This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Vd-9sgzyutC_tq5p3sKkdiKe4xg.roa File: Vd-9sgzyutC_tq5p3sKkdiKe4xg.roa (raw, json) Hash identifier: 3w6Mw7+TA+8xYPpT+cWsq/hgNRfipugg5Nv09/RE0t4= Subject key identifier: 55:DF:BD:B2:0C:F2:BA:D0:BF:B6:AE:69:DE:C2:A4:76:22:9E:E3:18 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EC17C013F845CA767A9BBB2E04696 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Vd-9sgzyutC_tq5p3sKkdiKe4xg.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216299 IP address blocks: 2a0e:aa07:e140::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c1:7c:01:3f:84:5c:a7:67:a9:bb:b2:e0:46:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55dfbdb20cf2bad0bfb6ae69dec2a476229ee318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f7:8e:fc:f7:ca:0d:cd:73:fe:0e:bd:a6:f7: fe:9e:c1:b2:a2:a3:8f:bb:80:59:73:85:9b:62:9f: c0:1c:fe:40:8c:8f:5a:c0:29:01:38:31:90:ce:61: b0:fe:17:28:c6:77:7b:4f:af:a6:eb:01:d0:1c:65: a9:26:57:0f:1d:6f:42:90:f5:e3:de:6a:e6:34:65: 1a:ef:5b:0a:71:99:4d:b7:0a:31:e5:ea:d0:4d:99: 34:d7:0e:4f:93:37:69:ee:38:6d:9c:62:1b:78:ab: 09:d3:51:c9:2c:0d:58:da:0f:38:32:24:41:d7:f3: 30:d9:d2:76:d4:84:bb:91:96:56:44:3d:f3:19:81: 6c:92:ad:dc:f7:b6:fe:e7:5f:4c:f5:b5:b3:14:74: 4a:0e:22:ed:b6:d4:68:b2:5f:ac:d9:12:ac:c8:80: e2:21:43:6e:3c:d8:c2:8d:d5:1f:a9:c1:74:c6:c9: de:62:b3:03:5f:04:c0:74:ca:46:e0:a9:55:16:51: e8:b5:a2:08:f6:6d:d7:e2:6c:af:fb:93:16:6a:9b: 67:ea:60:03:4f:fb:7b:51:87:ee:38:bd:72:3f:9a: 88:c4:ae:f7:72:39:51:44:7e:24:f4:3c:93:c3:1f: 79:c1:a0:be:fd:f4:ac:c9:df:eb:f1:30:91:59:f6: 77:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DF:BD:B2:0C:F2:BA:D0:BF:B6:AE:69:DE:C2:A4:76:22:9E:E3:18 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Vd-9sgzyutC_tq5p3sKkdiKe4xg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e140::/44 Signature Algorithm: sha256WithRSAEncryption 7a:77:6a:97:78:19:70:46:c1:3c:b5:9d:64:2a:45:48:f9:11: 3f:68:93:27:b0:c0:e4:2c:43:a2:88:e3:89:99:47:69:a5:d6: b5:b1:46:02:82:f7:c8:3d:3f:c3:67:79:d8:6f:ca:71:3c:2e: fc:c0:28:50:77:58:2d:e5:43:a1:c6:02:10:36:cd:d3:06:9b: 97:86:13:86:68:47:5e:7c:0b:b3:84:49:a0:4e:a9:a1:9b:6b: 9b:5b:30:f6:6a:d6:c7:8f:76:7f:08:70:fe:cf:de:24:e1:59: bb:29:e2:fd:c4:23:b5:dd:62:58:9c:be:a2:23:d5:ec:46:2d: 93:d3:f2:8e:ed:9d:f0:5e:1a:d9:ae:88:3d:07:09:f8:04:be: 67:46:fd:76:fa:04:f3:07:bc:50:af:85:0b:70:12:45:6d:3b: 7a:a6:05:09:a6:2f:ee:31:75:0d:14:f9:d9:eb:b5:c4:3f:34: 58:a5:4c:81:60:07:68:a5:f2:69:af:94:a5:13:bb:d9:a3:fc: c0:3e:ea:63:13:5d:88:fe:47:4e:8c:21:1f:bd:c6:7f:95:34: 12:59:63:f0:68:59:68:32:7c:3e:cc:27:20:6d:cf:66:c6:cf: 0d:6a:f9:b2:9d:42:b4:e3:f9:a9:21:5d:6e:86:88:c3:be:d5: fb:30:84:ef -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fsF8AT+EXKdnqbuy4EaWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWRmYmRiMjBjZjJiYWQwYmZiNmFlNjlkZWMyYTQ3NjIyOWVlMzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7feO/PfKDc1z/g69pvf+nsGyoqOP u4BZc4WbYp/AHP5AjI9awCkBODGQzmGw/hcoxnd7T6+m6wHQHGWpJlcPHW9CkPXj 3mrmNGUa71sKcZlNtwox5erQTZk01w5Pkzdp7jhtnGIbeKsJ01HJLA1Y2g84MiRB 1/Mw2dJ21IS7kZZWRD3zGYFskq3c97b+519M9bWzFHRKDiLtttRosl+s2RKsyIDi IUNuPNjCjdUfqcF0xsneYrMDXwTAdMpG4KlVFlHotaII9m3X4myv+5MWaptn6mAD T/t7UYfuOL1yP5qIxK73cjlRRH4k9DyTwx95waC+/fSsyd/r8TCRWfZ36QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFXfvbIM8rrQv7auad7CpHYinuMYMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvVmQtOXNnenl1dENfdHE1cDNzS2tkaUtlNHhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+FA MA0GCSqGSIb3DQEBCwUAA4IBAQB6d2qXeBlwRsE8tZ1kKkVI+RE/aJMnsMDkLEOi iOOJmUdppda1sUYCgvfIPT/DZ3nYb8pxPC78wChQd1gt5UOhxgIQNs3TBpuXhhOG aEdefAuzhEmgTqmhm2ubWzD2atbHj3Z/CHD+z94k4Vm7KeL9xCO13WJYnL6iI9Xs Ri2T0/KO7Z3wXhrZrog9Bwn4BL5nRv12+gTzB7xQr4ULcBJFbTt6pgUJpi/uMXUN FPnZ67XEPzRYpUyBYAdopfJpr5SlE7vZo/zAPupjE12I/kdOjCEfvcZ/lTQSWWPw aFloMnw+zCcgbc9mxs8NavmynUK04/mpIV1uhojDvtX7MITv -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:10 2026 by rpki-client