This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/v_QVsHcgrtNdRvUzZHUMbVBLqWQ.roa File: v_QVsHcgrtNdRvUzZHUMbVBLqWQ.roa (raw, json) Hash identifier: OPqb//I3XcXtiQdXp1SgTW0v2Oirred4OSIVhm80n00= Subject key identifier: BF:F4:15:B0:77:20:AE:D3:5D:46:F5:33:64:75:0C:6D:50:4B:A9:64 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38BE222BCBA3B0D88CA3D4EC6FA290 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/v_QVsHcgrtNdRvUzZHUMbVBLqWQ.roa Signing time: Fri 02 Jan 2026 10:20:06 +0000 ROA not before: Fri 02 Jan 2026 10:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214655 IP address blocks: 2a13:a5c7:1900::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:be:22:2b:cb:a3:b0:d8:8c:a3:d4:ec:6f:a2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bff415b07720aed35d46f53364750c6d504ba964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:46:65:96:4c:0d:2a:b6:5b:9b:2c:28:be:cb: b0:68:7c:96:6b:63:aa:ec:e2:a9:fe:9a:d0:cc:f2: de:00:61:e1:5d:91:61:aa:df:9c:d2:81:5d:ef:7c: f2:28:cd:51:51:da:39:19:0d:80:f6:51:5d:16:e4: fa:65:b3:13:13:e5:6e:da:91:2f:ed:96:9a:00:53: e4:bf:3a:67:f1:8b:8d:fe:90:49:e8:5b:07:59:d4: e7:be:ee:fd:ec:f6:cb:4f:10:43:5f:6d:30:f9:cf: a6:47:05:e8:24:87:e6:d7:49:59:0e:1c:10:68:1b: 13:3a:d0:da:3b:c7:0a:0b:f9:a3:82:db:9f:e2:25: 93:5b:e6:b7:ef:8d:9e:d9:d3:66:05:0f:16:55:3b: 48:88:06:3d:90:d9:a4:7c:d5:52:97:d4:6b:71:07: 8f:2e:19:ee:bf:80:36:9e:c6:0e:cb:33:5c:9b:4f: e1:ac:ce:0b:07:c0:f6:87:e7:c0:a0:b4:a2:97:2c: 98:a9:58:a0:ad:20:4c:b8:6d:e6:d1:45:8b:cd:d7: 2e:14:3b:de:1d:fc:28:57:89:18:ec:69:2e:6a:5c: de:2a:b6:10:b9:9d:52:07:7d:ab:cf:71:7b:d4:39: 1b:37:e5:7e:be:f4:75:45:22:41:0c:a6:b2:97:64: 02:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F4:15:B0:77:20:AE:D3:5D:46:F5:33:64:75:0C:6D:50:4B:A9:64 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/v_QVsHcgrtNdRvUzZHUMbVBLqWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:1900::/40 Signature Algorithm: sha256WithRSAEncryption 8d:6c:23:1d:48:19:0d:42:c1:30:ed:34:f9:7f:33:4f:cb:d1: 58:fb:73:d5:27:17:3d:b3:5c:4c:82:42:eb:d2:28:70:3e:87: 8c:56:93:fc:92:71:6f:3d:18:c1:65:39:0e:8d:33:56:b8:a0: 83:77:ad:f2:14:b1:4d:4a:6d:78:b7:b4:71:27:a3:75:6d:20: 06:8e:70:37:95:f3:d3:1b:aa:f6:cd:2a:73:4e:b4:0c:39:ce: 92:08:bd:ce:79:7e:c4:64:c4:35:e6:f4:ff:a2:5d:2c:3e:26: a7:da:a3:90:6b:38:c2:35:89:fb:1f:8c:f1:f3:65:cf:69:f2: 04:26:d8:ab:dd:bf:ea:50:ee:0a:49:9e:21:cd:71:a8:66:05: 63:c8:fa:3a:f4:b3:3a:cd:bc:df:09:78:8c:aa:f1:4b:2a:2c: 7a:a5:99:c6:c4:ae:b0:68:5a:9b:23:3f:c7:aa:a1:92:3c:e4: 4f:59:7e:a0:71:fd:82:ae:25:05:ec:70:e9:af:14:8c:96:f6: dc:11:e4:a8:11:1b:62:90:9d:48:69:9a:b1:43:cf:44:89:7b: 8c:22:46:3f:5a:bf:3f:e7:b6:95:c1:8e:67:8a:3c:b3:43:36: 35:e0:5e:6e:c8:79:9f:81:6f:30:af:bf:dc:69:0f:5c:40:91: c1:bd:43:bf -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OL4iK8ujsNiMo9Tsb6KQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmY0MTViMDc3MjBhZWQzNWQ0NmY1MzM2NDc1MGM2ZDUwNGJhOTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEZllkwNKrZbmywovsuwaHyWa2Oq 7OKp/prQzPLeAGHhXZFhqt+c0oFd73zyKM1RUdo5GQ2A9lFdFuT6ZbMTE+Vu2pEv 7ZaaAFPkvzpn8YuN/pBJ6FsHWdTnvu797PbLTxBDX20w+c+mRwXoJIfm10lZDhwQ aBsTOtDaO8cKC/mjgtuf4iWTW+a3742e2dNmBQ8WVTtIiAY9kNmkfNVSl9RrcQeP Lhnuv4A2nsYOyzNcm0/hrM4LB8D2h+fAoLSilyyYqVigrSBMuG3m0UWLzdcuFDve HfwoV4kY7GkualzeKrYQuZ1SB32rz3F71DkbN+V+vvR1RSJBDKayl2QCxQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFL/0FbB3IK7TXUb1M2R1DG1QS6lkMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvdl9RVnNIY2dydE5kUnZVelpIVU1iVkJMcVdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxxkw DQYJKoZIhvcNAQELBQADggEBAI1sIx1IGQ1CwTDtNPl/M0/L0Vj7c9UnFz2zXEyC QuvSKHA+h4xWk/yScW89GMFlOQ6NM1a4oIN3rfIUsU1KbXi3tHEno3VtIAaOcDeV 89MbqvbNKnNOtAw5zpIIvc55fsRkxDXm9P+iXSw+Jqfao5BrOMI1ifsfjPHzZc9p 8gQm2Kvdv+pQ7gpJniHNcahmBWPI+jr0szrNvN8JeIyq8UsqLHqlmcbErrBoWpsj P8eqoZI85E9ZfqBx/YKuJQXscOmvFIyW9twR5KgRG2KQnUhpmrFDz0SJe4wiRj9a vz/ntpXBjmeKPLNDNjXgXm7IeZ+BbzCvv9xpD1xAkcG9Q78= -----END CERTIFICATE-----Generated at Mon Jan 5 03:49:57 2026 by rpki-client