This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/_jbpHfwoWkRMmXtZ9SppwqNyEbQ.roa File: _jbpHfwoWkRMmXtZ9SppwqNyEbQ.roa (raw, json) Hash identifier: EXSdaWL7khfXCghHzFIqHNR3/DkalLdkgYs2d4m5uQU= Subject key identifier: FE:36:E9:1D:FC:28:5A:44:4C:99:7B:59:F5:2A:69:C2:A3:72:11:B4 Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Certificate serial: 019B78A2149A2E7E7B882FD430028E55418E Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/_jbpHfwoWkRMmXtZ9SppwqNyEbQ.roa Signing time: Thu 01 Jan 2026 08:17:26 +0000 ROA not before: Thu 01 Jan 2026 08:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 996 IP address blocks: 2001:3180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:14:9a:2e:7e:7b:88:2f:d4:30:02:8e:55:41:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Validity Not Before: Jan 1 08:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe36e91dfc285a444c997b59f52a69c2a37211b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9e:26:10:bb:24:d3:80:b3:38:f4:51:58:16: 42:17:85:1a:ff:40:6d:41:16:c0:79:4a:fb:39:e8: e4:1a:97:2f:ac:60:5f:02:17:52:80:a6:73:45:8b: bb:60:43:84:0a:83:a8:79:fd:77:ad:bc:65:ce:dc: fe:05:1a:07:51:16:57:5c:1d:b7:fd:c5:4a:3f:6c: 17:4e:13:f3:99:76:e3:76:fd:a6:04:8a:87:cb:a7: 5e:7e:e4:38:fa:65:d8:bf:52:a4:52:68:a3:ee:61: 84:fa:04:5e:5a:90:52:47:42:c6:0e:d5:3f:eb:41: 24:67:90:3d:d7:3e:87:be:99:61:6d:fb:bd:d4:9e: 46:df:72:e0:4c:df:a7:b6:1e:70:65:30:e8:42:b5: 54:00:44:fd:91:58:da:fc:a5:96:1c:e9:37:45:f1: bf:82:ab:0d:de:0f:a5:1d:92:2d:54:6b:f9:02:90: f4:5f:18:77:2e:e1:98:a2:16:b1:80:60:d2:e8:5d: d9:21:28:69:aa:3b:d9:86:f0:ba:cd:b9:f0:62:a0: 40:7f:f7:4c:12:4f:19:48:3f:94:af:3f:e0:e0:4f: 12:2b:52:85:c0:e3:0e:b6:84:60:44:e0:81:65:d2: 4b:c7:4b:b7:c2:c3:0e:40:f8:c3:88:15:5d:12:ef: 47:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:36:E9:1D:FC:28:5A:44:4C:99:7B:59:F5:2A:69:C2:A3:72:11:B4 X509v3 Authority Key Identifier: keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/_jbpHfwoWkRMmXtZ9SppwqNyEbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3180::/32 Signature Algorithm: sha256WithRSAEncryption 02:64:e2:03:12:99:a8:7e:f9:c6:fa:f4:7f:53:10:23:03:56: 64:f6:2c:25:5c:ee:bd:c3:a5:9b:1e:59:ad:4b:c2:79:04:82: 57:27:f4:e9:0a:fd:87:e1:4c:6a:ea:00:09:b1:26:8c:80:af: ed:44:b4:b0:96:27:67:c1:d5:96:69:7b:a0:b1:85:3d:9b:fb: 41:de:75:aa:f3:d3:b7:e3:4b:73:b9:1a:5b:56:62:d2:ee:25: 55:65:a6:e2:b6:bb:48:86:2c:65:01:02:4a:cb:cf:35:27:d0: fd:ca:0d:76:f6:45:0f:94:12:1f:2c:8b:e0:a0:a2:df:02:81: 79:c9:9b:17:cd:f2:88:f7:dc:2a:0a:98:ab:d2:8f:61:80:98: 16:b3:1b:d2:0c:fe:c1:a9:41:1b:c3:88:12:7b:cc:44:0c:05: 4a:f0:b2:10:ba:33:ff:59:7a:9b:42:61:e7:b6:b4:08:5b:79: 83:e6:9f:52:a7:52:e5:4e:79:3f:bb:ac:35:3b:b7:e6:ce:68: 27:6d:a6:46:31:b1:3f:cd:8b:01:8b:37:f0:ef:6d:82:03:cc: 9d:bc:34:48:be:d2:04:27:37:fe:c8:28:29:87:d4:39:2f:5e: 29:e1:a4:ee:1d:03:45:c6:2f:69:de:42:8c:d4:43:63:e4:7b: 74:ac:7d:42 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4ohSaLn57iC/UMAKOVUGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy NjhmNTQwHhcNMjYwMTAxMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTM2ZTkxZGZjMjg1YTQ0NGM5OTdiNTlmNTJhNjljMmEzNzIxMWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Z4mELsk04CzOPRRWBZCF4Ua/0Bt QRbAeUr7OejkGpcvrGBfAhdSgKZzRYu7YEOECoOoef13rbxlztz+BRoHURZXXB23 /cVKP2wXThPzmXbjdv2mBIqHy6defuQ4+mXYv1KkUmij7mGE+gReWpBSR0LGDtU/ 60EkZ5A91z6Hvplhbfu91J5G33LgTN+nth5wZTDoQrVUAET9kVja/KWWHOk3RfG/ gqsN3g+lHZItVGv5ApD0Xxh3LuGYohaxgGDS6F3ZIShpqjvZhvC6zbnwYqBAf/dM Ek8ZSD+Urz/g4E8SK1KFwOMOtoRgROCBZdJLx0u3wsMOQPjDiBVdEu9HpwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFP426R38KFpETJl7WfUqacKjchG0MB8GA1UdIwQY MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt N2FhN2ZjMzU5NjU1LzEvX2picEhmd29Xa1JNbVh0WjlTcHB3cU55RWJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1 LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAExgDAN BgkqhkiG9w0BAQsFAAOCAQEAAmTiAxKZqH75xvr0f1MQIwNWZPYsJVzuvcOlmx5Z rUvCeQSCVyf06Qr9h+FMauoACbEmjICv7US0sJYnZ8HVlml7oLGFPZv7Qd51qvPT t+NLc7kaW1Zi0u4lVWWm4ra7SIYsZQECSsvPNSfQ/coNdvZFD5QSHyyL4KCi3wKB ecmbF83yiPfcKgqYq9KPYYCYFrMb0gz+walBG8OIEnvMRAwFSvCyELoz/1l6m0Jh 57a0CFt5g+afUqdS5U55P7usNTu35s5oJ22mRjGxP82LAYs38O9tggPMnbw0SL7S BCc3/sgoKYfUOS9eKeGk7h0DRcYvad5CjNRDY+R7dKx9Qg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:03 2026 by rpki-client