This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/vxDGfq6-VDBTGSkcwD811s5e1nE.roa File: vxDGfq6-VDBTGSkcwD811s5e1nE.roa (raw, json) Hash identifier: K/IIs8a/nMmyZnlmvdZJ0SsYeUSWsitG4ioikTiuXTo= Subject key identifier: BF:10:C6:7E:AE:BE:54:30:53:19:29:1C:C0:3F:35:D6:CE:5E:D6:71 Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F15A575ABF3172009A0D3601D69C0CC Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/vxDGfq6-VDBTGSkcwD811s5e1nE.roa Signing time: Fri 02 Jan 2026 14:21:23 +0000 ROA not before: Fri 02 Jan 2026 14:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61580 IP address blocks: 2.21.67.0/24 maxlen: 24 2.22.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 06:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a5:75:ab:f3:17:20:09:a0:d3:60:1d:69:c0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf10c67eaebe54305319291cc03f35d6ce5ed671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:75:51:3c:14:eb:fd:a2:8a:e9:10:90:a3:a1: 37:42:2c:c2:1e:11:2e:5e:9a:3a:c6:79:c4:a9:f2: 6f:53:ed:a5:4f:47:08:66:d5:67:b5:c4:3e:35:0e: 56:e5:7d:a3:87:da:7d:dc:be:90:a5:3d:7e:a6:9a: a4:1e:99:4f:eb:d6:dd:e7:c0:1e:70:6c:33:c3:4a: 21:c9:6c:69:e6:50:6b:bd:09:cd:7f:01:19:aa:e9: d3:4b:60:a4:65:17:8c:69:d8:13:c0:ba:40:5d:fc: 2a:8c:82:ce:bc:09:8d:98:be:d9:8e:b5:c8:5b:34: ca:08:c7:53:33:5b:58:c1:72:ea:cc:f2:67:23:a4: e0:b7:fb:32:98:e3:91:00:c6:8c:8d:ee:19:91:8f: 0e:88:37:db:ef:e5:58:b9:c5:3c:fa:d4:ce:da:ec: a9:c8:95:af:7b:4e:7a:a3:d5:54:60:b6:ad:d3:84: 00:91:15:ed:77:2d:ce:2e:ba:86:d3:fc:59:91:cb: da:1d:ca:f2:e1:99:3e:29:07:0a:85:01:7c:5b:f5: 12:93:55:1c:a2:e8:85:d3:ea:55:93:f8:37:69:74: 6a:20:d7:ab:40:27:28:b3:86:36:fd:bb:f4:f3:96: b5:e8:0f:05:1b:9a:dc:df:83:27:44:8d:03:11:47: 7f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:10:C6:7E:AE:BE:54:30:53:19:29:1C:C0:3F:35:D6:CE:5E:D6:71 X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/vxDGfq6-VDBTGSkcwD811s5e1nE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.21.67.0/24 2.22.51.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:64:fa:72:57:47:81:d2:b1:d8:d6:1a:44:06:d3:f4:f6:ce: 95:0f:88:04:41:ee:eb:ec:94:c3:d4:32:dc:62:44:ea:74:a1: 68:9a:cd:66:11:24:cc:1e:53:df:36:f1:52:eb:f2:60:bb:05: ad:c6:97:30:2e:0f:a4:28:38:1f:a3:d8:de:ba:96:a9:39:df: 86:2a:b9:1a:8c:49:10:48:19:24:7d:f8:10:bc:b6:d6:85:20: d3:79:40:33:8d:39:51:07:e5:62:8e:99:4b:27:de:36:88:83: f9:9b:fc:f7:66:38:88:b1:ba:13:08:57:8e:8d:9e:f0:6b:b9: dc:64:f1:11:c3:b3:6e:11:58:70:3b:58:aa:d9:b1:6e:c6:a2: d3:c1:06:db:2b:f7:6e:f8:d1:72:ad:c3:56:f6:3c:a9:42:33: f3:a8:c7:45:46:fc:a1:a2:ce:d4:89:b5:2c:01:cd:68:b7:b5: 8e:6e:66:24:a8:46:4d:53:8e:53:ba:ff:7a:15:e3:1b:59:99: 5c:5a:82:7b:a5:cc:b5:d5:68:4a:49:55:42:ce:f0:8d:1d:23: a2:82:69:24:c2:79:1f:83:1a:ed:90:1c:6d:30:49:bf:39:45: 51:da:19:1b:2f:28:b2:23:fb:43:9b:28:94:70:6d:54:fc:54: 84:f9:61:f4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FaV1q/MXIAmg02AdacDMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjEwYzY3ZWFlYmU1NDMwNTMxOTI5MWNjMDNmMzVkNmNlNWVkNjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnVRPBTr/aKK6RCQo6E3QizCHhEu Xpo6xnnEqfJvU+2lT0cIZtVntcQ+NQ5W5X2jh9p93L6QpT1+ppqkHplP69bd58Ae cGwzw0ohyWxp5lBrvQnNfwEZqunTS2CkZReMadgTwLpAXfwqjILOvAmNmL7ZjrXI WzTKCMdTM1tYwXLqzPJnI6Tgt/symOORAMaMje4ZkY8OiDfb7+VYucU8+tTO2uyp yJWve056o9VUYLat04QAkRXtdy3OLrqG0/xZkcvaHcry4Zk+KQcKhQF8W/USk1Uc ouiF0+pVk/g3aXRqINerQCcos4Y2/bv085a16A8FG5rc34MnRI0DEUd/TQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL8Qxn6uvlQwUxkpHMA/NdbOXtZxMB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvdnhER2ZxNi1WREJUR1NrY3dEODExczVlMW5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAhVDAwQA AhYzMA0GCSqGSIb3DQEBCwUAA4IBAQCNZPpyV0eB0rHY1hpEBtP09s6VD4gEQe7r 7JTD1DLcYkTqdKFoms1mESTMHlPfNvFS6/JguwWtxpcwLg+kKDgfo9jeupapOd+G KrkajEkQSBkkffgQvLbWhSDTeUAzjTlRB+VijplLJ942iIP5m/z3ZjiIsboTCFeO jZ7wa7ncZPERw7NuEVhwO1iq2bFuxqLTwQbbK/du+NFyrcNW9jypQjPzqMdFRvyh os7UibUsAc1ot7WObmYkqEZNU45Tuv96FeMbWZlcWoJ7pcy11WhKSVVCzvCNHSOi gmkkwnkfgxrtkBxtMEm/OUVR2hkbLyiyI/tDmyiUcG1U/FSE+WH0 -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:20 2026 by rpki-client