This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/rvT9ixLVhFvZilaGHVrnKnKLHi0.roa File: rvT9ixLVhFvZilaGHVrnKnKLHi0.roa (raw, json) Hash identifier: VJqU7a8hWI0u33FjmdulQyVd+Hd013Ix5KpxqBb6mxk= Subject key identifier: AE:F4:FD:8B:12:D5:84:5B:D9:8A:56:86:1D:5A:E7:2A:72:8B:1E:2D Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0 Certificate serial: 019B7DCB446B7DF5DB76007286F302488852 Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/rvT9ixLVhFvZilaGHVrnKnKLHi0.roa Signing time: Fri 02 Jan 2026 08:20:31 +0000 ROA not before: Fri 02 Jan 2026 08:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 46.173.64.0/20 maxlen: 20 46.173.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 08:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:44:6b:7d:f5:db:76:00:72:86:f3:02:48:88:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0 Validity Not Before: Jan 2 08:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aef4fd8b12d5845bd98a56861d5ae72a728b1e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2f:33:30:79:61:53:fc:19:ed:2b:66:a6:15: ba:d8:9e:41:b0:86:a5:15:db:45:ad:03:a6:85:b8: 78:bb:cf:6d:35:e7:55:27:d1:d5:69:60:60:b6:4b: 01:ac:80:5d:25:2a:d9:ea:f3:00:8c:2e:e2:b8:5c: a3:20:41:2d:22:7e:08:f6:b7:23:7e:9a:1d:30:51: ec:94:c6:22:a2:6b:1b:81:5c:b4:08:62:c5:ea:08: 28:35:87:01:23:0c:01:f2:33:6e:f1:58:d8:aa:09: e9:ca:98:39:47:be:5f:b9:27:4a:42:e6:d0:80:9f: ef:92:dd:78:6b:9e:37:af:df:2a:ea:c8:9f:2d:f1: 48:40:a0:87:7c:52:e0:83:15:9d:01:9b:45:20:e6: bb:9e:81:17:4f:82:99:32:a2:85:11:85:60:e0:38: ee:25:70:72:e4:14:bc:34:36:40:c4:2f:ac:a3:f7: 30:15:2c:55:a6:21:55:c8:bf:7c:b7:2f:39:0e:64: b1:3e:96:6b:fa:ea:af:9d:a5:7a:4e:ac:2e:ea:70: 6d:ef:e5:dd:cc:d2:db:2a:13:8b:f0:db:42:ad:20: 14:ce:e4:cc:60:36:b2:7d:7f:a2:1f:1e:3e:a3:f2: 99:11:54:fb:e5:18:56:d0:d3:d9:a0:8f:dd:c6:81: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F4:FD:8B:12:D5:84:5B:D9:8A:56:86:1D:5A:E7:2A:72:8B:1E:2D X509v3 Authority Key Identifier: keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/rvT9ixLVhFvZilaGHVrnKnKLHi0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.173.64.0/19 Signature Algorithm: sha256WithRSAEncryption 77:49:05:c2:24:c6:d5:65:c7:8f:65:9b:4a:78:11:c8:41:2c: f1:1a:f5:26:e5:38:7a:36:60:88:00:22:af:d0:d1:f6:7f:d2: 62:e3:5f:3b:ac:16:b7:f0:3f:b4:15:d2:3a:90:80:0e:95:5b: ca:81:c9:bc:83:cc:a4:ab:e8:53:7d:4e:9d:95:db:70:55:f4: 06:db:e6:d1:60:00:cd:4c:37:cb:1b:66:75:de:c1:8e:b2:19: 66:ef:4d:be:71:72:df:05:e8:3f:4f:cd:c7:48:0b:1a:ae:1c: 81:cd:12:76:81:2a:24:3e:ff:1f:11:17:72:81:db:da:e3:1b: f3:2a:c6:c0:b2:c9:97:e4:0a:11:f4:a7:e5:a7:09:65:2b:8a: 25:ff:14:13:33:96:19:3a:ed:cc:03:fa:55:e1:f5:1d:aa:20: 24:bb:c7:5e:fa:b0:0b:81:ce:be:97:db:63:22:ee:84:fe:e9: 45:a5:17:1d:4b:6a:67:46:71:e3:2b:09:c2:60:aa:fc:55:98: 02:6a:71:97:87:b9:53:22:4d:de:8b:7b:5f:f5:53:32:26:f1: 64:2c:49:ea:eb:c1:5d:95:b0:11:a3:dc:95:fa:52:e3:35:74: fb:f7:39:54:18:d3:1a:11:c2:28:16:39:6e:99:f7:88:2e:4a: ea:24:ac:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0RrffXbdgByhvMCSIhSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYWM4ZjMzZGI0YTRhMDE3NWQ4ZjhlYTdjYTc0NzUwN2U3 ZTgxZTAwHhcNMjYwMTAyMDgyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWY0ZmQ4YjEyZDU4NDViZDk4YTU2ODYxZDVhZTcyYTcyOGIxZTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy8zMHlhU/wZ7StmphW62J5BsIal FdtFrQOmhbh4u89tNedVJ9HVaWBgtksBrIBdJSrZ6vMAjC7iuFyjIEEtIn4I9rcj fpodMFHslMYiomsbgVy0CGLF6ggoNYcBIwwB8jNu8VjYqgnpypg5R75fuSdKQubQ gJ/vkt14a543r98q6sifLfFIQKCHfFLggxWdAZtFIOa7noEXT4KZMqKFEYVg4Dju JXBy5BS8NDZAxC+so/cwFSxVpiFVyL98ty85DmSxPpZr+uqvnaV6Tqwu6nBt7+Xd zNLbKhOL8NtCrSAUzuTMYDayfX+iHx4+o/KZEVT75RhW0NPZoI/dxoGwWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK70/YsS1YRb2YpWhh1a5ypyix4tMB8GA1UdIwQY MBaAFL2sjzPbSkoBddj46nynR1B+foHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTIt MjUwYmFmNzhlMzBlLzEvcnZUOWl4TFZoRnZaaWxhR0hWcm5LbktMSGkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTItMjUwYmFmNzhlMzBl LzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLq1AMA0G CSqGSIb3DQEBCwUAA4IBAQB3SQXCJMbVZcePZZtKeBHIQSzxGvUm5Th6NmCIACKv 0NH2f9Ji4187rBa38D+0FdI6kIAOlVvKgcm8g8ykq+hTfU6dldtwVfQG2+bRYADN TDfLG2Z13sGOshlm702+cXLfBeg/T83HSAsarhyBzRJ2gSokPv8fERdygdva4xvz KsbAssmX5AoR9KflpwllK4ol/xQTM5YZOu3MA/pV4fUdqiAku8de+rALgc6+l9tj Iu6E/ulFpRcdS2pnRnHjKwnCYKr8VZgCanGXh7lTIk3ei3tf9VMyJvFkLEnq68Fd lbARo9yV+lLjNXT79zlUGNMaEcIoFjlumfeILkrqJKxy -----END CERTIFICATE-----Generated at Fri Jan 2 16:26:26 2026 by rpki-client