This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Va6qgIICFLDDF-ldcp5oWQQn4Vc.roa File: Va6qgIICFLDDF-ldcp5oWQQn4Vc.roa (raw, json) Hash identifier: V4RX79zYKPSWwkwL9WVK/v8sSSJ7303++Zn/yokgB8I= Subject key identifier: 55:AE:AA:80:82:02:14:B0:C3:17:E9:5D:72:9E:68:59:04:27:E1:57 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA7603F9AAC978598330A90A929131A Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Va6qgIICFLDDF-ldcp5oWQQn4Vc.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 217.28.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:60:3f:9a:ac:97:85:98:33:0a:90:a9:29:13:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55aeaa80820214b0c317e95d729e68590427e157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ff:dc:c0:11:1d:ea:ab:90:c2:14:57:c6:9d: 47:a3:b0:4c:e9:93:8d:19:55:1b:c3:8d:06:d7:a2: 7f:21:a3:6e:e6:d1:84:32:71:bf:a2:af:4b:3c:74: 5b:13:7f:50:cc:78:cd:8d:18:2a:cd:f9:57:2c:2b: 1d:8e:0e:ca:0f:a5:6e:42:b6:10:c4:99:c4:26:bf: 41:b0:8a:c7:52:6c:ee:cf:5d:ae:9c:9c:c0:c9:27: 7d:fa:f9:96:ed:16:6d:e2:e9:c5:3b:c3:82:ce:af: 52:55:96:3c:fb:98:9b:58:3b:f0:3b:89:65:c1:84: 32:3f:d6:b2:43:8b:bb:6d:e9:4c:e8:29:3a:af:20: f6:9b:2a:34:19:fd:2d:ab:a9:cc:a7:e3:f1:1d:58: 1d:0a:07:e4:86:44:8c:7e:7b:d4:95:d3:57:7b:2d: df:2e:8a:58:a0:42:bd:09:3f:9f:b6:80:24:2a:d7: 45:5d:71:c5:82:35:61:cc:b7:b3:3b:c2:51:a5:06: a9:bf:7f:f1:87:52:8a:c1:2a:c7:76:9d:96:c2:8b: b3:13:a8:06:d5:38:92:6c:c4:e0:82:2c:e7:bf:20: 0f:15:49:95:50:fe:bd:53:e8:a3:b9:6c:9a:dc:56: 15:e5:08:28:79:88:35:e6:1d:61:8f:94:bd:e5:19: d3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AE:AA:80:82:02:14:B0:C3:17:E9:5D:72:9E:68:59:04:27:E1:57 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Va6qgIICFLDDF-ldcp5oWQQn4Vc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.28.128.0/24 Signature Algorithm: sha256WithRSAEncryption 14:9a:92:21:51:17:87:bb:6a:ec:9b:2e:69:6a:35:e2:6a:8e: 05:7f:e4:19:fe:23:7d:fd:ea:76:c3:ca:d8:11:e0:55:cf:24: 83:ce:b2:4d:a4:e5:9b:78:c0:0d:18:d6:a1:fc:fb:de:f8:be: 4d:54:81:4a:cd:ea:21:de:59:f6:8b:ac:66:d8:a4:9a:47:5b: e6:ad:60:56:cd:41:8c:d3:f3:47:e3:0a:3d:21:f3:ac:c3:2b: 23:e0:46:f0:a0:18:b3:a9:c1:dc:bd:4d:25:cc:7a:d4:e5:c6: 19:4c:7e:10:8b:29:19:61:ea:eb:7d:38:5c:70:ab:d5:68:95: 5b:f5:e8:f3:ca:41:b1:39:08:45:0e:ae:5b:e4:f2:24:6b:c8: 0b:73:e0:9d:f9:58:d5:e3:2e:63:6f:fd:29:84:b4:3e:79:f4: 12:5e:47:93:14:6e:ee:90:20:43:fd:0d:58:86:6d:0d:91:ce: 00:93:13:ab:5a:36:2f:9d:b4:b0:26:a3:8f:57:31:07:b0:ad: e6:d4:9e:55:4c:1c:82:6e:7c:a5:df:b1:db:18:b9:07:eb:9a: 33:65:38:b4:77:9b:7e:50:ca:c8:e3:11:e6:2b:2b:d8:77:ed: ab:e1:8d:81:25:a8:6c:c6:79:d8:0e:9c:24:98:44:12:7a:de: 0e:ea:73:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p2A/mqyXhZgzCpCpKRMaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWFlYWE4MDgyMDIxNGIwYzMxN2U5NWQ3MjllNjg1OTA0MjdlMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3//cwBEd6quQwhRXxp1Ho7BM6ZON GVUbw40G16J/IaNu5tGEMnG/oq9LPHRbE39QzHjNjRgqzflXLCsdjg7KD6VuQrYQ xJnEJr9BsIrHUmzuz12unJzAySd9+vmW7RZt4unFO8OCzq9SVZY8+5ibWDvwO4ll wYQyP9ayQ4u7belM6Ck6ryD2myo0Gf0tq6nMp+PxHVgdCgfkhkSMfnvUldNXey3f LopYoEK9CT+ftoAkKtdFXXHFgjVhzLezO8JRpQapv3/xh1KKwSrHdp2WwouzE6gG 1TiSbMTggiznvyAPFUmVUP69U+ijuWya3FYV5QgoeYg15h1hj5S95RnTgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFWuqoCCAhSwwxfpXXKeaFkEJ+FXMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvVmE2cWdJSUNGTERERi1sZGNwNW9XUVFuNFZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RyAMA0G CSqGSIb3DQEBCwUAA4IBAQAUmpIhUReHu2rsmy5pajXiao4Ff+QZ/iN9/ep2w8rY EeBVzySDzrJNpOWbeMANGNah/Pve+L5NVIFKzeoh3ln2i6xm2KSaR1vmrWBWzUGM 0/NH4wo9IfOswysj4EbwoBizqcHcvU0lzHrU5cYZTH4QiykZYerrfThccKvVaJVb 9ejzykGxOQhFDq5b5PIka8gLc+Cd+VjV4y5jb/0phLQ+efQSXkeTFG7ukCBD/Q1Y hm0Nkc4AkxOrWjYvnbSwJqOPVzEHsK3m1J5VTByCbnyl37HbGLkH65ozZTi0d5t+ UMrI4xHmKyvYd+2r4Y2BJahsxnnYDpwkmEQSet4O6nMu -----END CERTIFICATE-----Generated at Sat Jan 3 19:00:20 2026 by rpki-client