This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/V0DG5GfpNDQhY80BVaNKbxP2_OQ.roa File: V0DG5GfpNDQhY80BVaNKbxP2_OQ.roa (raw, json) Hash identifier: GGZTU575eBVslHsOPGqLGchOk6Yf9luJKsqt+OFhTRM= Subject key identifier: 57:40:C6:E4:67:E9:34:34:21:63:CD:01:55:A3:4A:6F:13:F6:FC:E4 Certificate issuer: /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c Certificate serial: 019B7F157FDE3BCDA9DBA548917A34FA9DD7 Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/V0DG5GfpNDQhY80BVaNKbxP2_OQ.roa Signing time: Fri 02 Jan 2026 14:21:13 +0000 ROA not before: Fri 02 Jan 2026 14:21:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 2a14:2ec0:586::/48 maxlen: 48 2a14:2ec0:edea::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:7f:de:3b:cd:a9:db:a5:48:91:7a:34:fa:9d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c Validity Not Before: Jan 2 14:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5740c6e467e934342163cd0155a34a6f13f6fce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:22:25:87:82:41:16:d0:c5:a8:1d:68:3c: fb:dc:5f:ee:76:27:84:2d:28:2b:7a:3e:91:1f:b1: 05:d1:4f:c3:78:8d:31:f1:c4:33:2b:03:39:89:3f: 51:50:74:b7:a0:8b:26:4e:c4:e7:a8:e6:fc:d1:99: 05:6d:1c:90:f0:db:c5:04:ff:39:39:b0:21:5c:d4: 83:28:51:51:b7:82:e6:05:2c:d1:72:74:aa:9f:21: 30:79:e5:90:31:c4:88:11:42:b9:66:3f:74:95:3e: d4:4f:da:c6:db:a7:89:25:00:91:61:2b:3d:66:31: 98:50:14:b6:64:e7:0a:76:70:e8:e4:38:5d:5e:d6: 0d:f9:a9:ed:5a:0c:21:c3:81:e5:dc:fb:9b:84:b0: 67:a2:2e:7b:8a:06:24:01:ef:82:ae:cf:a7:85:c9: e9:f5:e6:0d:0d:32:6f:2c:ca:95:09:ae:a3:10:48: 6a:66:bb:c3:86:2b:c8:5a:2a:c5:e7:b8:df:56:f2: fd:93:35:78:e7:70:5c:05:85:8e:8c:20:48:6a:d4: 30:2a:71:cf:a7:98:de:24:c6:e6:c2:b4:ec:21:4d: 75:01:ba:6f:2f:d3:6a:42:29:d5:9b:93:c0:b6:68: 66:a5:f0:f2:a0:44:f9:0c:34:29:4a:07:51:81:de: fc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:40:C6:E4:67:E9:34:34:21:63:CD:01:55:A3:4A:6F:13:F6:FC:E4 X509v3 Authority Key Identifier: keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/V0DG5GfpNDQhY80BVaNKbxP2_OQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:2ec0:586::/48 2a14:2ec0:edea::/48 Signature Algorithm: sha256WithRSAEncryption 3d:65:55:a2:88:33:43:ee:1d:44:ea:48:01:89:46:ad:11:e8: 23:0b:25:b4:db:91:b3:c3:e9:23:b7:34:49:9e:23:49:93:c0: e4:c6:3d:7a:6b:1a:00:11:ee:02:ca:03:b0:12:d0:76:5e:a0: 09:b0:1e:2a:3c:16:82:f9:f7:83:b4:11:02:85:e1:e8:81:91: 83:83:50:61:37:45:4f:74:67:19:79:30:18:50:18:08:41:32: b6:2d:8c:f7:2d:13:2d:86:15:71:59:6a:bc:0d:ee:d4:9d:67: f0:9f:86:b5:49:67:d2:2c:03:d8:e7:c3:0e:4d:e8:60:b3:65: 9d:fd:98:2f:81:ed:e2:a1:e9:ec:ab:06:fb:45:1e:65:32:22: 45:48:fc:36:c6:fc:b3:d3:e4:66:41:df:12:c2:37:f5:41:9f: 44:ef:8a:71:13:1e:1e:84:0d:64:f2:4e:7d:91:62:91:4c:fc: 26:88:70:56:95:41:a8:63:73:83:12:6b:2e:6d:ed:05:2b:9b: 82:0a:2e:3e:9a:0d:b8:63:32:6a:e9:8c:8c:e3:10:fb:53:3f: dd:62:56:4d:0e:46:f6:3b:0b:32:4e:af:57:e8:d6:1e:38:50: fe:4d:94:87:f9:e7:69:e4:57:a9:92:4d:34:20:db:76:07:22: f6:37:d4:5f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FX/eO82p26VIkXo0+p3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMjY0MDM1MWFiMjFhMGRjN2FhYTE1ZmFiNWIxMTA5Nzc3 MTRhM2MwHhcNMjYwMTAyMTQyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzQwYzZlNDY3ZTkzNDM0MjE2M2NkMDE1NWEzNGE2ZjEzZjZmY2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3kiJYeCQRbQxagdaDz73F/udieE LSgrej6RH7EF0U/DeI0x8cQzKwM5iT9RUHS3oIsmTsTnqOb80ZkFbRyQ8NvFBP85 ObAhXNSDKFFRt4LmBSzRcnSqnyEweeWQMcSIEUK5Zj90lT7UT9rG26eJJQCRYSs9 ZjGYUBS2ZOcKdnDo5DhdXtYN+antWgwhw4Hl3PubhLBnoi57igYkAe+Crs+nhcnp 9eYNDTJvLMqVCa6jEEhqZrvDhivIWirF57jfVvL9kzV453BcBYWOjCBIatQwKnHP p5jeJMbmwrTsIU11AbpvL9NqQinVm5PAtmhmpfDyoET5DDQpSgdRgd78wQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFdAxuRn6TQ0IWPNAVWjSm8T9vzkMB8GA1UdIwQY MBaAFLImQDUashoNx6qhX6tbEQl3cUo8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2laQU5ScXlHZzNIcXFGZnExc1JDWGR4U2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lMzhmZjAtNDY5Yi00MWU1LWJiZWQt MTc5ZTZlNDI5MGMwLzEvVjBERzVHZnBORFFoWTgwQlZhTktieFAyX09RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9lMzhmZjAtNDY5Yi00MWU1LWJiZWQtMTc5ZTZlNDI5MGMw LzEvc2laQU5ScXlHZzNIcXFGZnExc1JDWGR4U2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhQuwAWG AwcAKhQuwO3qMA0GCSqGSIb3DQEBCwUAA4IBAQA9ZVWiiDND7h1E6kgBiUatEegj CyW025Gzw+kjtzRJniNJk8Dkxj16axoAEe4CygOwEtB2XqAJsB4qPBaC+feDtBEC heHogZGDg1BhN0VPdGcZeTAYUBgIQTK2LYz3LRMthhVxWWq8De7UnWfwn4a1SWfS LAPY58MOTehgs2Wd/Zgvge3ioensqwb7RR5lMiJFSPw2xvyz0+RmQd8Swjf1QZ9E 74pxEx4ehA1k8k59kWKRTPwmiHBWlUGoY3ODEmsube0FK5uCCi4+mg24YzJq6YyM 4xD7Uz/dYlZNDkb2OwsyTq9X6NYeOFD+TZSH+edp5Fepkk00INt2ByL2N9Rf -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:14 2026 by rpki-client