This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/VS5UOf4Oqufmk1nDLv2qDmY9aAk.roa File: VS5UOf4Oqufmk1nDLv2qDmY9aAk.roa (raw, json) Hash identifier: yxhJeQxv5OL2X3W33orxeTr4UI2HV6MbDSVgY4g3PdE= Subject key identifier: 55:2E:54:39:FE:0E:AA:E7:E6:93:59:C3:2E:FD:AA:0E:66:3D:68:09 Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361 Certificate serial: 019B7C121FFDC3E8AA41B22949D60CC280E2 Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/VS5UOf4Oqufmk1nDLv2qDmY9aAk.roa Signing time: Fri 02 Jan 2026 00:18:41 +0000 ROA not before: Fri 02 Jan 2026 00:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207632 IP address blocks: 2001:678:be0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:1f:fd:c3:e8:aa:41:b2:29:49:d6:0c:c2:80:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361 Validity Not Before: Jan 2 00:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=552e5439fe0eaae7e69359c32efdaa0e663d6809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8b:7a:67:a1:7d:d4:93:8d:b3:b8:a8:b5:95: 43:04:d0:cb:08:2c:d7:92:43:e1:30:d9:ce:6d:a9: 4f:a0:e6:a7:16:cf:a3:61:6c:74:50:a2:ff:c3:a5: 55:e1:5e:81:53:ff:68:e0:9d:ce:8e:fb:5f:39:db: b0:d1:61:32:8f:e7:5a:81:0c:db:42:52:44:9b:eb: ae:00:f1:1e:5f:94:2a:3c:ad:6c:d7:d2:22:46:83: 85:27:40:a0:56:09:8b:13:20:92:c7:8d:04:65:22: af:61:66:12:d3:23:ab:38:f2:29:79:0e:d0:e7:eb: 3d:97:a2:5c:1c:fb:1e:1c:80:27:b6:4d:40:ac:4c: 71:49:25:8f:64:82:55:7f:f8:e5:c5:e8:6e:f0:12: df:32:99:6f:59:b4:8e:af:e8:2f:65:b1:57:b5:8e: 61:df:22:39:65:97:06:0c:ef:71:1e:ac:38:93:b2: 9e:7c:10:6f:1f:5c:b3:1a:54:3c:7d:f9:ec:d3:0e: 19:9a:86:19:a0:0a:2a:ce:27:5a:4f:ea:fa:89:5f: 76:58:c1:5e:8f:af:e7:5c:ee:4d:6a:05:ce:a5:0f: 7b:88:65:c0:22:7e:54:91:53:ca:eb:9e:25:f2:ce: 45:70:ad:ef:18:ca:53:bd:92:bc:c4:64:53:0b:15: 77:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2E:54:39:FE:0E:AA:E7:E6:93:59:C3:2E:FD:AA:0E:66:3D:68:09 X509v3 Authority Key Identifier: keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/VS5UOf4Oqufmk1nDLv2qDmY9aAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:be0::/48 Signature Algorithm: sha256WithRSAEncryption 37:58:2d:63:4d:3b:c3:d2:ad:71:b1:ee:bb:29:c0:c6:f5:6c: 7c:81:19:72:bc:2a:8b:88:f5:51:b5:00:d0:aa:91:b2:fc:0c: 8e:45:b3:64:5d:b4:8b:ed:c3:e5:2b:c8:0f:ae:39:e1:25:90: 4f:7a:8c:af:6b:42:a7:2f:fa:c3:94:55:36:5b:82:05:6e:13: a1:43:60:cb:b9:4d:70:da:0d:35:ec:92:82:dd:ba:e7:f4:f0: 32:2b:b5:42:08:92:e3:35:af:aa:89:41:2d:b0:a1:96:61:47: 5f:d0:d0:06:65:5d:a2:42:50:50:a2:f2:b7:da:c1:e9:49:ba: 2d:19:36:5d:81:45:6c:80:49:63:c9:61:e9:51:e0:89:ec:c6: cc:4b:b5:6f:57:8e:29:08:ab:5c:07:af:ee:cf:ca:3e:6d:66: b5:d5:c3:ba:f6:3a:4b:f9:75:aa:6c:b3:fa:15:fc:b3:27:4b: 4c:fd:fa:7c:96:8e:f6:4f:21:ce:33:ff:23:58:df:3f:d5:30: 68:b1:d5:25:68:37:6a:17:66:48:6e:9f:62:92:19:a1:8c:65: e0:55:5d:d6:bb:c2:e1:e8:c1:02:58:2c:62:35:61:88:ec:23: b6:7d:7b:42:d1:a7:75:53:fc:0d:00:96:4d:87:88:40:07:b1: ad:28:d5:c8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8Eh/9w+iqQbIpSdYMwoDiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYWJlYjZlZjgyMGQzZDUyZjA1MzcyMjMzYzU0MWVlNGIx NGYzNjEwHhcNMjYwMTAyMDAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTJlNTQzOWZlMGVhYWU3ZTY5MzU5YzMyZWZkYWEwZTY2M2Q2ODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Yt6Z6F91JONs7iotZVDBNDLCCzX kkPhMNnObalPoOanFs+jYWx0UKL/w6VV4V6BU/9o4J3OjvtfOduw0WEyj+dagQzb QlJEm+uuAPEeX5QqPK1s19IiRoOFJ0CgVgmLEyCSx40EZSKvYWYS0yOrOPIpeQ7Q 5+s9l6JcHPseHIAntk1ArExxSSWPZIJVf/jlxehu8BLfMplvWbSOr+gvZbFXtY5h 3yI5ZZcGDO9xHqw4k7KefBBvH1yzGlQ8ffns0w4ZmoYZoAoqzidaT+r6iV92WMFe j6/nXO5NagXOpQ97iGXAIn5UkVPK654l8s5FcK3vGMpTvZK8xGRTCxV3swIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFUuVDn+Dqrn5pNZwy79qg5mPWgJMB8GA1UdIwQY MBaAFA+r6274INPVLwU3IjPFQe5LFPNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEt NWEzNzEyNjcwNWFkLzEvVlM1VU9mNE9xdWZtazFuREx2MnFEbVk5YUFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEtNWEzNzEyNjcwNWFk LzEvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAvg MA0GCSqGSIb3DQEBCwUAA4IBAQA3WC1jTTvD0q1xse67KcDG9Wx8gRlyvCqLiPVR tQDQqpGy/AyORbNkXbSL7cPlK8gPrjnhJZBPeoyva0KnL/rDlFU2W4IFbhOhQ2DL uU1w2g017JKC3brn9PAyK7VCCJLjNa+qiUEtsKGWYUdf0NAGZV2iQlBQovK32sHp SbotGTZdgUVsgEljyWHpUeCJ7MbMS7VvV44pCKtcB6/uz8o+bWa11cO69jpL+XWq bLP6FfyzJ0tM/fp8lo72TyHOM/8jWN8/1TBosdUlaDdqF2ZIbp9ikhmhjGXgVV3W u8Lh6MECWCxiNWGI7CO2fXtC0ad1U/wNAJZNh4hAB7GtKNXI -----END CERTIFICATE-----Generated at Wed Jan 7 23:22:20 2026 by rpki-client