This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VWzdm8NW95JZW0uTKZKlcPolT7I.roa File: VWzdm8NW95JZW0uTKZKlcPolT7I.roa (raw, json) Hash identifier: B/Wp/Xess5HyF1RsSRJPvSdpumPN8SuqE7ldh8i+SQE= Subject key identifier: 55:6C:DD:9B:C3:56:F7:92:59:5B:4B:93:29:92:A5:70:FA:25:4F:B2 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019C042CA33155E1D675072ADD77A42ED947 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VWzdm8NW95JZW0uTKZKlcPolT7I.roa Signing time: Wed 28 Jan 2026 10:36:00 +0000 ROA not before: Wed 28 Jan 2026 10:36:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213586 IP address blocks: 2a0e:97c0:9c0::/48 maxlen: 48 2a0e:97c0:9c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 22:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:2c:a3:31:55:e1:d6:75:07:2a:dd:77:a4:2e:d9:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 28 10:36:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=556cdd9bc356f792595b4b932992a570fa254fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9e:75:c7:87:e9:9b:68:b8:c4:da:b5:65:21: c9:05:01:77:49:26:59:c8:60:42:2f:0b:97:6b:19: b6:df:35:36:e7:f9:5b:2f:f7:c6:ba:13:d9:c9:47: 89:1f:71:b2:23:b5:af:c7:ae:32:99:03:21:7f:a1: 2d:21:44:c9:60:a3:f3:82:6b:1f:2c:fd:f5:19:7e: 9a:71:c1:6d:c6:a8:50:56:c1:b5:15:a6:7d:b6:70: 40:98:89:5e:1e:05:84:28:7a:ad:2d:ac:41:95:bc: 00:80:65:85:65:b9:c2:2d:5f:7d:e9:3b:8d:c1:d1: 52:62:b8:df:59:98:45:e4:a4:71:52:0a:3e:2c:97: bf:86:9a:fd:c9:e8:83:f1:c2:1d:57:af:cf:63:1d: 52:95:a7:03:df:44:d3:51:40:9f:b1:e4:d6:f3:27: 08:b0:49:04:80:fa:5c:56:03:74:6e:cf:69:4a:86: ec:7e:8d:49:1d:ef:33:a3:4f:ab:76:6a:3f:30:85: e6:57:0d:59:ae:43:08:9e:5a:3c:42:5b:70:c4:87: 4d:5c:a4:f5:94:fb:63:4c:ed:ee:ee:25:b1:d5:4c: e1:ae:a7:96:fe:58:44:a5:27:ec:a6:8c:66:b7:a7: b9:e3:a5:54:ce:61:c3:ad:cd:c2:07:12:af:59:a6: bd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6C:DD:9B:C3:56:F7:92:59:5B:4B:93:29:92:A5:70:FA:25:4F:B2 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VWzdm8NW95JZW0uTKZKlcPolT7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:9c0::/47 Signature Algorithm: sha256WithRSAEncryption 32:35:36:cc:49:1e:bf:0b:8c:72:4b:1f:0b:2f:ee:e3:6e:22: 69:1c:81:28:20:87:29:05:46:41:6c:67:87:ba:4d:85:d6:30: 79:f4:d6:80:fb:dd:28:97:1a:bc:7c:92:7a:15:7c:8c:67:18: 96:bc:73:22:86:a4:aa:ee:ac:a4:82:fa:5b:80:db:a3:94:9e: 76:ce:30:aa:79:5d:e6:39:8b:36:54:07:34:22:d6:c6:b7:fb: fc:49:a1:47:cc:e3:9f:4e:36:b3:cf:36:96:3d:59:f0:9a:c5: cf:86:d2:f8:de:3a:12:c0:7b:25:ab:5b:9f:1a:99:20:69:fd: a7:d6:8e:22:52:0f:41:3d:78:df:66:9c:86:3a:72:f5:c5:8f: 2c:60:09:e3:a4:c4:a8:e0:32:4c:31:d0:64:96:fe:6f:80:48: 66:24:97:8d:2a:c9:5c:34:a0:88:b6:f0:9b:c2:83:f1:da:47: cb:16:37:6e:2c:71:9d:f4:9f:ee:da:5b:5f:45:c1:15:e8:91: 41:c0:d2:fd:17:e5:72:c2:72:68:14:90:1e:d1:93:e5:f6:4c: 64:2c:fd:32:ce:a3:66:c5:46:55:69:15:ab:10:b0:48:a8:23: 66:12:32:56:c2:ab:2d:7b:66:f1:6b:9c:ee:90:c5:5e:ff:19: 78:33:0b:e3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZwELKMxVeHWdQcq3XekLtlHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTI4MTAzNjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTZjZGQ5YmMzNTZmNzkyNTk1YjRiOTMyOTkyYTU3MGZhMjU0ZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ51x4fpm2i4xNq1ZSHJBQF3SSZZ yGBCLwuXaxm23zU25/lbL/fGuhPZyUeJH3GyI7Wvx64ymQMhf6EtIUTJYKPzgmsf LP31GX6accFtxqhQVsG1FaZ9tnBAmIleHgWEKHqtLaxBlbwAgGWFZbnCLV996TuN wdFSYrjfWZhF5KRxUgo+LJe/hpr9yeiD8cIdV6/PYx1SlacD30TTUUCfseTW8ycI sEkEgPpcVgN0bs9pSobsfo1JHe8zo0+rdmo/MIXmVw1ZrkMInlo8QltwxIdNXKT1 lPtjTO3u7iWx1UzhrqeW/lhEpSfspoxmt6e546VUzmHDrc3CBxKvWaa9nwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFVs3ZvDVveSWVtLkymSpXD6JU+yMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVld6ZG04Tlc5NUpaVzB1VEtaS2xjUG9sVDdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKg6XwAnA MA0GCSqGSIb3DQEBCwUAA4IBAQAyNTbMSR6/C4xySx8LL+7jbiJpHIEoIIcpBUZB bGeHuk2F1jB59NaA+90olxq8fJJ6FXyMZxiWvHMihqSq7qykgvpbgNujlJ52zjCq eV3mOYs2VAc0ItbGt/v8SaFHzOOfTjazzzaWPVnwmsXPhtL43joSwHslq1ufGpkg af2n1o4iUg9BPXjfZpyGOnL1xY8sYAnjpMSo4DJMMdBklv5vgEhmJJeNKslcNKCI tvCbwoPx2kfLFjduLHGd9J/u2ltfRcEV6JFBwNL9F+VywnJoFJAe0ZPl9kxkLP0y zqNmxUZVaRWrELBIqCNmEjJWwqste2bxa5zukMVe/xl4Mwvj -----END CERTIFICATE-----Generated at Fri Jan 30 08:51:51 2026 by rpki-client