This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/VtaKLbc1bmC0OT-Q3JTgdIZyayc.roa File: VtaKLbc1bmC0OT-Q3JTgdIZyayc.roa (raw, json) Hash identifier: UBrKjUxBC5vtYfpevFvOXwmeammg36EmC9n/o1kbyUg= Subject key identifier: 56:D6:8A:2D:B7:35:6E:60:B4:39:3F:90:DC:94:E0:74:86:72:6B:27 Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2 Certificate serial: 019B7EA6F8002FB7E5A99CF88820FEA48B52 Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/VtaKLbc1bmC0OT-Q3JTgdIZyayc.roa Signing time: Fri 02 Jan 2026 12:20:30 +0000 ROA not before: Fri 02 Jan 2026 12:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12337 IP address blocks: 212.29.18.0/24 maxlen: 24 212.29.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f8:00:2f:b7:e5:a9:9c:f8:88:20:fe:a4:8b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2 Validity Not Before: Jan 2 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56d68a2db7356e60b4393f90dc94e07486726b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f4:9c:05:51:6c:3a:6d:fc:3c:5e:ff:80:b4: 99:90:e9:06:3f:e4:e0:78:38:58:2f:08:a8:32:29: 42:ff:64:7d:91:15:d2:fb:f9:7a:ad:8a:e7:0d:71: 82:fe:54:21:29:ef:d3:31:79:92:fa:18:8d:d1:d7: 9b:ec:fd:ac:2e:08:8a:20:95:7b:f1:04:66:94:16: bf:33:79:37:21:99:a3:4e:82:7f:40:ec:4b:44:4c: ef:1f:05:2d:b7:85:42:6d:02:06:cf:c8:4b:0d:ef: a7:a6:59:80:21:b2:64:de:e8:c2:0f:55:92:19:79: 00:65:fb:d0:8d:8a:e2:eb:59:f3:4d:cc:5e:95:55: 84:56:de:f6:e9:8b:5b:7b:10:c4:b1:45:6b:d6:ca: d9:d6:cd:c8:3f:0c:f1:fd:20:97:50:0f:67:9a:f7: b1:b2:ca:6c:d6:97:fc:cd:03:1e:fe:fa:7a:66:db: f2:f7:bb:9b:56:b8:81:f4:fc:a7:a4:f9:71:97:e3: 80:f2:bd:f2:44:15:9e:1b:cb:b6:90:09:26:1d:a3: 30:67:a9:17:5a:2a:11:26:cf:de:0a:21:69:01:52: 5c:ae:d4:3b:a9:8e:1f:3c:56:35:d2:b6:6b:5d:04: 57:99:ba:eb:b1:05:cf:36:66:89:e9:73:79:5a:25: 02:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D6:8A:2D:B7:35:6E:60:B4:39:3F:90:DC:94:E0:74:86:72:6B:27 X509v3 Authority Key Identifier: keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/VtaKLbc1bmC0OT-Q3JTgdIZyayc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.29.18.0/24 212.29.28.0/24 Signature Algorithm: sha256WithRSAEncryption 15:49:90:76:bc:ed:3a:5b:14:a4:13:12:48:ba:91:f2:ef:46: 62:fa:93:0a:04:6b:34:e2:f6:69:ef:34:3d:8f:96:6f:d8:cb: 2f:80:4a:2c:48:ab:8c:b0:c4:54:e2:83:6b:fc:db:68:f8:8e: 59:99:f9:8c:81:ca:39:6c:57:2d:d0:8c:f9:d7:11:50:29:bc: 41:2a:f1:16:23:24:9b:35:c6:7e:2e:7b:fd:3a:1e:93:17:0d: d3:95:bc:7d:47:ed:4f:52:cb:24:3c:53:a2:03:d0:b6:7a:c4: 00:e3:d0:5d:5b:24:db:fe:ba:49:d5:4c:c6:0d:a1:4a:95:12: 82:93:49:53:b1:05:18:d8:8f:60:a2:93:1e:c2:1a:12:b9:c0: de:b5:ba:1a:00:54:89:bd:be:67:66:12:8a:4e:e1:0a:14:19: 8e:77:5e:b3:d7:8a:8f:09:ac:71:ce:b0:2f:fb:b5:b0:57:90: a6:d3:c7:09:d7:8a:50:25:c2:87:45:a8:81:cb:ca:87:88:f5: e6:3f:5c:78:e1:5d:ab:3b:e4:5b:f0:2c:e5:62:1f:66:c8:60: 47:8d:6d:3e:e1:bf:48:53:6d:ef:0d:a5:ff:84:cb:09:53:d4: e7:4a:e7:cd:06:1d:e4:52:f4:83:53:c5:16:a9:08:93:31:50: 13:53:d4:5d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pvgAL7flqZz4iCD+pItSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYmJiYmFhM2VlMjRjN2FkOWIyYzYwNDMyZTE0ZWRhMzg0 OWI1ZTIwHhcNMjYwMTAyMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmQ2OGEyZGI3MzU2ZTYwYjQzOTNmOTBkYzk0ZTA3NDg2NzI2YjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/ScBVFsOm38PF7/gLSZkOkGP+Tg eDhYLwioMilC/2R9kRXS+/l6rYrnDXGC/lQhKe/TMXmS+hiN0deb7P2sLgiKIJV7 8QRmlBa/M3k3IZmjToJ/QOxLREzvHwUtt4VCbQIGz8hLDe+nplmAIbJk3ujCD1WS GXkAZfvQjYri61nzTcxelVWEVt726YtbexDEsUVr1srZ1s3IPwzx/SCXUA9nmvex ssps1pf8zQMe/vp6Ztvy97ubVriB9PynpPlxl+OA8r3yRBWeG8u2kAkmHaMwZ6kX WioRJs/eCiFpAVJcrtQ7qY4fPFY10rZrXQRXmbrrsQXPNmaJ6XN5WiUChwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFbWii23NW5gtDk/kNyU4HSGcmsnMB8GA1UdIwQY MBaAFFO7u6o+4kx62bLGBDLhTto4SbXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUt MDBlY2YwYzRkMGVmLzEvVnRhS0xiYzFibUMwT1QtUTNKVGdkSVp5YXljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUtMDBlY2YwYzRkMGVm LzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1B0SAwQA 1B0cMA0GCSqGSIb3DQEBCwUAA4IBAQAVSZB2vO06WxSkExJIupHy70Zi+pMKBGs0 4vZp7zQ9j5Zv2MsvgEosSKuMsMRU4oNr/Nto+I5ZmfmMgco5bFct0Iz51xFQKbxB KvEWIySbNcZ+Lnv9Oh6TFw3Tlbx9R+1PUsskPFOiA9C2esQA49BdWyTb/rpJ1UzG DaFKlRKCk0lTsQUY2I9gopMewhoSucDetboaAFSJvb5nZhKKTuEKFBmOd16z14qP CaxxzrAv+7WwV5Cm08cJ14pQJcKHRaiBy8qHiPXmP1x44V2rO+Rb8CzlYh9myGBH jW0+4b9IU23vDaX/hMsJU9TnSufNBh3kUvSDU8UWqQiTMVATU9Rd -----END CERTIFICATE-----Generated at Mon Jan 12 01:43:35 2026 by rpki-client