This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/VV6GclWkJ8nZfWYD9kI5rVNngFk.roa File: VV6GclWkJ8nZfWYD9kI5rVNngFk.roa (raw, json) Hash identifier: MVIJsWhkb4vuogtGRTydr8dk1xzegcnuBoJBJY1Nf4c= Subject key identifier: 55:5E:86:72:55:A4:27:C9:D9:7D:66:03:F6:42:39:AD:53:67:80:59 Certificate issuer: /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8 Certificate serial: 019B7A5AFBA187D712E1F8E3CEADB076F886 Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/VV6GclWkJ8nZfWYD9kI5rVNngFk.roa Signing time: Thu 01 Jan 2026 16:19:01 +0000 ROA not before: Thu 01 Jan 2026 16:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16223 IP address blocks: 5.58.0.0/16 maxlen: 23 185.53.79.0/24 maxlen: 24 217.196.160.0/20 maxlen: 20 2a00:1210:fffd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fb:a1:87:d7:12:e1:f8:e3:ce:ad:b0:76:f8:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8 Validity Not Before: Jan 1 16:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=555e867255a427c9d97d6603f64239ad53678059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:98:6f:20:9d:1e:42:d3:95:d9:c5:77:8c:a1: d2:82:70:e7:54:a3:d2:91:20:fd:3a:a4:b5:88:28: e4:94:a1:d3:a9:94:ed:3f:b4:de:7b:ba:26:f5:f2: 1c:6d:d2:1f:de:73:61:c2:4a:8e:45:df:73:e5:33: 94:01:9d:dc:25:0f:2e:3f:fa:79:5f:8d:9a:12:f8: 11:6b:b0:b4:6b:00:e9:50:89:6b:71:f0:45:79:ee: cf:43:7c:44:df:f6:fa:b8:11:88:83:9d:4e:f5:e2: 15:3c:4b:22:96:b3:70:31:d5:dc:db:9f:98:04:02: 2c:04:35:75:91:89:5c:ad:76:b5:b7:1a:3f:e6:59: 61:4e:27:05:5e:67:56:e9:0b:6e:23:0e:37:40:49: af:f4:8d:4c:75:34:df:52:f2:eb:30:a2:a4:92:85: c3:f6:e8:c7:58:30:75:11:03:c1:f1:6d:db:2e:54: a6:bc:0a:69:9e:e7:06:aa:eb:7d:bc:d0:8a:92:da: 4b:81:c5:ab:f6:69:07:ae:ac:48:76:15:d9:f9:bc: 13:2e:b0:18:ca:18:8c:28:f5:04:c0:01:19:12:b7: 1c:62:31:37:7d:28:51:ff:69:a3:07:3a:a0:2a:62: 67:b7:2c:2f:0a:1a:35:68:83:25:a2:73:12:3c:e6: 16:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5E:86:72:55:A4:27:C9:D9:7D:66:03:F6:42:39:AD:53:67:80:59 X509v3 Authority Key Identifier: keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/VV6GclWkJ8nZfWYD9kI5rVNngFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.58.0.0/16 185.53.79.0/24 217.196.160.0/20 IPv6: 2a00:1210:fffd::/48 Signature Algorithm: sha256WithRSAEncryption d8:d9:15:74:c8:a3:21:a5:52:c1:fe:42:1c:99:ec:85:80:cd: 55:d6:66:5d:7c:f7:3d:fd:82:ee:90:e7:89:bd:30:99:d5:f5: ab:f4:ce:a1:78:cd:62:0a:62:aa:6c:f5:35:03:6e:d6:a2:21: 0f:ea:cc:44:c2:f2:42:bd:f7:7d:b9:81:27:0c:6d:15:c4:0d: b1:c9:01:e8:1b:8f:7d:a4:94:eb:3b:a7:1a:b5:d5:69:a4:37: 0f:59:5d:fd:75:1b:91:71:26:6c:93:19:89:e5:c2:97:f3:ec: e7:8d:a8:cc:c2:b6:43:b8:f3:cc:fe:aa:b8:ba:3c:02:23:7e: da:1e:04:fd:87:b1:35:8c:ae:35:b6:20:71:15:4e:a3:9f:de: eb:da:39:85:a6:80:46:34:ce:06:2a:d3:a5:ea:ca:af:96:61: 18:e0:87:7b:b3:66:c9:55:20:26:8c:fb:c7:a9:3e:50:fa:5a: 1c:20:50:dc:92:b4:76:5f:12:7d:85:f9:b5:a3:73:fc:29:0c: 5b:17:a7:6e:97:a8:2d:fd:cf:86:a6:1e:04:1f:ea:a7:f6:e8: fc:ac:45:61:a4:64:7b:35:a0:4f:5c:08:a1:c9:10:d2:0e:f7: 72:df:e6:66:ea:cb:56:f6:f6:12:58:4a:89:44:5a:ae:ef:d5: c7:86:e6:89 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt6Wvuhh9cS4fjjzq2wdviGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlN2E5YjE3NDVhNWE3MGMzYmY3YmNjMmMyZWUxNjY0NjBh ZmY3YTgwHhcNMjYwMTAxMTYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTVlODY3MjU1YTQyN2M5ZDk3ZDY2MDNmNjQyMzlhZDUzNjc4MDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZhvIJ0eQtOV2cV3jKHSgnDnVKPS kSD9OqS1iCjklKHTqZTtP7Tee7om9fIcbdIf3nNhwkqORd9z5TOUAZ3cJQ8uP/p5 X42aEvgRa7C0awDpUIlrcfBFee7PQ3xE3/b6uBGIg51O9eIVPEsilrNwMdXc25+Y BAIsBDV1kYlcrXa1txo/5llhTicFXmdW6QtuIw43QEmv9I1MdTTfUvLrMKKkkoXD 9ujHWDB1EQPB8W3bLlSmvAppnucGqut9vNCKktpLgcWr9mkHrqxIdhXZ+bwTLrAY yhiMKPUEwAEZErccYjE3fShR/2mjBzqgKmJntywvCho1aIMlonMSPOYWYQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFVehnJVpCfJ2X1mA/ZCOa1TZ4BZMB8GA1UdIwQY MBaAFK56mxdFpacMO/e8wsLuFmRgr/eoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5xYkYwV2xwd3c3OTd6Q3d1NFdaR0N2OTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82ZTkwOWQtZDMyNS00OGExLTk0NDMt Y2M5YTc1OGM5OTE2LzEvVlY2R2NsV2tKOG5aZldZRDlrSTVyVk5uZ0ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy82ZTkwOWQtZDMyNS00OGExLTk0NDMtY2M5YTc1OGM5OTE2 LzEvcm5xYkYwV2xwd3c3OTd6Q3d1NFdaR0N2OTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAXBAIAATARAwMABToDBAC5 NU8DBATZxKAwDwQCAAIwCQMHACoAEhD//TANBgkqhkiG9w0BAQsFAAOCAQEA2NkV dMijIaVSwf5CHJnshYDNVdZmXXz3Pf2C7pDnib0wmdX1q/TOoXjNYgpiqmz1NQNu 1qIhD+rMRMLyQr33fbmBJwxtFcQNsckB6BuPfaSU6zunGrXVaaQ3D1ld/XUbkXEm bJMZieXCl/Ps542ozMK2Q7jzzP6quLo8AiN+2h4E/YexNYyuNbYgcRVOo5/e69o5 haaARjTOBirTperKr5ZhGOCHe7NmyVUgJoz7x6k+UPpaHCBQ3JK0dl8SfYX5taNz /CkMWxenbpeoLf3PhqYeBB/qp/bo/KxFYaRkezWgT1wIockQ0g73ct/mZurLVvb2 ElhKiURaru/Vx4bmiQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:39:51 2026 by rpki-client