This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/VCkp9PejXKJX1lKBEBDutAXVriI.roa File: VCkp9PejXKJX1lKBEBDutAXVriI.roa (raw, json) Hash identifier: nwUrPFtHki5WHffzDMjFGHv6nnBlacI/UKaxl8oTmGA= Subject key identifier: 54:29:29:F4:F7:A3:5C:A2:57:D6:52:81:10:10:EE:B4:05:D5:AE:22 Certificate issuer: /CN=0ba5efaa6c2bbca19fea1ffb69b2d969073b95cf Certificate serial: 019C05A4767994B53185B1ABA97BA149205A Authority key identifier: 0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/VCkp9PejXKJX1lKBEBDutAXVriI.roa Signing time: Wed 28 Jan 2026 17:26:30 +0000 ROA not before: Wed 28 Jan 2026 17:26:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205948 IP address blocks: 62.32.40.0/21 maxlen: 24 2a04:2e00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:a4:76:79:94:b5:31:85:b1:ab:a9:7b:a1:49:20:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ba5efaa6c2bbca19fea1ffb69b2d969073b95cf Validity Not Before: Jan 28 17:26:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=542929f4f7a35ca257d652811010eeb405d5ae22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:68:80:7b:b8:1f:d4:46:4a:80:2e:f3:2a: 29:e6:1b:90:e0:da:73:bc:42:9c:fd:d7:26:48:52: 4b:85:54:9a:fe:45:cb:9f:34:ec:7a:2f:95:bd:c4: 50:39:35:f2:39:de:ba:26:a5:d9:d0:70:42:5a:95: ad:30:c5:33:16:4a:1e:23:dc:0b:8d:70:0a:15:aa: dc:9a:be:50:11:79:d7:a6:14:55:aa:18:4a:08:64: 48:b2:33:ab:09:7b:4d:6f:37:82:21:99:5b:2e:6a: 71:d4:b7:a7:88:22:72:14:0b:23:cd:13:7a:cf:7d: 7d:1e:39:04:f7:a9:e5:f7:85:d6:bc:8e:45:48:87: 5b:1a:5a:c8:71:21:46:53:e7:e7:7a:2d:ad:a0:91: f1:8d:28:31:6a:55:d9:6b:fa:3f:76:fd:f7:62:f4: 57:aa:86:91:9e:fb:f0:e8:e0:64:d8:a5:5e:15:b4: 10:c9:44:5d:66:b0:39:38:6a:22:0b:8d:6c:b9:dd: 63:3c:c5:73:10:65:20:17:af:04:f8:d8:e1:03:df: fe:fd:b1:d7:11:07:23:99:69:07:9d:74:6c:8a:c8: 6a:bb:ca:57:ec:0a:8e:df:4a:1b:e0:1a:e3:60:81: 87:5d:f0:8a:68:d6:52:62:fc:95:d8:83:e8:dc:c6: b7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:29:29:F4:F7:A3:5C:A2:57:D6:52:81:10:10:EE:B4:05:D5:AE:22 X509v3 Authority Key Identifier: keyid:0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/VCkp9PejXKJX1lKBEBDutAXVriI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.32.40.0/21 IPv6: 2a04:2e00::/29 Signature Algorithm: sha256WithRSAEncryption 80:37:09:67:27:4b:85:72:bd:87:7d:ea:27:7f:95:c8:8e:98: 35:8e:d5:1f:ca:bd:95:74:b2:f3:2a:ff:08:91:91:4c:dc:30: 11:ee:31:10:f7:f2:22:94:f8:6c:d0:ba:a0:7c:67:6f:12:31: 09:30:89:38:e3:57:0c:7c:83:45:f8:63:4d:5d:7a:5a:f8:9d: 47:33:98:a6:04:8e:32:f2:22:c1:09:d1:48:44:10:15:74:76: f1:42:c5:fa:87:d3:24:9d:b3:83:1c:79:c4:33:68:ff:78:02: 48:af:04:11:60:95:f7:75:0b:b8:c7:3b:6e:ed:01:fe:ed:9f: b2:0f:57:72:06:01:49:f3:14:73:2e:b4:92:5a:ac:80:f1:05: d1:89:e3:16:e5:91:f0:19:23:2c:91:cb:a9:59:71:73:0c:b1: e3:0c:0e:48:89:f3:f3:47:6b:ca:bc:5f:0a:36:7b:f2:69:e7: b8:b2:d7:0f:e7:0b:9f:a2:ce:f4:d8:a4:9e:17:4b:9d:4d:db: 6a:0b:fb:66:0d:10:f5:41:49:44:7f:c1:68:32:7e:ef:01:9d: 77:22:66:ce:dc:79:52:5b:26:14:b6:e3:78:c6:55:c4:ba:60: 81:1c:61:d3:ac:1a:73:ca:81:84:bf:0c:69:e3:be:57:95:9d: f5:5a:63:e3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZwFpHZ5lLUxhbGrqXuhSSBaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYTVlZmFhNmMyYmJjYTE5ZmVhMWZmYjY5YjJkOTY5MDcz Yjk1Y2YwHhcNMjYwMTI4MTcyNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDI5MjlmNGY3YTM1Y2EyNTdkNjUyODExMDEwZWViNDA1ZDVhZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/9ogHu4H9RGSoAu8yop5huQ4Npz vEKc/dcmSFJLhVSa/kXLnzTsei+VvcRQOTXyOd66JqXZ0HBCWpWtMMUzFkoeI9wL jXAKFarcmr5QEXnXphRVqhhKCGRIsjOrCXtNbzeCIZlbLmpx1LeniCJyFAsjzRN6 z319HjkE96nl94XWvI5FSIdbGlrIcSFGU+fnei2toJHxjSgxalXZa/o/dv33YvRX qoaRnvvw6OBk2KVeFbQQyURdZrA5OGoiC41sud1jPMVzEGUgF68E+NjhA9/+/bHX EQcjmWkHnXRsishqu8pX7AqO30ob4BrjYIGHXfCKaNZSYvyV2IPo3Ma3owIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFQpKfT3o1yiV9ZSgRAQ7rQF1a4iMB8GA1UdIwQY MBaAFAul76psK7yhn+of+2my2WkHO5XPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZYdnFtd3J2S0dmNmhfN2FiTFphUWM3bGM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NmQ3MTgtMjUwOS00ODFhLTlmMmMt YzNjOGJiY2IzMGU4LzEvVkNrcDlQZWpYS0pYMWxLQkVCRHV0QVhWcmlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80NmQ3MTgtMjUwOS00ODFhLTlmMmMtYzNjOGJiY2IzMGU4 LzEvQzZYdnFtd3J2S0dmNmhfN2FiTFphUWM3bGM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDPiAoMA0E AgACMAcDBQMqBC4AMA0GCSqGSIb3DQEBCwUAA4IBAQCANwlnJ0uFcr2Hfeonf5XI jpg1jtUfyr2VdLLzKv8IkZFM3DAR7jEQ9/IilPhs0LqgfGdvEjEJMIk441cMfINF +GNNXXpa+J1HM5imBI4y8iLBCdFIRBAVdHbxQsX6h9MknbODHHnEM2j/eAJIrwQR YJX3dQu4xztu7QH+7Z+yD1dyBgFJ8xRzLrSSWqyA8QXRieMW5ZHwGSMskcupWXFz DLHjDA5IifPzR2vKvF8KNnvyaee4stcP5wufos702KSeF0udTdtqC/tmDRD1QUlE f8FoMn7vAZ13ImbO3HlSWyYUtuN4xlXEumCBHGHTrBpzyoGEvwxp475XlZ31WmPj -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:38 2026 by rpki-client