This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/vj9Y1vDQsd8irAUZicwFBretnTw.roa File: vj9Y1vDQsd8irAUZicwFBretnTw.roa (raw, json) Hash identifier: QckB1vbmYyKKGuF+YXQdL1bwmfynhMSKkWJrsKNwTLk= Subject key identifier: BE:3F:58:D6:F0:D0:B1:DF:22:AC:05:19:89:CC:05:06:B7:AD:9D:3C Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA764D6AF1F298FE24099F2DEECA4FC Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/vj9Y1vDQsd8irAUZicwFBretnTw.roa Signing time: Fri 02 Jan 2026 12:20:58 +0000 ROA not before: Fri 02 Jan 2026 12:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212364 IP address blocks: 2a06:e881:8500::/48 maxlen: 48 2a06:e881:8501::/48 maxlen: 48 2a06:e881:8502::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:64:d6:af:1f:29:8f:e2:40:99:f2:de:ec:a4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be3f58d6f0d0b1df22ac051989cc0506b7ad9d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dd:b9:86:86:11:9f:d1:ed:25:88:4b:01:09: 8a:af:6f:a9:c5:60:f9:df:24:d7:0e:da:1e:ea:49: f4:fe:66:10:cc:6b:66:ee:31:98:6f:8d:9a:a8:77: 05:24:f7:02:70:31:c1:87:e4:17:ec:dc:f6:2d:2a: c2:fc:cc:65:4a:aa:32:66:8a:05:3d:8b:3c:46:5d: 64:b5:e9:c3:30:a0:9a:97:e0:b6:03:82:bf:5e:3a: 03:11:ae:90:e3:da:fe:38:22:fd:5b:4a:e6:d0:98: da:7a:cc:20:10:b6:96:82:e7:ee:5f:4b:3f:e8:c7: 64:60:1c:07:ab:69:53:7e:b9:88:1a:45:8a:df:a8: cb:62:52:e2:a3:08:c1:cc:20:50:f4:ea:43:59:3e: c6:49:90:96:4b:d3:28:16:21:be:ec:54:91:14:f7: 74:87:7a:87:aa:58:9f:96:e1:a4:d1:19:ff:aa:ec: 8a:bd:6c:f5:92:4a:9f:92:20:06:4a:54:fa:1b:f8: e9:b3:e6:23:dc:d8:03:33:12:14:07:f9:e2:ee:ec: 2f:0e:3f:be:85:47:13:8f:5e:4a:b9:f7:33:9e:61: 1b:ca:c5:46:a3:3f:ee:61:52:a9:45:9b:cc:85:70: 9f:02:1c:7c:bc:99:aa:2c:a6:46:fd:1a:f5:f3:a2: 99:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3F:58:D6:F0:D0:B1:DF:22:AC:05:19:89:CC:05:06:B7:AD:9D:3C X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/vj9Y1vDQsd8irAUZicwFBretnTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:8500::-2a06:e881:8502:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption c1:8d:9d:0b:a0:96:c0:39:4b:50:23:0c:54:6a:fc:6a:7c:9d: f3:fc:61:28:f6:4e:60:94:87:71:1f:64:49:c5:f3:2b:29:3f: 73:af:de:b2:03:0e:d3:f3:c7:b6:cc:0d:2b:cd:ca:27:8b:a0: 89:18:ce:44:52:61:29:b4:0f:20:43:d7:aa:76:7c:33:81:5e: 93:4c:25:33:4a:96:b3:03:f6:34:c2:91:a4:fd:d6:a3:d9:5c: 8f:49:f7:6b:96:97:3e:51:71:32:ae:91:e4:7a:ee:a4:9a:04: d0:90:64:5e:03:05:54:cd:b8:1d:da:73:68:79:89:ba:c5:7b: 9f:2b:50:77:d0:62:29:8b:56:34:9d:e3:32:43:0c:f6:4f:9d: 43:15:2f:ea:54:54:3f:c2:fd:7c:fb:f9:00:f5:0e:5e:70:ea: ae:1f:b4:cf:01:78:9d:3e:dd:46:94:a0:49:c6:40:a4:bb:ac: c7:1d:d7:49:48:ea:8a:22:88:68:91:2a:c2:fb:1b:d9:ee:30: 97:4e:9f:a0:19:09:d2:59:22:03:72:b5:64:5f:6b:72:db:7b: be:78:43:fa:98:7e:05:ca:0e:e9:0a:b4:2a:46:17:34:23:6a: f3:c9:54:48:49:9a:93:1e:f6:c0:21:22:3b:3c:51:7a:f7:7f: 85:04:41:39 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt+p2TWrx8pj+JAmfLe7KT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTNmNThkNmYwZDBiMWRmMjJhYzA1MTk4OWNjMDUwNmI3YWQ5ZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm925hoYRn9HtJYhLAQmKr2+pxWD5 3yTXDtoe6kn0/mYQzGtm7jGYb42aqHcFJPcCcDHBh+QX7Nz2LSrC/MxlSqoyZooF PYs8Rl1ktenDMKCal+C2A4K/XjoDEa6Q49r+OCL9W0rm0JjaeswgELaWgufuX0s/ 6MdkYBwHq2lTfrmIGkWK36jLYlLiowjBzCBQ9OpDWT7GSZCWS9MoFiG+7FSRFPd0 h3qHqlifluGk0Rn/quyKvWz1kkqfkiAGSlT6G/jps+Yj3NgDMxIUB/ni7uwvDj++ hUcTj15KufcznmEbysVGoz/uYVKpRZvMhXCfAhx8vJmqLKZG/Rr186KZ4wIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFL4/WNbw0LHfIqwFGYnMBQa3rZ08MB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvdmo5WTF2RFFzZDhpckFVWmljd0ZCcmV0blR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATMBEDBgAqBuiB hQMHACoG6IGFAjANBgkqhkiG9w0BAQsFAAOCAQEAwY2dC6CWwDlLUCMMVGr8anyd 8/xhKPZOYJSHcR9kScXzKyk/c6/esgMO0/PHtswNK83KJ4ugiRjORFJhKbQPIEPX qnZ8M4Fek0wlM0qWswP2NMKRpP3Wo9lcj0n3a5aXPlFxMq6R5HrupJoE0JBkXgMF VM24HdpzaHmJusV7nytQd9BiKYtWNJ3jMkMM9k+dQxUv6lRUP8L9fPv5APUOXnDq rh+0zwF4nT7dRpSgScZApLusxx3XSUjqiiKIaJEqwvsb2e4wl06foBkJ0lkiA3K1 ZF9rctt7vnhD+ph+BcoO6Qq0KkYXNCNq88lUSEmakx72wCEiOzxRevd/hQRBOQ== -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:27 2026 by rpki-client