 76:79:67:30:59:8e:00:ba:8b:ad:96:b3:53:59:f3: 1e:c0:14:1a:ed:28:31:d5:31:19:da:37:27:c8:5b: 4b:5d:cc:83:23:36:58:df:60:40:3c:54:d4:28:23: 42:07:0a:75:cf:c7:88:c5:b0:77:21:68:4b:c7:e4: a5:58:00:c6:18:31:28:30:4c:78:fd:65:7a:44:b1: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C8:34:58:90:09:5D:0D:EE:8E:A5:19:54:95:46:DB:0D:74:91:B3 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Vcg0WJAJXQ3ujqUZVJVG2w10kbM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:908f::/48 Signature Algorithm: sha256WithRSAEncryption a7:9a:7a:1e:ae:78:12:71:96:31:1f:c0:fb:8d:c7:fb:e6:eb: 52:d4:1b:38:e2:99:1f:af:b9:a1:3c:bc:c1:ff:c0:f3:4e:33: 26:cc:09:f3:24:85:07:11:9a:e2:d3:3c:a0:82:1a:66:4c:07: 60:dd:e1:3f:75:64:7f:f6:39:df:53:4f:5e:18:3d:8c:fc:93: 1a:cb:36:ae:8b:bd:fc:7a:5b:ed:6a:80:09:a6:8a:81:17:28: b9:3d:0b:65:16:2f:30:61:90:dd:4b:b4:b2:29:ed:74:b2:55: 98:96:22:c7:2c:8c:fc:87:77:09:f3:39:d9:c8:4c:7a:2e:98: 64:e7:07:67:b1:74:b5:41:41:36:c0:44:79:17:c7:6b:6f:37: 26:66:2a:69:71:9e:a3:3a:58:1c:be:ce:8c:1d:aa:9c:1c:94: ef:61:6c:84:ac:2c:d2:04:78:d8:da:f9:fb:17:23:4e:b3:af: d7:e4:53:29:6e:43:79:88:40:7e:2c:20:6b:0d:b9:1d:e3:65: 30:59:e3:0e:95:40:6e:c4:9f:48:de:83:69:7a:86:01:b5:c0: 0a:fc:c0:68:53:62:bb:65:d5:3e:90:d5:87:7f:05:e2:82:6b: 95:6d:bb:c2:09:39:e4:21:29:90:c0:40:4a:ac:97:ae:9f:0a: 6d:a0:6c:33 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxxrFV8ErL8gyrqDOMGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWM4MzQ1ODkwMDk1ZDBkZWU4ZWE1MTk1NDk1NDZkYjBkNzQ5MWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PI38eN80dvHn0tFAt1OPZsyNThj mgeZtWhwSVYrJw5v6v4oSFgKJee8ayROj4QBcsyujqi7ZF5SKky32fGh2YWs8aM7 sDqt34IKM3VmqepS6FNPolSA/1NFp7b2KusiRXOO+hVvbabSlzZ71Cv4BZWnJ4Na RVWcDbiZ4OiOgq5phRgzRwzyZTN9rl6SFdGRtEMc6ul6e5wXBM9L39H5HoVDAcAx TpFCBA9sUTZLPmW4vtV2eWcwWY4AuoutlrNTWfMewBQa7Sgx1TEZ2jcnyFtLXcyD IzZY32BAPFTUKCNCBwp1z8eIxbB3IWhLx+SlWADGGDEoMEx4/WV6RLG0pQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFXINFiQCV0N7o6lGVSVRtsNdJGzMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvVmNnMFdKQUpYUTN1anFVWlZKVkcydzEwa2JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQJCP MA0GCSqGSIb3DQEBCwUAA4IBAQCnmnoerngScZYxH8D7jcf75utS1Bs44pkfr7mh PLzB/8DzTjMmzAnzJIUHEZri0zygghpmTAdg3eE/dWR/9jnfU09eGD2M/JMayzau i738elvtaoAJpoqBFyi5PQtlFi8wYZDdS7SyKe10slWYliLHLIz8h3cJ8znZyEx6 Lphk5wdnsXS1QUE2wER5F8drbzcmZippcZ6jOlgcvs6MHaqcHJTvYWyErCzSBHjY 2vn7FyNOs6/X5FMpbkN5iEB+LCBrDbkd42UwWeMOlUBuxJ9I3oNpeoYBtcAK/MBo U2K7ZdU+kNWHfwXigmuVbbvCCTnkISmQwEBKrJeunwptoGwz -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:13 2026 by rpki-client