This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/w56TnwX4cr4ATnThatgYvBivtVM.roa File: w56TnwX4cr4ATnThatgYvBivtVM.roa (raw, json) Hash identifier: dXWFj+tUei1h+c7PDPVm46TSYPdBUygpPg5c6Zw98TI= Subject key identifier: C3:9E:93:9F:05:F8:72:BE:00:4E:74:E1:6A:D8:18:BC:18:AF:B5:53 Certificate issuer: /CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826 Certificate serial: 019B77596CAE1D0DCE023105CD89919EA79B Authority key identifier: 57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/w56TnwX4cr4ATnThatgYvBivtVM.roa Signing time: Thu 01 Jan 2026 02:18:27 +0000 ROA not before: Thu 01 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42929 IP address blocks: 195.225.80.0/24 maxlen: 24 2a11:e600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6c:ae:1d:0d:ce:02:31:05:cd:89:91:9e:a7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826 Validity Not Before: Jan 1 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c39e939f05f872be004e74e16ad818bc18afb553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:15:9a:f0:c6:05:bd:bd:30:7a:13:dd:f6:b3: 90:94:02:fc:2e:af:42:07:70:ed:00:f7:b5:3b:54: 1e:af:40:ec:71:78:c9:45:ae:61:1e:73:a7:c5:cb: 77:d4:91:4d:50:8d:d1:9c:6b:2f:70:28:22:b3:4e: 2c:17:26:a8:98:16:a3:2d:0d:78:df:7b:fe:2e:fc: a8:bd:ac:17:e3:3b:63:23:74:22:ca:7e:93:56:b2: c4:6b:3c:b0:81:56:e2:3b:51:dc:a5:66:58:8a:6b: 8b:49:f0:13:ab:a5:71:9d:64:a7:0e:88:cf:22:d9: 9f:c8:56:84:1d:ff:77:ae:1e:13:bf:1c:f2:7a:17: 41:e7:57:f7:13:5c:14:e6:eb:13:18:51:78:cb:6c: 03:5f:ac:c3:bd:5e:6a:20:1d:85:f7:e2:fc:f9:2b: 12:6f:15:43:7a:39:d9:5d:f1:f5:d2:1a:f3:f3:27: 10:ad:4e:97:71:12:2c:7f:30:1e:20:31:d5:c9:ff: 0a:c8:df:2e:9f:27:44:09:fd:53:5d:66:73:72:5d: 2e:ef:19:3a:99:f2:bc:66:50:93:f0:40:b0:24:b8: 39:11:2c:eb:2c:08:27:3d:bc:61:28:dc:6d:17:ad: ef:a0:2f:43:b0:57:85:fa:22:17:71:a2:31:09:6e: 38:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9E:93:9F:05:F8:72:BE:00:4E:74:E1:6A:D8:18:BC:18:AF:B5:53 X509v3 Authority Key Identifier: keyid:57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/w56TnwX4cr4ATnThatgYvBivtVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.225.80.0/24 IPv6: 2a11:e600::/29 Signature Algorithm: sha256WithRSAEncryption 72:d8:ed:28:fc:d0:a0:d3:60:1b:ef:58:5d:29:16:fb:8e:a1: 7f:ab:51:6e:b2:0c:e6:73:03:cd:50:ce:a0:cd:0a:ef:e4:aa: 6a:e2:95:e9:d7:26:59:fa:c2:2a:fd:c2:77:b7:94:8f:41:1f: 88:19:72:c0:5d:d7:1e:e2:5e:8b:20:0a:e8:b1:04:ff:43:26: 05:e9:f6:85:74:a1:95:92:a2:37:77:fb:44:eb:0d:6c:af:e6: b0:43:db:28:7b:06:84:68:90:94:b0:c8:c0:a2:f2:ab:88:2d: 45:e8:02:25:df:98:58:16:19:d8:94:59:90:5a:ef:8e:21:7f: 9d:a8:86:c4:53:62:3e:ce:d5:ce:24:00:55:98:35:02:8c:df: 2e:42:f1:8a:61:ea:54:42:d7:8d:b1:71:0b:49:5c:e8:ed:6e: 80:c0:16:aa:71:fd:45:92:d2:de:7f:2b:99:92:fa:1b:04:b8: 69:ea:93:f6:3d:fd:2a:46:cc:5f:88:cf:54:b2:77:84:92:ad: 07:10:b1:32:2d:1c:2a:99:27:a2:55:64:35:93:9e:da:53:93: 4d:1a:e4:66:42:07:ff:02:7a:d6:b4:6a:6e:59:fa:40:3a:7c: 24:21:7a:c4:aa:55:1d:c2:ef:91:37:d4:d9:d4:a9:4e:b4:a0: 96:96:ca:99 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WWyuHQ3OAjEFzYmRnqebMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZmJiNmViMmNlYzlhOWI3YmI4MWEzYjE2MGMxYWFiOTkw ZTQ4MjYwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzllOTM5ZjA1Zjg3MmJlMDA0ZTc0ZTE2YWQ4MThiYzE4YWZiNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhWa8MYFvb0wehPd9rOQlAL8Lq9C B3DtAPe1O1Qer0DscXjJRa5hHnOnxct31JFNUI3RnGsvcCgis04sFyaomBajLQ14 33v+LvyovawX4ztjI3Qiyn6TVrLEazywgVbiO1HcpWZYimuLSfATq6VxnWSnDojP ItmfyFaEHf93rh4TvxzyehdB51f3E1wU5usTGFF4y2wDX6zDvV5qIB2F9+L8+SsS bxVDejnZXfH10hrz8ycQrU6XcRIsfzAeIDHVyf8KyN8unydECf1TXWZzcl0u7xk6 mfK8ZlCT8ECwJLg5ESzrLAgnPbxhKNxtF63voC9DsFeF+iIXcaIxCW449wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMOek58F+HK+AE504WrYGLwYr7VTMB8GA1UdIwQY MBaAFFf7tuss7Jqbe7gaOxYMGquZDkgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVl91MjZ5enNtcHQ3dUJvN0Znd2FxNWtPU0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81ODg4ZmYtM2I4ZS00NTU2LWFkZjQt NGQ5ZWNmY2UwZGJjLzEvdzU2VG53WDRjcjRBVG5UaGF0Z1l2Qml2dFZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi81ODg4ZmYtM2I4ZS00NTU2LWFkZjQtNGQ5ZWNmY2UwZGJj LzEvVl91MjZ5enNtcHQ3dUJvN0Znd2FxNWtPU0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw+FQMA0E AgACMAcDBQMqEeYAMA0GCSqGSIb3DQEBCwUAA4IBAQBy2O0o/NCg02Ab71hdKRb7 jqF/q1FusgzmcwPNUM6gzQrv5Kpq4pXp1yZZ+sIq/cJ3t5SPQR+IGXLAXdce4l6L IArosQT/QyYF6faFdKGVkqI3d/tE6w1sr+awQ9soewaEaJCUsMjAovKriC1F6AIl 35hYFhnYlFmQWu+OIX+dqIbEU2I+ztXOJABVmDUCjN8uQvGKYepUQteNsXELSVzo 7W6AwBaqcf1FktLefyuZkvobBLhp6pP2Pf0qRsxfiM9UsneEkq0HELEyLRwqmSei VWQ1k57aU5NNGuRmQgf/AnrWtGpuWfpAOnwkIXrEqlUdwu+RN9TZ1KlOtKCWlsqZ -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:34 2026 by rpki-client