This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/RVfXd-D1ecB560CRD5YifVCpd1s.roa File: RVfXd-D1ecB560CRD5YifVCpd1s.roa (raw, json) Hash identifier: VBLJ7mxpiyU44wmUNd5IC/WX+1HbYUo9OBJtin4d0Sc= Subject key identifier: 45:57:D7:77:E0:F5:79:C0:79:EB:40:91:0F:96:22:7D:50:A9:77:5B Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019B77589A55946625D55774968EF26E8C68 Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/RVfXd-D1ecB560CRD5YifVCpd1s.roa Signing time: Thu 01 Jan 2026 02:17:34 +0000 ROA not before: Thu 01 Jan 2026 02:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211481 IP address blocks: 2a0f:ca81:6960::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9a:55:94:66:25:d5:57:74:96:8e:f2:6e:8c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Jan 1 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4557d777e0f579c079eb40910f96227d50a9775b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:24:93:fb:e9:95:9d:69:70:48:64:d2:f5:6d: 43:e8:cf:02:d3:2e:54:0d:04:fb:ff:26:dc:00:34: dd:71:f2:df:63:1d:b4:2b:4c:fa:ab:ec:1f:b2:fc: 17:1c:93:f7:45:86:7a:6b:96:c0:47:58:b9:21:e0: ed:15:1d:bd:75:be:f2:ca:d2:a2:6e:0d:8d:15:80: 11:2c:08:62:8a:42:ea:0d:29:c8:6f:dc:d9:0b:2b: 68:01:b2:30:1c:f8:7d:31:73:42:72:28:17:6a:ca: 0d:ff:6b:82:cb:a3:b9:7e:69:99:5b:e9:f2:d3:72: b2:9f:98:4e:f5:3c:19:8b:b3:a6:3b:f5:b0:26:e9: d0:18:d3:7e:a0:08:3e:fa:19:92:d7:ac:e6:bb:85: 74:26:bf:6c:1b:65:0f:90:b1:7e:46:a1:9f:1a:31: 1f:c1:9c:e8:ae:69:33:e6:4f:95:e1:7d:de:80:ae: e2:c8:e2:1b:5a:55:06:33:93:62:de:08:b4:57:85: f4:4d:e4:16:3e:b9:a1:80:20:2f:a8:7a:de:c8:b0: a4:2a:1b:24:d4:17:2e:1a:32:06:12:b9:b0:0f:ea: 9f:6a:80:3b:e1:c5:4c:b8:52:d4:95:93:c7:5c:a8: 0a:17:f0:89:9e:d6:ed:dc:0e:c8:90:1f:9e:28:28: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:57:D7:77:E0:F5:79:C0:79:EB:40:91:0F:96:22:7D:50:A9:77:5B X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/RVfXd-D1ecB560CRD5YifVCpd1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:ca81:6960::/44 Signature Algorithm: sha256WithRSAEncryption cc:c0:e2:53:61:5a:7e:58:ad:07:31:49:4d:36:81:d7:30:43: 35:a3:8c:74:c6:e9:72:21:24:06:a0:d2:69:5a:fc:5a:f6:a2: 43:85:d3:95:51:2a:c4:5e:b9:74:ed:3d:7e:14:f8:21:1e:b6: 23:b9:54:5d:d4:0f:2c:8e:00:31:28:4f:7f:af:4b:a7:ac:6a: e9:92:14:0d:e8:8f:49:05:cc:33:01:71:c7:1f:1d:5f:bf:4f: 83:d1:8e:df:92:06:17:2d:2e:0f:5e:84:1f:af:84:3b:95:40: 44:f6:bb:33:88:45:39:b1:5b:57:8a:ae:5b:39:88:e4:f2:37: 86:2c:5d:f4:97:5a:66:b9:ca:3a:e3:3c:73:0e:e1:f8:17:a7: 60:2d:f3:69:91:13:bf:b2:53:f8:fd:ad:34:e4:b3:13:b5:e4: 6f:e1:f0:f8:e9:3d:75:c5:23:d5:e9:9f:40:52:36:ef:5a:1b: 71:b5:b8:fa:05:fb:e5:5f:0c:f1:07:77:b0:ea:68:66:b7:ee: 38:44:83:67:72:41:12:73:8a:91:e3:29:67:cc:16:e6:14:f9: e2:0b:4b:af:db:26:60:b4:1d:6a:ba:40:75:74:12:29:40:b4: f5:44:a4:3e:fd:db:77:82:1b:67:3e:79:b5:e5:cb:68:32:c2: e0:67:3c:73 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WJpVlGYl1Vd0lo7yboxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYwMTAxMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTU3ZDc3N2UwZjU3OWMwNzllYjQwOTEwZjk2MjI3ZDUwYTk3NzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyST++mVnWlwSGTS9W1D6M8C0y5U DQT7/ybcADTdcfLfYx20K0z6q+wfsvwXHJP3RYZ6a5bAR1i5IeDtFR29db7yytKi bg2NFYARLAhiikLqDSnIb9zZCytoAbIwHPh9MXNCcigXasoN/2uCy6O5fmmZW+ny 03Kyn5hO9TwZi7OmO/WwJunQGNN+oAg++hmS16zmu4V0Jr9sG2UPkLF+RqGfGjEf wZzormkz5k+V4X3egK7iyOIbWlUGM5Ni3gi0V4X0TeQWPrmhgCAvqHreyLCkKhsk 1BcuGjIGErmwD+qfaoA74cVMuFLUlZPHXKgKF/CJntbt3A7IkB+eKCjj8QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEVX13fg9XnAeetAkQ+WIn1QqXdbMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvUlZmWGQtRDFlY0I1NjBDUkQ1WWlmVkNwZDFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg/KgWlg MA0GCSqGSIb3DQEBCwUAA4IBAQDMwOJTYVp+WK0HMUlNNoHXMEM1o4x0xulyISQG oNJpWvxa9qJDhdOVUSrEXrl07T1+FPghHrYjuVRd1A8sjgAxKE9/r0unrGrpkhQN 6I9JBcwzAXHHHx1fv0+D0Y7fkgYXLS4PXoQfr4Q7lUBE9rsziEU5sVtXiq5bOYjk 8jeGLF30l1pmuco64zxzDuH4F6dgLfNpkRO/slP4/a005LMTteRv4fD46T11xSPV 6Z9AUjbvWhtxtbj6BfvlXwzxB3ew6mhmt+44RINnckESc4qR4ylnzBbmFPniC0uv 2yZgtB1qukB1dBIpQLT1RKQ+/dt3ghtnPnm15ctoMsLgZzxz -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:10 2026 by rpki-client