This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/vyQV9XKLquyOTEUcjaYGj-gmJlY.roa File: vyQV9XKLquyOTEUcjaYGj-gmJlY.roa (raw, json) Hash identifier: ZxbS06oju48UIMZkoTdqvqbm+RzA9DpQpzPigYDcfuY= Subject key identifier: BF:24:15:F5:72:8B:AA:EC:8E:4C:45:1C:8D:A6:06:8F:E8:26:26:56 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38BE644C70A020DCA19D92922ECC21 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/vyQV9XKLquyOTEUcjaYGj-gmJlY.roa Signing time: Fri 02 Jan 2026 10:20:06 +0000 ROA not before: Fri 02 Jan 2026 10:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214674 IP address blocks: 2a13:a5c7:2200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:be:64:4c:70:a0:20:dc:a1:9d:92:92:2e:cc:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf2415f5728baaec8e4c451c8da6068fe8262656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b0:00:9d:c7:7b:e6:24:c1:25:27:10:ce:93: 27:f3:ce:e7:61:90:2a:37:5d:6e:7d:93:48:c4:97: 65:88:88:0c:ec:ed:86:f5:71:28:1a:94:9a:e8:dc: 20:f0:95:77:0d:e5:9d:98:ed:d8:f4:2a:1a:ad:51: 4a:af:ad:d9:a3:0b:67:af:07:92:22:05:2b:e0:9c: 7d:ee:88:69:ef:7d:e9:cf:15:2f:5d:06:07:19:62: 15:a9:9a:a3:e1:67:a9:d6:3e:9d:0f:0b:05:7f:78: 79:e9:c9:fd:1a:74:d0:fd:5d:57:5f:55:d0:08:51: 0b:52:0c:db:f2:b6:a1:33:3c:bb:d4:2e:79:8e:2a: f3:5c:85:78:03:0e:9d:3c:c9:6b:b9:b6:c1:66:fd: 09:21:1e:99:ed:ba:25:91:13:02:de:b4:92:c8:95: 94:d2:46:95:ea:1f:48:3d:0e:24:f3:73:1e:f5:ca: 4f:c4:cb:f3:8c:3b:a1:0a:8a:27:ff:9a:20:29:31: 4a:d7:6c:e3:b6:8f:8f:dd:51:a5:6b:10:61:0b:15: 38:04:1f:50:64:6e:9c:68:d4:ce:8a:13:30:4c:80: b1:f5:a2:e7:fe:88:2b:47:71:97:e8:42:72:a1:66: c6:9e:97:06:86:03:15:15:ae:4d:d4:75:41:a7:8a: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:24:15:F5:72:8B:AA:EC:8E:4C:45:1C:8D:A6:06:8F:E8:26:26:56 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/vyQV9XKLquyOTEUcjaYGj-gmJlY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:2200::/40 Signature Algorithm: sha256WithRSAEncryption 8e:54:19:19:b9:96:94:8a:b7:52:d9:6f:82:55:92:8e:d6:b2: 02:ab:90:78:76:0a:25:a7:e4:bf:5c:cf:e0:69:e3:ae:8a:60: ba:24:11:e7:2e:df:27:6e:62:11:24:58:64:6b:ef:e1:30:7e: c8:20:87:f0:14:ed:a9:9b:d3:e7:6c:80:b3:6d:62:20:2f:af: de:d3:ec:8c:f6:aa:14:51:ee:10:3e:e5:ad:f5:c5:01:f1:d4: 04:65:2f:9b:55:0c:ae:d2:2a:0e:d6:86:20:fe:69:11:85:56: df:ef:12:3d:aa:23:28:8f:70:f1:a4:35:26:64:b7:99:db:cb: 48:08:19:f0:52:91:d0:cd:b4:3a:b3:a5:08:99:ac:31:9f:54: 06:51:3b:bb:cb:ea:55:72:95:b0:69:a2:62:a9:e9:46:6e:a3: 77:fa:63:cc:9a:39:ee:ed:48:f8:b1:7d:0f:6f:7a:37:22:2b: ee:b9:65:f0:19:a3:2b:87:a1:c4:01:12:31:3f:b7:f2:b3:b3: f3:6e:9a:39:49:69:63:38:f1:cb:be:0c:eb:94:ea:98:f7:e9: 94:4a:cf:30:68:1f:b5:00:bb:55:89:de:86:c9:e8:17:37:b5: dd:bb:f6:33:5a:95:e6:e8:89:f9:71:d4:8d:99:c3:c7:33:8e: 85:98:87:db -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OL5kTHCgINyhnZKSLswhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjI0MTVmNTcyOGJhYWVjOGU0YzQ1MWM4ZGE2MDY4ZmU4MjYyNjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7AAncd75iTBJScQzpMn887nYZAq N11ufZNIxJdliIgM7O2G9XEoGpSa6Nwg8JV3DeWdmO3Y9CoarVFKr63ZowtnrweS IgUr4Jx97ohp733pzxUvXQYHGWIVqZqj4Wep1j6dDwsFf3h56cn9GnTQ/V1XX1XQ CFELUgzb8rahMzy71C55jirzXIV4Aw6dPMlrubbBZv0JIR6Z7bolkRMC3rSSyJWU 0kaV6h9IPQ4k83Me9cpPxMvzjDuhCoon/5ogKTFK12zjto+P3VGlaxBhCxU4BB9Q ZG6caNTOihMwTICx9aLn/ogrR3GX6EJyoWbGnpcGhgMVFa5N1HVBp4roBwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFL8kFfVyi6rsjkxFHI2mBo/oJiZWMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvdnlRVjlYS0xxdXlPVEVVY2phWUdqLWdtSmxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxyIw DQYJKoZIhvcNAQELBQADggEBAI5UGRm5lpSKt1LZb4JVko7WsgKrkHh2CiWn5L9c z+Bp466KYLokEecu3yduYhEkWGRr7+Ewfsggh/AU7amb0+dsgLNtYiAvr97T7Iz2 qhRR7hA+5a31xQHx1ARlL5tVDK7SKg7WhiD+aRGFVt/vEj2qIyiPcPGkNSZkt5nb y0gIGfBSkdDNtDqzpQiZrDGfVAZRO7vL6lVylbBpomKp6UZuo3f6Y8yaOe7tSPix fQ9vejciK+65ZfAZoyuHocQBEjE/t/Kzs/NumjlJaWM48cu+DOuU6pj36ZRKzzBo H7UAu1WJ3obJ6Bc3td279jNaleboiflx1I2Zw8czjoWYh9s= -----END CERTIFICATE-----Generated at Mon Jan 5 03:50:58 2026 by rpki-client