This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/VC3Pv54n1IsgzIVx36yVVYLLRkI.roa File: VC3Pv54n1IsgzIVx36yVVYLLRkI.roa (raw, json) Hash identifier: iLFj88I+QIbV2zDPSYFDkoNlp/mnLdOx9rrtH/xhs84= Subject key identifier: 54:2D:CF:BF:9E:27:D4:8B:20:CC:85:71:DF:AC:95:55:82:CB:46:42 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C80635ED6AE9BA4E71A8CDAA2BBC987 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/VC3Pv54n1IsgzIVx36yVVYLLRkI.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61164 IP address blocks: 2a01:5f20::/29 maxlen: 29 2a04:ee80::/29 maxlen: 29 2a07:1f00::/29 maxlen: 29 2a07:5c00::/29 maxlen: 29 2a07:98c0::/29 maxlen: 29 2a09:600::/29 maxlen: 29 2a09:1080::/29 maxlen: 29 2a09:1e00::/29 maxlen: 29 2a09:2480::/29 maxlen: 29 2a09:3380::/29 maxlen: 29 2a09:4700::/29 maxlen: 29 2a09:4780::/29 maxlen: 29 2a09:4b80::/29 maxlen: 29 2a09:4d80::/29 maxlen: 29 2a09:6400::/29 maxlen: 29 2a09:6580::/29 maxlen: 29 2a09:6780::/29 maxlen: 29 2a09:7a00::/29 maxlen: 29 2a09:8000::/29 maxlen: 29 2a09:8440::/29 maxlen: 29 2a09:8bc0::/29 maxlen: 29 2a09:9a80::/29 maxlen: 29 2a09:a100::/29 maxlen: 29 2a09:a980::/29 maxlen: 29 2a09:c000::/29 maxlen: 29 2a09:db00::/29 maxlen: 29 2a09:e3c0::/29 maxlen: 29 2a09:eb00::/29 maxlen: 29 2a09:f300::/29 maxlen: 29 2a0a:c1c0::/29 maxlen: 29 2a0d:29c0::/29 maxlen: 29 2a0d:8bc0::/29 maxlen: 29 2a0d:e140::/29 maxlen: 29 2a0d:f940::/29 maxlen: 29 2a0e:2180::/29 maxlen: 29 2a0e:8c40::/29 maxlen: 29 2a0e:9240::/29 maxlen: 29 2a0e:9440::/29 maxlen: 29 2a0e:b0c0::/29 maxlen: 29 2a0e:c040::/29 maxlen: 29 2a0e:d740::/29 maxlen: 29 2a0e:e440::/29 maxlen: 29 2a0e:e840::/29 maxlen: 29 2a0e:f040::/29 maxlen: 29 2a0f:1c00::/29 maxlen: 29 2a0f:2780::/29 maxlen: 29 2a0f:2c00::/29 maxlen: 29 2a0f:5d80::/29 maxlen: 29 2a0f:6340::/29 maxlen: 29 2a0f:71c0::/29 maxlen: 29 2a0f:7440::/29 maxlen: 29 2a0f:9500::/29 maxlen: 29 2a0f:d400::/29 maxlen: 29 2a0f:dc00::/29 maxlen: 29 2a12:4c40::/29 maxlen: 29 2a12:53c0::/29 maxlen: 29 2a12:8c80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:63:5e:d6:ae:9b:a4:e7:1a:8c:da:a2:bb:c9:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=542dcfbf9e27d48b20cc8571dfac955582cb4642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:9b:1c:85:fb:96:b6:92:d3:5a:2b:b8:10: 5c:d8:ed:9c:1d:ae:ab:61:2c:9e:c6:14:e9:8a:63: 66:7d:47:ae:84:d7:8d:ad:2f:71:0e:6f:81:91:0f: 4d:62:4a:f8:d4:f2:5c:6f:cb:d2:41:1e:9e:69:43: aa:96:47:57:a7:99:31:a4:86:af:4b:89:2b:69:fb: 61:65:59:4e:12:02:7e:bc:19:d9:d3:b6:c4:62:2d: 7e:78:a7:94:78:0d:4a:2b:92:b5:5e:d4:e5:e8:b6: b5:c2:a7:f2:0a:2b:27:1e:67:90:d8:29:56:6d:bf: 6b:d0:47:24:ff:91:d3:5a:ad:b8:be:0c:ab:93:81: 76:01:04:68:92:da:29:b9:4f:12:ee:c6:c4:34:da: 68:64:cd:c8:7a:71:c7:d7:6a:ca:54:50:59:1e:23: a7:8e:e3:3e:20:b5:11:b3:3c:5f:33:0f:46:46:ba: 30:df:44:f5:f3:59:b4:ce:fb:d5:02:fc:c2:a1:19: 51:48:6a:4d:bf:81:25:93:82:8f:8d:09:cd:1f:2f: 63:a5:33:9e:e0:37:9f:5c:86:4c:6b:de:a7:9b:74: cd:52:70:5f:ee:58:a4:cf:df:24:d8:66:f3:22:08: d6:a0:1e:e2:c5:50:6c:e5:1f:15:4f:0b:00:6a:a1: ac:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2D:CF:BF:9E:27:D4:8B:20:CC:85:71:DF:AC:95:55:82:CB:46:42 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/VC3Pv54n1IsgzIVx36yVVYLLRkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:5f20::/29 2a04:ee80::/29 2a07:1f00::/29 2a07:5c00::/29 2a07:98c0::/29 2a09:600::/29 2a09:1080::/29 2a09:1e00::/29 2a09:2480::/29 2a09:3380::/29 2a09:4700::/29 2a09:4780::/29 2a09:4b80::/29 2a09:4d80::/29 2a09:6400::/29 2a09:6580::/29 2a09:6780::/29 2a09:7a00::/29 2a09:8000::/29 2a09:8440::/29 2a09:8bc0::/29 2a09:9a80::/29 2a09:a100::/29 2a09:a980::/29 2a09:c000::/29 2a09:db00::/29 2a09:e3c0::/29 2a09:eb00::/29 2a09:f300::/29 2a0a:c1c0::/29 2a0d:29c0::/29 2a0d:8bc0::/29 2a0d:e140::/29 2a0d:f940::/29 2a0e:2180::/29 2a0e:8c40::/29 2a0e:9240::/29 2a0e:9440::/29 2a0e:b0c0::/29 2a0e:c040::/29 2a0e:d740::/29 2a0e:e440::/29 2a0e:e840::/29 2a0e:f040::/29 2a0f:1c00::/29 2a0f:2780::/29 2a0f:2c00::/29 2a0f:5d80::/29 2a0f:6340::/29 2a0f:71c0::/29 2a0f:7440::/29 2a0f:9500::/29 2a0f:d400::/29 2a0f:dc00::/29 2a12:4c40::/29 2a12:53c0::/29 2a12:8c80::/29 Signature Algorithm: sha256WithRSAEncryption 2b:30:48:69:f2:07:d1:6c:00:05:79:15:d9:44:52:6b:dd:a1: 10:43:7e:c7:32:18:22:dd:95:87:50:8a:4c:fe:16:8a:fd:c6: 10:b7:c1:4d:af:e3:13:a7:a5:86:86:3b:fb:8d:54:20:ff:19: d5:c0:bc:33:7e:b1:ac:eb:f5:4f:54:4b:3d:0a:69:b2:54:09: d3:65:b1:07:92:4a:12:41:45:32:c3:a6:db:c9:cb:a5:bf:5b: e8:af:c6:98:be:4e:70:53:c5:3a:63:5e:e6:fc:32:17:00:b0: 2a:58:f7:b0:00:b8:b6:cb:34:72:19:86:27:02:f2:e8:59:3a: 24:f7:aa:6e:58:80:e3:42:98:f3:8e:76:4a:67:d5:a4:76:01: 84:06:b7:45:9b:c3:ac:c3:e0:c5:c6:dd:39:4a:d8:db:bf:3d: 2c:30:1a:80:15:24:56:04:a9:39:7c:44:54:79:63:16:62:07: 45:c3:3d:33:b2:25:5a:e4:73:3a:fb:ac:aa:6f:c6:be:50:03: 90:de:ab:12:7f:e9:16:1d:1c:b7:1b:c3:78:10:c3:bc:22:d2: 83:b6:8e:d0:e2:fd:4c:b8:c3:21:52:f5:a4:6e:14:69:06:ae: a5:ac:d2:16:ec:8d:2e:97:0d:cd:ec:8f:09:be:0c:93:99:f1: d3:96:5b:c6 -----BEGIN CERTIFICATE----- MIIGkDCCBXigAwIBAgISAZt8gGNe1q6bpOcajNqiu8mHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDJkY2ZiZjllMjdkNDhiMjBjYzg1NzFkZmFjOTU1NTgyY2I0NjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquGbHIX7lraS01oruBBc2O2cHa6r YSyexhTpimNmfUeuhNeNrS9xDm+BkQ9NYkr41PJcb8vSQR6eaUOqlkdXp5kxpIav S4krafthZVlOEgJ+vBnZ07bEYi1+eKeUeA1KK5K1XtTl6La1wqfyCisnHmeQ2ClW bb9r0Eck/5HTWq24vgyrk4F2AQRoktopuU8S7sbENNpoZM3IenHH12rKVFBZHiOn juM+ILURszxfMw9GRrow30T181m0zvvVAvzCoRlRSGpNv4Elk4KPjQnNHy9jpTOe 4DefXIZMa96nm3TNUnBf7likz98k2GbzIgjWoB7ixVBs5R8VTwsAaqGs7QIDAQAB o4IDnDCCA5gwHQYDVR0OBBYEFFQtz7+eJ9SLIMyFcd+slVWCy0ZCMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvVkMzUHY1NG4xSXNneklWeDM2eVZWWUxMUmtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBsAYIKwYBBQUHAQcBAf8EggGfMIIBmzCCAZcEAgACMIIB jwMFAyoBXyADBQMqBO6AAwUDKgcfAAMFAyoHXAADBQMqB5jAAwUDKgkGAAMFAyoJ EIADBQMqCR4AAwUDKgkkgAMFAyoJM4ADBQMqCUcAAwUDKglHgAMFAyoJS4ADBQMq CU2AAwUDKglkAAMFAyoJZYADBQMqCWeAAwUDKgl6AAMFAyoJgAADBQMqCYRAAwUD KgmLwAMFAyoJmoADBQMqCaEAAwUDKgmpgAMFAyoJwAADBQMqCdsAAwUDKgnjwAMF AyoJ6wADBQMqCfMAAwUDKgrBwAMFAyoNKcADBQMqDYvAAwUDKg3hQAMFAyoN+UAD BQMqDiGAAwUDKg6MQAMFAyoOkkADBQMqDpRAAwUDKg6wwAMFAyoOwEADBQMqDtdA AwUDKg7kQAMFAyoO6EADBQMqDvBAAwUDKg8cAAMFAyoPJ4ADBQMqDywAAwUDKg9d gAMFAyoPY0ADBQMqD3HAAwUDKg90QAMFAyoPlQADBQMqD9QAAwUDKg/cAAMFAyoS TEADBQMqElPAAwUDKhKMgDANBgkqhkiG9w0BAQsFAAOCAQEAKzBIafIH0WwABXkV 2URSa92hEEN+xzIYIt2Vh1CKTP4Wiv3GELfBTa/jE6elhoY7+41UIP8Z1cC8M36x rOv1T1RLPQppslQJ02WxB5JKEkFFMsOm28nLpb9b6K/GmL5OcFPFOmNe5vwyFwCw Klj3sAC4tss0chmGJwLy6Fk6JPeqbliA40KY8452SmfVpHYBhAa3RZvDrMPgxcbd OUrY2789LDAagBUkVgSpOXxEVHljFmIHRcM9M7IlWuRzOvusqm/GvlADkN6rEn/p Fh0ctxvDeBDDvCLSg7aO0OL9TLjDIVL1pG4UaQaupazSFuyNLpcNzeyPCb4Mk5nx 05Zbxg== -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:17 2026 by rpki-client