This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/Va166GUo1j4Km5QFOFbKHDg4EtA.roa File: Va166GUo1j4Km5QFOFbKHDg4EtA.roa (raw, json) Hash identifier: PmLYcUxAZSKvXj0b7u2OqGgQG9jf6q/8giX/ZnIzXjk= Subject key identifier: 55:AD:7A:E8:65:28:D6:3E:0A:9B:94:05:38:56:CA:1C:38:38:12:D0 Certificate issuer: /CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa Certificate serial: 019B7E391374D8350F9764A924563F98A523 Authority key identifier: 9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/Va166GUo1j4Km5QFOFbKHDg4EtA.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206141 IP address blocks: 87.237.160.0/22 maxlen: 22 2a06:13c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.mft rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:13:74:d8:35:0f:97:64:a9:24:56:3f:98:a5:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dcf5edc4e6aedc8df4245a62fa37fa22a620eaa Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55ad7ae86528d63e0a9b94053856ca1c383812d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:36:9f:3e:98:d0:73:f1:cb:a2:b8:0d:47: e1:75:c6:98:cd:c0:9d:54:8d:5d:43:e8:9b:af:b8: 4e:7a:d9:7d:e0:59:63:4e:7d:ca:65:c1:85:fb:b5: 9a:46:f4:a4:35:14:40:72:d3:ad:b6:4d:69:e6:95: 13:2e:36:13:60:f1:01:97:41:d4:25:9f:62:fb:35: 57:b6:77:86:86:39:5c:b5:42:20:86:46:ca:20:99: c4:78:29:f7:54:90:aa:ef:6b:a2:e4:28:05:b9:b6: 7f:95:60:62:c8:fb:e5:94:c9:c7:1b:2b:e6:b9:82: 92:f8:fb:69:dc:97:27:35:ec:4f:87:4b:1c:c1:43: f0:55:6f:9b:7b:27:5d:38:66:f1:2e:2e:04:90:cf: b8:44:e6:5c:c5:65:82:0d:3f:16:53:fe:9c:c5:c5: 50:6c:93:ce:2b:45:86:de:08:cf:f6:3f:d8:83:ac: 3b:ca:99:59:fb:74:05:01:20:a0:4e:58:02:c4:9d: d6:cb:0b:b6:e0:d1:bf:d0:5b:01:8b:ae:15:dd:f3: a6:e5:fe:0c:00:16:1a:6b:5c:a8:86:80:55:52:ab: ab:e4:3f:6c:ca:4f:8b:07:22:a6:10:01:d6:05:ea: 98:32:33:fd:ef:09:af:dd:be:e1:0c:8f:dd:9b:bd: 4f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AD:7A:E8:65:28:D6:3E:0A:9B:94:05:38:56:CA:1C:38:38:12:D0 X509v3 Authority Key Identifier: keyid:9D:CF:5E:DC:4E:6A:ED:C8:DF:42:45:A6:2F:A3:7F:A2:2A:62:0E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc9e3E5q7cjfQkWmL6N_oipiDqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/Va166GUo1j4Km5QFOFbKHDg4EtA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1d1b45-86e9-46ee-991c-0eddeb48e3ae/1/nc9e3E5q7cjfQkWmL6N_oipiDqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.237.160.0/22 IPv6: 2a06:13c0::/29 Signature Algorithm: sha256WithRSAEncryption 6e:e5:3d:a5:a5:79:bc:be:84:b0:9b:54:b2:f9:67:46:5e:fb: 1e:5d:5b:50:cc:d5:01:83:7c:95:27:61:8a:b0:22:b0:4d:e0: 40:95:fa:92:e1:6c:70:b7:35:14:a7:65:ad:be:a5:6e:eb:38: cf:b4:14:23:0b:18:59:5e:06:ee:a7:47:07:c9:99:40:9d:29: 9b:f6:43:a9:6e:2e:7a:1b:dc:94:8a:1e:af:c5:5d:07:bd:d4: f1:91:c7:d4:8c:5a:83:f4:db:88:e3:30:3f:dc:ee:6e:b6:b2: 8f:ca:c5:86:72:3b:28:ee:b1:9a:34:0e:56:2b:3b:15:c9:07: d9:9a:8d:4e:d2:e9:16:d9:d5:cd:a3:c2:94:7d:47:95:0d:3e: 16:ba:2e:16:99:51:e5:e2:9a:66:c5:0b:57:c9:18:b5:9d:44: b1:ac:9d:0b:f3:8e:ee:f6:4a:94:eb:ca:03:20:e1:56:b6:cc: 28:d7:59:b3:fb:85:d6:09:ad:1d:d6:76:fb:50:03:03:9b:01: 5d:b1:d0:98:7f:21:2d:46:48:3b:43:38:4a:86:fd:13:35:32: 37:e0:fc:73:4a:58:92:62:50:8f:34:73:0c:12:f4:27:a5:d8: 29:d0:88:eb:98:bc:f8:c9:53:66:ef:cc:36:17:b6:9f:f0:c7: ed:40:d2:05 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+ORN02DUPl2SpJFY/mKUjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkY2Y1ZWRjNGU2YWVkYzhkZjQyNDVhNjJmYTM3ZmEyMmE2 MjBlYWEwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWFkN2FlODY1MjhkNjNlMGE5Yjk0MDUzODU2Y2ExYzM4MzgxMmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1c2nz6Y0HPxy6K4DUfhdcaYzcCd VI1dQ+ibr7hOetl94FljTn3KZcGF+7WaRvSkNRRActOttk1p5pUTLjYTYPEBl0HU JZ9i+zVXtneGhjlctUIghkbKIJnEeCn3VJCq72ui5CgFubZ/lWBiyPvllMnHGyvm uYKS+Ptp3JcnNexPh0scwUPwVW+beyddOGbxLi4EkM+4ROZcxWWCDT8WU/6cxcVQ bJPOK0WG3gjP9j/Yg6w7yplZ+3QFASCgTlgCxJ3Wywu24NG/0FsBi64V3fOm5f4M ABYaa1yohoBVUqur5D9syk+LByKmEAHWBeqYMjP97wmv3b7hDI/dm71PlwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFWteuhlKNY+CpuUBThWyhw4OBLQMB8GA1UdIwQY MBaAFJ3PXtxOau3I30JFpi+jf6IqYg6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmM5ZTNFNXE3Y2pmUWtXbUw2Tl9vaXBpRHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xZDFiNDUtODZlOS00NmVlLTk5MWMt MGVkZGViNDhlM2FlLzEvVmExNjZHVW8xajRLbTVRRk9GYktIRGc0RXRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xZDFiNDUtODZlOS00NmVlLTk5MWMtMGVkZGViNDhlM2Fl LzEvbmM5ZTNFNXE3Y2pmUWtXbUw2Tl9vaXBpRHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCV+2gMA0E AgACMAcDBQMqBhPAMA0GCSqGSIb3DQEBCwUAA4IBAQBu5T2lpXm8voSwm1Sy+WdG XvseXVtQzNUBg3yVJ2GKsCKwTeBAlfqS4WxwtzUUp2WtvqVu6zjPtBQjCxhZXgbu p0cHyZlAnSmb9kOpbi56G9yUih6vxV0HvdTxkcfUjFqD9NuI4zA/3O5utrKPysWG cjso7rGaNA5WKzsVyQfZmo1O0ukW2dXNo8KUfUeVDT4Wui4WmVHl4ppmxQtXyRi1 nUSxrJ0L847u9kqU68oDIOFWtswo11mz+4XWCa0d1nb7UAMDmwFdsdCYfyEtRkg7 QzhKhv0TNTI34PxzSliSYlCPNHMMEvQnpdgp0IjrmLz4yVNm78w2F7af8MftQNIF -----END CERTIFICATE-----Generated at Tue Jan 27 13:00:08 2026 by rpki-client