This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/vrCign6erTM1LbQRKP4h0IonXBQ.roa File: vrCign6erTM1LbQRKP4h0IonXBQ.roa (raw, json) Hash identifier: AQYpWzYbq4r9zz5A/4U8pWZOmJvv2qppgX/OMFbKwks= Subject key identifier: BE:B0:A2:82:7E:9E:AD:33:35:2D:B4:11:28:FE:21:D0:8A:27:5C:14 Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290 Certificate serial: 019B7C7F0FDEC7CE0034E7AC54D34C4C095A Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/vrCign6erTM1LbQRKP4h0IonXBQ.roa Signing time: Fri 02 Jan 2026 02:17:40 +0000 ROA not before: Fri 02 Jan 2026 02:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 2a14:5200::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:0f:de:c7:ce:00:34:e7:ac:54:d3:4c:4c:09:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290 Validity Not Before: Jan 2 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=beb0a2827e9ead33352db41128fe21d08a275c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:80:76:4a:09:6c:c1:d1:04:3f:b0:46:d8:c4: d7:d7:26:d4:97:78:74:22:86:be:f4:b7:ed:35:95: 00:3b:cd:1e:ba:31:2b:38:74:e6:e3:57:b6:fc:09: 49:b9:5a:06:09:ff:ef:78:a1:28:3f:77:0c:71:3f: 9a:27:bf:88:1f:18:35:df:32:1f:be:5b:a6:4d:98: d8:a3:39:e3:ad:7a:c8:1e:3a:a7:b7:ec:09:cd:5d: 27:7e:ef:d2:23:32:12:e6:fe:e3:4c:7a:63:21:de: 3f:3c:d5:40:73:97:3d:4e:c9:eb:5c:f2:49:bf:f7: b7:81:9b:9c:ca:2b:56:f4:57:04:77:22:1e:79:e4: d2:80:2e:60:37:b7:87:de:04:fe:9e:1f:a1:80:ac: d5:70:5c:57:7a:54:99:2f:82:78:1e:14:d3:90:ea: b8:62:09:c0:e4:46:e9:c2:3e:2b:f0:fb:71:8c:39: 82:59:3b:f3:cd:9e:0c:e7:0e:c9:81:b4:fa:bf:b2: f1:67:56:4d:ba:70:11:64:7e:41:de:8f:13:ba:1c: 10:c1:a9:4f:2c:9f:4a:3e:75:99:83:25:0d:ea:0c: e4:29:6a:bd:af:7d:f1:77:72:20:09:11:7b:49:da: 19:69:38:38:e6:9d:73:c7:50:f4:32:cd:9b:a6:97: fc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B0:A2:82:7E:9E:AD:33:35:2D:B4:11:28:FE:21:D0:8A:27:5C:14 X509v3 Authority Key Identifier: keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/vrCign6erTM1LbQRKP4h0IonXBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:5200::/29 Signature Algorithm: sha256WithRSAEncryption 9b:38:45:f5:95:53:4f:29:8b:68:8f:d7:b9:0c:da:61:43:c0: d4:9c:2b:8e:e3:cc:76:9c:f7:d1:94:ed:8a:81:d5:34:8c:20: 57:42:e1:3c:cf:ec:59:4b:64:6d:c7:17:20:c1:d4:9e:b6:d3: 4e:07:a3:12:87:df:50:21:10:df:cd:d9:e2:95:7d:ce:e3:ed: 81:ed:36:af:3c:b8:b1:a0:23:c0:f9:4a:58:71:e6:f4:f8:fe: 7c:24:bf:3e:e9:37:52:a0:91:7d:98:fd:e0:d1:d0:b8:d7:3a: 1a:ec:18:db:6e:85:b8:28:55:0e:b3:da:a1:cf:1b:f5:51:84: 62:42:45:bc:ca:1b:c4:7a:22:ab:2f:fa:49:c7:ed:89:29:b0: 79:01:c7:60:54:ce:68:cd:13:f5:94:56:e8:cb:a4:46:53:ca: fc:be:b6:9d:4f:f3:2b:65:ff:e3:83:1c:c4:64:d7:b7:e6:e4: a5:ae:16:02:4e:a6:c3:c0:54:f8:e5:d3:18:a7:55:88:71:cc: 99:0f:0c:aa:3f:e5:8f:d4:af:4e:0f:88:54:69:16:18:20:40: 0e:18:f7:60:89:52:93:51:26:46:58:e8:6e:7c:7e:4b:48:82: e2:38:b1:7f:28:32:77:ea:2f:7b:c6:aa:89:12:90:c1:cf:0e: 1a:ab:0b:99 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8fw/ex84ANOesVNNMTAlaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTgxNTlhMTZkNzJiM2Q2Y2RmYmFhMDk2ZDY5MTM5ZmRl OWQyOTAwHhcNMjYwMTAyMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWIwYTI4MjdlOWVhZDMzMzUyZGI0MTEyOGZlMjFkMDhhMjc1YzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4B2SglswdEEP7BG2MTX1ybUl3h0 Ioa+9LftNZUAO80eujErOHTm41e2/AlJuVoGCf/veKEoP3cMcT+aJ7+IHxg13zIf vlumTZjYoznjrXrIHjqnt+wJzV0nfu/SIzIS5v7jTHpjId4/PNVAc5c9TsnrXPJJ v/e3gZucyitW9FcEdyIeeeTSgC5gN7eH3gT+nh+hgKzVcFxXelSZL4J4HhTTkOq4 YgnA5Ebpwj4r8PtxjDmCWTvzzZ4M5w7JgbT6v7LxZ1ZNunARZH5B3o8TuhwQwalP LJ9KPnWZgyUN6gzkKWq9r33xd3IgCRF7SdoZaTg45p1zx1D0Ms2bppf8SwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFL6wooJ+nq0zNS20ESj+IdCKJ1wUMB8GA1UdIwQY MBaAFHToFZoW1ys9bN+6oJbWkTn96dKQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgt ODRjYmM4NWEyMzQzLzEvdnJDaWduNmVyVE0xTGJRUktQNGgwSW9uWEJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgtODRjYmM4NWEyMzQz LzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhRSADAN BgkqhkiG9w0BAQsFAAOCAQEAmzhF9ZVTTymLaI/XuQzaYUPA1JwrjuPMdpz30ZTt ioHVNIwgV0LhPM/sWUtkbccXIMHUnrbTTgejEoffUCEQ383Z4pV9zuPtge02rzy4 saAjwPlKWHHm9Pj+fCS/Puk3UqCRfZj94NHQuNc6GuwY226FuChVDrPaoc8b9VGE YkJFvMobxHoiqy/6ScftiSmweQHHYFTOaM0T9ZRW6MukRlPK/L62nU/zK2X/44Mc xGTXt+bkpa4WAk6mw8BU+OXTGKdViHHMmQ8Mqj/lj9SvTg+IVGkWGCBADhj3YIlS k1EmRljobnx+S0iC4jixfygyd+ove8aqiRKQwc8OGqsLmQ== -----END CERTIFICATE-----Generated at Fri Jan 2 16:22:44 2026 by rpki-client