This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/VurYQADeNAyQZfVqHtE93Y07CDc.roa File: VurYQADeNAyQZfVqHtE93Y07CDc.roa (raw, json) Hash identifier: zo7Q7XfiMqpPBNsTQ58E9qm/cSZ4esMUjH52zOEyenA= Subject key identifier: 56:EA:D8:40:00:DE:34:0C:90:65:F5:6A:1E:D1:3D:DD:8D:3B:08:37 Certificate issuer: /CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69 Certificate serial: 019B797F10A8AD78D6F790D1B3E04133303B Authority key identifier: E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/VurYQADeNAyQZfVqHtE93Y07CDc.roa Signing time: Thu 01 Jan 2026 12:18:49 +0000 ROA not before: Thu 01 Jan 2026 12:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a00:42e0:1000::/36 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:10:a8:ad:78:d6:f7:90:d1:b3:e0:41:33:30:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69 Validity Not Before: Jan 1 12:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56ead84000de340c9065f56a1ed13ddd8d3b0837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:eb:41:55:d6:0e:60:47:0b:7f:5e:2d:2f:aa: 77:d6:99:af:e6:8c:66:28:71:cc:94:24:7a:90:84: 96:4e:64:4a:74:1e:fe:fb:59:0c:a3:aa:b0:de:c3: 35:91:2b:78:29:8d:99:7b:25:50:f4:ba:54:c7:78: 9a:f5:d7:ff:9f:48:39:a3:da:54:c4:2b:20:a1:d8: 3b:74:f5:8b:c6:4b:70:dc:47:93:50:bf:4f:bf:75: a7:87:3c:6e:87:91:9f:38:68:ec:17:1f:f8:5b:93: 0e:41:5c:01:b2:dd:75:ae:78:0c:85:11:fa:fc:53: 59:a8:2e:b0:b7:78:58:ce:58:1a:ae:dd:bb:24:91: 90:b9:ef:7d:dc:db:72:af:70:51:71:e3:1f:f3:8b: 53:a8:89:7e:6c:92:3a:18:c3:af:9c:17:3c:b6:e9: 23:ad:2b:68:9e:e3:25:73:53:01:89:d6:15:9e:f1: 6e:8b:aa:c9:1a:b3:84:eb:43:a2:a8:cb:7c:c4:15: 2b:60:a5:3a:d4:bf:fc:4b:28:c4:9b:e3:8f:1d:7a: 3e:64:4f:dd:1d:8c:53:b2:ad:dd:df:12:5d:44:e7: 01:38:c0:e7:70:e9:9c:42:4e:d5:53:92:32:06:b3: 64:c5:63:95:d0:df:ee:77:38:a3:fd:f0:2c:20:c8: 56:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EA:D8:40:00:DE:34:0C:90:65:F5:6A:1E:D1:3D:DD:8D:3B:08:37 X509v3 Authority Key Identifier: keyid:E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/VurYQADeNAyQZfVqHtE93Y07CDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:42e0:1000::/36 Signature Algorithm: sha256WithRSAEncryption 8d:bb:c1:b0:78:3b:cb:cf:82:ef:b6:7c:c9:11:3b:3a:d0:92: 7f:e8:d9:f2:17:fa:64:3f:ae:86:17:82:3b:62:8c:3a:22:54: 3d:d3:2b:ca:83:dc:27:15:64:a9:31:14:70:de:f9:e2:03:44: af:9c:67:c2:a8:ec:aa:52:be:ce:73:4f:a2:d3:34:02:d6:28: 48:7d:bc:c7:32:3b:32:24:7f:8f:44:b2:bf:72:82:0d:0c:e8: 71:33:18:03:da:4b:72:dd:ae:45:92:41:59:f9:5d:94:cf:51: e9:6c:27:cb:da:32:08:7b:08:2c:9e:92:4a:ff:e1:34:1b:3e: 8e:c1:51:ea:44:6d:4c:68:b5:10:36:82:c2:36:d4:e0:43:58: 6a:09:2a:ba:59:95:8f:5e:41:7a:b3:42:1c:73:ef:e0:fa:85: 9b:16:51:47:76:bd:69:2e:09:1b:0b:26:85:93:a1:3b:2e:bf: 9e:59:82:47:ea:e5:10:51:41:4c:9b:21:69:ab:64:a2:f3:78: 1e:d6:5c:27:67:77:31:0a:4f:f9:da:c9:b0:bb:92:6a:09:9e: 70:cd:fe:98:d6:ab:ae:4f:1d:57:4a:63:dd:45:73:2c:98:f7: 09:cd:cb:c4:6a:3a:6b:9e:c1:a5:45:34:43:5c:38:af:7d:34: be:fe:50:4f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5fxCorXjW95DRs+BBMzA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNjgyODYzZTk5ODdhOWViODY2OGJhMDdjOTZjOTlhMWIy ZGZlNjkwHhcNMjYwMTAxMTIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmVhZDg0MDAwZGUzNDBjOTA2NWY1NmExZWQxM2RkZDhkM2IwODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OtBVdYOYEcLf14tL6p31pmv5oxm KHHMlCR6kISWTmRKdB7++1kMo6qw3sM1kSt4KY2ZeyVQ9LpUx3ia9df/n0g5o9pU xCsgodg7dPWLxktw3EeTUL9Pv3Wnhzxuh5GfOGjsFx/4W5MOQVwBst11rngMhRH6 /FNZqC6wt3hYzlgart27JJGQue993Ntyr3BRceMf84tTqIl+bJI6GMOvnBc8tukj rStonuMlc1MBidYVnvFui6rJGrOE60OiqMt8xBUrYKU61L/8SyjEm+OPHXo+ZE/d HYxTsq3d3xJdROcBOMDncOmcQk7VU5IyBrNkxWOV0N/udzij/fAsIMhWVwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFbq2EAA3jQMkGX1ah7RPd2NOwg3MB8GA1UdIwQY MBaAFOFoKGPpmHqeuGaLoHyWyZobLf5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lY2RjNWEtZWY1Mi00MTA3LWIzY2It M2JkYTM1MzljNmJjLzEvVnVyWVFBRGVOQXlRWmZWcUh0RTkzWTA3Q0RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lY2RjNWEtZWY1Mi00MTA3LWIzY2ItM2JkYTM1MzljNmJj LzEvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgBC4BAw DQYJKoZIhvcNAQELBQADggEBAI27wbB4O8vPgu+2fMkROzrQkn/o2fIX+mQ/roYX gjtijDoiVD3TK8qD3CcVZKkxFHDe+eIDRK+cZ8Ko7KpSvs5zT6LTNALWKEh9vMcy OzIkf49Esr9ygg0M6HEzGAPaS3LdrkWSQVn5XZTPUelsJ8vaMgh7CCyekkr/4TQb Po7BUepEbUxotRA2gsI21OBDWGoJKrpZlY9eQXqzQhxz7+D6hZsWUUd2vWkuCRsL JoWToTsuv55Zgkfq5RBRQUybIWmrZKLzeB7WXCdndzEKT/naybC7kmoJnnDN/pjW q65PHVdKY91FcyyY9wnNy8RqOmuewaVFNENcOK99NL7+UE8= -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:59 2026 by rpki-client