This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/tVLBynseYuOMdYlyvWgVoSg2cm4.roa File: tVLBynseYuOMdYlyvWgVoSg2cm4.roa (raw, json) Hash identifier: 7PKUWnEbOhh4JsQVjHSmYDZuYa3TgU9j80nH25oP8cc= Subject key identifier: B5:52:C1:CA:7B:1E:62:E3:8C:75:89:72:BD:68:15:A1:28:36:72:6E Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38B70FA68FE9F9CD95936D686431BE Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/tVLBynseYuOMdYlyvWgVoSg2cm4.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208747 IP address blocks: 2a13:a5c7:1100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b7:0f:a6:8f:e9:f9:cd:95:93:6d:68:64:31:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b552c1ca7b1e62e38c758972bd6815a12836726e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f2:69:a4:d2:54:80:37:09:a5:e4:de:03:e3: 55:83:29:97:46:2c:18:92:55:c0:ee:2c:21:79:38: 61:00:b2:8f:4e:ac:52:d4:b1:36:c6:c5:b0:69:3c: d9:b0:df:02:3c:c9:90:e7:21:60:9f:bd:53:da:a0: 35:91:15:6f:45:1a:93:a4:b7:78:54:e6:2b:d8:fa: 15:b6:88:5c:8b:ed:79:78:b1:5c:a6:38:5a:ff:1e: a8:67:af:80:a5:e9:ae:24:b2:e5:75:ef:bf:fe:51: b1:e9:78:14:01:e3:b1:8a:e4:f4:79:98:d5:d7:06: b8:fb:c1:19:cb:dd:8f:78:4b:8b:cb:45:bc:4e:26: 5b:00:5e:a5:8f:15:ad:65:3d:0f:41:ff:79:ca:08: dc:24:f9:14:24:18:75:20:ee:9c:0e:a1:67:16:bf: 43:4e:c7:13:72:5e:37:6d:e9:bf:22:cf:41:6f:22: c3:ce:ed:3d:6a:af:6a:e4:47:46:b1:78:ba:41:30: b7:cb:26:fa:fd:f2:f1:d6:da:d1:47:ca:db:8c:5d: 3f:5d:d8:21:83:cb:42:e4:a4:27:2f:4a:67:83:ba: f8:f6:f4:e1:e5:dc:c0:9e:c5:f7:d3:6f:e4:a0:a0: 0b:18:ae:bf:85:07:91:73:96:cf:f0:16:60:4b:cb: 89:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:52:C1:CA:7B:1E:62:E3:8C:75:89:72:BD:68:15:A1:28:36:72:6E X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/tVLBynseYuOMdYlyvWgVoSg2cm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:1100::/40 Signature Algorithm: sha256WithRSAEncryption 4c:cb:62:cb:b6:a8:57:df:e1:d7:a6:3b:36:35:da:09:b9:cb: 8a:bd:c7:61:be:a5:b6:ba:1a:92:25:ab:b2:5e:80:39:16:78: 1e:75:bb:f5:01:20:0f:0e:a0:e0:bc:92:2f:2d:ee:8f:bc:55: f8:84:e4:f1:c6:58:17:9a:ed:a8:69:91:24:97:1f:06:68:1b: 50:8b:a8:ff:18:3a:f3:6a:a9:e8:5a:33:be:63:e9:4d:da:e4: dd:75:12:bd:dd:74:12:44:c6:23:fe:ed:3d:7a:64:8a:c6:c4: 8f:d9:72:8c:0e:f1:10:de:20:c5:d3:88:2b:3f:57:40:c1:08: 6b:9d:7c:77:12:38:52:33:1a:c4:92:c2:e4:f7:6f:a3:4c:a8: 7f:a3:d4:78:9b:ae:77:1e:14:af:62:f3:dd:af:09:43:88:f1: 4e:ca:62:66:1d:1c:79:99:e4:a8:18:fb:1d:4f:9d:5a:fb:71: 1e:1b:e9:a7:5d:23:c5:40:ed:6c:30:ab:cc:5f:3a:bb:e6:8d: 9d:c6:d0:50:e6:bc:ba:f2:cd:e4:5b:35:5c:54:48:33:4d:86: be:cc:cb:81:4c:e8:52:46:19:28:5a:f6:47:0d:e8:58:00:e7: ca:b2:b9:88:cb:cb:9c:6b:6c:d8:48:17:a2:24:f8:4d:7c:fd: 0d:86:43:10 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OLcPpo/p+c2Vk21oZDG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTUyYzFjYTdiMWU2MmUzOGM3NTg5NzJiZDY4MTVhMTI4MzY3MjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfJppNJUgDcJpeTeA+NVgymXRiwY klXA7iwheThhALKPTqxS1LE2xsWwaTzZsN8CPMmQ5yFgn71T2qA1kRVvRRqTpLd4 VOYr2PoVtohci+15eLFcpjha/x6oZ6+ApemuJLLlde+//lGx6XgUAeOxiuT0eZjV 1wa4+8EZy92PeEuLy0W8TiZbAF6ljxWtZT0PQf95ygjcJPkUJBh1IO6cDqFnFr9D TscTcl43bem/Is9BbyLDzu09aq9q5EdGsXi6QTC3yyb6/fLx1trRR8rbjF0/Xdgh g8tC5KQnL0png7r49vTh5dzAnsX302/koKALGK6/hQeRc5bP8BZgS8uJOQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLVSwcp7HmLjjHWJcr1oFaEoNnJuMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvdFZMQnluc2VZdU9NZFlseXZXZ1ZvU2cyY200LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxxEw DQYJKoZIhvcNAQELBQADggEBAEzLYsu2qFff4demOzY12gm5y4q9x2G+pba6GpIl q7JegDkWeB51u/UBIA8OoOC8ki8t7o+8VfiE5PHGWBea7ahpkSSXHwZoG1CLqP8Y OvNqqehaM75j6U3a5N11Er3ddBJExiP+7T16ZIrGxI/ZcowO8RDeIMXTiCs/V0DB CGudfHcSOFIzGsSSwuT3b6NMqH+j1HibrnceFK9i892vCUOI8U7KYmYdHHmZ5KgY +x1PnVr7cR4b6addI8VA7Wwwq8xfOrvmjZ3G0FDmvLryzeRbNVxUSDNNhr7My4FM 6FJGGSha9kcN6FgA58qyuYjLy5xrbNhIF6Ik+E18/Q2GQxA= -----END CERTIFICATE-----Generated at Mon Jan 5 03:47:14 2026 by rpki-client