This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/VL_QA23kcXjw43qDzdyOWowRF_k.roa File: VL_QA23kcXjw43qDzdyOWowRF_k.roa (raw, json) Hash identifier: mHmN2HGOs2G65fMtTL5DANnb6VaYtBgl8c4wDC/6Eow= Subject key identifier: 54:BF:D0:03:6D:E4:71:78:F0:E3:7A:83:CD:DC:8E:5A:8C:11:17:F9 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E392CF80691223739A65B0AFD753860 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/VL_QA23kcXjw43qDzdyOWowRF_k.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64473 IP address blocks: 2a0c:b642:fc0::/43 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2c:f8:06:91:22:37:39:a6:5b:0a:fd:75:38:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54bfd0036de47178f0e37a83cddc8e5a8c1117f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:3b:1f:46:b3:1e:a3:2e:f5:ec:58:39:fd: b6:42:7f:9f:98:ef:25:6a:17:0b:b4:eb:73:32:a2: 94:5d:38:fe:69:39:8b:5f:8c:30:de:4a:e6:94:e7: bd:2e:a2:c9:ae:a9:d5:94:38:97:b6:ff:b5:d7:76: 56:1d:e4:35:31:90:53:df:df:0f:d8:b7:96:9d:c4: 95:d5:67:87:c1:4a:9f:0b:c5:1e:30:1d:c3:be:5c: d9:74:2f:ae:fb:ea:08:63:b1:7f:9a:e8:67:8c:90: 7c:b2:d5:32:9f:58:9f:b4:1a:63:a4:9e:e9:6b:e0: 4d:82:89:32:cb:60:08:c9:1b:f8:9e:af:cd:04:bc: 5f:75:cc:1b:be:7a:80:a4:c6:76:5a:96:c4:52:14: f3:bb:4b:62:ff:2f:f5:e4:0e:f6:fa:68:eb:09:2b: ad:ae:eb:86:89:f0:38:d5:6a:b5:b1:22:16:2e:0b: a5:1c:d1:d7:7f:7a:42:b8:6e:95:6e:1a:ec:3b:7d: d7:15:48:d4:fc:56:1c:26:97:19:44:32:a6:97:a0: ce:92:7f:97:4e:da:c6:69:7e:80:e7:be:ba:24:c1: cf:43:b2:d4:ac:ad:9c:df:47:52:90:6c:c0:54:38: 50:b5:fc:7c:ac:30:45:36:90:ff:a6:00:50:2d:8d: a0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BF:D0:03:6D:E4:71:78:F0:E3:7A:83:CD:DC:8E:5A:8C:11:17:F9 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/VL_QA23kcXjw43qDzdyOWowRF_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b642:fc0::/43 Signature Algorithm: sha256WithRSAEncryption 6d:ce:65:bc:46:77:2b:a3:f8:d8:ba:89:0e:d6:47:c9:cc:c0: a6:e1:56:50:32:c4:f7:12:3d:38:a0:c0:81:a9:3b:41:97:76: 5e:a8:c0:58:c1:29:33:0d:df:26:ad:d1:c5:b9:e7:d6:0c:de: 9f:d8:03:f6:88:f5:1d:3b:43:2f:65:b5:9d:b7:d4:36:48:ca: 19:bc:01:79:f7:1a:e0:13:5e:9b:a9:31:f8:18:80:dc:ea:08: e4:e6:49:e1:9e:a5:59:8e:5d:2f:47:45:b6:ee:5d:ac:6b:cd: 73:1d:0b:9a:15:0e:41:48:12:d2:4d:66:8c:1a:5b:f1:2e:2f: 3c:ff:89:79:3c:cb:b0:38:41:b3:65:7c:f1:07:ba:84:c7:92: c0:d3:ca:21:a1:bd:62:9e:b8:b5:83:bb:7d:5a:36:f9:8f:a0: 6c:f3:90:56:f4:3f:bd:15:c2:8f:95:5c:2b:12:fa:62:04:fc: 71:c5:af:6a:46:93:42:02:08:24:cf:25:10:f0:51:dd:10:57: e8:ee:2e:12:73:d4:f2:ff:c6:68:29:24:25:76:31:e8:c9:5c: b0:78:d6:ed:00:0e:f2:6f:62:77:5d:8c:d4:24:cd:f7:5d:f7: 07:c8:8a:76:bb:a5:06:6c:3e:68:e9:99:85:23:e2:bb:53:c0: 48:ea:e3:58 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OSz4BpEiNzmmWwr9dThgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGJmZDAwMzZkZTQ3MTc4ZjBlMzdhODNjZGRjOGU1YThjMTExN2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8Q7H0azHqMu9exYOf22Qn+fmO8l ahcLtOtzMqKUXTj+aTmLX4ww3krmlOe9LqLJrqnVlDiXtv+113ZWHeQ1MZBT398P 2LeWncSV1WeHwUqfC8UeMB3DvlzZdC+u++oIY7F/muhnjJB8stUyn1iftBpjpJ7p a+BNgokyy2AIyRv4nq/NBLxfdcwbvnqApMZ2WpbEUhTzu0ti/y/15A72+mjrCSut ruuGifA41Wq1sSIWLgulHNHXf3pCuG6VbhrsO33XFUjU/FYcJpcZRDKml6DOkn+X TtrGaX6A5766JMHPQ7LUrK2c30dSkGzAVDhQtfx8rDBFNpD/pgBQLY2g9wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFS/0ANt5HF48ON6g83cjlqMERf5MB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvVkxfUUEyM2tjWGp3NDNxRHpkeU9Xb3dSRl9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFKgy2Qg/A MA0GCSqGSIb3DQEBCwUAA4IBAQBtzmW8Rncro/jYuokO1kfJzMCm4VZQMsT3Ej04 oMCBqTtBl3ZeqMBYwSkzDd8mrdHFuefWDN6f2AP2iPUdO0MvZbWdt9Q2SMoZvAF5 9xrgE16bqTH4GIDc6gjk5knhnqVZjl0vR0W27l2sa81zHQuaFQ5BSBLSTWaMGlvx Li88/4l5PMuwOEGzZXzxB7qEx5LA08ohob1inri1g7t9Wjb5j6Bs85BW9D+9FcKP lVwrEvpiBPxxxa9qRpNCAggkzyUQ8FHdEFfo7i4Sc9Ty/8ZoKSQldjHoyVyweNbt AA7yb2J3XYzUJM33XfcHyIp2u6UGbD5o6ZmFI+K7U8BI6uNY -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:58 2026 by rpki-client