This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/VmT1Sho8ydxnIvte_UcEISrCOVY.roa File: VmT1Sho8ydxnIvte_UcEISrCOVY.roa (raw, json) Hash identifier: JUbxvsuSh9DNNPxCyYh0gkLv8eHHl4hp0u9soB0vgC8= Subject key identifier: 56:64:F5:4A:1A:3C:C9:DC:67:22:FB:5E:FD:47:04:21:2A:C2:39:56 Certificate issuer: /CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78 Certificate serial: 019B7C7FA0C636B942EB60B57A91C7A69C5B Authority key identifier: 6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/VmT1Sho8ydxnIvte_UcEISrCOVY.roa Signing time: Fri 02 Jan 2026 02:18:17 +0000 ROA not before: Fri 02 Jan 2026 02:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213959 IP address blocks: 2001:67c:f54::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:a0:c6:36:b9:42:eb:60:b5:7a:91:c7:a6:9c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78 Validity Not Before: Jan 2 02:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5664f54a1a3cc9dc6722fb5efd4704212ac23956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4c:17:30:07:bb:a4:7a:f6:8e:fa:73:08:ec: 5b:31:0e:5f:26:78:d1:20:0e:02:e7:af:62:42:7c: cf:23:2f:9c:46:96:d8:94:02:af:43:20:62:a0:e7: 36:e5:3b:4e:f3:2c:1d:f8:3c:08:5b:a9:63:5a:fc: 8e:b4:3f:33:87:8a:44:64:74:5f:69:cf:b5:77:45: ac:a2:0a:9f:67:ad:f5:74:f2:9e:ff:a8:33:f6:65: a9:6b:b1:99:6a:2e:c8:72:f8:dd:ed:59:df:0d:ae: 7d:e3:42:dd:d5:3c:55:f7:8d:f4:a6:1f:5b:b1:a5: d8:86:44:5c:c9:02:1b:35:54:44:ac:0f:79:e7:9a: bb:96:be:ad:11:54:b4:31:37:66:a4:e1:46:84:d7: 0c:5d:82:a4:09:b0:f0:72:d2:46:4b:d6:a8:ae:14: 33:ca:f7:44:66:7e:70:83:c7:b7:5f:f8:dd:e4:e9: 4c:c1:eb:75:59:63:ad:08:44:ac:42:13:98:7a:63: d2:d2:0b:78:27:f7:96:95:59:0a:5b:88:7a:c7:6b: e5:5c:72:fc:4f:bc:86:a4:3f:0c:68:84:aa:fc:64: 30:cf:09:81:53:3b:ec:57:98:04:58:ec:f4:2c:f5: 78:31:d8:84:26:53:c3:28:ba:51:7a:50:f4:93:28: 3f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:64:F5:4A:1A:3C:C9:DC:67:22:FB:5E:FD:47:04:21:2A:C2:39:56 X509v3 Authority Key Identifier: keyid:6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/VmT1Sho8ydxnIvte_UcEISrCOVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:f54::/48 Signature Algorithm: sha256WithRSAEncryption c7:83:9e:0e:a0:ab:21:f0:3d:31:c9:ec:98:3c:ce:3d:fa:f7: 57:7a:75:7d:81:85:53:85:f4:f7:87:d8:d3:01:05:94:11:70: ec:4f:2f:12:66:12:5f:a8:13:38:55:b0:60:48:f5:36:7f:78: 11:d7:50:30:e2:65:a8:53:b3:1a:40:46:e8:c9:4a:e6:90:2a: 0c:79:a8:3a:68:e2:d6:39:24:58:c5:e7:a1:4b:78:26:1f:71: 7b:eb:bd:0c:1a:b0:fd:3f:3e:62:51:8c:47:bb:99:fb:a3:3a: ef:ea:62:53:ac:f0:bf:93:74:39:57:56:53:f0:cb:26:0e:39: 3f:b8:45:59:e2:4d:d1:13:e9:b1:ee:25:a9:d0:92:6a:fd:83: 27:7a:96:3d:ce:6b:1b:78:7a:f8:19:1d:9d:7f:01:ed:27:73: 4a:7b:7a:dc:61:b1:fd:03:82:ff:8e:18:99:a4:4a:0e:d5:2e: 9f:a0:2e:81:4f:74:24:9c:3e:c6:94:d6:a5:b9:e4:f1:97:9c: ed:ba:13:33:98:cc:82:51:96:34:3d:28:62:0a:36:df:2b:9d: d0:84:84:71:a2:b8:79:4c:e3:c6:14:44:66:6e:94:f5:3b:c4: 88:0d:c2:36:56:2c:ac:69:57:28:d7:ae:09:5e:fb:64:cd:99: 73:85:b2:cc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8f6DGNrlC62C1epHHppxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZDRhYTM4YzBiNTkxZDRhNmIzZTU4NTY4NWM2ZDQzODgw ZGFjNzgwHhcNMjYwMTAyMDIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjY0ZjU0YTFhM2NjOWRjNjcyMmZiNWVmZDQ3MDQyMTJhYzIzOTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UwXMAe7pHr2jvpzCOxbMQ5fJnjR IA4C569iQnzPIy+cRpbYlAKvQyBioOc25TtO8ywd+DwIW6ljWvyOtD8zh4pEZHRf ac+1d0WsogqfZ631dPKe/6gz9mWpa7GZai7Icvjd7VnfDa5940Ld1TxV9430ph9b saXYhkRcyQIbNVRErA9555q7lr6tEVS0MTdmpOFGhNcMXYKkCbDwctJGS9aorhQz yvdEZn5wg8e3X/jd5OlMwet1WWOtCESsQhOYemPS0gt4J/eWlVkKW4h6x2vlXHL8 T7yGpD8MaISq/GQwzwmBUzvsV5gEWOz0LPV4MdiEJlPDKLpRelD0kyg/dQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFZk9UoaPMncZyL7Xv1HBCEqwjlWMB8GA1UdIwQY MBaAFG7UqjjAtZHUprPlhWhcbUOIDax4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85YTg3ODYtMDlmNC00YjYwLTg2N2Et YzhiMmRmMjNkNTE5LzEvVm1UMVNobzh5ZHhuSXZ0ZV9VY0VJU3JDT1ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85YTg3ODYtMDlmNC00YjYwLTg2N2EtYzhiMmRmMjNkNTE5 LzEvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA9U MA0GCSqGSIb3DQEBCwUAA4IBAQDHg54OoKsh8D0xyeyYPM49+vdXenV9gYVThfT3 h9jTAQWUEXDsTy8SZhJfqBM4VbBgSPU2f3gR11Aw4mWoU7MaQEboyUrmkCoMeag6 aOLWOSRYxeehS3gmH3F7670MGrD9Pz5iUYxHu5n7ozrv6mJTrPC/k3Q5V1ZT8Msm Djk/uEVZ4k3RE+mx7iWp0JJq/YMnepY9zmsbeHr4GR2dfwHtJ3NKe3rcYbH9A4L/ jhiZpEoO1S6foC6BT3QknD7GlNalueTxl5ztuhMzmMyCUZY0PShiCjbfK53QhIRx orh5TOPGFERmbpT1O8SIDcI2ViysaVco164JXvtkzZlzhbLM -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:02 2026 by rpki-client