This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/VxvYbuSfG0RJoqSS3rt4zAO_Ka4.roa File: VxvYbuSfG0RJoqSS3rt4zAO_Ka4.roa (raw, json) Hash identifier: rSBhJErUYfpEXMJHn/N2TLGG8HzzTS+TuaT38co035w= Subject key identifier: 57:1B:D8:6E:E4:9F:1B:44:49:A2:A4:92:DE:BB:78:CC:03:BF:29:AE Certificate issuer: /CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f Certificate serial: 019B78A29F1398739E1AAF67ACDAD68CB036 Authority key identifier: 8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/VxvYbuSfG0RJoqSS3rt4zAO_Ka4.roa Signing time: Thu 01 Jan 2026 08:18:02 +0000 ROA not before: Thu 01 Jan 2026 08:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203874 IP address blocks: 2001:67c:2598::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9f:13:98:73:9e:1a:af:67:ac:da:d6:8c:b0:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f Validity Not Before: Jan 1 08:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=571bd86ee49f1b4449a2a492debb78cc03bf29ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1e:8e:5d:7e:fe:f8:99:08:ae:17:2d:a4:5c: 54:d3:92:1e:ec:d1:97:5e:0c:a4:9a:05:2e:40:0a: 65:a2:ba:bc:3f:84:b3:e1:05:03:04:7b:2e:ad:41: 45:c5:d4:d2:f8:8b:33:71:b4:7b:b7:18:59:ef:c9: 38:7b:31:29:4e:f4:bb:53:9a:8f:b7:fe:db:79:d0: ad:f6:8a:80:12:da:9a:db:1c:38:1b:3d:b4:d1:ee: 77:c9:0c:56:41:06:80:51:68:7e:99:17:ab:35:b7: 85:97:bd:37:60:bb:57:81:58:d1:dd:62:e3:81:e4: 68:69:0d:67:55:f2:e8:1b:a1:0b:b0:06:09:a9:40: b9:06:d5:b5:b7:26:d4:f1:87:9b:ee:f7:51:cc:3b: f7:4c:ba:35:99:49:43:87:44:38:9b:8f:7e:d1:d9: 09:04:0e:f2:2b:b4:3a:17:98:5e:ec:27:15:a2:1a: e3:f5:2c:d9:a1:55:86:f2:ca:4a:e2:15:da:d2:35: c3:20:5d:ca:8e:37:37:d3:59:90:6b:99:5b:cf:37: a7:ad:4e:cf:bb:e3:4a:16:64:42:af:91:08:d3:b1: e7:56:80:9c:4f:ee:98:3c:54:64:f0:22:22:ac:c8: d1:25:7c:60:5b:36:f8:3a:5e:4c:c3:f5:11:90:4d: ba:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1B:D8:6E:E4:9F:1B:44:49:A2:A4:92:DE:BB:78:CC:03:BF:29:AE X509v3 Authority Key Identifier: keyid:8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/VxvYbuSfG0RJoqSS3rt4zAO_Ka4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2598::/48 Signature Algorithm: sha256WithRSAEncryption 02:5c:5b:e1:20:fb:d0:9d:6e:90:6f:b4:73:ad:b2:c9:66:e2: c7:3d:ed:c4:5b:97:7e:ee:52:4c:07:7d:d2:b1:fd:68:98:76: 14:8a:9a:61:7f:f4:d7:79:cb:e8:7b:b4:f4:87:5a:1e:38:97: 65:ff:b7:63:39:85:8f:ed:8b:18:b0:9d:58:54:82:6b:3a:1a: 87:cc:55:a1:c7:45:37:71:ea:80:29:4e:4d:ce:c0:6d:a7:b9: e9:ef:a9:12:fd:af:8d:f5:28:e9:af:05:7e:b2:7b:fa:ab:ca: c0:78:7a:60:39:06:9d:25:0c:91:5d:5c:02:eb:45:00:dd:39: 96:40:c5:85:b2:f7:c7:13:8a:65:f5:be:ce:1c:b7:b9:e1:e2: 5d:67:f2:46:0a:a1:50:82:b4:21:02:aa:1a:ac:37:f1:c0:99: 99:6a:8b:bd:39:e2:93:d4:35:ce:a6:0d:b7:13:b5:69:46:4b: 9e:eb:55:00:ec:d5:0b:10:02:9c:1f:c4:36:99:6e:c4:ae:3d: 94:be:fe:44:b2:bd:32:17:cf:72:d4:c8:f4:c2:2c:29:bc:52: 2f:05:36:2a:99:97:e4:b8:be:3c:6d:47:3e:ba:3f:59:b3:67: 2d:de:94:f3:42:88:a7:e7:39:12:ad:59:f8:19:b8:61:ef:a9: 72:36:cc:ad -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4op8TmHOeGq9nrNrWjLA2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMmYzYzczOWU1MTcxZTRjMDI2ZGE5NmU1YjUwZmZjMjY3 ZDYwNmYwHhcNMjYwMTAxMDgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzFiZDg2ZWU0OWYxYjQ0NDlhMmE0OTJkZWJiNzhjYzAzYmYyOWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB6OXX7++JkIrhctpFxU05Ie7NGX XgykmgUuQAplorq8P4Sz4QUDBHsurUFFxdTS+IszcbR7txhZ78k4ezEpTvS7U5qP t/7bedCt9oqAEtqa2xw4Gz200e53yQxWQQaAUWh+mRerNbeFl703YLtXgVjR3WLj geRoaQ1nVfLoG6ELsAYJqUC5BtW1tybU8Yeb7vdRzDv3TLo1mUlDh0Q4m49+0dkJ BA7yK7Q6F5he7CcVohrj9SzZoVWG8spK4hXa0jXDIF3Kjjc301mQa5lbzzenrU7P u+NKFmRCr5EI07HnVoCcT+6YPFRk8CIirMjRJXxgWzb4Ol5Mw/URkE26xQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFcb2G7knxtESaKkkt67eMwDvymuMB8GA1UdIwQY MBaAFI4vPHOeUXHkwCbaluW1D/wmfWBvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamk4OGM1NVJjZVRBSnRxVzViVVBfQ1o5WUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTU2MDAtZDBkYy00YmY5LWJiOTkt MWFlYzE0NThiZGI3LzEvVnh2WWJ1U2ZHMFJKb3FTUzNydDR6QU9fS2E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mZTU2MDAtZDBkYy00YmY5LWJiOTktMWFlYzE0NThiZGI3 LzEvamk4OGM1NVJjZVRBSnRxVzViVVBfQ1o5WUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCWY MA0GCSqGSIb3DQEBCwUAA4IBAQACXFvhIPvQnW6Qb7RzrbLJZuLHPe3EW5d+7lJM B33Ssf1omHYUipphf/TXecvoe7T0h1oeOJdl/7djOYWP7YsYsJ1YVIJrOhqHzFWh x0U3ceqAKU5NzsBtp7np76kS/a+N9SjprwV+snv6q8rAeHpgOQadJQyRXVwC60UA 3TmWQMWFsvfHE4pl9b7OHLe54eJdZ/JGCqFQgrQhAqoarDfxwJmZaou9OeKT1DXO pg23E7VpRkue61UA7NULEAKcH8Q2mW7Erj2Uvv5Esr0yF89y1Mj0wiwpvFIvBTYq mZfkuL48bUc+uj9Zs2ct3pTzQoin5zkSrVn4Gbhh76lyNsyt -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:27 2026 by rpki-client