This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Vww98bQE9oOliBaARThlZWlfTHA.roa File: Vww98bQE9oOliBaARThlZWlfTHA.roa (raw, json) Hash identifier: YePFLt80ldqyk49XkMxL1S6U1mdh96LW8A0WuHE0JPo= Subject key identifier: 57:0C:3D:F1:B4:04:F6:83:A5:88:16:80:45:38:65:65:69:5F:4C:70 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C801FE4B7E4B3F89DBEEC02A0D23AA2 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Vww98bQE9oOliBaARThlZWlfTHA.roa Signing time: Fri 02 Jan 2026 02:18:49 +0000 ROA not before: Fri 02 Jan 2026 02:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197860 IP address blocks: 2a0f:7803:fed0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:1f:e4:b7:e4:b3:f8:9d:be:ec:02:a0:d2:3a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=570c3df1b404f683a588168045386565695f4c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:74:0d:5d:65:26:74:6d:f1:6f:62:a9:cd: b1:c6:03:30:72:7e:b8:3b:f3:88:85:fa:4c:90:65: fe:98:98:68:37:5c:81:75:35:c5:80:92:f8:b7:9d: 90:a5:66:fd:cf:c4:57:fa:3b:07:15:ae:19:fa:95: 00:95:5d:87:5c:c5:47:16:3d:48:45:a4:3f:ce:6d: 85:bd:30:56:6e:70:ea:8e:a2:08:d3:65:2c:8e:02: 0d:da:ef:66:8d:fc:c0:00:c4:79:b2:10:2d:76:cd: e4:1a:a2:a3:1e:6d:2b:23:29:d6:61:90:ed:87:8d: 3a:b8:72:9d:09:ad:05:af:51:3a:3d:3c:53:73:c9: 5d:5c:21:5f:ba:c0:61:c6:92:48:57:fb:73:88:b7: 68:f7:3d:76:4f:f3:9e:70:2b:ed:0f:af:ff:e7:5d: 0a:ce:2c:d7:8c:c3:26:de:65:84:62:55:15:9b:3b: af:45:ab:8a:7d:fe:80:19:7f:c9:71:e3:47:21:a2: 20:26:91:bb:30:73:3e:9d:24:d0:d9:d5:37:fd:5f: 9b:11:47:c5:30:2d:34:fb:bf:f7:d4:a0:d4:9a:3f: 57:33:12:e4:71:ab:e2:90:ac:46:43:98:ed:cc:03: 72:77:ec:c3:bb:91:c6:7c:3d:d8:da:de:4c:2c:e3: f0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0C:3D:F1:B4:04:F6:83:A5:88:16:80:45:38:65:65:69:5F:4C:70 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Vww98bQE9oOliBaARThlZWlfTHA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fed0::/44 Signature Algorithm: sha256WithRSAEncryption 22:3d:a5:14:de:5b:e1:a5:4f:3a:af:60:9d:cc:07:45:46:c6: ed:74:58:52:65:14:b5:4e:2a:90:5e:cf:61:b4:01:ca:ad:b5: c6:91:91:9a:52:6e:fa:29:48:9d:d4:0d:c2:42:1a:2a:c7:dd: 4b:6a:75:57:f5:9f:5c:79:2f:e4:01:6d:66:66:fc:92:a6:30: d3:32:7f:0c:6a:98:e8:af:9e:d9:ac:a0:99:a1:6a:f8:72:27: 60:65:2f:ca:d6:52:3c:00:51:71:f0:01:5c:0e:64:30:a5:2c: 97:f7:52:95:33:d8:9a:47:2b:e0:14:dc:ad:c9:bc:25:8f:a9: 98:d0:9e:80:05:1e:ec:83:2d:82:98:75:bf:06:62:4d:15:c9: 33:e6:44:ad:83:52:5c:6c:7c:c5:d5:33:d6:c7:ec:14:1c:36: 89:03:87:35:4e:0e:b9:08:e1:50:d3:92:ff:5a:dd:cd:a8:92: 3d:a1:ff:1d:ec:c7:8e:14:b7:6b:b7:6b:25:f1:2d:51:b1:eb: fc:b1:cc:7f:b8:3c:52:75:71:4c:06:e1:a5:14:ae:8b:54:92: 81:20:47:31:0b:9f:eb:57:48:eb:23:2d:ef:ad:39:21:64:c6: 9a:2a:48:16:48:9f:69:c8:3e:c9:c4:ff:68:30:c7:ae:12:39: d8:de:4e:4b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gB/kt+Sz+J2+7AKg0jqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzBjM2RmMWI0MDRmNjgzYTU4ODE2ODA0NTM4NjU2NTY5NWY0YzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVR0DV1lJnRt8W9iqc2xxgMwcn64 O/OIhfpMkGX+mJhoN1yBdTXFgJL4t52QpWb9z8RX+jsHFa4Z+pUAlV2HXMVHFj1I RaQ/zm2FvTBWbnDqjqII02UsjgIN2u9mjfzAAMR5shAtds3kGqKjHm0rIynWYZDt h406uHKdCa0Fr1E6PTxTc8ldXCFfusBhxpJIV/tziLdo9z12T/OecCvtD6//510K zizXjMMm3mWEYlUVmzuvRauKff6AGX/JceNHIaIgJpG7MHM+nSTQ2dU3/V+bEUfF MC00+7/31KDUmj9XMxLkcavikKxGQ5jtzANyd+zDu5HGfD3Y2t5MLOPw9QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFcMPfG0BPaDpYgWgEU4ZWVpX0xwMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvVnd3OThiUUU5b09saUJhQVJUaGxaV2xmVEhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/7Q MA0GCSqGSIb3DQEBCwUAA4IBAQAiPaUU3lvhpU86r2CdzAdFRsbtdFhSZRS1TiqQ Xs9htAHKrbXGkZGaUm76KUid1A3CQhoqx91LanVX9Z9ceS/kAW1mZvySpjDTMn8M apjor57ZrKCZoWr4cidgZS/K1lI8AFFx8AFcDmQwpSyX91KVM9iaRyvgFNytybwl j6mY0J6ABR7sgy2CmHW/BmJNFckz5kStg1JcbHzF1TPWx+wUHDaJA4c1Tg65COFQ 05L/Wt3NqJI9of8d7MeOFLdrt2sl8S1Rsev8scx/uDxSdXFMBuGlFK6LVJKBIEcx C5/rV0jrIy3vrTkhZMaaKkgWSJ9pyD7JxP9oMMeuEjnY3k5L -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:54 2026 by rpki-client