This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/RVZM-kFR80ko6aXVrtr5bZIVB6E.roa File: RVZM-kFR80ko6aXVrtr5bZIVB6E.roa (raw, json) Hash identifier: U18fR6M6ECujVh8EJIN+7p0bRY+B368ox20l60Irpyo= Subject key identifier: 45:56:4C:FA:41:51:F3:49:28:E9:A5:D5:AE:DA:F9:6D:92:15:07:A1 Certificate issuer: /CN=2a4558e2656bf89733389594df144d21d1dc0313 Certificate serial: 019B7A59D43F1FEF0CC4C8018A2911516684 Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/RVZM-kFR80ko6aXVrtr5bZIVB6E.roa Signing time: Thu 01 Jan 2026 16:17:45 +0000 ROA not before: Thu 01 Jan 2026 16:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215582 IP address blocks: 2001:67c:dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:d4:3f:1f:ef:0c:c4:c8:01:8a:29:11:51:66:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313 Validity Not Before: Jan 1 16:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45564cfa4151f34928e9a5d5aedaf96d921507a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7a:09:f9:05:a7:7b:d8:c6:6e:28:78:8b:f6: c4:88:2b:33:7c:d9:cb:df:97:30:56:e5:bd:23:b3: 74:c2:13:8f:58:c0:01:1e:e8:b5:72:20:db:5a:76: fa:fc:b0:e5:33:4e:18:1f:c5:0f:3d:64:cf:56:c7: 0d:7c:5a:e7:ea:51:49:1b:8f:5a:34:7c:3c:b8:c4: 02:64:7b:63:b9:4b:0f:c7:e8:a2:73:8d:67:d6:21: 2f:ac:5f:9c:e5:26:f7:5b:dd:ef:57:3d:d3:52:33: 45:6b:c1:0d:21:9a:8e:fb:f7:5c:f0:d6:c9:e8:11: 3d:da:e8:25:31:71:1b:ea:29:a1:42:65:b2:4d:31: 55:1e:54:4d:ad:e7:e2:a3:11:fe:75:91:2a:21:21: cb:e6:73:73:a2:82:0c:49:df:0b:96:17:45:b6:fb: 61:1a:ca:64:74:78:2f:1f:79:80:b3:87:7a:a1:16: 08:0c:9a:17:e7:a9:3a:52:a6:b1:40:2b:c0:03:47: fd:39:8c:cc:4a:05:8f:22:ef:e4:f4:b6:ae:80:68: 05:d6:68:03:57:87:d2:86:9b:03:86:51:83:4c:8a: 71:de:49:76:b0:ba:76:17:ef:f2:42:43:2f:76:9f: ef:46:ac:94:e9:f8:95:e1:01:03:f1:65:af:32:b4: ea:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:56:4C:FA:41:51:F3:49:28:E9:A5:D5:AE:DA:F9:6D:92:15:07:A1 X509v3 Authority Key Identifier: keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/RVZM-kFR80ko6aXVrtr5bZIVB6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:dc0::/48 Signature Algorithm: sha256WithRSAEncryption 3d:bf:7f:fb:95:63:2c:6a:75:a0:5f:f8:07:1d:d3:73:3b:36: 1e:54:75:e4:e8:31:89:b7:0b:2f:bf:f1:ce:95:5d:b7:d3:9d: e2:77:6d:35:76:c4:66:fb:97:b3:46:6d:8d:a6:f3:8a:cc:de: 12:d1:70:65:98:19:5a:75:2f:f3:91:53:dd:da:f4:a6:1d:2e: 6f:96:ff:12:8b:8d:07:8b:41:2b:76:4a:db:fc:d2:1b:35:67: 06:23:ef:a2:da:a6:c0:90:aa:0f:48:e2:d4:6d:df:0d:f9:a7: df:a9:a9:9b:5d:89:8d:41:7e:06:31:ef:30:9b:7b:26:b5:ff: 35:ef:10:cf:d1:5c:cd:a4:9b:62:40:cf:5c:ed:a8:f8:0a:ee: 31:c1:cb:cf:26:5c:9b:8c:7f:ef:d4:95:ed:b1:2f:54:d5:4d: 96:67:c6:3d:7d:c7:de:9f:c0:ac:25:c6:9a:cc:b7:17:27:e6: c9:26:5f:ec:f6:4f:63:2c:16:fc:7c:40:d1:5d:ec:01:0b:16: bc:61:a9:8b:68:a7:24:3f:66:cd:ef:8f:9a:eb:82:6c:85:72: 9f:9e:88:93:46:2d:a4:52:e1:a0:e8:7b:28:64:ae:af:8e:54: 72:14:d6:37:6e:e3:26:ad:36:92:8f:c8:10:e0:06:73:aa:f5: c3:20:23:8c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6WdQ/H+8MxMgBiikRUWaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDU1OGUyNjU2YmY4OTczMzM4OTU5NGRmMTQ0ZDIxZDFk YzAzMTMwHhcNMjYwMTAxMTYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTU2NGNmYTQxNTFmMzQ5MjhlOWE1ZDVhZWRhZjk2ZDkyMTUwN2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1noJ+QWne9jGbih4i/bEiCszfNnL 35cwVuW9I7N0whOPWMABHui1ciDbWnb6/LDlM04YH8UPPWTPVscNfFrn6lFJG49a NHw8uMQCZHtjuUsPx+iic41n1iEvrF+c5Sb3W93vVz3TUjNFa8ENIZqO+/dc8NbJ 6BE92uglMXEb6imhQmWyTTFVHlRNrefioxH+dZEqISHL5nNzooIMSd8LlhdFtvth GspkdHgvH3mAs4d6oRYIDJoX56k6UqaxQCvAA0f9OYzMSgWPIu/k9LaugGgF1mgD V4fShpsDhlGDTIpx3kl2sLp2F+/yQkMvdp/vRqyU6fiV4QED8WWvMrTq6QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEVWTPpBUfNJKOml1a7a+W2SFQehMB8GA1UdIwQY MBaAFCpFWOJla/iXMziVlN8UTSHR3AMTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNWMzOGYtNGZjMy00MjgzLTljMzkt OTA1NTI4M2YwZWFlLzEvUlZaTS1rRlI4MGtvNmFYVnJ0cjViWklWQjZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kNWMzOGYtNGZjMy00MjgzLTljMzktOTA1NTI4M2YwZWFl LzEvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA3A MA0GCSqGSIb3DQEBCwUAA4IBAQA9v3/7lWMsanWgX/gHHdNzOzYeVHXk6DGJtwsv v/HOlV23053id201dsRm+5ezRm2NpvOKzN4S0XBlmBladS/zkVPd2vSmHS5vlv8S i40Hi0Erdkrb/NIbNWcGI++i2qbAkKoPSOLUbd8N+affqambXYmNQX4GMe8wm3sm tf817xDP0VzNpJtiQM9c7aj4Cu4xwcvPJlybjH/v1JXtsS9U1U2WZ8Y9fcfen8Cs JcaazLcXJ+bJJl/s9k9jLBb8fEDRXewBCxa8YamLaKckP2bN74+a64JshXKfnoiT Ri2kUuGg6HsoZK6vjlRyFNY3buMmrTaSj8gQ4AZzqvXDICOM -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:39 2026 by rpki-client