This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/vvXDEA3-oSwvWKl3m20Q9UrS6wI.roa File: vvXDEA3-oSwvWKl3m20Q9UrS6wI.roa (raw, json) Hash identifier: mQvtqYD2eC+84hVmHavb+1UIl2NHrV+2/J+tCnR9oyI= Subject key identifier: BE:F5:C3:10:0D:FE:A1:2C:2F:58:A9:77:9B:6D:10:F5:4A:D2:EB:02 Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7 Certificate serial: 019B7DCADE1C8A9E244584EDB3BD5235426B Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/vvXDEA3-oSwvWKl3m20Q9UrS6wI.roa Signing time: Fri 02 Jan 2026 08:20:05 +0000 ROA not before: Fri 02 Jan 2026 08:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60294 IP address blocks: 82.198.64.0/19 maxlen: 19 185.65.192.0/22 maxlen: 22 2a03:1d60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:de:1c:8a:9e:24:45:84:ed:b3:bd:52:35:42:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7 Validity Not Before: Jan 2 08:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bef5c3100dfea12c2f58a9779b6d10f54ad2eb02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b1:e6:0c:16:e5:f2:12:ee:36:d5:a3:68:4d: 0c:ad:c9:2d:1f:1b:70:67:2c:53:21:86:cf:b8:ae: de:02:9c:df:32:a3:b6:84:99:6d:02:ac:05:bc:22: fd:0d:cd:02:64:10:a9:8d:0d:0f:a5:44:ee:cd:52: a2:58:72:b8:e6:6b:04:36:f6:a9:59:9b:34:41:87: 0e:fb:04:a9:dc:a3:de:3e:92:1e:94:55:4a:86:f5: 2a:1f:60:56:d4:c6:1a:5d:05:4b:48:2b:5b:0d:6c: f1:3a:5c:3c:20:c5:0f:7a:b4:9f:4e:92:86:df:36: b9:6b:15:5d:85:4d:37:fe:57:6e:01:4d:48:11:cf: 9d:ca:62:a5:8f:71:15:45:f9:90:8f:1a:ff:7c:8e: b9:39:92:95:e8:1e:8b:09:a2:56:1f:59:59:a4:6c: b1:af:23:4f:f3:98:b0:75:81:1f:8b:9a:ca:cb:ea: 84:4e:4d:fa:b6:d8:d9:c9:aa:e1:65:97:e2:b4:aa: b6:bc:90:f7:2f:58:87:53:13:33:86:20:35:c2:c6: 0f:6e:85:71:53:3f:a2:cd:5f:26:3b:df:64:de:f6: 0d:77:23:56:45:56:67:65:68:9d:02:cc:60:ec:03: 54:3f:ce:a0:f8:6e:76:94:8e:de:45:5e:40:ff:78: 91:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F5:C3:10:0D:FE:A1:2C:2F:58:A9:77:9B:6D:10:F5:4A:D2:EB:02 X509v3 Authority Key Identifier: keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/vvXDEA3-oSwvWKl3m20Q9UrS6wI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.198.64.0/19 185.65.192.0/22 IPv6: 2a03:1d60::/32 Signature Algorithm: sha256WithRSAEncryption 62:63:09:26:14:6e:87:9a:33:aa:f0:f3:d3:a9:b7:6b:80:74: 1c:cd:30:43:d1:2c:e1:3b:52:51:c8:bc:5d:ec:7b:eb:1d:eb: 12:7f:7e:2f:2e:ad:9b:71:1b:aa:d3:ef:ed:99:b4:bd:c7:b9: 4f:35:09:ed:49:13:b6:90:18:92:9d:65:d1:d1:2f:b1:fb:16: 49:7f:89:93:e8:43:0f:3e:03:01:7f:c6:a4:ee:ec:1f:e0:96: f5:99:83:7b:58:95:1e:9c:1b:17:88:36:2a:6d:12:ca:da:c2: 2b:7d:c1:30:23:21:7a:c3:92:a5:fd:83:47:4a:6c:32:4d:8f: 99:bf:80:36:fa:78:10:e3:d9:c7:ef:b6:da:ad:d8:82:c3:93: 11:38:e5:2e:b2:d0:dc:d2:6e:47:69:2b:54:c3:82:8d:72:89: 17:ff:55:4a:52:fd:28:27:93:2b:9e:71:a2:d2:8c:f6:c9:02: 39:30:41:d2:b0:50:fc:7c:49:7f:4d:d1:41:cc:72:c1:fe:ca: 20:e0:e3:bc:32:15:6e:c9:13:ee:2d:7a:fd:40:f4:47:40:e1: 36:31:66:d1:ef:3a:ce:ba:7a:99:0b:21:20:4e:2c:1b:50:c0: 63:ba:f2:ae:73:8b:db:02:9b:d2:66:b4:db:df:13:1b:b7:0c: 64:bf:11:10 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9yt4cip4kRYTts71SNUJrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNTM4MjljMDYxYThhZjI2ZGU5NDZmYzllODE4ODVjNzRj MTc0YzcwHhcNMjYwMTAyMDgyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWY1YzMxMDBkZmVhMTJjMmY1OGE5Nzc5YjZkMTBmNTRhZDJlYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bHmDBbl8hLuNtWjaE0MrcktHxtw ZyxTIYbPuK7eApzfMqO2hJltAqwFvCL9Dc0CZBCpjQ0PpUTuzVKiWHK45msENvap WZs0QYcO+wSp3KPePpIelFVKhvUqH2BW1MYaXQVLSCtbDWzxOlw8IMUPerSfTpKG 3za5axVdhU03/lduAU1IEc+dymKlj3EVRfmQjxr/fI65OZKV6B6LCaJWH1lZpGyx ryNP85iwdYEfi5rKy+qETk36ttjZyarhZZfitKq2vJD3L1iHUxMzhiA1wsYPboVx Uz+izV8mO99k3vYNdyNWRVZnZWidAsxg7ANUP86g+G52lI7eRV5A/3iRXQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFL71wxAN/qEsL1ipd5ttEPVK0usCMB8GA1UdIwQY MBaAFGNTgpwGGorybelG/J6BiFx0wXTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84Y2Y5NjItMDc0Zi00MWFjLWFlMmEt ODE2MjAzZDIxZDEyLzEvdnZYREVBMy1vU3d2V0tsM20yMFE5VXJTNndJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS84Y2Y5NjItMDc0Zi00MWFjLWFlMmEtODE2MjAzZDIxZDEy LzEvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFUsZAAwQC uUHAMA0EAgACMAcDBQAqAx1gMA0GCSqGSIb3DQEBCwUAA4IBAQBiYwkmFG6HmjOq 8PPTqbdrgHQczTBD0SzhO1JRyLxd7HvrHesSf34vLq2bcRuq0+/tmbS9x7lPNQnt SRO2kBiSnWXR0S+x+xZJf4mT6EMPPgMBf8ak7uwf4Jb1mYN7WJUenBsXiDYqbRLK 2sIrfcEwIyF6w5Kl/YNHSmwyTY+Zv4A2+ngQ49nH77bardiCw5MROOUustDc0m5H aStUw4KNcokX/1VKUv0oJ5MrnnGi0oz2yQI5MEHSsFD8fEl/TdFBzHLB/sog4OO8 MhVuyRPuLXr9QPRHQOE2MWbR7zrOunqZCyEgTiwbUMBjuvKuc4vbApvSZrTb3xMb twxkvxEQ -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:21 2026 by rpki-client