This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/y5VwaVDlBBFkXgIF2NDdVaIpxak.roa File: y5VwaVDlBBFkXgIF2NDdVaIpxak.roa (raw, json) Hash identifier: vQzRSCQFt06fAcE7vNSTiIrc+XOhCpHknMyn4OqX5Zw= Subject key identifier: CB:95:70:69:50:E5:04:11:64:5E:02:05:D8:D0:DD:55:A2:29:C5:A9 Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Certificate serial: 019B78A217BC8F2F93F431EC4A8CDD0D61C7 Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/y5VwaVDlBBFkXgIF2NDdVaIpxak.roa Signing time: Thu 01 Jan 2026 08:17:27 +0000 ROA not before: Thu 01 Jan 2026 08:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200216 IP address blocks: 2001:3181::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:17:bc:8f:2f:93:f4:31:ec:4a:8c:dd:0d:61:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Validity Not Before: Jan 1 08:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb95706950e50411645e0205d8d0dd55a229c5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:29:54:f6:66:6f:d7:fc:c8:af:cb:5d:f2:e5: cc:3d:1b:35:61:10:f0:70:1b:c8:d8:8d:f9:01:6c: 92:c8:8f:b5:18:3b:5a:34:ab:bf:c6:a5:34:95:ce: f0:ef:72:5a:80:2c:c1:b8:d2:d6:d8:50:9e:aa:44: de:0b:ee:f2:cc:ea:d0:fb:54:48:3f:09:00:97:8c: 12:07:1f:33:fe:f9:82:20:3a:e7:06:a8:52:e3:eb: 80:53:66:24:7e:26:8e:e5:c7:6d:3e:71:cd:fe:58: ba:9f:85:c1:3c:6d:fd:51:ae:ae:7e:fc:1f:5e:d8: 60:f8:b8:b5:fe:5c:6e:7b:30:2c:1e:21:fd:11:49: e4:76:3c:77:da:74:8e:fd:cc:0c:31:88:a3:7a:e2: e1:79:56:68:27:1f:ec:ce:a6:37:47:ae:bb:ad:26: be:ea:d2:06:8b:91:61:fc:ae:58:6c:5e:8e:14:7e: a0:79:b0:68:d4:39:23:8d:fd:58:03:5d:7a:0b:a5: c6:a5:c4:d8:b9:b5:63:74:d4:ed:33:99:db:56:ae: 7c:6d:18:4b:e5:b1:f7:45:39:5b:c2:07:c0:eb:7a: f6:ee:32:26:4a:4e:70:be:d7:8a:93:58:0d:45:7e: 19:72:00:3f:9a:13:a4:9f:7d:b2:77:8d:f8:af:b4: 1f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:95:70:69:50:E5:04:11:64:5E:02:05:D8:D0:DD:55:A2:29:C5:A9 X509v3 Authority Key Identifier: keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/y5VwaVDlBBFkXgIF2NDdVaIpxak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3181::/32 Signature Algorithm: sha256WithRSAEncryption 0e:5a:b1:37:e2:47:43:e1:50:11:8d:7f:6c:64:48:76:2b:00: 43:08:7e:8f:66:53:f2:2c:00:3c:96:e0:42:3e:38:e2:59:01: b6:bf:0f:3b:8f:0b:8b:5d:e9:58:82:5a:bb:e8:f5:5a:9b:d5: 84:27:c2:62:bd:d9:4f:69:79:e5:e7:3a:7f:f7:a5:c8:2d:49: 50:f4:d7:4d:98:cf:40:54:41:10:58:41:62:25:e5:1a:58:ff: 7c:7a:08:c5:99:66:82:c2:68:aa:57:b9:0b:b1:f8:77:6a:5d: aa:3f:aa:31:da:23:65:3b:28:4c:d1:af:9f:d8:65:81:fb:14: 60:f3:41:94:1d:a7:f6:58:13:f0:6d:59:a6:71:94:08:6d:98: 0c:3d:99:40:a9:d8:74:21:b4:69:b8:2c:62:58:41:bd:3c:ce: f7:a0:47:30:0d:76:0b:55:11:31:df:64:86:3c:84:e1:48:2e: 61:fb:ed:87:2f:c4:57:02:fe:38:02:0c:42:8a:da:07:7d:1c: 5d:76:ee:2d:39:09:52:a0:08:01:2c:d6:ae:ff:11:e4:4d:ee: d8:d1:3c:5e:18:bd:21:39:ce:db:46:14:e9:1a:e6:84:7d:9c: 65:e2:85:7e:aa:7e:68:46:41:e8:96:ba:7e:32:e6:a7:36:54: 38:82:f2:62 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4ohe8jy+T9DHsSozdDWHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy NjhmNTQwHhcNMjYwMTAxMDgxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjk1NzA2OTUwZTUwNDExNjQ1ZTAyMDVkOGQwZGQ1NWEyMjljNWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnClU9mZv1/zIr8td8uXMPRs1YRDw cBvI2I35AWySyI+1GDtaNKu/xqU0lc7w73JagCzBuNLW2FCeqkTeC+7yzOrQ+1RI PwkAl4wSBx8z/vmCIDrnBqhS4+uAU2YkfiaO5cdtPnHN/li6n4XBPG39Ua6ufvwf Xthg+Li1/lxuezAsHiH9EUnkdjx32nSO/cwMMYijeuLheVZoJx/szqY3R667rSa+ 6tIGi5Fh/K5YbF6OFH6gebBo1Dkjjf1YA116C6XGpcTYubVjdNTtM5nbVq58bRhL 5bH3RTlbwgfA63r27jImSk5wvteKk1gNRX4ZcgA/mhOkn32yd434r7Qf9QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMuVcGlQ5QQRZF4CBdjQ3VWiKcWpMB8GA1UdIwQY MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt N2FhN2ZjMzU5NjU1LzEveTVWd2FWRGxCQkZrWGdJRjJORGRWYUlweGFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1 LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAExgTAN BgkqhkiG9w0BAQsFAAOCAQEADlqxN+JHQ+FQEY1/bGRIdisAQwh+j2ZT8iwAPJbg Qj444lkBtr8PO48Li13pWIJau+j1WpvVhCfCYr3ZT2l55ec6f/elyC1JUPTXTZjP QFRBEFhBYiXlGlj/fHoIxZlmgsJoqle5C7H4d2pdqj+qMdojZTsoTNGvn9hlgfsU YPNBlB2n9lgT8G1ZpnGUCG2YDD2ZQKnYdCG0abgsYlhBvTzO96BHMA12C1URMd9k hjyE4UguYfvthy/EVwL+OAIMQoraB30cXXbuLTkJUqAIASzWrv8R5E3u2NE8Xhi9 ITnO20YU6RrmhH2cZeKFfqp+aEZB6Ja6fjLmpzZUOILyYg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:04 2026 by rpki-client