This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/VtTvx9UwNgtx1V2Jc0vp8U---dM.roa File: VtTvx9UwNgtx1V2Jc0vp8U---dM.roa (raw, json) Hash identifier: bWrag/1FisfayWbQrHXxn5LEsaLQ0liEZ2iTa5BntV8= Subject key identifier: 56:D4:EF:C7:D5:30:36:0B:71:D5:5D:89:73:4B:E9:F1:4F:BE:F9:D3 Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288 Certificate serial: 019B7DCAFC5A1207A5893DDF9D39A4E14B0D Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/VtTvx9UwNgtx1V2Jc0vp8U---dM.roa Signing time: Fri 02 Jan 2026 08:20:13 +0000 ROA not before: Fri 02 Jan 2026 08:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200525 IP address blocks: 80.89.240.0/20 maxlen: 20 87.56.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:fc:5a:12:07:a5:89:3d:df:9d:39:a4:e1:4b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288 Validity Not Before: Jan 2 08:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56d4efc7d530360b71d55d89734be9f14fbef9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4c:22:9a:3e:35:13:48:65:ed:bd:b6:bd:b2: 33:56:f1:0b:b8:90:6a:b9:33:97:e1:6c:26:40:4f: 71:36:65:f8:74:cf:c7:08:6a:db:ae:9c:73:fc:9b: 59:3e:d8:ac:c7:60:91:ff:be:74:51:b7:a6:13:14: 68:f6:e7:e8:40:fc:90:36:6c:83:dd:b2:30:19:f6: b9:29:30:ba:25:a8:f8:78:f3:51:2a:40:1e:00:ac: a9:d5:22:62:2f:6b:34:a7:7f:75:89:a4:e7:43:eb: e9:87:18:3b:4a:2a:7a:e3:cf:77:65:d3:0e:6a:a8: 1f:48:05:bd:92:d7:55:9c:13:72:25:3e:74:d0:49: 0e:5c:03:7b:d5:3b:3c:cf:19:e1:b9:18:5e:fd:84: cf:dd:e8:69:ee:1c:bf:87:9d:c5:cf:33:74:5e:8a: 01:4e:1f:a3:ca:60:8b:41:c1:1b:e2:07:09:47:28: 5e:2f:e0:ea:52:4f:d2:c1:39:57:b2:1c:ba:23:db: c9:dc:b2:e5:b2:f6:d6:51:f2:bd:82:96:88:19:0d: 98:2f:86:0f:52:73:1d:5d:b9:13:32:c2:cf:57:d6: 06:9e:f8:b7:2a:61:7f:09:18:01:38:a3:a7:9e:30: 8a:b7:b3:b8:3d:b0:e7:db:24:8b:f4:e7:71:26:e8: c9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D4:EF:C7:D5:30:36:0B:71:D5:5D:89:73:4B:E9:F1:4F:BE:F9:D3 X509v3 Authority Key Identifier: keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/VtTvx9UwNgtx1V2Jc0vp8U---dM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.89.240.0/20 87.56.64.0/18 Signature Algorithm: sha256WithRSAEncryption 50:9c:1c:9a:e2:b6:9b:ad:94:8e:46:fd:48:b5:7c:30:46:27: ca:38:59:86:59:5b:e7:48:12:21:ca:76:01:7a:ee:5d:62:71: fb:d9:24:ee:bd:b3:89:9a:27:0e:30:26:d4:4a:18:3a:d6:f3: e5:4d:dc:d3:9e:34:e2:8b:34:78:96:b5:68:8b:a2:a4:ee:00: e5:59:c7:6e:fe:bf:02:cf:57:e4:47:c8:2d:f3:3b:ca:cb:1d: 51:0e:0f:95:ea:39:40:04:a9:27:c5:fa:19:b0:61:cd:18:44: 2d:03:84:0b:a7:d9:68:01:ed:f6:91:5b:a9:a4:2f:d4:09:4f: 0c:99:c7:38:72:5f:58:a1:72:f4:cd:fe:24:4c:bd:ea:38:f6: 5a:0f:44:69:dc:cd:8a:61:6f:f7:34:76:9c:f1:6f:32:33:b8: bb:f9:e9:db:37:f7:a5:27:bc:ac:b3:83:df:9d:94:b2:9c:d2: 8d:29:c7:40:7e:12:0f:28:c3:70:69:ee:a0:91:17:e2:08:cc: 5a:9a:07:c0:e6:84:f4:27:d4:ec:a7:f0:2e:75:e8:bb:bf:e0: 96:dc:da:6e:0c:8f:17:4f:30:1b:28:f6:13:9e:54:ba:58:57: 12:52:ef:a5:ae:f4:7b:36:e8:6e:90:e4:96:96:fb:f2:2b:d1: 68:56:15:b5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yvxaEgeliT3fnTmk4UsNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMjMyYWUzOGE5MjMzYWI3ZmMxYjQyOWE1MDI5MjIwYWZh N2IyODgwHhcNMjYwMTAyMDgyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmQ0ZWZjN2Q1MzAzNjBiNzFkNTVkODk3MzRiZTlmMTRmYmVmOWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEwimj41E0hl7b22vbIzVvELuJBq uTOX4WwmQE9xNmX4dM/HCGrbrpxz/JtZPtisx2CR/750UbemExRo9ufoQPyQNmyD 3bIwGfa5KTC6Jaj4ePNRKkAeAKyp1SJiL2s0p391iaTnQ+vphxg7Sip64893ZdMO aqgfSAW9ktdVnBNyJT500EkOXAN71Ts8zxnhuRhe/YTP3ehp7hy/h53FzzN0XooB Th+jymCLQcEb4gcJRyheL+DqUk/SwTlXshy6I9vJ3LLlsvbWUfK9gpaIGQ2YL4YP UnMdXbkTMsLPV9YGnvi3KmF/CRgBOKOnnjCKt7O4PbDn2ySL9OdxJujJewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFbU78fVMDYLcdVdiXNL6fFPvvnTMB8GA1UdIwQY MBaAFFojKuOKkjOrf8G0KaUCkiCvp7KIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2It MTBhNDg1YzBiMGYyLzEvVnRUdng5VXdOZ3R4MVYySmMwdnA4VS0tLWRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2ItMTBhNDg1YzBiMGYy LzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEUFnwAwQG VzhAMA0GCSqGSIb3DQEBCwUAA4IBAQBQnBya4rabrZSORv1ItXwwRifKOFmGWVvn SBIhynYBeu5dYnH72STuvbOJmicOMCbUShg61vPlTdzTnjTiizR4lrVoi6Kk7gDl Wcdu/r8Cz1fkR8gt8zvKyx1RDg+V6jlABKknxfoZsGHNGEQtA4QLp9loAe32kVup pC/UCU8Mmcc4cl9YoXL0zf4kTL3qOPZaD0Rp3M2KYW/3NHac8W8yM7i7+enbN/el J7yss4PfnZSynNKNKcdAfhIPKMNwae6gkRfiCMxamgfA5oT0J9Tsp/Audei7v+CW 3NpuDI8XTzAbKPYTnlS6WFcSUu+lrvR7NuhukOSWlvvyK9FoVhW1 -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:16 2026 by rpki-client