This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/Voryts3H0G0caI1RibG37Pl0zCw.roa File: Voryts3H0G0caI1RibG37Pl0zCw.roa (raw, json) Hash identifier: xHSS1anAiTiInjkGpFXJvjSgMKLNfODVMCr5KM1vL48= Subject key identifier: 56:8A:F2:B6:CD:C7:D0:6D:1C:68:8D:51:89:B1:B7:EC:F9:74:CC:2C Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0 Certificate serial: 019B7AC79A8F2A95770A8B4233A90F360D46 Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/Voryts3H0G0caI1RibG37Pl0zCw.roa Signing time: Thu 01 Jan 2026 18:17:40 +0000 ROA not before: Thu 01 Jan 2026 18:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215739 IP address blocks: 84.252.80.0/22 maxlen: 22 84.252.80.0/24 maxlen: 24 84.252.81.0/24 maxlen: 24 84.252.82.0/24 maxlen: 24 84.252.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9a:8f:2a:95:77:0a:8b:42:33:a9:0f:36:0d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0 Validity Not Before: Jan 1 18:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=568af2b6cdc7d06d1c688d5189b1b7ecf974cc2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:68:2d:f5:78:40:ae:cd:29:cd:80:7c:b9:f9: bd:0d:60:9e:aa:d9:f8:d6:fa:3e:0e:f8:44:21:74: 40:d1:28:9b:ff:d4:57:82:f2:13:4e:71:fb:ca:b9: 73:df:d7:9d:95:79:3b:a4:6b:a6:77:d5:e8:bb:15: 49:26:c6:94:25:06:fd:dc:1a:2f:2e:24:45:51:9e: 85:ca:09:51:f6:42:79:ea:5c:e4:0b:d0:05:f5:61: 35:ac:64:87:ae:1f:f3:35:aa:28:de:a8:90:8f:43: ab:be:a1:ae:7c:12:8c:c2:da:e6:ef:a3:11:74:72: 62:43:bc:01:95:20:9c:de:88:53:2f:cf:d0:25:4f: 25:27:7e:f6:56:58:9f:3a:58:69:db:1d:59:2d:ad: 7a:9e:eb:ca:d3:8b:7e:31:12:06:55:be:cd:2b:0b: 6b:a2:c0:10:b4:19:ae:a0:cd:0d:20:ea:e7:be:1c: 86:29:ea:a4:20:f9:cf:cf:c5:98:76:79:80:65:52: 25:30:81:f6:80:e1:6e:5f:ed:9c:ff:37:1a:1b:32: ba:21:58:50:00:31:b9:b5:3c:ed:8d:23:ca:a7:f9: de:cc:98:29:7b:5e:61:f8:1d:14:00:e0:e9:41:a6: e3:80:45:18:23:87:73:8b:b2:38:13:9b:b5:f1:d7: e9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8A:F2:B6:CD:C7:D0:6D:1C:68:8D:51:89:B1:B7:EC:F9:74:CC:2C X509v3 Authority Key Identifier: keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/Voryts3H0G0caI1RibG37Pl0zCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.252.80.0/22 Signature Algorithm: sha256WithRSAEncryption 27:61:16:eb:d8:d2:3c:00:3b:32:4b:a7:64:93:3e:22:e2:06: c6:0d:a1:7c:f9:98:95:bf:47:32:30:39:28:69:c4:ed:52:70: 6f:97:e1:4a:68:85:0c:ec:fe:1e:c4:1a:27:f1:9b:20:cb:2b: 5d:10:df:d2:d4:a5:16:e5:7d:07:8e:fc:d5:52:5e:22:40:c0: ce:bb:cf:0a:b7:10:81:a8:46:f7:01:98:b3:f3:64:dd:c5:2d: e2:24:11:35:6c:b5:e2:24:86:32:aa:55:76:20:78:c5:6c:95: 8d:04:2d:f1:5f:6a:a1:04:d7:8b:bd:6b:4f:12:5b:ff:57:36: 83:d9:c2:60:59:26:04:7f:54:9b:27:9a:d7:1b:61:3b:d2:55: 73:94:34:78:0f:c1:7f:e4:da:1b:e5:90:5b:fb:15:68:56:70: 95:1e:dd:1e:88:fd:17:3e:12:cd:a4:8f:90:59:fb:bf:33:2a: 90:27:40:db:12:a3:56:3b:77:26:f9:e1:d3:c1:97:c5:1a:3c: bb:9c:69:28:50:ce:3c:a8:0f:17:a5:2f:70:b9:3b:ca:d9:e8: 2d:81:1d:1f:2f:30:01:e5:d1:c7:04:89:4e:ac:91:ef:ed:cc: 25:86:e6:b9:6d:45:ad:d2:90:ea:d1:b2:f9:1e:86:d4:f8:e5: bf:9b:68:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x5qPKpV3CotCM6kPNg1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhOWExNjRjNjU2NDEyYjdkYWFmYWU4NTcxY2M2NzljYzZm NTg3ZDAwHhcNMjYwMTAxMTgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjhhZjJiNmNkYzdkMDZkMWM2ODhkNTE4OWIxYjdlY2Y5NzRjYzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Wgt9XhArs0pzYB8ufm9DWCeqtn4 1vo+DvhEIXRA0Sib/9RXgvITTnH7yrlz39edlXk7pGumd9XouxVJJsaUJQb93Bov LiRFUZ6FyglR9kJ56lzkC9AF9WE1rGSHrh/zNaoo3qiQj0OrvqGufBKMwtrm76MR dHJiQ7wBlSCc3ohTL8/QJU8lJ372VlifOlhp2x1ZLa16nuvK04t+MRIGVb7NKwtr osAQtBmuoM0NIOrnvhyGKeqkIPnPz8WYdnmAZVIlMIH2gOFuX+2c/zcaGzK6IVhQ ADG5tTztjSPKp/nezJgpe15h+B0UAODpQabjgEUYI4dzi7I4E5u18dfpGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFaK8rbNx9BtHGiNUYmxt+z5dMwsMB8GA1UdIwQY MBaAFKqaFkxlZBK32q+uhXHMZ5zG9YfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hZmRhOWEtNjYzMC00YTlmLWI1MjIt Mjg4MjljMDNjNjlhLzEvVm9yeXRzM0gwRzBjYUkxUmliRzM3UGwwekN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9hZmRhOWEtNjYzMC00YTlmLWI1MjItMjg4MjljMDNjNjlh LzEvcXBvV1RHVmtFcmZhcjY2RmNjeG5uTWIxaDlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVPxQMA0G CSqGSIb3DQEBCwUAA4IBAQAnYRbr2NI8ADsyS6dkkz4i4gbGDaF8+ZiVv0cyMDko acTtUnBvl+FKaIUM7P4exBon8ZsgyytdEN/S1KUW5X0HjvzVUl4iQMDOu88KtxCB qEb3AZiz82TdxS3iJBE1bLXiJIYyqlV2IHjFbJWNBC3xX2qhBNeLvWtPElv/VzaD 2cJgWSYEf1SbJ5rXG2E70lVzlDR4D8F/5Nob5ZBb+xVoVnCVHt0eiP0XPhLNpI+Q Wfu/MyqQJ0DbEqNWO3cm+eHTwZfFGjy7nGkoUM48qA8XpS9wuTvK2egtgR0fLzAB 5dHHBIlOrJHv7cwlhua5bUWt0pDq0bL5HobU+OW/m2j9 -----END CERTIFICATE-----Generated at Wed Jan 7 04:16:14 2026 by rpki-client