This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/VX7ZDp6l2UyCZjm0hRN6nGJk9i8.roa File: VX7ZDp6l2UyCZjm0hRN6nGJk9i8.roa (raw, json) Hash identifier: B+CJtwt+tc0wqY8DQhcHcXdy6r3buq290Njel11LhmU= Subject key identifier: 55:7E:D9:0E:9E:A5:D9:4C:82:66:39:B4:85:13:7A:9C:62:64:F6:2F Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30 Certificate serial: 019B78A3425D49503CC4FFE5C79A7D56D09A Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/VX7ZDp6l2UyCZjm0hRN6nGJk9i8.roa Signing time: Thu 01 Jan 2026 08:18:43 +0000 ROA not before: Thu 01 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 62.112.224.0/19 maxlen: 24 94.143.208.0/21 maxlen: 24 185.61.224.0/22 maxlen: 24 185.63.20.0/22 maxlen: 24 213.108.29.0/24 maxlen: 24 2a00:1558::/32 maxlen: 48 2a02:27c8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:42:5d:49:50:3c:c4:ff:e5:c7:9a:7d:56:d0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30 Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=557ed90e9ea5d94c826639b485137a9c6264f62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ac:9f:da:30:48:ce:c1:2a:e0:e9:f3:88:71: 6c:cb:e5:97:a3:07:ea:95:02:60:31:9a:ba:1a:0e: f6:a1:29:e8:cb:65:23:0b:e5:68:91:6d:ce:5e:d1: d5:31:8d:ce:72:ec:c6:68:14:ed:2b:55:ea:e4:83: 4b:9d:33:15:5f:16:b9:f4:3c:d6:44:1c:35:d5:51: bd:a0:65:bd:80:80:f5:ae:78:c5:d6:ff:9f:0b:95: 51:fe:0f:15:e5:4b:a3:47:27:9d:4d:cf:4f:08:42: 5f:2f:e5:5c:c5:93:be:3c:7c:67:a5:c8:f4:93:fd: 69:65:6d:a1:4f:cd:90:36:7f:77:e9:4c:f1:b6:13: de:23:42:f4:7e:44:fb:d8:31:db:63:f5:7b:06:6d: b9:09:db:82:54:a0:e7:c2:b5:fd:9e:80:f7:2f:43: 55:55:3d:3f:d4:1e:08:0d:dd:9b:d4:35:d2:e2:8d: db:05:64:74:1c:b0:61:63:e3:69:ac:d6:96:1e:b2: 2a:75:da:ec:66:b6:35:f0:ea:3b:5c:2d:34:b8:d6: b4:1f:7c:db:b5:fd:80:aa:f4:d4:e6:63:57:6f:8f: 9f:11:39:a8:2e:4a:13:4a:fb:de:1b:42:03:67:30: 2c:43:82:13:8a:83:e1:ff:b7:f3:94:c9:5f:1b:3a: 9d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7E:D9:0E:9E:A5:D9:4C:82:66:39:B4:85:13:7A:9C:62:64:F6:2F X509v3 Authority Key Identifier: keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/VX7ZDp6l2UyCZjm0hRN6nGJk9i8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.112.224.0/19 94.143.208.0/21 185.61.224.0/22 185.63.20.0/22 213.108.29.0/24 IPv6: 2a00:1558::/32 2a02:27c8::/32 Signature Algorithm: sha256WithRSAEncryption 14:b5:aa:ba:3b:96:e6:0d:05:09:34:5e:26:9d:ff:22:b8:7c: 70:de:1b:3e:dc:6b:cc:77:9b:37:4f:ce:61:b8:6f:0c:54:94: e6:51:69:d0:be:49:db:02:9b:e1:3e:1e:68:e5:f9:94:33:7b: c6:b2:40:98:28:6b:dd:4b:b2:e1:d6:27:ca:73:39:92:b6:12: b9:60:6e:8b:3e:e2:40:af:93:ed:0d:f0:06:65:58:22:4c:22: 54:d6:55:99:29:24:cd:8d:6c:3d:e0:81:f1:95:72:c1:6e:34: b7:b7:d6:ad:90:70:23:89:47:91:9b:8d:1d:20:1e:cd:25:ad: 7d:9a:ca:55:ce:1a:f4:4f:33:50:e4:3b:ec:62:cd:61:c9:e1: 3b:d3:8d:99:f6:09:90:66:97:09:b7:f7:d1:1c:97:af:ef:87: ff:f0:c1:46:c3:86:f5:80:98:e8:5b:a2:95:2f:27:c9:f1:f3: 7f:83:da:86:63:c9:90:0b:0b:00:2b:34:76:62:7b:f4:a2:4e: 77:a8:a1:03:20:16:31:b7:d0:69:01:a3:46:40:e9:c4:f1:7e: 71:74:7c:e0:8a:3e:52:cb:7a:e1:b9:4e:d3:e0:03:e5:11:a2: 9b:98:94:2a:b9:4b:ef:92:0b:0f:33:01:69:3f:6e:b5:56:85: c0:be:a6:f2 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt4o0JdSVA8xP/lx5p9VtCaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MDAzYzk3OTYwM2Y3Y2VhMTJhY2EwMWViYzIwNTdjMzZm ZDdmMzAwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTdlZDkwZTllYTVkOTRjODI2NjM5YjQ4NTEzN2E5YzYyNjRmNjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqyf2jBIzsEq4OnziHFsy+WXowfq lQJgMZq6Gg72oSnoy2UjC+VokW3OXtHVMY3OcuzGaBTtK1Xq5INLnTMVXxa59DzW RBw11VG9oGW9gID1rnjF1v+fC5VR/g8V5UujRyedTc9PCEJfL+VcxZO+PHxnpcj0 k/1pZW2hT82QNn936UzxthPeI0L0fkT72DHbY/V7Bm25CduCVKDnwrX9noD3L0NV VT0/1B4IDd2b1DXS4o3bBWR0HLBhY+NprNaWHrIqddrsZrY18Oo7XC00uNa0H3zb tf2AqvTU5mNXb4+fETmoLkoTSvveG0IDZzAsQ4ITioPh/7fzlMlfGzqdRwIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFFV+2Q6epdlMgmY5tIUTepxiZPYvMB8GA1UdIwQY MBaAFMgAPJeWA/fOoSrKAevCBXw2/X8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUFBOGw1WUQ5ODZoS3NvQjY4SUZmRGI5ZnpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wM2NhMDEtYjk1OS00MWE2LTgxMzMt MDcyMjg4MTJkMDE3LzEvVlg3WkRwNmwyVXlDWmptMGhSTjZuR0prOWk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8wM2NhMDEtYjk1OS00MWE2LTgxMzMtMDcyMjg4MTJkMDE3 LzEveUFBOGw1WUQ5ODZoS3NvQjY4SUZmRGI5ZnpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQFPnDgAwQD Xo/QAwQCuT3gAwQCuT8UAwQA1WwdMBQEAgACMA4DBQAqABVYAwUAKgInyDANBgkq hkiG9w0BAQsFAAOCAQEAFLWqujuW5g0FCTReJp3/Irh8cN4bPtxrzHebN0/OYbhv DFSU5lFp0L5J2wKb4T4eaOX5lDN7xrJAmChr3Uuy4dYnynM5krYSuWBuiz7iQK+T 7Q3wBmVYIkwiVNZVmSkkzY1sPeCB8ZVywW40t7fWrZBwI4lHkZuNHSAezSWtfZrK Vc4a9E8zUOQ77GLNYcnhO9ONmfYJkGaXCbf30RyXr++H//DBRsOG9YCY6FuilS8n yfHzf4PahmPJkAsLACs0dmJ79KJOd6ihAyAWMbfQaQGjRkDpxPF+cXR84Io+Ust6 4blO0+AD5RGim5iUKrlL75ILDzMBaT9utVaFwL6m8g== -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:20 2026 by rpki-client