This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa File: VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa (raw, json) Hash identifier: /6Cm3xSVnWhJDBO1jxzYWi2+tCHbHsChrmLHN+jeMKM= Subject key identifier: 56:E5:F8:27:64:2E:93:1B:0E:20:4E:67:7C:4C:76:B4:76:BF:E8:37 Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250 Certificate serial: 019B78A2F16DB43ADD42C9EB343751C48406 Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa Signing time: Thu 01 Jan 2026 08:18:23 +0000 ROA not before: Thu 01 Jan 2026 08:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50340 IP address blocks: 2001:67c:6d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f1:6d:b4:3a:dd:42:c9:eb:34:37:51:c4:84:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250 Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56e5f827642e931b0e204e677c4c76b476bfe837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:e7:89:86:40:9d:fb:8b:fe:e6:27:29:35: 3a:90:67:dd:d5:59:91:77:d9:55:8d:92:ef:0f:d9: c4:55:e2:01:68:79:3e:b5:87:f6:48:ac:83:35:ea: 59:39:aa:e7:1d:94:2d:99:88:8f:1c:86:fd:30:05: 2d:b7:46:48:f0:56:35:bd:25:74:01:41:e3:99:78: 5f:22:b2:9e:8b:50:af:71:ef:83:e2:43:84:5a:bd: e5:18:71:5d:bd:6e:5a:00:56:91:43:91:ee:25:70: 98:f7:51:b6:0a:55:67:9b:dc:fd:4b:8c:dd:ce:d2: 5a:d0:b3:53:8a:0d:f0:02:28:39:08:2b:68:96:bf: 99:be:86:7e:ba:f5:15:ee:8d:6c:0d:52:75:b4:9d: 04:31:16:d5:e7:bb:3a:89:77:34:44:ff:c2:61:79: 5b:f9:f3:ff:51:f7:c0:02:41:80:6f:30:b0:bf:86: 25:90:5e:ac:fc:d7:1e:16:98:9f:d9:45:b8:6f:a8: f5:3a:65:32:6c:51:a4:de:69:12:e6:d5:6f:72:5b: 6c:59:41:2c:81:66:8c:de:e2:2a:3d:70:48:29:43: f2:aa:4e:25:24:b7:86:16:dc:97:d2:db:44:42:e9: 44:52:9d:f9:42:c0:c5:8f:0a:87:41:0f:16:f5:96: 5c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E5:F8:27:64:2E:93:1B:0E:20:4E:67:7C:4C:76:B4:76:BF:E8:37 X509v3 Authority Key Identifier: keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:6d0::/48 Signature Algorithm: sha256WithRSAEncryption 14:8c:f9:90:9b:5d:78:8a:53:be:0d:8c:d4:b6:f6:eb:38:11: 9c:6f:c2:a5:50:9e:78:50:5f:e5:41:41:bc:0a:28:37:34:62: 3d:63:e9:44:80:8e:f5:67:8a:39:c6:0e:eb:54:24:ea:08:ba: 31:ed:10:78:20:54:a6:ce:80:db:91:78:c1:78:93:3f:7f:7a: a7:7c:96:a5:b3:65:c5:0c:98:58:8b:e3:d7:9c:fa:05:ce:f9: 6b:b4:72:c5:5e:5d:ab:17:0e:f7:cd:ba:94:7a:b6:02:b6:4e: b7:23:12:e5:53:b0:c9:aa:a1:c1:96:a2:91:55:bf:33:79:51: 07:ca:03:8f:e0:1d:2b:96:fa:dd:ab:c9:13:80:5f:ab:7b:f4: ba:9b:b3:69:74:d9:6a:c2:28:33:bb:e5:70:ad:f8:9a:fd:1c: 23:4e:40:63:89:f2:1d:56:33:b4:a3:20:da:84:a4:50:b4:ee: 13:90:33:36:5f:58:d3:20:2f:25:0d:e8:4a:2f:36:07:40:b8: 7d:7c:4c:58:34:cf:e7:c4:0d:50:ab:17:d2:d5:61:33:3f:a6: 42:37:77:27:fa:70:8a:7d:ab:ca:0d:80:9f:80:05:18:c9:1a: 77:84:07:a1:a3:45:82:21:31:b8:86:d9:70:61:85:2d:d7:a4: 29:08:42:54 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4ovFttDrdQsnrNDdRxIQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlY2JlZjM1MmNhYzcxYWQ1YmFlMGU4YjFjMDIyNDZlM2I2 NTAyNTAwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmU1ZjgyNzY0MmU5MzFiMGUyMDRlNjc3YzRjNzZiNDc2YmZlODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBfniYZAnfuL/uYnKTU6kGfd1VmR d9lVjZLvD9nEVeIBaHk+tYf2SKyDNepZOarnHZQtmYiPHIb9MAUtt0ZI8FY1vSV0 AUHjmXhfIrKei1Cvce+D4kOEWr3lGHFdvW5aAFaRQ5HuJXCY91G2ClVnm9z9S4zd ztJa0LNTig3wAig5CCtolr+ZvoZ+uvUV7o1sDVJ1tJ0EMRbV57s6iXc0RP/CYXlb +fP/UffAAkGAbzCwv4YlkF6s/NceFpif2UW4b6j1OmUybFGk3mkS5tVvcltsWUEs gWaM3uIqPXBIKUPyqk4lJLeGFtyX0ttEQulEUp35QsDFjwqHQQ8W9ZZcywIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFbl+CdkLpMbDiBOZ3xMdrR2v+g3MB8GA1UdIwQY MBaAFN7L7zUsrHGtW64OixwCJG47ZQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWIt NTQxZjlmY2JhNzQyLzEvVnVYNEoyUXVreHNPSUU1bmZFeDJ0SGFfNkRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWItNTQxZjlmY2JhNzQy LzEvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAbQ MA0GCSqGSIb3DQEBCwUAA4IBAQAUjPmQm114ilO+DYzUtvbrOBGcb8KlUJ54UF/l QUG8Cig3NGI9Y+lEgI71Z4o5xg7rVCTqCLox7RB4IFSmzoDbkXjBeJM/f3qnfJal s2XFDJhYi+PXnPoFzvlrtHLFXl2rFw73zbqUerYCtk63IxLlU7DJqqHBlqKRVb8z eVEHygOP4B0rlvrdq8kTgF+re/S6m7NpdNlqwigzu+Vwrfia/RwjTkBjifIdVjO0 oyDahKRQtO4TkDM2X1jTIC8lDehKLzYHQLh9fExYNM/nxA1QqxfS1WEzP6ZCN3cn +nCKfavKDYCfgAUYyRp3hAeho0WCITG4htlwYYUt16QpCEJU -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:28 2026 by rpki-client