This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/rWmAiGpZvKfRIhv5Ul-VFceWbXQ.roa File: rWmAiGpZvKfRIhv5Ul-VFceWbXQ.roa (raw, json) Hash identifier: /4zQ/cLxLE1kwDNRsk/8Z8oaU3HbYFbh5ELOJPcVbts= Subject key identifier: AD:69:80:88:6A:59:BC:A7:D1:22:1B:F9:52:5F:95:15:C7:96:6D:74 Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Certificate serial: 019B78A21B5E9F2613ABAC1F92B502805FAE Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/rWmAiGpZvKfRIhv5Ul-VFceWbXQ.roa Signing time: Thu 01 Jan 2026 08:17:28 +0000 ROA not before: Thu 01 Jan 2026 08:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 2a0b:3e00::/32 maxlen: 32 2a0b:3e01::/32 maxlen: 32 2a0b:3e02::/32 maxlen: 32 2a0b:3e03::/32 maxlen: 32 2a0b:3e04::/32 maxlen: 32 2a0b:3e05::/32 maxlen: 32 2a0b:3e06::/32 maxlen: 32 2a0b:3e07::/32 maxlen: 32 2a0c:8340::/32 maxlen: 32 2a0c:8341::/32 maxlen: 32 2a0c:8342::/32 maxlen: 32 2a0c:8343::/32 maxlen: 32 2a0c:8344::/32 maxlen: 32 2a0c:8345::/32 maxlen: 32 2a0c:8346::/32 maxlen: 32 2a0c:8347::/32 maxlen: 32 2a13:ddc0::/32 maxlen: 32 2a13:ddc1::/32 maxlen: 32 2a13:ddc2::/32 maxlen: 32 2a13:ddc3::/32 maxlen: 32 2a13:ddc4::/32 maxlen: 32 2a13:ddc5::/32 maxlen: 32 2a13:ddc6::/32 maxlen: 32 2a13:ddc7::/32 maxlen: 32 2a14:35c0::/32 maxlen: 32 2a14:35c1::/32 maxlen: 32 2a14:35c2::/32 maxlen: 32 2a14:35c3::/32 maxlen: 32 2a14:35c4::/32 maxlen: 32 2a14:35c5::/32 maxlen: 32 2a14:35c6::/32 maxlen: 32 2a14:35c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1b:5e:9f:26:13:ab:ac:1f:92:b5:02:80:5f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Validity Not Before: Jan 1 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad6980886a59bca7d1221bf9525f9515c7966d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4d:7a:3b:eb:87:a6:4b:43:f3:d3:1a:fa:28: f8:82:c3:99:0e:43:eb:fb:f4:09:00:be:58:b4:20: 4e:93:30:71:99:fe:1f:8b:54:d0:f4:71:55:e3:d8: cf:84:a2:11:dc:13:7e:cf:ed:4f:55:7e:db:60:c8: fc:4e:cf:e3:3f:83:75:32:5e:ec:05:84:99:24:fc: 5d:56:17:87:8a:ee:0c:c6:e5:a8:a1:ef:1d:a4:ed: df:87:d7:1d:0a:31:f9:2b:43:1f:aa:6e:60:d0:3d: 6a:50:74:0a:eb:52:ff:d1:e0:42:d3:20:dd:3e:cd: 92:3d:d0:64:b8:3e:77:f7:5b:07:94:7d:f2:af:8b: 25:a6:ba:76:e0:dd:67:d1:53:c0:1e:e6:ea:73:38: 48:fd:02:4c:24:bc:aa:aa:a1:b9:16:78:12:62:ac: 49:59:9d:63:74:ce:9b:ea:e5:2d:31:ed:f5:1c:c9: 78:b9:80:5a:3e:b9:f4:54:dc:ad:a3:be:bd:bd:c1: 73:5d:88:29:34:b9:e8:cd:31:f9:3a:36:de:51:4f: fd:4c:7b:a6:9d:6b:31:70:6a:b0:ec:82:46:bb:d0: f1:08:08:2e:51:f9:0d:8f:5f:50:67:78:b0:d9:13: 1b:50:8c:f4:5a:5e:ab:4e:14:f9:c9:1e:c5:a4:2a: 3c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:69:80:88:6A:59:BC:A7:D1:22:1B:F9:52:5F:95:15:C7:96:6D:74 X509v3 Authority Key Identifier: keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/rWmAiGpZvKfRIhv5Ul-VFceWbXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:3e00::/29 2a0c:8340::/29 2a13:ddc0::/29 2a14:35c0::/29 Signature Algorithm: sha256WithRSAEncryption 75:96:24:0f:94:44:a4:e2:8a:ae:21:e0:ac:10:53:e0:d9:95: db:db:8b:2c:3a:d7:cc:61:81:56:9e:3a:b6:1c:77:22:e8:05: 70:37:c4:9d:64:d9:5b:87:e1:6d:81:24:8f:1c:95:2f:e6:21: 3f:21:de:dc:67:bc:5c:73:1c:b3:b9:f9:83:51:4c:fb:87:d2: fe:48:99:dd:8a:fb:dd:fb:0f:35:f8:73:5d:a2:ab:f9:1c:25: 79:83:a1:ea:69:78:63:4c:0f:7b:f1:a1:3e:ab:fc:66:29:ce: 47:43:84:71:e0:64:90:a6:3e:4a:58:52:27:22:27:ac:24:8e: c8:85:7b:96:a8:22:82:ea:20:b9:f2:f2:f6:d7:2b:10:ab:57: a4:ec:00:30:75:71:60:b3:89:fa:30:08:78:7b:29:0a:fe:63: 14:8d:92:66:14:d4:a0:eb:fc:47:cd:e5:0d:28:32:1f:2b:09: ee:b3:cd:47:44:f9:39:95:1f:ca:9b:52:29:d6:d7:04:96:c5: d1:05:b8:83:29:12:10:d7:f3:c8:d1:a2:6c:7a:f5:73:82:1b: bf:69:e3:75:c2:6c:21:ff:1a:66:3e:01:07:4b:9e:df:2a:3b: 2f:c0:f7:e5:8f:86:4a:8a:bb:3b:78:15:ae:5b:bb:eb:f7:33: 05:34:7e:bd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt4ohtenyYTq6wfkrUCgF+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy NjhmNTQwHhcNMjYwMTAxMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDY5ODA4ODZhNTliY2E3ZDEyMjFiZjk1MjVmOTUxNWM3OTY2ZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk016O+uHpktD89Ma+ij4gsOZDkPr +/QJAL5YtCBOkzBxmf4fi1TQ9HFV49jPhKIR3BN+z+1PVX7bYMj8Ts/jP4N1Ml7s BYSZJPxdVheHiu4MxuWooe8dpO3fh9cdCjH5K0Mfqm5g0D1qUHQK61L/0eBC0yDd Ps2SPdBkuD5391sHlH3yr4slprp24N1n0VPAHubqczhI/QJMJLyqqqG5FngSYqxJ WZ1jdM6b6uUtMe31HMl4uYBaPrn0VNyto769vcFzXYgpNLnozTH5OjbeUU/9THum nWsxcGqw7IJGu9DxCAguUfkNj19QZ3iw2RMbUIz0Wl6rThT5yR7FpCo81QIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFK1pgIhqWbyn0SIb+VJflRXHlm10MB8GA1UdIwQY MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt N2FhN2ZjMzU5NjU1LzEvcldtQWlHcFp2S2ZSSWh2NVVsLVZGY2VXYlhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1 LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKgs+AAMF AyoMg0ADBQMqE93AAwUDKhQ1wDANBgkqhkiG9w0BAQsFAAOCAQEAdZYkD5REpOKK riHgrBBT4NmV29uLLDrXzGGBVp46thx3IugFcDfEnWTZW4fhbYEkjxyVL+YhPyHe 3Ge8XHMcs7n5g1FM+4fS/kiZ3Yr73fsPNfhzXaKr+RwleYOh6ml4Y0wPe/GhPqv8 ZinOR0OEceBkkKY+SlhSJyInrCSOyIV7lqgiguogufLy9tcrEKtXpOwAMHVxYLOJ +jAIeHspCv5jFI2SZhTUoOv8R83lDSgyHysJ7rPNR0T5OZUfyptSKdbXBJbF0QW4 gykSENfzyNGibHr1c4Ibv2njdcJsIf8aZj4BB0ue3yo7L8D35Y+GSoq7O3gVrlu7 6/czBTR+vQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:24 2026 by rpki-client