This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/p2vUDTrfGYET67DbagcnYju6JdM.roa File: p2vUDTrfGYET67DbagcnYju6JdM.roa (raw, json) Hash identifier: 2cVC89KlsAHVSAb1MD9HqWT6uDk1G4yI2AmYImRTwLw= Subject key identifier: A7:6B:D4:0D:3A:DF:19:81:13:EB:B0:DB:6A:07:27:62:3B:BA:25:D3 Certificate issuer: /CN=541fc54762cfe92d76c2f4c6af8999cbccf6bb67 Certificate serial: 019B7B3688F571964BCE7756F35374C2DD18 Authority key identifier: 54:1F:C5:47:62:CF:E9:2D:76:C2:F4:C6:AF:89:99:CB:CC:F6:BB:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_FR2LP6S12wvTGr4mZy8z2u2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/p2vUDTrfGYET67DbagcnYju6JdM.roa Signing time: Thu 01 Jan 2026 20:18:50 +0000 ROA not before: Thu 01 Jan 2026 20:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203055 IP address blocks: 66.203.124.0/23 maxlen: 24 2a0b:e46:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/VB_FR2LP6S12wvTGr4mZy8z2u2c.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/VB_FR2LP6S12wvTGr4mZy8z2u2c.mft rsync://rpki.ripe.net/repository/DEFAULT/VB_FR2LP6S12wvTGr4mZy8z2u2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:88:f5:71:96:4b:ce:77:56:f3:53:74:c2:dd:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=541fc54762cfe92d76c2f4c6af8999cbccf6bb67 Validity Not Before: Jan 1 20:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a76bd40d3adf198113ebb0db6a0727623bba25d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:20:ab:a5:ce:78:a1:93:b0:39:d4:31:ae: 10:3e:22:01:a6:8a:8a:f8:6a:ed:9d:d4:cb:2a:f7: 7a:a2:82:3f:1f:36:f1:38:5f:e4:fd:e2:37:56:66: 24:c0:8d:a8:81:c5:fe:f2:fb:02:f8:90:b2:5f:fe: de:d3:00:5b:31:27:5b:34:44:75:47:b6:8c:f3:c8: f9:d6:b3:1d:27:cb:2e:08:5e:66:f6:7f:ce:0f:f2: 3c:7d:cc:8f:6b:b0:9f:e4:f0:15:4a:03:0b:93:b0: 78:ce:76:f1:9c:2b:21:9d:52:d2:9a:d3:79:f7:fc: d0:72:fa:70:cb:64:03:7e:6c:cc:a6:87:32:05:c4: 52:ae:5c:21:18:22:05:0e:4e:41:ea:6c:d8:a0:ce: f9:e4:12:ad:ae:88:05:8a:9c:7a:a1:4c:21:da:21: e3:45:2b:f1:52:ab:05:cf:be:d0:e5:19:55:1d:0b: d0:25:9f:df:7e:b4:38:ed:c2:93:76:73:f8:16:e7: 46:b4:0c:5d:73:c6:5e:e6:da:6b:09:37:f8:2a:85: c4:48:a9:f1:2d:2d:9a:7d:3f:30:12:28:84:22:c7: b2:0a:b1:2a:df:1b:77:4e:d2:6b:6e:83:f3:3a:d2: 47:3e:a3:ff:89:85:34:96:f1:77:b5:60:cf:36:b9: 14:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6B:D4:0D:3A:DF:19:81:13:EB:B0:DB:6A:07:27:62:3B:BA:25:D3 X509v3 Authority Key Identifier: keyid:54:1F:C5:47:62:CF:E9:2D:76:C2:F4:C6:AF:89:99:CB:CC:F6:BB:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_FR2LP6S12wvTGr4mZy8z2u2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/p2vUDTrfGYET67DbagcnYju6JdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/VB_FR2LP6S12wvTGr4mZy8z2u2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.203.124.0/23 IPv6: 2a0b:e46:1::/48 Signature Algorithm: sha256WithRSAEncryption 02:2c:8e:29:5a:58:33:8f:14:20:28:2a:f7:74:81:38:36:08: 45:c1:c4:17:d8:b1:b2:b8:67:f7:c0:a2:ca:e3:67:aa:b4:04: ee:25:07:30:aa:75:28:43:13:e4:b1:64:c0:f8:5b:6b:be:8b: 22:b3:c4:66:07:d7:9c:cd:6a:17:90:9f:3c:e5:32:f0:f8:c3: cf:04:75:9e:1e:b3:e3:e9:ae:51:3f:fb:8e:02:5f:63:35:3d: 32:61:33:f6:58:b8:2e:c0:82:15:91:bb:5c:04:ce:90:0d:ba: c8:10:d0:63:a1:45:8e:73:2c:e5:c9:49:75:f2:4c:83:48:19: 01:70:43:ee:6c:01:89:a8:7d:b9:ee:df:dc:b7:bf:6c:82:74: 9b:e4:2a:62:8e:15:7e:e2:bb:4c:22:43:c3:72:a3:63:b4:fc: da:15:0c:14:a3:61:5f:ca:cf:7e:24:34:01:dd:ec:a1:23:d1: e4:d1:f0:a7:56:ea:48:36:80:1f:5b:be:a5:58:d1:81:75:00: 40:d1:01:72:47:bb:3c:16:21:f5:53:6e:dc:12:87:c9:7d:96: 2a:8a:4b:8c:8a:1a:89:0e:81:57:e1:c0:cc:76:00:7a:f5:d4: 84:6e:68:81:1b:41:93:93:90:b0:79:27:fd:d0:ea:86:3b:dc: 14:5c:ba:ab -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7Noj1cZZLzndW81N0wt0YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MWZjNTQ3NjJjZmU5MmQ3NmMyZjRjNmFmODk5OWNiY2Nm NmJiNjcwHhcNMjYwMTAxMjAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzZiZDQwZDNhZGYxOTgxMTNlYmIwZGI2YTA3Mjc2MjNiYmEyNWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBQgq6XOeKGTsDnUMa4QPiIBpoqK +GrtndTLKvd6ooI/HzbxOF/k/eI3VmYkwI2ogcX+8vsC+JCyX/7e0wBbMSdbNER1 R7aM88j51rMdJ8suCF5m9n/OD/I8fcyPa7Cf5PAVSgMLk7B4znbxnCshnVLSmtN5 9/zQcvpwy2QDfmzMpocyBcRSrlwhGCIFDk5B6mzYoM755BKtrogFipx6oUwh2iHj RSvxUqsFz77Q5RlVHQvQJZ/ffrQ47cKTdnP4FudGtAxdc8Ze5tprCTf4KoXESKnx LS2afT8wEiiEIseyCrEq3xt3TtJrboPzOtJHPqP/iYU0lvF3tWDPNrkUOwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKdr1A063xmBE+uw22oHJ2I7uiXTMB8GA1UdIwQY MBaAFFQfxUdiz+ktdsL0xq+JmcvM9rtnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkJfRlIyTFA2UzEyd3ZUR3I0bVp5OHoydTJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kZGRhNWUtZmVlZi00NzYzLTg4ZGEt OGJjODI1YzNhMzI0LzEvcDJ2VURUcmZHWUVUNjdEYmFnY25ZanU2SmRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9kZGRhNWUtZmVlZi00NzYzLTg4ZGEtOGJjODI1YzNhMzI0 LzEvVkJfRlIyTFA2UzEyd3ZUR3I0bVp5OHoydTJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBQst8MA8E AgACMAkDBwAqCw5GAAEwDQYJKoZIhvcNAQELBQADggEBAAIsjilaWDOPFCAoKvd0 gTg2CEXBxBfYsbK4Z/fAosrjZ6q0BO4lBzCqdShDE+SxZMD4W2u+iyKzxGYH15zN aheQnzzlMvD4w88EdZ4es+PprlE/+44CX2M1PTJhM/ZYuC7AghWRu1wEzpANusgQ 0GOhRY5zLOXJSXXyTINIGQFwQ+5sAYmofbnu39y3v2yCdJvkKmKOFX7iu0wiQ8Ny o2O0/NoVDBSjYV/Kz34kNAHd7KEj0eTR8KdW6kg2gB9bvqVY0YF1AEDRAXJHuzwW IfVTbtwSh8l9liqKS4yKGokOgVfhwMx2AHr11IRuaIEbQZOTkLB5J/3Q6oY73BRc uqs= -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:20 2026 by rpki-client