This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/_vT8kM2AGzrayry_3t0TahKNBnk.roa File: _vT8kM2AGzrayry_3t0TahKNBnk.roa (raw, json) Hash identifier: lSMoYskLK7DW0zI+83BxsRasqcn0mI45YEPlck94n2Y= Subject key identifier: FE:F4:FC:90:CD:80:1B:3A:DA:CA:BC:BF:DE:DD:13:6A:12:8D:06:79 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F4739B0FF2EBC476DF8CFE13E3C5F Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/_vT8kM2AGzrayry_3t0TahKNBnk.roa Signing time: Thu 01 Jan 2026 12:19:02 +0000 ROA not before: Thu 01 Jan 2026 12:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60721 IP address blocks: 213.238.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:47:39:b0:ff:2e:bc:47:6d:f8:cf:e1:3e:3c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fef4fc90cd801b3adacabcbfdedd136a128d0679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8c:d2:43:7d:ee:95:3b:de:f7:12:ba:35:7e: 41:26:71:ae:16:6e:2c:81:a7:d1:fe:dc:28:69:72: 1f:ef:22:c8:cb:15:7d:b4:22:cf:d8:d0:51:7f:34: 20:6a:5f:46:05:32:db:85:1d:d2:58:1e:c6:a5:2a: bc:9d:38:d7:80:50:9f:03:31:09:1d:5f:69:25:84: ad:48:1c:aa:d1:87:59:e2:fa:da:e1:a5:0c:b5:fd: 93:5e:91:b4:09:e7:f9:83:cf:17:cc:04:90:b8:28: 65:93:18:f0:68:1b:fb:89:3c:c5:3f:8e:22:6d:08: f1:59:41:a8:5a:5a:50:6b:55:01:5a:f1:71:1c:35: ba:0d:39:80:4e:3e:84:bc:8c:39:a9:09:19:9e:c4: d4:f6:12:3f:98:a1:3c:a2:61:42:46:ab:12:6e:85: 3c:c5:a8:c7:4e:7f:6d:a8:e2:8b:8a:7e:f7:39:e6: 03:ae:30:85:17:08:82:81:79:1e:ac:0b:56:d5:44: 1a:c6:67:ff:63:67:d9:09:f4:f6:87:11:43:75:4b: 54:93:14:47:1b:78:8f:ea:9c:a9:b3:f7:91:3a:d2: 95:71:0d:54:4a:da:2c:25:3a:d3:c6:5b:29:be:07: 61:8d:de:40:20:68:46:c8:6e:ee:85:29:5a:b5:81: ee:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F4:FC:90:CD:80:1B:3A:DA:CA:BC:BF:DE:DD:13:6A:12:8D:06:79 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/_vT8kM2AGzrayry_3t0TahKNBnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.166.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:b6:8d:66:ee:57:7d:ab:93:60:dc:a1:10:72:cb:91:db:43: c6:6b:43:d2:10:27:bd:fc:f5:9e:af:20:3a:68:59:6b:3d:b2: 9b:4a:1c:13:79:3e:2f:e8:6f:a1:f5:7d:30:0c:c4:1d:ea:2f: 77:33:1d:cd:7a:0d:67:25:87:5e:12:7c:c3:b7:3b:c7:c4:5b: 93:8b:75:0e:c9:16:15:a3:25:3f:13:f0:f9:1c:8d:d6:55:d9: 16:ee:74:98:09:56:68:22:35:db:fa:3f:10:98:90:b5:e3:39: 9f:69:c8:4a:e6:e3:b0:d6:d9:b5:18:2e:13:ab:2e:d2:65:9b: c5:b2:90:71:27:4c:b3:18:c7:e1:9f:43:a2:4b:94:f8:2f:14: b5:ad:cf:47:28:bd:9d:fc:01:60:72:28:98:1e:4d:5b:53:e7: 71:85:37:11:90:47:9c:80:73:87:81:e3:9f:bf:34:f6:28:4c: 75:24:f9:c0:5b:61:33:28:fd:9d:e1:a0:c6:92:74:6f:eb:20: b0:7a:58:b5:9a:1a:6a:c5:c7:f0:cf:b6:bf:8a:68:cc:2f:13: 88:9e:73:5e:71:7a:a0:8d:89:4b:59:91:06:86:e9:3d:37:a8: fb:70:2a:ce:dc:66:f5:04:d3:fa:bd:d0:89:77:f0:5c:59:4c: 6f:9c:bd:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f0c5sP8uvEdt+M/hPjxfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWY0ZmM5MGNkODAxYjNhZGFjYWJjYmZkZWRkMTM2YTEyOGQwNjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64zSQ33ulTve9xK6NX5BJnGuFm4s gafR/twoaXIf7yLIyxV9tCLP2NBRfzQgal9GBTLbhR3SWB7GpSq8nTjXgFCfAzEJ HV9pJYStSByq0YdZ4vra4aUMtf2TXpG0Cef5g88XzASQuChlkxjwaBv7iTzFP44i bQjxWUGoWlpQa1UBWvFxHDW6DTmATj6EvIw5qQkZnsTU9hI/mKE8omFCRqsSboU8 xajHTn9tqOKLin73OeYDrjCFFwiCgXkerAtW1UQaxmf/Y2fZCfT2hxFDdUtUkxRH G3iP6pyps/eROtKVcQ1UStosJTrTxlspvgdhjd5AIGhGyG7uhSlatYHu7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP70/JDNgBs62sq8v97dE2oSjQZ5MB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvX3ZUOGtNMkFHenJheXJ5XzN0MFRhaEtOQm5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e6mMA0G CSqGSIb3DQEBCwUAA4IBAQBtto1m7ld9q5Ng3KEQcsuR20PGa0PSECe9/PWeryA6 aFlrPbKbShwTeT4v6G+h9X0wDMQd6i93Mx3Neg1nJYdeEnzDtzvHxFuTi3UOyRYV oyU/E/D5HI3WVdkW7nSYCVZoIjXb+j8QmJC14zmfachK5uOw1tm1GC4Tqy7SZZvF spBxJ0yzGMfhn0OiS5T4LxS1rc9HKL2d/AFgciiYHk1bU+dxhTcRkEecgHOHgeOf vzT2KEx1JPnAW2EzKP2d4aDGknRv6yCweli1mhpqxcfwz7a/imjMLxOInnNecXqg jYlLWZEGhuk9N6j7cCrO3Gb1BNP6vdCJd/BcWUxvnL3B -----END CERTIFICATE-----Generated at Fri Jan 2 09:02:17 2026 by rpki-client