This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/vWRrWwtAN_AuXjapNHLwhv1SIBo.roa File: vWRrWwtAN_AuXjapNHLwhv1SIBo.roa (raw, json) Hash identifier: fe7bV4O9Sg+YHMh3WE3GIDnP0xzL2AGZaC/cvFRSiHw= Subject key identifier: BD:64:6B:5B:0B:40:37:F0:2E:5E:36:A9:34:72:F0:86:FD:52:20:1A Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38A45920E89409ABB91F8278BBFE30 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/vWRrWwtAN_AuXjapNHLwhv1SIBo.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207894 IP address blocks: 2a07:3500:1c30::/48 maxlen: 48 2a07:3500:1c31::/48 maxlen: 48 2a07:3500:1c48::/48 maxlen: 48 2a07:3500:1c49::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a4:59:20:e8:94:09:ab:b9:1f:82:78:bb:fe:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd646b5b0b4037f02e5e36a93472f086fd52201a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ce:28:27:15:ca:e3:87:30:13:23:e1:fd:83: 40:f9:66:a3:8e:5e:f6:56:75:39:28:f5:c0:70:b8: f4:8b:b5:38:f4:1e:2b:56:b9:b4:db:90:be:69:a1: c0:0a:f1:ed:7d:66:b8:93:b6:83:43:39:b2:9e:ef: 89:3f:e5:b2:13:fc:73:8d:a7:0e:e4:c9:86:96:19: e7:0f:c4:04:88:b8:9c:8e:8d:86:91:f7:05:b8:76: 04:64:b5:01:56:96:0b:76:78:67:cf:36:43:64:5c: 9b:c3:7f:ba:03:1b:bb:b4:e9:de:45:42:c7:46:df: 2d:e6:e7:e7:6e:58:e4:3e:2d:6c:18:df:1a:e5:6b: d4:76:f9:b0:1c:e2:e3:25:54:d5:bb:cb:db:e6:3b: 08:78:a5:79:c4:37:56:4c:60:81:3c:33:9b:5a:ea: c5:f8:4e:a5:a6:b0:9d:96:96:58:4a:96:1c:b3:bd: 86:48:9a:5b:7e:c4:8a:94:f2:75:7c:ac:ac:ee:2e: 55:cc:d1:9d:64:0f:7a:c0:49:34:c3:e0:c3:0d:61: 42:c6:18:6e:57:a2:dc:54:ec:db:29:e2:28:3b:c3: 1c:17:d5:a4:07:6c:3b:ff:d7:1c:76:0a:97:3b:1a: f5:7f:72:46:29:87:0e:90:d7:6c:af:f0:07:b1:30: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:64:6B:5B:0B:40:37:F0:2E:5E:36:A9:34:72:F0:86:FD:52:20:1A X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/vWRrWwtAN_AuXjapNHLwhv1SIBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3500:1c30::/47 2a07:3500:1c48::/47 Signature Algorithm: sha256WithRSAEncryption 17:b5:e2:5b:5c:2f:44:22:a3:6e:1d:05:60:50:65:4f:e3:f4: f7:d4:ea:4d:56:65:12:02:0d:bb:a8:9a:0a:44:3e:d0:b6:96: bb:e2:89:0f:6b:f9:06:c6:ce:5d:1f:3e:ac:b2:e5:3d:b4:02: 89:c9:2b:25:78:94:42:87:c9:c0:1c:45:9f:7e:22:0c:27:c1: 3a:5e:78:74:16:d6:2f:3f:99:f2:4a:5f:36:0a:7a:0d:83:05: c8:a0:9a:50:59:bf:37:95:11:2d:6f:71:5e:ba:14:10:21:6b: 80:14:fc:fe:3c:98:03:51:6e:95:47:07:97:93:5b:c7:d8:b2: 9b:83:61:9f:7d:cb:00:2b:3b:62:eb:74:0d:aa:f2:e0:a2:f4: 1d:1f:52:31:75:01:48:93:13:83:40:6b:ac:65:46:c3:ef:05: ac:54:83:cc:50:fc:e2:79:ea:e1:bc:8f:02:13:a1:55:9d:c3: 59:e8:ae:ec:be:f8:cd:6f:cd:90:9b:f8:61:79:bf:06:86:b9: 92:60:7e:1a:2e:73:2d:77:60:20:7a:cb:e6:ba:93:1b:a3:86: d7:cb:18:1e:f8:95:73:1e:af:84:57:db:00:46:d3:e8:79:a6: 42:2b:02:bb:a7:03:4a:b0:ec:46:10:45:08:1f:9e:43:3e:cb: da:2e:f1:f5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OKRZIOiUCau5H4J4u/4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDY0NmI1YjBiNDAzN2YwMmU1ZTM2YTkzNDcyZjA4NmZkNTIyMDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s4oJxXK44cwEyPh/YNA+Wajjl72 VnU5KPXAcLj0i7U49B4rVrm025C+aaHACvHtfWa4k7aDQzmynu+JP+WyE/xzjacO 5MmGlhnnD8QEiLicjo2GkfcFuHYEZLUBVpYLdnhnzzZDZFybw3+6Axu7tOneRULH Rt8t5ufnbljkPi1sGN8a5WvUdvmwHOLjJVTVu8vb5jsIeKV5xDdWTGCBPDObWurF +E6lprCdlpZYSpYcs72GSJpbfsSKlPJ1fKys7i5VzNGdZA96wEk0w+DDDWFCxhhu V6LcVOzbKeIoO8McF9WkB2w7/9ccdgqXOxr1f3JGKYcOkNdsr/AHsTDWmwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFL1ka1sLQDfwLl42qTRy8Ib9UiAaMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvdldScld3dEFOX0F1WGphcE5ITHdodjFTSUJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBKgc1ABww AwcBKgc1ABxIMA0GCSqGSIb3DQEBCwUAA4IBAQAXteJbXC9EIqNuHQVgUGVP4/T3 1OpNVmUSAg27qJoKRD7Qtpa74okPa/kGxs5dHz6ssuU9tAKJySsleJRCh8nAHEWf fiIMJ8E6Xnh0FtYvP5nySl82CnoNgwXIoJpQWb83lREtb3FeuhQQIWuAFPz+PJgD UW6VRweXk1vH2LKbg2GffcsAKzti63QNqvLgovQdH1IxdQFIkxODQGusZUbD7wWs VIPMUPzieerhvI8CE6FVncNZ6K7svvjNb82Qm/hheb8GhrmSYH4aLnMtd2Agesvm upMbo4bXyxge+JVzHq+EV9sARtPoeaZCKwK7pwNKsOxGEEUIH55DPsvaLvH1 -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:48 2026 by rpki-client