This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/VChK6W8_i7KzNeJCYx2BZhWr3Us.roa File: VChK6W8_i7KzNeJCYx2BZhWr3Us.roa (raw, json) Hash identifier: W4XLdsDcBYlIZCoLkL1ahtz4JOKN4o+Rhjw4JGtYoSA= Subject key identifier: 54:28:4A:E9:6F:3F:8B:B2:B3:35:E2:42:63:1D:81:66:15:AB:DD:4B Certificate issuer: /CN=a6762182184488e7f787122a7180997ce8e90d4c Certificate serial: 019B77C6CFDAA10EA710D91B98FB98181714 Authority key identifier: A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/VChK6W8_i7KzNeJCYx2BZhWr3Us.roa Signing time: Thu 01 Jan 2026 04:17:56 +0000 ROA not before: Thu 01 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213932 IP address blocks: 96.9.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:cf:da:a1:0e:a7:10:d9:1b:98:fb:98:18:17:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6762182184488e7f787122a7180997ce8e90d4c Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54284ae96f3f8bb2b335e242631d816615abdd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:59:ce:69:8d:f1:64:9a:22:38:d9:b2:49:8a: 27:78:b1:f7:25:e7:de:50:a5:2e:b2:e2:66:3c:05: cf:3a:2e:5f:d3:1a:f1:a7:f4:77:cf:15:0e:64:ca: 51:fd:b5:eb:76:43:7d:f4:f6:9a:cb:b3:3a:c8:08: d9:92:44:d6:5c:4b:6c:7b:09:f9:85:2f:cd:48:f4: b9:84:a2:23:1e:48:d5:9c:2e:85:6f:ba:db:a6:aa: 94:f7:48:c9:4b:09:e6:40:f9:3d:4e:4e:71:06:9f: b6:2a:40:dd:f7:41:15:48:45:22:72:61:1b:1d:f7: 3a:e0:2c:40:34:45:5f:7e:f9:c0:34:aa:31:7d:65: 25:bf:0b:82:02:04:a4:b3:a5:35:5f:7a:d8:14:a6: 31:3e:c3:8d:57:06:ec:ba:c8:0c:d1:a3:40:83:e9: 65:42:91:59:81:69:ed:98:dd:84:12:1d:8c:5e:71: 77:b6:c1:9f:90:42:9e:02:5b:4b:08:17:00:98:3a: c5:19:29:57:df:02:e7:7b:48:37:87:cd:72:ac:c6: f2:05:f3:69:00:6e:70:ef:f9:80:7f:7e:5f:aa:9c: 93:c9:5d:bf:82:94:d4:e5:51:9b:e9:cd:b9:0a:fd: 0d:fd:96:a2:24:cd:a9:64:48:bb:d5:33:7e:07:ab: 08:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:28:4A:E9:6F:3F:8B:B2:B3:35:E2:42:63:1D:81:66:15:AB:DD:4B X509v3 Authority Key Identifier: keyid:A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/VChK6W8_i7KzNeJCYx2BZhWr3Us.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.9.127.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:6d:72:93:1f:51:a6:8e:67:7f:98:55:0c:9a:34:51:15:fa: 73:b3:2b:e0:14:9b:32:7c:fc:d2:27:9d:f8:ff:35:8c:9b:5c: b2:41:ee:f8:09:3c:22:97:2a:8c:fa:d2:c3:27:d7:62:28:2a: 54:c2:1a:4c:7e:36:68:ab:28:de:c7:d5:81:16:1b:d4:6a:cb: af:fa:92:17:ce:ee:ec:01:f7:3c:33:3e:8b:3a:1a:9d:fb:f1: 3c:55:48:01:85:79:a8:65:5b:d9:2d:da:7e:58:ee:09:5f:5e: ab:b2:48:d5:8b:4c:43:7b:07:21:fc:ae:35:f2:41:e9:40:b8: 9c:1c:e1:bd:8f:e4:2d:06:b5:99:40:89:2e:00:20:f4:0f:63: f1:24:c5:2c:2f:31:64:c0:53:86:e3:8e:25:1f:0f:b9:68:78: 4d:a0:e4:c6:33:99:96:67:3c:55:e7:ae:f3:3c:68:8e:c3:1b: 1e:f4:c8:54:62:6c:bf:cd:50:92:b4:f5:8f:b4:5e:cb:11:0b: 65:2e:b3:24:e8:a1:02:ff:47:3b:df:94:29:b0:65:e8:90:a8: 56:d1:23:f7:bc:b5:76:8e:c0:af:ec:7d:4e:7c:a9:0e:6f:f6: 4e:21:ff:bd:13:1c:74:4f:b9:56:62:dc:7d:d5:8b:ae:48:14: 9b:e5:29:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xs/aoQ6nENkbmPuYGBcUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NzYyMTgyMTg0NDg4ZTdmNzg3MTIyYTcxODA5OTdjZThl OTBkNGMwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDI4NGFlOTZmM2Y4YmIyYjMzNWUyNDI2MzFkODE2NjE1YWJkZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFnOaY3xZJoiONmySYoneLH3Jefe UKUusuJmPAXPOi5f0xrxp/R3zxUOZMpR/bXrdkN99Paay7M6yAjZkkTWXEtsewn5 hS/NSPS5hKIjHkjVnC6Fb7rbpqqU90jJSwnmQPk9Tk5xBp+2KkDd90EVSEUicmEb Hfc64CxANEVffvnANKoxfWUlvwuCAgSks6U1X3rYFKYxPsONVwbsusgM0aNAg+ll QpFZgWntmN2EEh2MXnF3tsGfkEKeAltLCBcAmDrFGSlX3wLne0g3h81yrMbyBfNp AG5w7/mAf35fqpyTyV2/gpTU5VGb6c25Cv0N/ZaiJM2pZEi71TN+B6sIBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFQoSulvP4uyszXiQmMdgWYVq91LMB8GA1UdIwQY MBaAFKZ2IYIYRIjn94cSKnGAmXzo6Q1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5ZaGdoaEVpT2YzaHhJcWNZQ1pmT2pwRFV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yZjMxOWUtMjY4NS00NDI3LWFlYzAt ZWQ2MGJhYjc1NzJmLzEvVkNoSzZXOF9pN0t6TmVKQ1l4MkJaaFdyM1VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yZjMxOWUtMjY4NS00NDI3LWFlYzAtZWQ2MGJhYjc1NzJm LzEvcG5ZaGdoaEVpT2YzaHhJcWNZQ1pmT2pwRFV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAl/MA0G CSqGSIb3DQEBCwUAA4IBAQBubXKTH1Gmjmd/mFUMmjRRFfpzsyvgFJsyfPzSJ534 /zWMm1yyQe74CTwilyqM+tLDJ9diKCpUwhpMfjZoqyjex9WBFhvUasuv+pIXzu7s Afc8Mz6LOhqd+/E8VUgBhXmoZVvZLdp+WO4JX16rskjVi0xDewch/K418kHpQLic HOG9j+QtBrWZQIkuACD0D2PxJMUsLzFkwFOG444lHw+5aHhNoOTGM5mWZzxV567z PGiOwxse9MhUYmy/zVCStPWPtF7LEQtlLrMk6KEC/0c735QpsGXokKhW0SP3vLV2 jsCv7H1OfKkOb/ZOIf+9Exx0T7lWYtx91YuuSBSb5Slb -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:16 2026 by rpki-client