This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/b_sx65YpI1QLBEZRuGQGmmnaTnw.roa File: b_sx65YpI1QLBEZRuGQGmmnaTnw.roa (raw, json) Hash identifier: 3Il+MWS8tFj2nno2HoqXDI14YSxua6h0CGOf+Z3Kedo= Subject key identifier: 6F:FB:31:EB:96:29:23:54:0B:04:46:51:B8:64:06:9A:69:DA:4E:7C Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc Certificate serial: 019B7FF25D733FAAF60B3763E867B19AA6E7 Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/b_sx65YpI1QLBEZRuGQGmmnaTnw.roa Signing time: Fri 02 Jan 2026 18:22:28 +0000 ROA not before: Fri 02 Jan 2026 18:22:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24845 IP address blocks: 2a02:102e::/32 maxlen: 32 2a02:102e:e::/48 maxlen: 48 2a02:102e:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:5d:73:3f:aa:f6:0b:37:63:e8:67:b1:9a:a6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc Validity Not Before: Jan 2 18:22:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ffb31eb962923540b044651b864069a69da4e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:10:be:75:4b:8c:00:9d:44:63:08:79:07: eb:a2:30:7f:0e:e0:20:32:e7:7d:2a:19:57:e0:6e: 3d:83:91:d1:dd:a7:3d:6c:63:01:ad:46:ee:ef:b1: dc:7c:3a:32:f3:ef:36:68:71:9a:17:86:2f:42:2c: 1b:69:63:fa:3c:e6:2b:51:05:37:10:6e:50:82:76: 4b:50:7c:d9:8d:32:a1:33:44:db:62:10:7f:47:e4: 9e:f1:82:12:cd:86:88:34:97:7e:a1:74:61:89:e8: 0e:dc:43:60:4a:36:eb:1e:98:22:10:ef:81:83:53: 44:97:75:cf:bc:94:1b:80:b7:1b:c5:ec:50:c7:42: 0e:7e:e9:5d:0a:91:1a:95:91:7a:0b:01:bf:97:d0: 4e:50:0d:96:99:a6:e5:4a:5b:7c:45:ee:35:82:c4: 03:ae:b7:f1:5e:48:f1:6d:27:81:96:01:4d:cf:7e: df:ff:f6:81:6f:2d:be:67:bf:32:92:1d:35:5e:df: f2:bd:9c:34:b5:f1:58:94:ad:dd:88:39:24:d0:8e: e7:2c:29:1d:a4:fb:b4:ca:99:99:42:3e:12:b4:1b: 47:9d:f8:a4:b4:d5:61:62:6e:94:d6:23:a8:a1:2a: f5:76:c5:72:1e:6a:0f:a4:f9:bd:9d:a0:20:7f:f2: 98:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FB:31:EB:96:29:23:54:0B:04:46:51:B8:64:06:9A:69:DA:4E:7C X509v3 Authority Key Identifier: keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/b_sx65YpI1QLBEZRuGQGmmnaTnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:102e::/32 Signature Algorithm: sha256WithRSAEncryption 55:5e:4e:fb:8f:1f:bb:c4:dc:04:ca:99:e6:c7:3d:c2:7a:3c: 06:56:02:5d:e7:d2:b5:28:c1:b4:c3:b6:b2:71:c4:21:65:6b: 1b:a8:64:d3:0a:92:cd:56:a7:1f:73:51:f4:3e:e2:e2:95:2a: ff:62:1a:85:62:e2:57:a9:75:af:e2:91:4e:4f:04:5e:85:a6: 34:6c:8f:52:7b:89:f6:07:b2:27:25:ea:c2:cd:77:2c:fa:73: 1b:26:3f:4f:60:e4:e4:9f:7c:65:bc:54:2c:48:8c:76:a3:92: ce:e9:39:cf:87:96:43:ed:a3:26:b5:a3:70:28:70:f9:92:e3: 6e:5d:5b:49:9d:a6:26:25:e5:c2:b5:50:d9:6e:be:fe:d9:fd: 2b:9b:31:d1:f5:85:64:03:9c:68:e4:3e:76:06:29:c9:0a:03: c1:56:eb:f1:90:22:b1:3a:25:48:56:87:62:11:9c:c6:00:40: 21:88:5c:e5:b9:a2:e5:cf:f3:5e:fe:c9:79:16:25:89:3d:64: 01:dd:16:ef:a8:b8:12:95:9c:b8:71:27:93:12:e4:ff:ac:8b: 29:ef:ff:8a:c0:73:fc:d1:ac:9d:27:a3:a0:8b:ce:1b:f4:33: bf:6d:e9:2d:9c:fa:b8:6f:11:a0:e1:1d:c9:b5:f5:10:4a:3d: fa:41:44:2a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8l1zP6r2Czdj6GexmqbnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl OTc3YmMwHhcNMjYwMTAyMTgyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmZiMzFlYjk2MjkyMzU0MGIwNDQ2NTFiODY0MDY5YTY5ZGE0ZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhIQvnVLjACdRGMIeQfrojB/DuAg Mud9KhlX4G49g5HR3ac9bGMBrUbu77HcfDoy8+82aHGaF4YvQiwbaWP6POYrUQU3 EG5QgnZLUHzZjTKhM0TbYhB/R+Se8YISzYaINJd+oXRhiegO3ENgSjbrHpgiEO+B g1NEl3XPvJQbgLcbxexQx0IOfuldCpEalZF6CwG/l9BOUA2WmablSlt8Re41gsQD rrfxXkjxbSeBlgFNz37f//aBby2+Z78ykh01Xt/yvZw0tfFYlK3diDkk0I7nLCkd pPu0ypmZQj4StBtHnfiktNVhYm6U1iOooSr1dsVyHmoPpPm9naAgf/KY5wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFG/7MeuWKSNUCwRGUbhkBppp2k58MB8GA1UdIwQY MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt YTk2YzYyNjZhYmRiLzEvYl9zeDY1WXBJMVFMQkVaUnVHUUdtbW5hVG53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgIQLjAN BgkqhkiG9w0BAQsFAAOCAQEAVV5O+48fu8TcBMqZ5sc9wno8BlYCXefStSjBtMO2 snHEIWVrG6hk0wqSzVanH3NR9D7i4pUq/2IahWLiV6l1r+KRTk8EXoWmNGyPUnuJ 9geyJyXqws13LPpzGyY/T2Dk5J98ZbxULEiMdqOSzuk5z4eWQ+2jJrWjcChw+ZLj bl1bSZ2mJiXlwrVQ2W6+/tn9K5sx0fWFZAOcaOQ+dgYpyQoDwVbr8ZAisTolSFaH YhGcxgBAIYhc5bmi5c/zXv7JeRYliT1kAd0W76i4EpWcuHEnkxLk/6yLKe//isBz /NGsnSejoIvOG/Qzv23pLZz6uG8RoOEdybX1EEo9+kFEKg== -----END CERTIFICATE-----Generated at Wed Jan 21 15:06:24 2026 by rpki-client