This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa File: C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa (raw, json) Hash identifier: vn7JZEI6f0C3P1aOSgIzdjUGS6glebz8hQYfRM3UhMg= Subject key identifier: 0B:F5:51:14:FD:87:21:54:3D:D8:80:51:A8:A0:D4:A5:61:68:20:4C Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b Certificate serial: 019B7A5B22CDA53462AAA7D6E36AD9C2E55F Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa Signing time: Thu 01 Jan 2026 16:19:11 +0000 ROA not before: Thu 01 Jan 2026 16:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200216 IP address blocks: 2a13:6940::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:22:cd:a5:34:62:aa:a7:d6:e3:6a:d9:c2:e5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b Validity Not Before: Jan 1 16:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bf55114fd8721543dd88051a8a0d4a56168204c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:57:56:63:f1:d1:87:eb:15:ad:e0:b9:2c:14: f3:08:08:d7:d7:1b:32:cc:ff:41:fd:7e:cc:3d:b2: 24:cd:c2:ad:f0:82:4c:f7:95:c7:ba:d3:7f:f7:c8: 1f:2a:92:77:25:79:cd:a5:2a:62:9a:75:12:cb:65: 61:00:88:fe:52:71:70:1e:3d:a6:89:29:57:c6:04: 06:e4:64:76:8c:5a:98:3d:42:4e:e6:58:78:b7:f7: 06:4d:aa:86:eb:fe:03:ef:06:1f:2d:10:2a:af:f7: 52:9e:47:51:52:de:72:52:fb:75:29:55:2d:aa:c8: f6:4e:91:bf:93:47:fe:6d:62:2e:ab:d3:6f:bc:b7: 45:0b:e3:72:a7:ce:63:8e:22:7a:ac:d7:76:a8:0b: 0b:f5:b8:d8:aa:00:1b:46:91:71:92:23:9e:d5:e4: 9d:96:03:fb:0c:cb:ff:47:a2:58:86:88:a9:17:c2: bf:44:da:1a:12:38:ec:6d:19:74:1f:fb:a3:4d:8a: 00:50:1e:53:74:2d:90:1b:97:18:7a:69:15:80:41: 55:23:37:3a:a2:4a:d5:18:f0:bf:35:8b:c8:68:e3: b3:97:97:62:8e:02:34:0e:4a:61:7e:e3:3b:fa:c6: 26:41:91:fc:71:77:95:de:f9:39:4b:c7:9c:ba:c8: c8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F5:51:14:FD:87:21:54:3D:D8:80:51:A8:A0:D4:A5:61:68:20:4C X509v3 Authority Key Identifier: keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:6940::/29 Signature Algorithm: sha256WithRSAEncryption 5c:75:bc:9f:4c:0d:58:a3:a1:7d:0e:f9:a2:e0:b2:f8:01:36: f2:6e:e0:34:5c:ea:7b:de:6b:4d:4c:e0:fc:f6:d4:42:2c:de: 1e:f8:c0:cd:7a:c3:3d:f3:88:a3:7a:56:79:c6:8d:eb:0d:38: 7e:0e:46:27:5a:91:49:69:5a:67:6f:ad:ea:7a:cf:cb:25:f1: 58:aa:d3:0e:c3:2e:fe:e6:0e:f6:da:c8:65:68:3a:49:10:74: 5e:39:a6:66:8c:97:5a:19:54:3e:a4:95:e7:2d:ba:58:32:9d: d7:99:0d:17:57:82:03:e2:66:96:70:70:67:96:75:31:f2:6b: a9:89:79:af:47:4b:0d:49:9f:dd:3b:a9:d0:a4:ed:3a:2d:85: 3a:a8:c6:4c:16:4d:93:f9:38:bd:f9:46:f1:91:f8:1c:0d:95: 7c:8f:b8:fc:c8:e5:5a:a2:c3:7c:57:5c:10:23:30:03:79:10: 92:2e:66:de:8d:d8:aa:9b:37:f5:a3:05:d0:ea:51:6e:8d:0b: f6:05:7d:51:bf:3f:47:88:db:59:ec:87:ca:9a:a9:b8:b9:22: d9:6c:d4:72:29:33:e7:0d:6e:74:4b:2c:2a:d5:f8:af:34:1a: 17:7f:41:3d:57:2f:c5:a0:d1:bc:7a:c1:a4:b1:da:ee:b7:fb: aa:55:44:a9 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6WyLNpTRiqqfW42rZwuVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NWUxN2MwOGFjZGM3N2U5NDRiMjgzOTUwOGYxZmQ3MTFl OGU5N2IwHhcNMjYwMTAxMTYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmY1NTExNGZkODcyMTU0M2RkODgwNTFhOGEwZDRhNTYxNjgyMDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ldWY/HRh+sVreC5LBTzCAjX1xsy zP9B/X7MPbIkzcKt8IJM95XHutN/98gfKpJ3JXnNpSpimnUSy2VhAIj+UnFwHj2m iSlXxgQG5GR2jFqYPUJO5lh4t/cGTaqG6/4D7wYfLRAqr/dSnkdRUt5yUvt1KVUt qsj2TpG/k0f+bWIuq9NvvLdFC+Nyp85jjiJ6rNd2qAsL9bjYqgAbRpFxkiOe1eSd lgP7DMv/R6JYhoipF8K/RNoaEjjsbRl0H/ujTYoAUB5TdC2QG5cYemkVgEFVIzc6 okrVGPC/NYvIaOOzl5dijgI0DkphfuM7+sYmQZH8cXeV3vk5S8ecusjIoQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAv1URT9hyFUPdiAUaig1KVhaCBMMB8GA1UdIwQY MBaAFGZeF8CKzcd+lEsoOVCPH9cR6Ol7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTIt MDBjZWViNmE0MTRmLzEvQ19WUkZQMkhJVlE5MklCUnFLRFVwV0ZvSUV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTItMDBjZWViNmE0MTRm LzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhNpQDAN BgkqhkiG9w0BAQsFAAOCAQEAXHW8n0wNWKOhfQ75ouCy+AE28m7gNFzqe95rTUzg /PbUQizeHvjAzXrDPfOIo3pWecaN6w04fg5GJ1qRSWlaZ2+t6nrPyyXxWKrTDsMu /uYO9trIZWg6SRB0XjmmZoyXWhlUPqSV5y26WDKd15kNF1eCA+JmlnBwZ5Z1MfJr qYl5r0dLDUmf3Tup0KTtOi2FOqjGTBZNk/k4vflG8ZH4HA2VfI+4/MjlWqLDfFdc ECMwA3kQki5m3o3Yqps39aMF0OpRbo0L9gV9Ub8/R4jbWeyHypqpuLki2WzUcikz 5w1udEssKtX4rzQaF39BPVcvxaDRvHrBpLHa7rf7qlVEqQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:24 2026 by rpki-client