This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/5tB5ByxSbF59bwczAJMebVmGVhg.roa File: 5tB5ByxSbF59bwczAJMebVmGVhg.roa (raw, json) Hash identifier: VpTZXtVFgcpzubG2bd7rY2Y6S8TiluIYtQEQ1FxJjvY= Subject key identifier: E6:D0:79:07:2C:52:6C:5E:7D:6F:07:33:00:93:1E:6D:59:86:56:18 Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Certificate serial: 019AE5FC9C493A644737CEFABB18CFC8EB75 Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/5tB5ByxSbF59bwczAJMebVmGVhg.roa Signing time: Wed 03 Dec 2025 20:52:08 +0000 ROA not before: Wed 03 Dec 2025 20:52:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 2a0b:3e00::/32 maxlen: 32 2a0b:3e01::/32 maxlen: 32 2a0b:3e02::/32 maxlen: 32 2a0b:3e03::/32 maxlen: 32 2a0b:3e04::/32 maxlen: 32 2a0b:3e05::/32 maxlen: 32 2a0b:3e06::/32 maxlen: 32 2a0b:3e07::/32 maxlen: 32 2a0c:8340::/32 maxlen: 32 2a0c:8341::/32 maxlen: 32 2a0c:8342::/32 maxlen: 32 2a0c:8343::/32 maxlen: 32 2a0c:8344::/32 maxlen: 32 2a0c:8345::/32 maxlen: 32 2a0c:8346::/32 maxlen: 32 2a0c:8347::/32 maxlen: 32 2a13:ddc0::/32 maxlen: 32 2a13:ddc1::/32 maxlen: 32 2a13:ddc2::/32 maxlen: 32 2a13:ddc3::/32 maxlen: 32 2a13:ddc4::/32 maxlen: 32 2a13:ddc5::/32 maxlen: 32 2a13:ddc6::/32 maxlen: 32 2a13:ddc7::/32 maxlen: 32 2a14:35c0::/32 maxlen: 32 2a14:35c1::/32 maxlen: 32 2a14:35c2::/32 maxlen: 32 2a14:35c3::/32 maxlen: 32 2a14:35c4::/32 maxlen: 32 2a14:35c5::/32 maxlen: 32 2a14:35c6::/32 maxlen: 32 2a14:35c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:fc:9c:49:3a:64:47:37:ce:fa:bb:18:cf:c8:eb:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Validity Not Before: Dec 3 20:52:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e6d079072c526c5e7d6f073300931e6d59865618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:26:28:8d:66:31:5f:f2:8b:78:63:70:ae:2d: f5:5d:30:18:01:7d:88:aa:2b:8f:f1:a5:0a:11:df: 82:01:a6:b6:6a:00:d4:e3:d3:67:53:0e:fb:b2:8d: 49:98:78:76:bc:ba:9f:72:26:76:13:5d:85:00:5a: d6:a7:be:8e:4d:63:2a:bf:ba:10:9e:8a:71:e1:37: e5:2e:58:cd:5f:05:80:f4:a9:c5:6c:36:0b:60:4e: 78:c3:6c:41:5e:04:68:58:b5:1b:f2:21:bc:da:5c: 3b:3d:62:44:53:81:5e:c5:2f:82:30:cc:e2:84:43: 9e:d9:24:3e:15:f5:77:51:26:c9:d0:a2:2e:76:51: 21:b7:66:3b:18:28:e2:ce:19:d6:63:e0:30:8e:24: b7:3f:79:86:96:f2:da:ce:ff:8b:3a:54:1d:c3:b8: 4f:8b:cf:85:34:b1:3e:f7:b8:a9:aa:a5:e8:d1:61: 56:41:af:7e:73:a0:74:41:a3:6a:df:5e:1b:fe:b7: c4:79:4d:aa:21:f7:d4:2f:b8:9f:61:30:e4:cc:39: 84:1d:d4:a8:71:a6:00:7a:b5:ca:28:92:7c:af:1f: b9:02:08:5d:c8:e2:98:30:b6:a5:b8:99:c2:5b:94: 78:9b:e5:e3:cf:3b:b8:80:ab:f4:d9:bd:7c:8e:a5: 68:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D0:79:07:2C:52:6C:5E:7D:6F:07:33:00:93:1E:6D:59:86:56:18 X509v3 Authority Key Identifier: keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/5tB5ByxSbF59bwczAJMebVmGVhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:3e00::/29 2a0c:8340::/29 2a13:ddc0::/29 2a14:35c0::/29 Signature Algorithm: sha256WithRSAEncryption 6b:97:83:2b:0c:c0:98:49:47:e4:ad:f2:dc:27:7e:9e:7f:1e: a7:5f:f1:6a:3a:a4:ad:09:1f:df:6f:63:98:74:21:4a:b4:18: cd:06:de:99:30:fa:a6:85:6b:90:13:df:d6:51:6c:89:33:56: 64:91:86:e7:65:ac:26:d7:87:01:bf:9c:8a:0e:78:c3:37:ba: d9:11:7d:d3:db:ea:72:5c:e6:30:9a:fc:15:c5:83:69:d4:c1: 39:18:2a:92:c9:83:e3:0a:40:52:63:6a:f2:96:79:f7:60:8d: 59:df:43:89:c8:36:34:56:0e:58:1a:14:6d:4a:c1:b5:aa:ab: 9e:18:99:1a:0a:a9:a0:28:e2:d6:0b:98:16:b8:4f:86:a1:83: 4a:f2:d2:ca:c9:30:0e:64:42:eb:a1:f8:ef:4a:97:1a:5f:55: 5e:c6:86:24:cb:11:b0:ab:b7:16:9f:1e:ce:99:d4:49:f9:29: 1f:32:76:f6:0e:96:9e:c9:63:6b:b1:ca:2f:2e:3d:f8:32:30: 57:4e:08:a4:c1:d3:48:c2:38:7e:dc:f1:f7:50:bb:60:33:77: 17:f2:47:80:9b:63:ef:ec:3b:8a:6d:7d:4b:d7:b2:2e:39:a1: 84:49:cc:d4:5b:32:aa:ab:dd:db:7e:b8:20:b8:77:88:65:7a: df:b4:f4:15 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZrl/JxJOmRHN876uxjPyOt1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy NjhmNTQwHhcNMjUxMjAzMjA1MjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmQwNzkwNzJjNTI2YzVlN2Q2ZjA3MzMwMDkzMWU2ZDU5ODY1NjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiYojWYxX/KLeGNwri31XTAYAX2I qiuP8aUKEd+CAaa2agDU49NnUw77so1JmHh2vLqfciZ2E12FAFrWp76OTWMqv7oQ nopx4TflLljNXwWA9KnFbDYLYE54w2xBXgRoWLUb8iG82lw7PWJEU4FexS+CMMzi hEOe2SQ+FfV3USbJ0KIudlEht2Y7GCjizhnWY+AwjiS3P3mGlvLazv+LOlQdw7hP i8+FNLE+97ipqqXo0WFWQa9+c6B0QaNq314b/rfEeU2qIffUL7ifYTDkzDmEHdSo caYAerXKKJJ8rx+5AghdyOKYMLaluJnCW5R4m+Xjzzu4gKv02b18jqVoeQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFObQeQcsUmxefW8HMwCTHm1ZhlYYMB8GA1UdIwQY MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt N2FhN2ZjMzU5NjU1LzEvNXRCNUJ5eFNiRjU5YndjekFKTWViVm1HVmhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1 LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKgs+AAMF AyoMg0ADBQMqE93AAwUDKhQ1wDANBgkqhkiG9w0BAQsFAAOCAQEAa5eDKwzAmElH 5K3y3Cd+nn8ep1/xajqkrQkf329jmHQhSrQYzQbemTD6poVrkBPf1lFsiTNWZJGG 52WsJteHAb+cig54wze62RF909vqclzmMJr8FcWDadTBORgqksmD4wpAUmNq8pZ5 92CNWd9Dicg2NFYOWBoUbUrBtaqrnhiZGgqpoCji1guYFrhPhqGDSvLSyskwDmRC 66H470qXGl9VXsaGJMsRsKu3Fp8ezpnUSfkpHzJ29g6Wnslja7HKLy49+DIwV04I pMHTSMI4ftzx91C7YDN3F/JHgJtj7+w7im19S9eyLjmhhEnM1Fsyqqvd2364ILh3 iGV637T0FQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:05:33 2025 by rpki-client