This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/vXSknBNTQ0oZ7Whvnd8JTuL1KfM.roa File: vXSknBNTQ0oZ7Whvnd8JTuL1KfM.roa (raw, json) Hash identifier: zz9MtlhDNe+FkKqAnv7Of89VYfFCibpDPT1qYis5yIE= Subject key identifier: BD:74:A4:9C:13:53:43:4A:19:ED:68:6F:9D:DF:09:4E:E2:F5:29:F3 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758F1DBCF5AFD86E67653438BB75975 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/vXSknBNTQ0oZ7Whvnd8JTuL1KfM.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204254 IP address blocks: 2a00:f826:a::/48 maxlen: 48 2a07:6fc6::/32 maxlen: 32 2a07:6fc6::/40 maxlen: 40 2a07:6fc6::/48 maxlen: 48 2a07:6fc6:1::/48 maxlen: 48 2a07:6fc6:2::/48 maxlen: 48 2a07:6fc6:100::/40 maxlen: 40 2a07:6fc6:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f1:db:cf:5a:fd:86:e6:76:53:43:8b:b7:59:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd74a49c1353434a19ed686f9ddf094ee2f529f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9e:fe:55:76:23:e3:ea:e4:12:cf:be:6a:39: f8:fd:c0:17:f9:63:d0:6c:2a:4a:68:f5:4e:2d:6e: 0e:30:20:2b:87:a8:40:3e:14:a2:0e:9e:1f:8a:ec: c8:86:9d:5c:bb:d0:96:db:a4:44:1f:e3:2c:7e:38: ce:66:b8:0a:d3:a1:87:84:b2:d3:e1:32:26:29:27: 91:cb:ff:c1:48:ee:62:81:24:e5:9c:74:ce:58:78: d8:c6:c4:c1:a0:85:29:ca:88:18:d8:b7:17:09:ab: 98:ed:50:37:63:30:ef:07:7d:72:66:bb:35:dc:b3: c1:fb:50:3a:f0:df:55:96:0c:e3:dc:cb:b2:1f:48: d6:14:06:63:01:4e:7f:a7:5d:56:bd:8b:1b:82:77: d7:96:b6:af:dc:17:be:71:b8:8b:ef:aa:22:40:7d: f0:d2:34:20:00:7f:55:6f:53:91:7c:27:64:c5:4d: fe:04:9a:ec:87:32:90:0f:94:c2:05:cd:49:8c:6a: b8:9c:4b:5b:15:5c:4a:d4:e3:16:8e:e7:62:76:8b: dd:92:c0:77:6d:83:af:e2:1a:97:49:54:c4:35:44: 87:16:11:ed:c0:74:82:97:f2:27:f2:cc:62:13:54: d6:c2:f7:d5:3f:dc:10:cd:92:1b:c9:f8:60:38:d1: 88:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:74:A4:9C:13:53:43:4A:19:ED:68:6F:9D:DF:09:4E:E2:F5:29:F3 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/vXSknBNTQ0oZ7Whvnd8JTuL1KfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:f826:a::/48 2a07:6fc6::/32 Signature Algorithm: sha256WithRSAEncryption 67:53:5c:89:d3:44:32:82:d4:a9:88:a7:c3:14:0a:a5:51:31: a8:de:a6:b6:5b:8b:94:67:f1:e9:dc:69:a2:f0:52:08:c4:2c: 22:79:6e:25:26:92:a3:e8:75:34:38:d6:a8:60:4f:36:1c:60: bf:23:a2:f0:a4:3e:c7:3a:4a:07:04:1e:40:54:fe:d5:26:d0: 58:0f:64:3f:de:f5:de:57:ca:ed:7b:81:92:6d:37:28:5c:76: 8f:2d:ae:e1:73:27:47:8d:32:4e:0d:04:40:07:5c:0f:7b:61: 64:fb:e6:d0:31:d8:7b:2d:53:6b:13:bd:fb:3b:1e:d2:29:eb: 22:80:c4:78:0a:70:a2:0e:ab:2f:ae:3a:f6:fb:fc:14:95:4e: 58:56:2f:58:13:a0:4a:a3:4a:88:bc:dd:95:d0:7a:f7:98:b1: 6a:68:42:9e:e7:68:67:80:52:08:5a:df:2a:49:b5:89:97:ba: 71:d8:59:f1:0b:03:eb:5b:b2:19:4e:2a:78:cc:4d:d9:b7:b7: d9:e2:ac:07:55:43:7c:e2:58:e6:3f:c9:74:1b:0d:a5:85:e6: 07:ad:15:54:3a:88:fd:8d:e5:9b:00:3b:ae:8e:5f:02:6b:0f: 68:4e:2f:a6:10:e2:8d:95:37:71:10:54:f3:e7:c9:dd:1b:15: e1:bc:e4:df -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt3WPHbz1r9huZ2U0OLt1l1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDc0YTQ5YzEzNTM0MzRhMTllZDY4NmY5ZGRmMDk0ZWUyZjUyOWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p7+VXYj4+rkEs++ajn4/cAX+WPQ bCpKaPVOLW4OMCArh6hAPhSiDp4fiuzIhp1cu9CW26REH+MsfjjOZrgK06GHhLLT 4TImKSeRy//BSO5igSTlnHTOWHjYxsTBoIUpyogY2LcXCauY7VA3YzDvB31yZrs1 3LPB+1A68N9Vlgzj3MuyH0jWFAZjAU5/p11WvYsbgnfXlrav3Be+cbiL76oiQH3w 0jQgAH9Vb1ORfCdkxU3+BJrshzKQD5TCBc1JjGq4nEtbFVxK1OMWjudidovdksB3 bYOv4hqXSVTENUSHFhHtwHSCl/In8sxiE1TWwvfVP9wQzZIbyfhgONGIIwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFL10pJwTU0NKGe1ob53fCU7i9SnzMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvdlhTa25CTlRRMG9aN1dodm5kOEpUdUwxS2ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwcAKgD4JgAK AwUAKgdvxjANBgkqhkiG9w0BAQsFAAOCAQEAZ1NcidNEMoLUqYinwxQKpVExqN6m tluLlGfx6dxpovBSCMQsInluJSaSo+h1NDjWqGBPNhxgvyOi8KQ+xzpKBwQeQFT+ 1SbQWA9kP9713lfK7XuBkm03KFx2jy2u4XMnR40yTg0EQAdcD3thZPvm0DHYey1T axO9+zse0inrIoDEeApwog6rL6469vv8FJVOWFYvWBOgSqNKiLzdldB695ixamhC nudoZ4BSCFrfKkm1iZe6cdhZ8QsD61uyGU4qeMxN2be32eKsB1VDfOJY5j/JdBsN pYXmB60VVDqI/Y3lmwA7ro5fAmsPaE4vphDijZU3cRBU8+fJ3RsV4bzk3w== -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:45 2026 by rpki-client