This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/Vz79ir6_BwWCBESRPNzz1ckNXsc.roa File: Vz79ir6_BwWCBESRPNzz1ckNXsc.roa (raw, json) Hash identifier: dG0C+pFqUYRSq6DwYuoTbn8bmY5CaKKTWO5YPfwBEHw= Subject key identifier: 57:3E:FD:8A:BE:BF:07:05:82:04:44:91:3C:DC:F3:D5:C9:0D:5E:C7 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758E5B279182410AFC17B80BE85AAAB Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/Vz79ir6_BwWCBESRPNzz1ckNXsc.roa Signing time: Thu 01 Jan 2026 02:17:53 +0000 ROA not before: Thu 01 Jan 2026 02:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51058 IP address blocks: 2a01:360:99::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e5:b2:79:18:24:10:af:c1:7b:80:be:85:aa:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=573efd8abebf0705820444913cdcf3d5c90d5ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0c:6d:bb:e8:2f:7c:e3:a2:50:9f:80:84:85: fb:82:b7:a1:45:84:b8:86:2c:ce:bc:d5:7b:5a:d6: 7f:69:7a:b9:06:b6:45:82:01:69:78:6d:64:84:2b: 7a:71:b9:27:cf:54:3e:1c:b5:b8:f2:1d:e6:be:4c: da:70:fb:91:da:cf:d8:ba:2f:53:45:51:8d:cd:a7: 8b:f2:d1:f0:4d:82:68:0d:80:23:70:1c:f4:36:99: b7:9f:bf:2c:05:0a:83:19:9f:9c:89:ca:ba:bc:f0: 3c:fc:43:3d:bc:de:45:6d:e2:8f:39:72:ee:e7:73: 0b:df:4e:1d:9e:f8:fb:f7:cf:3f:b4:9c:16:83:cc: da:0b:34:71:a1:4c:f4:f0:88:7c:f1:9d:69:51:1d: 53:53:c5:99:a9:ed:0a:ff:5c:27:b1:b4:31:64:25: 26:fe:88:de:b9:f1:de:ad:b7:60:ab:30:19:d9:8d: b3:da:2e:f2:d7:5d:66:37:81:5e:3d:61:17:a8:2f: 8e:2d:86:4f:a1:4a:21:40:b5:9a:a7:34:b1:29:60: c6:db:6e:83:17:1c:3b:e2:8b:4b:63:5d:dc:55:43: de:d4:16:8b:88:19:3b:91:5d:69:89:13:20:c0:ac: 50:10:0f:c9:b1:25:0e:53:51:da:bc:04:03:6d:5e: 34:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3E:FD:8A:BE:BF:07:05:82:04:44:91:3C:DC:F3:D5:C9:0D:5E:C7 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/Vz79ir6_BwWCBESRPNzz1ckNXsc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:360:99::/48 Signature Algorithm: sha256WithRSAEncryption 78:e2:41:9b:cc:2b:2a:2a:be:5b:26:49:14:3b:34:a5:4d:0c: 79:36:24:29:f7:24:d1:43:3f:a5:3c:98:f8:2b:26:f5:38:25: e7:fb:ad:5f:16:05:68:5e:3a:b0:d4:82:e8:f6:bd:78:62:eb: 13:2a:be:42:1e:02:da:39:ac:0b:55:40:17:22:95:c6:9e:13: b8:d0:96:1e:6e:e9:78:78:c9:94:f0:76:64:ce:87:4a:3b:3c: de:8a:2d:68:08:29:fa:45:23:0f:2c:01:c1:45:1d:ce:10:28: e2:9d:9e:44:5b:2c:22:ac:83:d6:68:7a:4a:dc:75:14:d6:05: de:4f:da:97:f6:f3:5e:68:2a:22:84:a5:a4:5c:f0:eb:eb:1d: 75:39:6f:3c:2c:3a:84:a4:94:8f:51:66:cd:7f:64:d8:c7:01: 3f:1c:bb:65:98:34:bc:bf:e9:be:58:1c:ff:ac:2d:c4:89:40: 36:60:a6:fb:a0:97:da:b2:5c:25:ec:44:2f:7b:62:61:7b:ef: e7:97:c7:8d:aa:96:ca:7b:a5:e0:42:af:5f:90:ef:2d:b3:38: 44:b0:5b:9c:1a:e8:99:8a:96:f7:1d:77:40:ea:58:98:20:1a: 61:6a:0b:97:87:cd:dd:12:88:e4:bc:b7:08:0d:c8:05:a0:a0: db:94:be:8d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WOWyeRgkEK/Be4C+haqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzNlZmQ4YWJlYmYwNzA1ODIwNDQ0OTEzY2RjZjNkNWM5MGQ1ZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAxtu+gvfOOiUJ+AhIX7grehRYS4 hizOvNV7WtZ/aXq5BrZFggFpeG1khCt6cbknz1Q+HLW48h3mvkzacPuR2s/Yui9T RVGNzaeL8tHwTYJoDYAjcBz0Npm3n78sBQqDGZ+cicq6vPA8/EM9vN5FbeKPOXLu 53ML304dnvj7988/tJwWg8zaCzRxoUz08Ih88Z1pUR1TU8WZqe0K/1wnsbQxZCUm /ojeufHerbdgqzAZ2Y2z2i7y111mN4FePWEXqC+OLYZPoUohQLWapzSxKWDG226D Fxw74otLY13cVUPe1BaLiBk7kV1piRMgwKxQEA/JsSUOU1HavAQDbV40GQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFc+/Yq+vwcFggREkTzc89XJDV7HMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvVno3OWlyNl9Cd1dDQkVTUlBOenoxY2tOWHNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEDYACZ MA0GCSqGSIb3DQEBCwUAA4IBAQB44kGbzCsqKr5bJkkUOzSlTQx5NiQp9yTRQz+l PJj4Kyb1OCXn+61fFgVoXjqw1ILo9r14YusTKr5CHgLaOawLVUAXIpXGnhO40JYe bul4eMmU8HZkzodKOzzeii1oCCn6RSMPLAHBRR3OECjinZ5EWywirIPWaHpK3HUU 1gXeT9qX9vNeaCoihKWkXPDr6x11OW88LDqEpJSPUWbNf2TYxwE/HLtlmDS8v+m+ WBz/rC3EiUA2YKb7oJfaslwl7EQve2Jhe+/nl8eNqpbKe6XgQq9fkO8tszhEsFuc GuiZipb3HXdA6liYIBphaguXh83dEojkvLcIDcgFoKDblL6N -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:47 2026 by rpki-client