This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/VORDTVglX3Z4o11ha_rQMbeYDBY.roa File: VORDTVglX3Z4o11ha_rQMbeYDBY.roa (raw, json) Hash identifier: R9axiVVKyBivLuau19G2S1ECw/WVMKwzWPLucwXXO9s= Subject key identifier: 54:E4:43:4D:58:25:5F:76:78:A3:5D:61:6B:FA:D0:31:B7:98:0C:16 Certificate issuer: /CN=386ab970bfb6947597e97cefb916ec76a0c56858 Certificate serial: 019B7D5CF0305BFB0161B4B863C8D315825A Authority key identifier: 38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/VORDTVglX3Z4o11ha_rQMbeYDBY.roa Signing time: Fri 02 Jan 2026 06:20:01 +0000 ROA not before: Fri 02 Jan 2026 06:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206725 IP address blocks: 2001:678:134::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f0:30:5b:fb:01:61:b4:b8:63:c8:d3:15:82:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=386ab970bfb6947597e97cefb916ec76a0c56858 Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54e4434d58255f7678a35d616bfad031b7980c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a4:20:6a:7d:e4:47:ff:7c:38:62:89:91:4e: 82:c9:e0:ed:af:25:e7:11:41:bd:f7:1e:a8:84:7a: 4f:4a:d1:a2:b5:4e:3d:c6:4c:b5:11:6a:07:eb:c6: 2f:7e:de:ee:f5:9d:e6:18:63:4e:2f:d3:ce:ef:75: 53:17:20:82:17:74:4b:b1:60:46:66:81:22:cc:73: 29:a7:04:70:52:b4:ce:3c:35:75:da:1c:fc:c7:bf: f1:ce:5d:5e:2c:79:c4:a2:d6:55:c3:7b:d6:8f:9a: cc:5e:9c:f3:14:f4:66:5c:e1:dd:f5:13:d5:18:ea: 2a:57:3e:f2:a4:de:45:48:c4:21:e5:bd:82:5a:25: 52:84:6c:36:65:65:1d:a4:24:f7:95:37:71:f7:09: 6b:9c:5c:81:ca:3e:f4:bb:9d:33:ef:2d:5f:59:ed: d6:f2:58:d7:e5:ab:c7:d2:7f:13:80:cf:76:34:8f: 2e:ed:5f:9e:9c:4b:d3:6e:30:ee:f9:cb:aa:61:3b: 42:88:16:74:1c:11:00:2b:11:42:c4:e5:ce:93:6c: 55:5b:91:0e:bd:2e:e2:e7:0a:81:a2:ff:78:2f:b2: 26:55:f0:b3:1d:14:72:b8:a6:aa:56:54:d8:fc:89: ea:d6:6c:87:59:31:7c:cc:fc:07:36:c5:68:19:23: 71:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E4:43:4D:58:25:5F:76:78:A3:5D:61:6B:FA:D0:31:B7:98:0C:16 X509v3 Authority Key Identifier: keyid:38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/VORDTVglX3Z4o11ha_rQMbeYDBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:134::/48 Signature Algorithm: sha256WithRSAEncryption 71:89:60:55:d4:ad:b0:2b:25:e6:21:0b:3b:ca:1e:74:55:7d: c8:68:5e:fb:b3:39:b1:e5:71:c7:b1:81:12:d4:b3:f5:b1:48: 84:b8:15:c6:e4:fc:72:03:b9:cd:50:5e:79:ba:1b:d9:b7:c0: 9a:25:bb:d3:54:67:cc:97:14:65:e5:5f:a3:8a:b1:c7:40:f7: 55:f0:53:e3:63:96:e9:98:b9:d2:d6:d7:b5:d7:5d:ef:b0:30: fe:88:77:b0:95:31:f9:67:bc:47:71:81:48:6a:d5:a0:59:86: 3a:28:41:e7:1c:6e:0f:d2:46:27:d6:c6:ef:42:24:e7:b9:2f: 61:42:7c:b8:7d:99:08:8f:1c:79:e9:ee:33:2c:3a:03:42:ae: 0c:67:8b:26:ca:1b:6c:35:cd:88:46:f5:e4:dc:39:2a:b0:3d: b6:08:e3:74:90:61:87:98:89:b1:35:a7:8b:a6:c8:87:0d:62: 74:c8:d1:50:df:c3:e3:7c:9b:ad:00:f8:b1:6f:a8:d0:93:b0: 70:b3:8c:18:c2:23:64:8a:f6:52:4b:3c:4c:d5:05:36:03:2a: 4c:32:f9:bc:c6:ca:62:68:b7:f7:cc:da:f3:e4:cd:9f:29:af: 3e:48:d4:1d:df:a3:33:2e:5d:e3:be:19:9b:92:b1:a4:b2:08: 13:a0:78:b6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XPAwW/sBYbS4Y8jTFYJaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NmFiOTcwYmZiNjk0NzU5N2U5N2NlZmI5MTZlYzc2YTBj NTY4NTgwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGU0NDM0ZDU4MjU1Zjc2NzhhMzVkNjE2YmZhZDAzMWI3OTgwYzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaQgan3kR/98OGKJkU6CyeDtryXn EUG99x6ohHpPStGitU49xky1EWoH68Yvft7u9Z3mGGNOL9PO73VTFyCCF3RLsWBG ZoEizHMppwRwUrTOPDV12hz8x7/xzl1eLHnEotZVw3vWj5rMXpzzFPRmXOHd9RPV GOoqVz7ypN5FSMQh5b2CWiVShGw2ZWUdpCT3lTdx9wlrnFyByj70u50z7y1fWe3W 8ljX5avH0n8TgM92NI8u7V+enEvTbjDu+cuqYTtCiBZ0HBEAKxFCxOXOk2xVW5EO vS7i5wqBov94L7ImVfCzHRRyuKaqVlTY/Inq1myHWTF8zPwHNsVoGSNxOQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFTkQ01YJV92eKNdYWv60DG3mAwWMB8GA1UdIwQY MBaAFDhquXC/tpR1l+l877kW7HagxWhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC80MWZkYTktOTcwMi00NThkLTk4MmYt OGQxMTI1N2Q0YWY2LzEvVk9SRFRWZ2xYM1o0bzExaGFfclFNYmVZREJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC80MWZkYTktOTcwMi00NThkLTk4MmYtOGQxMTI1N2Q0YWY2 LzEvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAE0 MA0GCSqGSIb3DQEBCwUAA4IBAQBxiWBV1K2wKyXmIQs7yh50VX3IaF77szmx5XHH sYES1LP1sUiEuBXG5PxyA7nNUF55uhvZt8CaJbvTVGfMlxRl5V+jirHHQPdV8FPj Y5bpmLnS1te1113vsDD+iHewlTH5Z7xHcYFIatWgWYY6KEHnHG4P0kYn1sbvQiTn uS9hQny4fZkIjxx56e4zLDoDQq4MZ4smyhtsNc2IRvXk3DkqsD22CON0kGGHmImx NaeLpsiHDWJ0yNFQ38PjfJutAPixb6jQk7Bws4wYwiNkivZSSzxM1QU2AypMMvm8 xspiaLf3zNrz5M2fKa8+SNQd36MzLl3jvhmbkrGksggToHi2 -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:57 2026 by rpki-client