This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/rVAZAeOQDvwPVh2Fwei2q2CF_Qg.roa File: rVAZAeOQDvwPVh2Fwei2q2CF_Qg.roa (raw, json) Hash identifier: XaxWalW01B0ra8JXzNNUG2fuhXDskHxvyOQTCE4WGSs= Subject key identifier: AD:50:19:01:E3:90:0E:FC:0F:56:1D:85:C1:E8:B6:AB:60:85:FD:08 Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b Certificate serial: 019B78348C141515D393C23264EF48ED6325 Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/rVAZAeOQDvwPVh2Fwei2q2CF_Qg.roa Signing time: Thu 01 Jan 2026 06:17:48 +0000 ROA not before: Thu 01 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48314 IP address blocks: 45.85.216.0/22 maxlen: 24 45.89.140.0/22 maxlen: 24 2a0e:cb80::/29 maxlen: 29 2a12:3e80:100::/48 maxlen: 48 2a12:3e80:400::/48 maxlen: 48 2a12:3e80:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8c:14:15:15:d3:93:c2:32:64:ef:48:ed:63:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad501901e3900efc0f561d85c1e8b6ab6085fd08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:21:c8:5f:d0:07:43:df:e8:2a:a8:45:e7:58: d2:5b:37:11:87:31:25:61:af:c6:e6:6a:f6:e8:5a: 81:50:4d:08:09:4a:a8:74:12:13:9b:0f:24:fc:44: 40:a6:0b:e6:e3:22:99:bc:fd:22:7b:d3:c8:b4:c5: fb:46:83:e3:db:3f:26:d5:98:de:8d:7b:47:5a:17: ac:b1:25:38:2c:91:29:93:d0:17:f9:ea:5d:04:46: b3:3b:51:4f:aa:f4:17:a9:21:bf:ec:42:6b:f8:b1: de:90:51:be:71:1d:6d:b5:c8:ef:a8:a9:be:b4:0d: 95:6f:99:40:49:fd:cd:38:d4:69:b5:9f:2b:82:90: 53:c7:65:ce:6b:d2:b4:f1:8e:a2:8e:2d:ae:f0:f9: 37:83:55:59:82:5a:2a:a1:95:5e:4f:be:b5:a2:49: 7a:b7:0c:49:f2:9c:db:61:1b:8a:ae:52:78:1a:84: 6d:dd:8d:34:46:4b:d6:e0:66:fa:a6:0f:b6:bf:a8: 59:e8:a1:03:7a:1f:23:4b:27:38:c1:3e:fe:36:fd: f3:e5:02:5d:63:fe:11:bc:ce:96:3c:89:0c:5c:7e: f4:31:53:71:7e:b7:0d:8b:00:b8:57:20:ab:97:e7: 1a:b1:96:85:c1:a4:f9:73:6b:de:d1:60:e7:36:6b: e6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:50:19:01:E3:90:0E:FC:0F:56:1D:85:C1:E8:B6:AB:60:85:FD:08 X509v3 Authority Key Identifier: keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/rVAZAeOQDvwPVh2Fwei2q2CF_Qg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.216.0/22 45.89.140.0/22 IPv6: 2a0e:cb80::/29 2a12:3e80:100::/48 2a12:3e80:400::/48 2a12:3e80:800::/40 Signature Algorithm: sha256WithRSAEncryption 13:6e:87:36:79:4f:c2:be:f3:9e:a6:4e:b4:7a:80:81:dc:6d: b6:80:db:b8:00:a8:7d:26:af:99:e6:5d:83:be:bd:5e:6c:6b: ef:f7:b9:65:53:d6:30:bd:67:92:10:b7:49:86:63:07:36:97: 2a:65:b0:d5:68:06:04:cb:64:4e:ab:6b:7b:97:38:b5:bf:53: 2c:88:c7:08:2d:e4:f1:6a:47:d0:e3:25:2d:15:5e:35:3a:47: 65:dc:c0:12:5b:b7:cc:d3:08:74:5e:ec:e6:ab:df:9b:cf:96: 55:93:ce:d6:64:48:88:b5:c6:5e:d8:7f:d2:d7:e6:5e:aa:fa: 5b:1d:49:0a:d1:63:01:d6:34:e0:eb:ac:7a:84:b2:17:b8:d8: 77:a4:15:21:91:71:98:b4:25:0d:ff:8e:2f:11:85:48:61:3b: 0b:d2:6f:5d:08:5f:59:d2:d3:db:1d:11:be:5d:77:fe:8b:83: fb:d4:62:fb:92:4b:f1:34:08:de:f7:3d:8a:f1:20:73:66:44: f8:56:2f:ac:df:f2:2a:f6:fc:7d:92:eb:cd:21:a8:3d:82:8a: 9e:8a:89:31:de:1c:23:34:2a:92:b3:34:ef:f0:41:ae:22:96: 76:2d:1d:c4:c7:a4:a2:d7:c3:00:de:c4:c9:51:78:a0:2e:9e: ce:4c:b8:19 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt4NIwUFRXTk8IyZO9I7WMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWY0MzM5NzRkZjM3M2I3MGFiZDc2YjEzZTFjNzBjNzc1 ZjU1NGIwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDUwMTkwMWUzOTAwZWZjMGY1NjFkODVjMWU4YjZhYjYwODVmZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yHIX9AHQ9/oKqhF51jSWzcRhzEl Ya/G5mr26FqBUE0ICUqodBITmw8k/ERApgvm4yKZvP0ie9PItMX7RoPj2z8m1Zje jXtHWhessSU4LJEpk9AX+epdBEazO1FPqvQXqSG/7EJr+LHekFG+cR1ttcjvqKm+ tA2Vb5lASf3NONRptZ8rgpBTx2XOa9K08Y6iji2u8Pk3g1VZgloqoZVeT761okl6 twxJ8pzbYRuKrlJ4GoRt3Y00RkvW4Gb6pg+2v6hZ6KEDeh8jSyc4wT7+Nv3z5QJd Y/4RvM6WPIkMXH70MVNxfrcNiwC4VyCrl+casZaFwaT5c2ve0WDnNmvmjQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFK1QGQHjkA78D1YdhcHotqtghf0IMB8GA1UdIwQY MBaAFPavQzl03zc7cKvXaxPhxwx3X1VLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2It YTI2YmM2NTNiMDZiLzEvclZBWkFlT1FEdndQVmgyRndlaTJxMkNGX1FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2ItYTI2YmM2NTNiMDZi LzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTASBAIAATAMAwQCLVXYAwQC LVmMMCcEAgACMCEDBQMqDsuAAwcAKhI+gAEAAwcAKhI+gAQAAwYAKhI+gAgwDQYJ KoZIhvcNAQELBQADggEBABNuhzZ5T8K+856mTrR6gIHcbbaA27gAqH0mr5nmXYO+ vV5sa+/3uWVT1jC9Z5IQt0mGYwc2lyplsNVoBgTLZE6ra3uXOLW/UyyIxwgt5PFq R9DjJS0VXjU6R2XcwBJbt8zTCHRe7Oar35vPllWTztZkSIi1xl7Yf9LX5l6q+lsd SQrRYwHWNODrrHqEshe42HekFSGRcZi0JQ3/ji8RhUhhOwvSb10IX1nS09sdEb5d d/6Lg/vUYvuSS/E0CN73PYrxIHNmRPhWL6zf8ir2/H2S680hqD2Cip6KiTHeHCM0 KpKzNO/wQa4ilnYtHcTHpKLXwwDexMlReKAuns5MuBk= -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:50 2026 by rpki-client