This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/_VWZ0XjMvcGoTelbVe1k8IzzHlo.roa File: _VWZ0XjMvcGoTelbVe1k8IzzHlo.roa (raw, json) Hash identifier: G04H0qYQyU9/pfzI/sNJzq68+ieZrRS73Fbf1e3vIW8= Subject key identifier: FD:55:99:D1:78:CC:BD:C1:A8:4D:E9:5B:55:ED:64:F0:8C:F3:1E:5A Certificate issuer: /CN=615758aea479d4f32a9e89e9808f30edfc23b2e7 Certificate serial: 019C0942FA27FD4AE589EC29842D31F9DD6A Authority key identifier: 61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/_VWZ0XjMvcGoTelbVe1k8IzzHlo.roa Signing time: Thu 29 Jan 2026 10:18:30 +0000 ROA not before: Thu 29 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a07:8241:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:42:fa:27:fd:4a:e5:89:ec:29:84:2d:31:f9:dd:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615758aea479d4f32a9e89e9808f30edfc23b2e7 Validity Not Before: Jan 29 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd5599d178ccbdc1a84de95b55ed64f08cf31e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:f2:3b:37:fa:c0:a9:fd:49:c5:a7:70:84: 51:03:ab:44:d3:24:73:34:45:13:da:e9:e3:63:38: a0:a9:53:53:d3:9f:a6:4a:c9:c3:ab:84:ce:b3:2e: 84:89:73:43:8a:0e:a2:f5:6a:ae:97:e7:f4:d5:cc: 00:4d:b5:46:83:73:38:28:5a:60:62:0e:b5:2f:c1: 18:b2:51:17:36:a1:6c:05:55:f2:26:9f:7e:18:6f: 63:bf:22:87:fa:48:b4:65:b3:8b:c0:00:93:55:a1: 42:58:87:fe:5e:aa:d2:1d:a0:bc:eb:d7:f8:aa:39: 2f:70:0f:3c:52:84:9f:f6:df:9e:67:ee:40:cd:37: 1c:db:66:c5:30:fb:d8:0d:7b:25:94:b2:c5:58:a6: bb:b9:f3:5c:1a:9a:18:f8:5a:fa:1e:00:f0:49:88: bd:d5:98:a5:90:e3:cc:82:3c:12:9c:05:3c:4f:6e: 4a:43:52:20:1b:d0:35:fd:39:b6:a1:10:45:2f:c5: 4d:1e:80:84:2c:0e:18:0e:55:17:8b:1d:42:5d:2f: ae:33:07:da:ce:c2:e4:60:03:42:a5:1f:4d:24:ee: f4:68:b1:99:63:62:2a:ae:a1:34:98:3a:a4:68:c7: e1:14:73:38:0a:55:c1:51:08:e6:44:32:50:9e:83: c2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:55:99:D1:78:CC:BD:C1:A8:4D:E9:5B:55:ED:64:F0:8C:F3:1E:5A X509v3 Authority Key Identifier: keyid:61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/_VWZ0XjMvcGoTelbVe1k8IzzHlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:8241:2000::/40 Signature Algorithm: sha256WithRSAEncryption 5d:91:b5:31:ff:a1:3c:30:47:0c:4c:ea:37:b8:f1:f9:ed:b3: be:16:e3:79:61:1d:f4:fa:bb:9d:c5:7b:43:53:d1:24:60:f5: a1:70:0a:66:3a:c8:d8:94:9e:f2:45:6e:8b:c3:ea:a1:93:fa: 7f:2d:ab:b7:c7:65:ab:5d:fc:a5:aa:9e:da:76:9c:40:31:cc: dd:72:bb:22:26:41:0b:e2:c3:ae:bc:35:6b:e1:80:19:c1:1c: a5:5a:06:0f:38:36:d5:07:9d:99:7f:d8:4c:1b:8f:d6:39:3f: 77:d2:36:30:1f:be:a0:6e:b9:0b:76:e4:65:90:6e:ec:f4:5c: 4d:bb:bd:59:be:b3:d0:f3:a4:c7:18:c7:2c:1b:22:27:f8:54: 3e:a2:4c:9b:7a:02:19:bf:99:2c:f3:3a:83:bf:2d:33:a7:e5: be:37:bb:f7:c9:5e:4d:d0:45:7c:cf:05:4e:01:a4:43:7d:32: 87:13:19:a3:ce:2d:4c:47:1c:b3:ba:54:6d:8b:e7:54:df:2e: 33:14:14:d3:47:28:f5:6e:d1:fc:97:bf:b1:71:23:6e:b2:7f: 35:d9:d8:1f:ce:84:ee:6d:df:b7:20:4b:f7:fa:cf:b5:3c:e1: ab:f8:73:47:a3:79:36:ce:f8:df:96:cd:d8:8c:e4:66:a1:02: f4:0c:f0:4a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZwJQvon/UrliewphC0x+d1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNTc1OGFlYTQ3OWQ0ZjMyYTllODllOTgwOGYzMGVkZmMy M2IyZTcwHhcNMjYwMTI5MTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDU1OTlkMTc4Y2NiZGMxYTg0ZGU5NWI1NWVkNjRmMDhjZjMxZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSTyOzf6wKn9ScWncIRRA6tE0yRz NEUT2unjYzigqVNT05+mSsnDq4TOsy6EiXNDig6i9Wqul+f01cwATbVGg3M4KFpg Yg61L8EYslEXNqFsBVXyJp9+GG9jvyKH+ki0ZbOLwACTVaFCWIf+XqrSHaC869f4 qjkvcA88UoSf9t+eZ+5AzTcc22bFMPvYDXsllLLFWKa7ufNcGpoY+Fr6HgDwSYi9 1ZilkOPMgjwSnAU8T25KQ1IgG9A1/Tm2oRBFL8VNHoCELA4YDlUXix1CXS+uMwfa zsLkYANCpR9NJO70aLGZY2IqrqE0mDqkaMfhFHM4ClXBUQjmRDJQnoPCAwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFP1VmdF4zL3BqE3pW1XtZPCM8x5aMB8GA1UdIwQY MBaAFGFXWK6kedTzKp6J6YCPMO38I7LnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVZkWXJxUjUxUE1xbm9ucGdJOHc3Zndqc3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hMWM5NWYtZjNlMy00NTMxLWE0NjUt ZTkwZDk4MzBlOGM1LzEvX1ZXWjBYak12Y0dvVGVsYlZlMWs4SXp6SGxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9hMWM5NWYtZjNlMy00NTMxLWE0NjUtZTkwZDk4MzBlOGM1 LzEvWVZkWXJxUjUxUE1xbm9ucGdJOHc3Zndqc3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgeCQSAw DQYJKoZIhvcNAQELBQADggEBAF2RtTH/oTwwRwxM6je48fnts74W43lhHfT6u53F e0NT0SRg9aFwCmY6yNiUnvJFbovD6qGT+n8tq7fHZatd/KWqntp2nEAxzN1yuyIm QQviw668NWvhgBnBHKVaBg84NtUHnZl/2Ewbj9Y5P3fSNjAfvqBuuQt25GWQbuz0 XE27vVm+s9DzpMcYxywbIif4VD6iTJt6Ahm/mSzzOoO/LTOn5b43u/fJXk3QRXzP BU4BpEN9MocTGaPOLUxHHLO6VG2L51TfLjMUFNNHKPVu0fyXv7FxI26yfzXZ2B/O hO5t37cgS/f6z7U84av4c0ejeTbO+N+WzdiM5GahAvQM8Eo= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:50 2026 by rpki-client