This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/v-QuOOYMf4HsWM21RDZIDik1F8Y.roa File: v-QuOOYMf4HsWM21RDZIDik1F8Y.roa (raw, json) Hash identifier: tkB5JnPvXNK8KkYHS1hN95y7jCOIV01txTm1VSy3JoA= Subject key identifier: BF:E4:2E:38:E6:0C:7F:81:EC:58:CD:B5:44:36:48:0E:29:35:17:C6 Certificate issuer: /CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad Certificate serial: 019B7C126A9ACB483F7E53D880E44E98BDE5 Authority key identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/v-QuOOYMf4HsWM21RDZIDik1F8Y.roa Signing time: Fri 02 Jan 2026 00:19:00 +0000 ROA not before: Fri 02 Jan 2026 00:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210874 IP address blocks: 45.10.100.0/22 maxlen: 22 2a0e:3700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6a:9a:cb:48:3f:7e:53:d8:80:e4:4e:98:bd:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfe42e38e60c7f81ec58cdb54436480e293517c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ac:50:3a:40:7e:53:72:05:fc:d0:2f:5c:f2: fe:80:94:68:76:a6:12:d4:33:52:69:79:29:53:36: 5e:82:96:8f:db:d8:ea:cf:15:a8:aa:76:90:0e:7f: 4d:5b:8e:bf:fc:07:41:7e:39:57:3b:b7:6f:7a:2a: 11:56:b8:b4:63:c2:20:bf:c1:9b:38:f8:04:00:f6: 39:e7:11:34:e0:8e:1a:83:ee:39:17:01:f8:aa:10: cc:a5:ad:8b:4e:15:cf:80:75:cd:af:3c:25:a7:c8: 42:af:6a:c5:78:34:4c:8d:23:00:0a:5d:a6:d3:cc: 09:9a:5c:7a:22:05:18:a5:8f:a9:d8:51:00:8d:8e: e4:f9:30:ad:bf:81:6e:2e:f6:6f:ff:54:5e:e6:69: 51:4c:3f:14:27:4f:cd:f1:3d:f3:28:b4:2c:17:22: 79:ba:fc:34:29:21:23:7b:1e:46:82:11:f8:71:6e: ba:59:b1:21:a7:65:db:e3:59:62:fb:db:3b:bd:e5: 3c:37:d3:dc:47:98:30:e7:f5:7e:eb:99:97:3d:9f: 55:17:60:47:86:61:dc:76:d6:57:b5:34:77:41:74: 05:32:1e:88:3b:19:85:3c:a0:f3:56:64:b1:c5:b9: 89:04:37:ee:5b:20:fa:8a:c8:0d:06:4b:37:8f:fb: ae:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E4:2E:38:E6:0C:7F:81:EC:58:CD:B5:44:36:48:0E:29:35:17:C6 X509v3 Authority Key Identifier: keyid:6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/v-QuOOYMf4HsWM21RDZIDik1F8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.100.0/22 IPv6: 2a0e:3700::/29 Signature Algorithm: sha256WithRSAEncryption 1e:1d:1d:2c:9b:83:c3:77:b4:72:6d:12:a4:75:61:39:f6:ac: e2:1e:6a:82:7d:20:6b:47:ea:ae:71:a7:f6:0a:56:04:7c:c6: 2c:d1:6a:fa:82:91:76:75:56:fd:62:29:c8:00:a5:3b:17:5c: 7e:14:10:d8:25:71:bd:78:f7:27:8a:c4:87:31:3e:6f:08:06: 80:96:a9:1e:be:fc:72:9a:f1:44:44:31:82:90:c1:41:90:93: f6:e1:3a:64:97:4d:d1:94:50:06:c7:cd:66:e7:d4:80:34:59: ed:48:92:fc:1a:c3:87:11:50:56:12:91:a0:8a:12:00:19:15: 40:23:ff:a6:34:75:b2:bc:c1:40:97:92:f5:f1:1d:be:9e:c0: d9:a0:42:c8:73:e4:99:52:09:35:52:5c:2b:96:7d:87:99:8e: b0:ca:84:20:d1:86:7d:dd:3a:b6:46:a4:2c:33:6c:5f:a1:51: 64:c0:fd:36:ed:03:23:17:f8:8d:eb:ec:02:d0:88:62:89:c3: 09:a9:f9:26:cf:a7:ad:c4:56:ed:62:86:95:3c:43:75:d9:8f: 11:d3:b7:eb:9f:77:38:c7:4c:55:62:d1:aa:fe:6a:af:e6:33: f4:2b:8b:41:db:66:2a:c3:30:40:48:47:24:ba:e3:eb:dc:a3: 3d:de:f8:1a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8Emqay0g/flPYgOROmL3lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGQ0MDUyZTBmYzc2NTM2MzYxY2JiZGM3NzUwODc3ZGRm MzYwYWQwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmU0MmUzOGU2MGM3ZjgxZWM1OGNkYjU0NDM2NDgwZTI5MzUxN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qxQOkB+U3IF/NAvXPL+gJRodqYS 1DNSaXkpUzZegpaP29jqzxWoqnaQDn9NW46//AdBfjlXO7dveioRVri0Y8Igv8Gb OPgEAPY55xE04I4ag+45FwH4qhDMpa2LThXPgHXNrzwlp8hCr2rFeDRMjSMACl2m 08wJmlx6IgUYpY+p2FEAjY7k+TCtv4FuLvZv/1Re5mlRTD8UJ0/N8T3zKLQsFyJ5 uvw0KSEjex5GghH4cW66WbEhp2Xb41li+9s7veU8N9PcR5gw5/V+65mXPZ9VF2BH hmHcdtZXtTR3QXQFMh6IOxmFPKDzVmSxxbmJBDfuWyD6isgNBks3j/uupwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFL/kLjjmDH+B7FjNtUQ2SA4pNRfGMB8GA1UdIwQY MBaAFG3dQFLg/HZTY2HLvcd1CHfd82CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmQxQVV1RDhkbE5qWWN1OXgzVUlkOTN6WUswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85MjM0NDgtMzAyNy00OTQxLTk4YTQt YmE3YjFmMzc2OWUzLzEvdi1RdU9PWU1mNEhzV00yMVJEWklEaWsxRjhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85MjM0NDgtMzAyNy00OTQxLTk4YTQtYmE3YjFmMzc2OWUz LzEvYmQxQVV1RDhkbE5qWWN1OXgzVUlkOTN6WUswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQpkMA0E AgACMAcDBQMqDjcAMA0GCSqGSIb3DQEBCwUAA4IBAQAeHR0sm4PDd7RybRKkdWE5 9qziHmqCfSBrR+qucaf2ClYEfMYs0Wr6gpF2dVb9YinIAKU7F1x+FBDYJXG9ePcn isSHMT5vCAaAlqkevvxymvFERDGCkMFBkJP24Tpkl03RlFAGx81m59SANFntSJL8 GsOHEVBWEpGgihIAGRVAI/+mNHWyvMFAl5L18R2+nsDZoELIc+SZUgk1Ulwrln2H mY6wyoQg0YZ93Tq2RqQsM2xfoVFkwP027QMjF/iN6+wC0IhiicMJqfkmz6etxFbt YoaVPEN12Y8R07frn3c4x0xVYtGq/mqv5jP0K4tB22YqwzBASEckuuPr3KM93vga -----END CERTIFICATE-----Generated at Fri Jan 2 20:00:07 2026 by rpki-client