This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/VWRnL-QChZydlewFf4m0W5IwI7I.roa File: VWRnL-QChZydlewFf4m0W5IwI7I.roa (raw, json) Hash identifier: 20xjUehHV+vdMcLMkiiK7TR0WGC8wZacMlPvbIysBJk= Subject key identifier: 55:64:67:2F:E4:02:85:9C:9D:95:EC:05:7F:89:B4:5B:92:30:23:B2 Certificate issuer: /CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e Certificate serial: 019B7D5C7F9FCA84602D3E3BBA8752A6A275 Authority key identifier: A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/VWRnL-QChZydlewFf4m0W5IwI7I.roa Signing time: Fri 02 Jan 2026 06:19:32 +0000 ROA not before: Fri 02 Jan 2026 06:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2001:678:105c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7f:9f:ca:84:60:2d:3e:3b:ba:87:52:a6:a2:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e Validity Not Before: Jan 2 06:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5564672fe402859c9d95ec057f89b45b923023b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c8:73:65:4a:0d:e2:e5:9f:83:17:24:e5:8b: 0b:68:de:4e:20:21:6e:8d:a0:d9:15:72:0e:8a:06: 0f:26:a9:6d:39:6f:60:96:11:fc:f1:d0:c4:1c:90: bb:9e:81:a9:62:73:4f:d3:5e:d8:a6:e8:a6:41:cc: de:0e:81:15:d1:a1:f5:27:d4:19:77:f5:80:e2:2c: 60:fa:7c:c8:cd:60:43:f3:ab:d5:58:7f:63:93:29: 9c:32:14:6f:eb:b2:f5:77:08:73:66:96:89:ab:71: 6f:b7:0b:70:2a:c2:6f:b6:7a:ef:de:c3:35:4e:ff: e4:3f:2b:00:a7:fc:ea:9d:92:1d:11:ad:59:ab:7a: 02:55:c0:10:73:9f:9f:a9:59:13:06:c3:b9:87:e2: ab:6c:9f:cf:3d:d3:47:e8:89:82:1b:fd:d8:92:d5: e5:0c:be:48:75:8d:3f:da:b0:82:e2:4c:04:8d:44: c5:e5:9e:36:64:81:f6:6a:14:54:53:85:e6:ea:d1: 7c:7b:fb:ac:b1:d3:b8:b4:e8:b4:46:65:ba:d5:d6: d2:76:df:bd:60:6d:5b:5d:e8:0f:5c:43:c1:b9:d4: a9:af:65:3f:6b:62:8e:65:ed:fe:91:75:92:32:01: 4d:47:35:09:a2:48:7d:56:bc:3f:d5:49:59:74:30: 98:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:64:67:2F:E4:02:85:9C:9D:95:EC:05:7F:89:B4:5B:92:30:23:B2 X509v3 Authority Key Identifier: keyid:A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/VWRnL-QChZydlewFf4m0W5IwI7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:105c::/48 Signature Algorithm: sha256WithRSAEncryption 2c:d1:91:d4:d3:d3:8f:7b:d0:cd:43:d4:52:f5:c0:67:c8:59: c6:78:88:74:96:2d:cf:7c:7e:af:30:49:a6:51:f7:14:28:0f: 33:31:75:b2:86:bc:60:a7:96:cd:79:f8:04:31:97:27:fc:9a: dd:18:6f:fd:9f:df:e3:3a:a4:e1:42:97:41:ce:9c:39:ed:88: 36:03:66:28:3c:ac:d8:30:5f:2b:93:12:91:e0:c0:5b:3f:fc: 28:96:4b:f3:c8:3f:e6:1b:6b:d3:40:1c:d0:6b:2a:93:fc:2f: 03:a8:6b:11:89:52:f8:ed:3d:a6:55:c2:96:77:85:65:e4:a1: 71:5a:a9:d0:88:0d:80:d4:13:81:fa:18:97:b9:0f:84:15:d5: 4a:73:73:eb:14:fe:3e:72:15:28:fa:da:55:eb:cf:6b:bf:68: ed:29:e4:46:de:3e:8f:3a:93:0f:0c:f7:31:50:c8:50:c1:fe: af:4c:75:2b:9e:89:f9:b2:56:f4:78:56:cf:49:27:f7:35:14: 07:45:d4:c4:ce:d6:e4:6f:1e:cc:c0:5f:f8:1b:bf:e9:56:49: ed:7f:a0:64:cc:f8:9f:2e:85:c0:67:e9:33:8d:dc:ee:b8:89: 25:71:8c:be:81:29:2f:77:de:da:c2:1c:72:af:3e:4f:4e:23: 22:18:ba:07 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XH+fyoRgLT47uodSpqJ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MWY3YmI3YmVhMTU4MTYyNGZjYjY1MDNhYjVhNzBmNDIw YzliM2UwHhcNMjYwMTAyMDYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTY0NjcyZmU0MDI4NTljOWQ5NWVjMDU3Zjg5YjQ1YjkyMzAyM2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0shzZUoN4uWfgxck5YsLaN5OICFu jaDZFXIOigYPJqltOW9glhH88dDEHJC7noGpYnNP017YpuimQczeDoEV0aH1J9QZ d/WA4ixg+nzIzWBD86vVWH9jkymcMhRv67L1dwhzZpaJq3FvtwtwKsJvtnrv3sM1 Tv/kPysAp/zqnZIdEa1Zq3oCVcAQc5+fqVkTBsO5h+KrbJ/PPdNH6ImCG/3YktXl DL5IdY0/2rCC4kwEjUTF5Z42ZIH2ahRUU4Xm6tF8e/ussdO4tOi0RmW61dbSdt+9 YG1bXegPXEPBudSpr2U/a2KOZe3+kXWSMgFNRzUJokh9Vrw/1UlZdDCYrQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFVkZy/kAoWcnZXsBX+JtFuSMCOyMB8GA1UdIwQY MBaAFKQfe7e+oVgWJPy2UDq1pw9CDJs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yMTYwZjQtN2Q1Ny00YzdjLTg5YWYt OThmMWEyZGZjMzljLzEvVldSbkwtUUNoWnlkbGV3RmY0bTBXNUl3STdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yMTYwZjQtN2Q1Ny00YzdjLTg5YWYtOThmMWEyZGZjMzlj LzEvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBBc MA0GCSqGSIb3DQEBCwUAA4IBAQAs0ZHU09OPe9DNQ9RS9cBnyFnGeIh0li3PfH6v MEmmUfcUKA8zMXWyhrxgp5bNefgEMZcn/JrdGG/9n9/jOqThQpdBzpw57Yg2A2Yo PKzYMF8rkxKR4MBbP/wolkvzyD/mG2vTQBzQayqT/C8DqGsRiVL47T2mVcKWd4Vl 5KFxWqnQiA2A1BOB+hiXuQ+EFdVKc3PrFP4+chUo+tpV689rv2jtKeRG3j6POpMP DPcxUMhQwf6vTHUrnon5slb0eFbPSSf3NRQHRdTEztbkbx7MwF/4G7/pVkntf6Bk zPifLoXAZ+kzjdzuuIklcYy+gSkvd97awhxyrz5PTiMiGLoH -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:40 2026 by rpki-client