This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/vyjCA1W9-6KFsgjaGvfzXuiMYLQ.roa File: vyjCA1W9-6KFsgjaGvfzXuiMYLQ.roa (raw, json) Hash identifier: 7JV7egLgY4Bzr/UvgYj0RPwIqhuXjEo3YWECD7QdwW0= Subject key identifier: BF:28:C2:03:55:BD:FB:A2:85:B2:08:DA:1A:F7:F3:5E:E8:8C:60:B4 Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Certificate serial: 019B7758A8501FCD6AEF0B43D9632CB3AD90 Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/vyjCA1W9-6KFsgjaGvfzXuiMYLQ.roa Signing time: Thu 01 Jan 2026 02:17:37 +0000 ROA not before: Thu 01 Jan 2026 02:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214924 IP address blocks: 2a13:aac4:f040::/44 maxlen: 60 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a8:50:1f:cd:6a:ef:0b:43:d9:63:2c:b3:ad:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Validity Not Before: Jan 1 02:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf28c20355bdfba285b208da1af7f35ee88c60b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:74:5d:6c:28:f4:38:3a:b5:b4:8e:9d:e6:10: e6:de:39:3d:81:65:1b:1c:a7:85:ad:5f:63:14:77: c1:74:3c:97:5f:cb:53:b2:33:2a:e3:05:1a:37:7a: 2d:97:8b:1e:c6:4e:b8:ba:9f:76:7a:33:c7:44:c0: 61:97:bf:ea:68:45:43:62:c4:e6:9f:0a:ed:05:32: 19:fb:5d:4c:84:00:14:7e:62:3e:04:2d:06:fe:43: b6:55:17:e9:2d:df:48:08:f7:2d:9a:ee:0f:cb:60: 37:26:4b:d4:16:f3:1b:1e:10:60:ae:23:23:c2:8f: 7c:c1:eb:20:c3:81:48:4d:80:19:82:25:f6:88:c6: a9:09:27:39:32:a0:5a:94:0d:45:b2:8b:b2:85:55: b1:a3:a3:fd:75:96:33:bb:df:f7:95:a6:9b:e2:e8: c0:40:fa:69:32:91:85:96:4d:de:ab:e5:4b:90:5b: ed:29:5e:1f:a3:75:6b:92:7e:e5:e0:34:92:7e:85: 1d:b4:9b:05:44:c2:34:bb:52:20:f8:7c:a4:a0:d8: a8:d3:fb:65:db:fc:3a:a7:7c:6c:cb:c6:98:b4:e1: a5:a8:f5:29:f0:8f:ec:3c:8a:a0:63:71:05:1a:41: f8:8f:9b:df:28:a3:ad:af:e4:f0:4b:65:7a:47:56: 3c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:28:C2:03:55:BD:FB:A2:85:B2:08:DA:1A:F7:F3:5E:E8:8C:60:B4 X509v3 Authority Key Identifier: keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/vyjCA1W9-6KFsgjaGvfzXuiMYLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:aac4:f040::/44 Signature Algorithm: sha256WithRSAEncryption af:39:09:ab:74:80:63:a9:0b:27:5f:3f:6c:4e:71:d5:53:2b: 9e:85:17:05:12:71:96:ea:71:71:ee:7c:7b:ea:d6:41:ca:ee: ef:31:24:de:1d:2a:b9:07:c0:11:d3:76:52:f7:10:31:0b:c8: 18:18:ea:ce:90:26:23:a9:5e:bf:b0:14:3b:36:86:b6:05:e2: 83:72:d0:20:f2:b3:68:be:95:60:3d:7c:1c:94:dc:44:9f:c4: 15:11:4a:0c:2a:35:4a:5e:a1:0f:17:d3:88:d3:0b:7e:e9:ff: 3e:d9:60:e5:25:b2:db:6e:e6:6b:cf:2b:56:62:61:0e:46:17: da:f5:5f:eb:9d:ec:13:99:4c:96:3b:5f:70:fb:80:b4:0d:4b: 6a:7f:a9:d1:e3:26:f1:9a:f9:6c:15:7f:d0:d9:8a:69:63:68: 39:6f:34:8b:fb:63:66:92:42:f6:aa:4f:e5:4d:a9:92:ca:9d: da:32:a7:c7:f9:23:2d:45:35:c5:0c:80:d1:d9:74:29:b5:36: 21:7c:43:ec:86:75:5a:7e:0f:1b:44:4c:b0:ef:1d:4d:48:37: 9f:9e:d4:83:2a:da:9f:50:b9:b4:14:74:8d:3a:81:14:22:bb: 61:f8:d6:26:4e:35:e0:79:c7:35:fd:84:65:3b:b9:a3:a3:10: 2a:7d:a5:b8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WKhQH81q7wtD2WMss62QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjRjY2RkNzBmM2VjNzYyY2JkNjVlMDRkZDZmNzZiZTIz NmE4YTcwHhcNMjYwMTAxMDIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjI4YzIwMzU1YmRmYmEyODViMjA4ZGExYWY3ZjM1ZWU4OGM2MGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonRdbCj0ODq1tI6d5hDm3jk9gWUb HKeFrV9jFHfBdDyXX8tTsjMq4wUaN3otl4sexk64up92ejPHRMBhl7/qaEVDYsTm nwrtBTIZ+11MhAAUfmI+BC0G/kO2VRfpLd9ICPctmu4Py2A3JkvUFvMbHhBgriMj wo98wesgw4FITYAZgiX2iMapCSc5MqBalA1FsouyhVWxo6P9dZYzu9/3laab4ujA QPppMpGFlk3eq+VLkFvtKV4fo3Vrkn7l4DSSfoUdtJsFRMI0u1Ig+HykoNio0/tl 2/w6p3xsy8aYtOGlqPUp8I/sPIqgY3EFGkH4j5vfKKOtr+TwS2V6R1Y8UwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFL8owgNVvfuihbII2hr3817ojGC0MB8GA1UdIwQY MBaAFKEkzN1w8+x2LL1l4E3W92viNqinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEt N2IzNTM5N2FmMmY3LzEvdnlqQ0ExVzktNktGc2dqYUd2ZnpYdWlNWUxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEtN2IzNTM5N2FmMmY3 LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhOqxPBA MA0GCSqGSIb3DQEBCwUAA4IBAQCvOQmrdIBjqQsnXz9sTnHVUyuehRcFEnGW6nFx 7nx76tZByu7vMSTeHSq5B8AR03ZS9xAxC8gYGOrOkCYjqV6/sBQ7Noa2BeKDctAg 8rNovpVgPXwclNxEn8QVEUoMKjVKXqEPF9OI0wt+6f8+2WDlJbLbbuZrzytWYmEO Rhfa9V/rnewTmUyWO19w+4C0DUtqf6nR4ybxmvlsFX/Q2YppY2g5bzSL+2NmkkL2 qk/lTamSyp3aMqfH+SMtRTXFDIDR2XQptTYhfEPshnVafg8bREyw7x1NSDefntSD KtqfULm0FHSNOoEUIrth+NYmTjXgecc1/YRlO7mjoxAqfaW4 -----END CERTIFICATE-----Generated at Mon Jan 26 12:21:20 2026 by rpki-client