This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/Va_MfV2xGChXe2w-ujnKmKCX7rA.roa File: Va_MfV2xGChXe2w-ujnKmKCX7rA.roa (raw, json) Hash identifier: SUriIB/QcSARZo6IB0o6EwANvwMVBodokTc+4FO4rlk= Subject key identifier: 55:AF:CC:7D:5D:B1:18:28:57:7B:6C:3E:BA:39:CA:98:A0:97:EE:B0 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38C1AF217A0DEC594C67DA891EC690 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/Va_MfV2xGChXe2w-ujnKmKCX7rA.roa Signing time: Fri 02 Jan 2026 10:20:07 +0000 ROA not before: Fri 02 Jan 2026 10:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215786 IP address blocks: 2a13:a5c7:1800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c1:af:21:7a:0d:ec:59:4c:67:da:89:1e:c6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55afcc7d5db11828577b6c3eba39ca98a097eeb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:92:f7:eb:04:ca:69:88:16:de:c5:2d:4d:c0: f0:2a:15:bf:68:e3:0b:b8:db:1c:09:34:bc:26:2e: c7:0f:a5:90:ba:1f:a2:f4:39:5f:bd:1e:85:2f:97: 2a:9f:a2:d7:6a:bc:da:b5:71:fd:31:72:6e:51:04: 1c:1a:10:06:bb:14:b1:91:36:9c:df:e4:35:48:a2: 2d:57:18:db:be:6d:05:ba:d9:cf:0c:0e:b3:18:2f: 41:7a:f5:8e:ff:0f:e5:f5:d3:4e:c3:67:cb:a0:17: 21:3b:27:4f:be:54:41:71:0c:fc:46:00:21:20:46: 96:ca:2e:e6:16:14:5f:1f:11:17:5c:93:86:f0:49: 66:2c:78:23:5d:e6:0e:bf:e9:9b:21:cd:11:f5:55: e2:41:bb:6b:5f:d6:77:81:4d:9c:9b:7d:e4:5b:d1: 91:8a:bd:02:51:42:7a:de:11:48:f0:05:3f:e3:d5: 82:43:f7:2a:9f:f9:27:66:b3:4b:8c:71:79:22:af: 6f:9e:ad:0d:af:77:59:32:40:1d:2f:16:a2:67:85: 2c:44:6e:1a:45:89:63:9d:3d:6b:be:29:60:e4:17: ff:91:c6:8a:78:5e:16:83:3d:c6:f5:5d:e9:ca:57: b6:01:51:12:b7:66:3c:07:ad:90:4a:21:e7:2d:44: 6f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AF:CC:7D:5D:B1:18:28:57:7B:6C:3E:BA:39:CA:98:A0:97:EE:B0 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/Va_MfV2xGChXe2w-ujnKmKCX7rA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:1800::/40 Signature Algorithm: sha256WithRSAEncryption 45:e3:bb:b0:92:61:cf:d6:75:46:5a:94:b7:87:f7:fd:19:89: 86:4b:27:9b:85:04:c9:ec:a3:f9:c5:83:19:73:38:cc:28:99: 1f:4d:e9:5f:15:fb:ea:05:9c:bc:a7:0f:4c:44:d3:ee:39:fe: 93:bc:d9:d7:e7:19:c1:20:81:05:ba:b8:50:e5:43:c0:4c:ef: 42:2c:21:b4:01:44:5f:68:59:01:b4:a0:d9:c4:15:cf:2e:d2: 30:7b:75:1a:64:9c:13:29:81:62:ef:3d:6f:ca:63:b0:aa:43: 96:b6:60:1e:e4:ef:65:3b:be:ff:ce:51:2a:25:32:e5:4c:70: b2:50:de:3e:9b:28:4f:44:a5:59:60:5a:d1:13:23:a8:03:15: 3d:dd:2f:9f:aa:3e:83:4d:0c:61:37:84:d9:4f:9e:c6:84:3d: 23:9f:76:a4:d4:a3:0a:9f:da:fd:e2:83:2d:67:1b:6d:e5:96: 06:b3:ce:a2:eb:af:69:9e:f5:1b:69:bd:ee:46:24:cd:2e:48: 24:46:77:1b:52:9b:e3:92:cd:c6:13:b5:7a:ee:94:fb:e4:03: b6:5d:e3:3d:5f:9a:07:72:0c:a5:6e:af:a2:ff:68:32:e6:75: 04:9a:7c:b2:44:4c:af:a6:47:31:21:2e:b5:39:bf:46:af:dd: 0c:9c:d1:23 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OMGvIXoN7FlMZ9qJHsaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWFmY2M3ZDVkYjExODI4NTc3YjZjM2ViYTM5Y2E5OGEwOTdlZWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05L36wTKaYgW3sUtTcDwKhW/aOML uNscCTS8Ji7HD6WQuh+i9DlfvR6FL5cqn6LXarzatXH9MXJuUQQcGhAGuxSxkTac 3+Q1SKItVxjbvm0FutnPDA6zGC9BevWO/w/l9dNOw2fLoBchOydPvlRBcQz8RgAh IEaWyi7mFhRfHxEXXJOG8ElmLHgjXeYOv+mbIc0R9VXiQbtrX9Z3gU2cm33kW9GR ir0CUUJ63hFI8AU/49WCQ/cqn/knZrNLjHF5Iq9vnq0Nr3dZMkAdLxaiZ4UsRG4a RYljnT1rvilg5Bf/kcaKeF4Wgz3G9V3pyle2AVESt2Y8B62QSiHnLURvlQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFWvzH1dsRgoV3tsPro5ypigl+6wMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvVmFfTWZWMnhHQ2hYZTJ3LXVqbkttS0NYN3JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxxgw DQYJKoZIhvcNAQELBQADggEBAEXju7CSYc/WdUZalLeH9/0ZiYZLJ5uFBMnso/nF gxlzOMwomR9N6V8V++oFnLynD0xE0+45/pO82dfnGcEggQW6uFDlQ8BM70IsIbQB RF9oWQG0oNnEFc8u0jB7dRpknBMpgWLvPW/KY7CqQ5a2YB7k72U7vv/OUSolMuVM cLJQ3j6bKE9EpVlgWtETI6gDFT3dL5+qPoNNDGE3hNlPnsaEPSOfdqTUowqf2v3i gy1nG23llgazzqLrr2me9Rtpve5GJM0uSCRGdxtSm+OSzcYTtXrulPvkA7Zd4z1f mgdyDKVur6L/aDLmdQSafLJETK+mRzEhLrU5v0av3Qyc0SM= -----END CERTIFICATE-----Generated at Mon Jan 5 03:47:15 2026 by rpki-client