This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/1-VU-eTZdUUsSNJeJ18FykBvv-DY.roa File: 1-VU-eTZdUUsSNJeJ18FykBvv-DY.roa (raw, json) Hash identifier: Z8klsGuVzmWW2SLvtiCO7eRxTa6e0bWKnQSUnZwHiwA= Subject key identifier: F9:55:3E:79:36:5D:51:4B:12:34:97:89:D7:C1:72:90:1B:EF:F8:36 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F401659200A21FC97722281BB61EB Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/1-VU-eTZdUUsSNJeJ18FykBvv-DY.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15464 IP address blocks: 213.238.128.0/20 maxlen: 20 213.238.144.0/21 maxlen: 21 213.238.155.0/24 maxlen: 24 213.238.156.0/24 maxlen: 24 213.238.158.0/23 maxlen: 23 2a02:50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:40:16:59:20:0a:21:fc:97:72:22:81:bb:61:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9553e79365d514b12349789d7c172901beff836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:1b:04:8f:d2:e4:41:6b:4d:6b:4e:8f:73: 1f:03:1b:33:93:48:e7:a9:ed:aa:68:20:bd:bd:c3: 7b:31:50:11:44:68:f8:6f:48:63:d3:cd:af:df:b0: ef:21:7b:e2:99:be:d1:2e:7f:04:ed:6e:cc:5a:79: b5:98:a9:ea:da:71:1c:05:87:dd:75:d4:b8:c5:39: c9:55:ef:55:f6:c8:2e:5a:21:76:08:29:f6:da:fa: 1a:cb:5f:7c:18:58:29:9a:7a:cb:40:1f:af:fb:ba: 40:07:b0:60:0e:f2:5e:99:43:31:86:3a:ed:ed:e8: 4c:eb:2f:b2:6d:06:8e:71:e9:57:58:ff:fd:24:9d: b4:be:40:c7:3c:f8:a4:c0:88:97:0b:9a:52:cf:c4: 06:ec:48:c8:cf:39:a5:03:1a:30:d0:ef:df:10:43: c9:0d:f1:35:f9:d5:a1:fb:6c:c7:7f:04:b0:7e:41: ba:1a:80:f9:e6:22:21:80:4e:13:70:0c:f9:3f:5e: 17:cc:6c:ff:32:1c:7b:4e:98:2a:8b:c8:f1:21:11: 76:a7:b9:0b:12:2f:ca:ed:d7:8a:cd:e2:6c:aa:53: 24:3b:0a:48:b6:65:60:a9:4d:c3:74:da:99:98:67: 21:f1:64:b8:6f:db:90:d1:04:5e:12:2a:7c:22:78: 75:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:55:3E:79:36:5D:51:4B:12:34:97:89:D7:C1:72:90:1B:EF:F8:36 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/1-VU-eTZdUUsSNJeJ18FykBvv-DY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.128.0-213.238.151.255 213.238.155.0-213.238.156.255 213.238.158.0/23 IPv6: 2a02:50::/48 Signature Algorithm: sha256WithRSAEncryption 59:c4:8a:69:ac:c1:db:39:09:46:66:02:15:aa:df:ed:4e:5e: b6:48:5c:1a:5d:c5:21:07:37:89:6a:cf:c1:e5:7c:2d:74:c4: 45:34:ea:3e:5e:2e:a9:d6:1d:66:f2:3e:c3:c4:63:15:98:44: ff:73:de:12:1e:1d:52:1f:b3:31:c1:a7:9d:e0:8d:e0:9f:76: 6b:6f:9b:2c:4f:14:d7:56:44:ff:fd:7f:c3:93:f5:7c:07:e4: ee:6f:f2:a3:2b:cb:4a:33:41:22:c1:7e:eb:ef:48:bf:66:93: 03:6c:87:01:2e:35:d2:7e:b6:0a:7a:df:8d:b6:01:04:03:59: db:6b:2b:fd:6e:9e:6f:2b:c3:a5:45:f2:c0:4e:8c:04:be:9c: ca:64:d0:88:f6:c3:d2:e3:18:ba:d6:48:3f:b1:ce:d3:ca:39: 3e:d1:38:04:b4:0d:50:48:3b:d6:f9:c2:26:b9:78:a6:f7:eb: 15:b2:88:1e:8d:0d:b5:1b:6d:7f:d9:90:30:39:4a:e7:5b:6e: 71:e4:9c:e7:6e:89:59:e7:88:72:20:54:57:76:b6:c8:27:d1: 3d:75:51:44:1c:88:8b:5d:b3:2a:e1:b2:e9:5e:3f:1c:8b:54: 74:ba:90:32:71:f2:b5:c5:24:df:ad:69:f2:3a:ba:68:12:10: c5:02:f9:49 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt5f0AWWSAKIfyXciKBu2HrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTU1M2U3OTM2NWQ1MTRiMTIzNDk3ODlkN2MxNzI5MDFiZWZmODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfYbBI/S5EFrTWtOj3MfAxszk0jn qe2qaCC9vcN7MVARRGj4b0hj082v37DvIXvimb7RLn8E7W7MWnm1mKnq2nEcBYfd ddS4xTnJVe9V9sguWiF2CCn22voay198GFgpmnrLQB+v+7pAB7BgDvJemUMxhjrt 7ehM6y+ybQaOcelXWP/9JJ20vkDHPPikwIiXC5pSz8QG7EjIzzmlAxow0O/fEEPJ DfE1+dWh+2zHfwSwfkG6GoD55iIhgE4TcAz5P14XzGz/Mhx7Tpgqi8jxIRF2p7kL Ei/K7deKzeJsqlMkOwpItmVgqU3DdNqZmGch8WS4b9uQ0QReEip8Inh11QIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFPlVPnk2XVFLEjSXidfBcpAb7/g2MB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvMS1WVS1lVFpkVVVzU05KZUoxOEZ5a0J2di1EWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzAvNmQ2MWQ5LTBiZjctNDRiYi1iODBmLWNkMzE2MTVkMDFh OS8xL1ZNdmFlTEhSdGhQZlZsXzVsd0MycnVsQTNqOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBMBggrBgEFBQcBBwEB/wQ9MDswKAQCAAEwIjAMAwQH1e6A AwQD1e6QMAwDBADV7psDBADV7pwDBAHV7p4wDwQCAAIwCQMHACoCAFAAADANBgkq hkiG9w0BAQsFAAOCAQEAWcSKaazB2zkJRmYCFarf7U5etkhcGl3FIQc3iWrPweV8 LXTERTTqPl4uqdYdZvI+w8RjFZhE/3PeEh4dUh+zMcGnneCN4J92a2+bLE8U11ZE //1/w5P1fAfk7m/yoyvLSjNBIsF+6+9Iv2aTA2yHAS410n62CnrfjbYBBANZ22sr /W6ebyvDpUXywE6MBL6cymTQiPbD0uMYutZIP7HO08o5PtE4BLQNUEg71vnCJrl4 pvfrFbKIHo0NtRttf9mQMDlK51tuceSc526JWeeIciBUV3a2yCfRPXVRRByIi12z KuGy6V4/HItUdLqQMnHytcUk361p8jq6aBIQxQL5SQ== -----END CERTIFICATE-----Generated at Wed Jan 21 15:54:29 2026 by rpki-client