This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/lSCxqIIPXIk0k323H1i4loOJT3A.roa File: lSCxqIIPXIk0k323H1i4loOJT3A.roa (raw, json) Hash identifier: wBeWbu7XeIRPwOT3/jhPpVvrSfxN8LL2WVogc++cu4o= Subject key identifier: 95:20:B1:A8:82:0F:5C:89:34:93:7D:B7:1F:58:B8:96:83:89:4F:70 Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Certificate serial: 019B78352F3B8FB1F9571CBCE7DEA944BEC4 Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/lSCxqIIPXIk0k323H1i4loOJT3A.roa Signing time: Thu 01 Jan 2026 06:18:29 +0000 ROA not before: Thu 01 Jan 2026 06:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205941 IP address blocks: 2a10:fa82::/48 maxlen: 48 2a10:fa82:1::/48 maxlen: 48 2a10:fa82:2::/48 maxlen: 48 2a10:fa82:f600::/40 maxlen: 40 2a10:fa82:f700::/40 maxlen: 40 2a10:fa82:f800::/40 maxlen: 40 2a10:fa82:f900::/40 maxlen: 40 2a10:fa82:fa00::/40 maxlen: 40 2a10:fa82:fb00::/40 maxlen: 40 2a10:fa82:fc00::/40 maxlen: 40 2a10:fa82:fd00::/40 maxlen: 40 2a10:fa82:fe00::/40 maxlen: 40 2a10:fa82:ff00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:2f:3b:8f:b1:f9:57:1c:bc:e7:de:a9:44:be:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Validity Not Before: Jan 1 06:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9520b1a8820f5c8934937db71f58b89683894f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:94:a3:50:cb:7e:ed:e1:d7:33:1f:58:9e: 0c:0c:69:65:dd:f1:2a:72:8a:9c:eb:a7:56:03:6d: 3b:2b:47:54:90:0e:b0:98:9d:2e:29:3a:0b:47:8c: db:1c:c4:13:83:a0:9e:26:eb:bd:36:67:a8:94:bb: dc:bb:c8:60:7d:6e:0b:ce:49:70:61:4a:60:ba:80: 56:41:24:bd:3d:7a:4c:ae:3f:25:ec:28:4b:ad:f6: a8:19:a3:fe:f3:d7:b7:14:d6:7a:5a:d2:5f:cd:7a: d7:09:a0:20:96:c9:eb:d3:28:39:4b:4a:10:a3:89: 15:10:cc:7c:2b:40:19:25:cc:85:e3:8b:dd:50:c6: 82:59:79:7c:b6:e8:de:e4:a8:01:03:34:4d:74:d1: 93:b7:e6:52:39:d3:27:8f:49:88:86:24:19:f6:3a: 1a:d2:82:f3:48:d7:33:e5:f6:aa:5f:2f:0b:75:fe: b1:9e:a8:5a:80:47:69:cd:76:13:0b:7e:d5:97:49: 04:0b:13:6e:eb:13:83:ac:80:d9:7b:55:0e:5c:15: 0c:62:55:3f:52:84:30:7b:4e:3c:9e:0f:44:e7:80: f2:f1:3e:20:fc:07:15:04:71:15:40:13:b3:c7:81: 4b:22:62:4e:8c:ad:de:b9:ae:30:c5:8f:f5:98:6a: fe:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:20:B1:A8:82:0F:5C:89:34:93:7D:B7:1F:58:B8:96:83:89:4F:70 X509v3 Authority Key Identifier: keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/lSCxqIIPXIk0k323H1i4loOJT3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:fa82::-2a10:fa82:2:ffff:ffff:ffff:ffff:ffff 2a10:fa82:f600::-2a10:fa82:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 67:db:99:1a:be:b4:1f:36:40:17:82:c1:87:27:2a:98:db:0b: 16:4b:de:20:5b:d4:33:a6:4f:6b:0f:d6:65:9f:d5:b2:fc:fc: 2b:02:ba:0c:88:22:f2:76:c4:9c:2e:a3:6c:79:35:c0:79:0f: 87:ba:2f:72:f4:27:1c:15:67:41:50:11:cf:a7:6c:b4:52:87: 6d:cd:dc:17:cb:d2:d6:41:e9:76:61:4c:47:08:57:33:dc:a5: 9e:16:a5:6a:2f:71:48:32:fb:37:b9:76:54:14:7d:d5:fe:b5: a5:a6:0b:84:68:d3:1a:46:df:5d:e9:55:b3:b9:77:81:b1:98: 82:d1:e1:d4:2f:5a:fa:dc:7d:ec:ca:21:4b:03:4b:ab:0f:6c: c2:c3:96:68:7b:86:16:7f:31:02:ea:eb:d6:8e:02:46:06:cd: e0:ac:a0:01:c6:4f:fd:fd:7d:1e:84:4c:93:0e:ad:58:af:7e: 25:8d:b4:8c:1b:8f:b5:fc:d5:4e:73:8a:30:54:2f:13:81:0f: 4a:c6:fb:81:90:ff:58:3b:05:99:7b:7c:35:09:0c:df:30:bb: 8b:64:72:72:28:86:30:fc:c7:b6:24:d9:c0:31:55:59:00:b4: d9:24:94:99:9f:25:51:29:db:e1:f2:52:c9:8c:ec:f7:cc:0c: 76:95:84:d3 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt4NS87j7H5Vxy8596pRL7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj NjA0NmMwHhcNMjYwMTAxMDYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTIwYjFhODgyMGY1Yzg5MzQ5MzdkYjcxZjU4Yjg5NjgzODk0ZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D2Uo1DLfu3h1zMfWJ4MDGll3fEq coqc66dWA207K0dUkA6wmJ0uKToLR4zbHMQTg6CeJuu9NmeolLvcu8hgfW4Lzklw YUpguoBWQSS9PXpMrj8l7ChLrfaoGaP+89e3FNZ6WtJfzXrXCaAglsnr0yg5S0oQ o4kVEMx8K0AZJcyF44vdUMaCWXl8tuje5KgBAzRNdNGTt+ZSOdMnj0mIhiQZ9joa 0oLzSNcz5faqXy8Ldf6xnqhagEdpzXYTC37Vl0kECxNu6xODrIDZe1UOXBUMYlU/ UoQwe048ng9E54Dy8T4g/AcVBHEVQBOzx4FLImJOjK3eua4wxY/1mGr+GQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFJUgsaiCD1yJNJN9tx9YuJaDiU9wMB8GA1UdIwQY MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt MjM5NGM2NjAwMDIyLzEvbFNDeHFJSVBYSWswazMyM0gxaTRsb09KVDNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjMBADBQEqEPqC AwcAKhD6ggACMA8DBgEqEPqC9gMFACoQ+oIwDQYJKoZIhvcNAQELBQADggEBAGfb mRq+tB82QBeCwYcnKpjbCxZL3iBb1DOmT2sP1mWf1bL8/CsCugyIIvJ2xJwuo2x5 NcB5D4e6L3L0JxwVZ0FQEc+nbLRSh23N3BfL0tZB6XZhTEcIVzPcpZ4WpWovcUgy +ze5dlQUfdX+taWmC4Ro0xpG313pVbO5d4GxmILR4dQvWvrcfezKIUsDS6sPbMLD lmh7hhZ/MQLq69aOAkYGzeCsoAHGT/39fR6ETJMOrVivfiWNtIwbj7X81U5zijBU LxOBD0rG+4GQ/1g7BZl7fDUJDN8wu4tkcnIohjD8x7Yk2cAxVVkAtNkklJmfJVEp 2+HyUsmM7PfMDHaVhNM= -----END CERTIFICATE-----Generated at Sun Jan 18 10:47:22 2026 by rpki-client