This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/vM0Fs4lnqeTssB7sagLE17VmanQ.roa File: vM0Fs4lnqeTssB7sagLE17VmanQ.roa (raw, json) Hash identifier: 4x+J1pMCjHUu7vpTkJIKkTeMAJxCWCdEP9JbF6IKxpk= Subject key identifier: BC:CD:05:B3:89:67:A9:E4:EC:B0:1E:EC:6A:02:C4:D7:B5:66:6A:74 Certificate issuer: /CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3 Certificate serial: 019B79111452B790B06AEFA1FE89D25F849C Authority key identifier: A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/vM0Fs4lnqeTssB7sagLE17VmanQ.roa Signing time: Thu 01 Jan 2026 10:18:41 +0000 ROA not before: Thu 01 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a13:5a47::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:14:52:b7:90:b0:6a:ef:a1:fe:89:d2:5f:84:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3 Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bccd05b38967a9e4ecb01eec6a02c4d7b5666a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:2d:af:1f:54:ef:58:5d:00:b6:b2:4d:01: b5:4a:b3:63:c8:2f:a5:c3:e2:66:72:e0:cc:96:71: cf:df:b6:a7:7a:28:1d:5d:fa:9f:a3:f7:65:74:65: ef:4b:64:28:be:99:74:e8:29:ca:cc:7d:8a:99:21: 35:dd:1b:d2:d6:b0:d3:c9:75:e5:fd:bb:6e:c3:cd: 6c:02:16:08:88:2f:55:c1:d3:90:fe:42:3b:2c:18: 62:27:1b:d1:e7:25:a8:85:87:ea:d4:2f:47:ad:a0: cc:b3:43:6d:fa:e5:fc:a8:9e:93:2a:f7:13:33:b3: 38:fa:1e:fe:fd:ef:c8:e2:89:48:55:4f:c1:e5:37: 37:17:77:19:51:e5:90:de:17:50:28:36:c4:be:a7: 0e:00:6d:25:dc:4c:d1:77:35:e8:ee:dd:a6:62:da: a7:a9:3e:3c:f2:d9:d3:2e:e7:ce:5b:fd:86:62:87: 92:3a:ca:5e:79:fe:13:6e:f2:47:37:bb:76:7c:e0: fb:45:e2:b8:1a:a3:54:4f:16:b9:8a:59:15:f1:2f: e2:18:dd:b8:e3:5c:93:14:1f:e4:3a:60:e4:3f:97: c8:97:1e:45:16:6e:b0:00:44:39:b3:f8:be:65:6f: 24:45:7f:33:04:88:3a:15:27:88:76:0c:af:14:d8: 60:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CD:05:B3:89:67:A9:E4:EC:B0:1E:EC:6A:02:C4:D7:B5:66:6A:74 X509v3 Authority Key Identifier: keyid:A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/vM0Fs4lnqeTssB7sagLE17VmanQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:5a47::/32 Signature Algorithm: sha256WithRSAEncryption 9f:88:12:a4:9f:c3:d9:de:af:35:73:5e:51:37:1d:22:58:94: 80:95:86:c4:65:01:25:bb:a4:76:50:65:b1:90:d9:6e:4e:4d: fa:ad:70:ca:bf:fe:45:89:a6:6a:38:83:5f:df:6a:a1:86:97: f2:97:5c:3e:ad:37:21:3f:f2:e1:f6:e7:8b:48:d2:ed:a8:64: 6b:5c:5f:d7:fa:37:c9:1b:18:6e:3b:4f:70:8d:55:96:fb:a5: a2:1c:4e:8a:31:a3:b1:7b:94:62:52:90:3b:73:90:2d:8f:7d: d0:2e:4f:a4:7c:d6:15:cf:0c:14:5f:85:a5:2a:de:6f:a7:61: be:0e:90:e3:43:1b:84:15:0e:60:52:a9:40:0d:3f:42:c2:c4: a4:9d:6d:8e:ad:b4:69:fe:1e:8d:33:49:15:70:74:b6:81:02: 50:c4:7f:48:c4:cd:26:97:88:ff:57:be:e6:71:25:9f:45:f8: 55:0a:d3:c0:17:4f:08:93:89:95:21:d6:d4:7d:73:50:b6:c7: 84:3b:0f:65:e8:a7:5a:31:67:20:af:3a:2e:ad:c8:fa:af:0b: 9d:30:a7:9b:50:93:1c:20:46:fd:53:a0:69:5d:33:a9:0b:93: 54:3a:01:92:6e:e6:5b:51:5b:e1:02:97:40:f1:18:f1:87:b9: 97:be:7c:65 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5ERRSt5Cwau+h/onSX4ScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NWNmODllZTU2Mjc5N2U3NzVhYTRkMWQxZjdlNDVmNDY2 YTczYzMwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2NkMDViMzg5NjdhOWU0ZWNiMDFlZWM2YTAyYzRkN2I1NjY2YTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybQtrx9U71hdALayTQG1SrNjyC+l w+JmcuDMlnHP37aneigdXfqfo/dldGXvS2Qovpl06CnKzH2KmSE13RvS1rDTyXXl /btuw81sAhYIiC9VwdOQ/kI7LBhiJxvR5yWohYfq1C9HraDMs0Nt+uX8qJ6TKvcT M7M4+h7+/e/I4olIVU/B5Tc3F3cZUeWQ3hdQKDbEvqcOAG0l3EzRdzXo7t2mYtqn qT488tnTLufOW/2GYoeSOspeef4TbvJHN7t2fOD7ReK4GqNUTxa5ilkV8S/iGN24 41yTFB/kOmDkP5fIlx5FFm6wAEQ5s/i+ZW8kRX8zBIg6FSeIdgyvFNhg6QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLzNBbOJZ6nk7LAe7GoCxNe1Zmp0MB8GA1UdIwQY MBaAFKVc+J7lYnl+d1qk0dH35F9GanPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iNzJjYjAtMGU1Ny00NjhjLTg5ZjAt YWJjYjFlNzU4MmIzLzEvdk0wRnM0bG5xZVRzc0I3c2FnTEUxN1ZtYW5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iNzJjYjAtMGU1Ny00NjhjLTg5ZjAtYWJjYjFlNzU4MmIz LzEvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhNaRzAN BgkqhkiG9w0BAQsFAAOCAQEAn4gSpJ/D2d6vNXNeUTcdIliUgJWGxGUBJbukdlBl sZDZbk5N+q1wyr/+RYmmajiDX99qoYaX8pdcPq03IT/y4fbni0jS7ahka1xf1/o3 yRsYbjtPcI1VlvulohxOijGjsXuUYlKQO3OQLY990C5PpHzWFc8MFF+FpSreb6dh vg6Q40MbhBUOYFKpQA0/QsLEpJ1tjq20af4ejTNJFXB0toECUMR/SMTNJpeI/1e+ 5nEln0X4VQrTwBdPCJOJlSHW1H1zULbHhDsPZeinWjFnIK86Lq3I+q8LnTCnm1CT HCBG/VOgaV0zqQuTVDoBkm7mW1Fb4QKXQPEY8Ye5l758ZQ== -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:46 2026 by rpki-client