This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/Q56vED3-1_h936Q-ifWJs53c2GY.roa File: Q56vED3-1_h936Q-ifWJs53c2GY.roa (raw, json) Hash identifier: OY22bFuEd/zv+11Gst6hYDrj07QiCcY3HPOcMh0b7Ks= Subject key identifier: 43:9E:AF:10:3D:FE:D7:F8:7D:DF:A4:3E:89:F5:89:B3:9D:DC:D8:66 Certificate issuer: /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0 Certificate serial: 019B7EA4CA15DFE2368A4AB76AED33935284 Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/Q56vED3-1_h936Q-ifWJs53c2GY.roa Signing time: Fri 02 Jan 2026 12:18:07 +0000 ROA not before: Fri 02 Jan 2026 12:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41698 IP address blocks: 95.128.208.0/21 maxlen: 21 193.227.124.0/24 maxlen: 24 194.62.220.0/24 maxlen: 24 2a02:608::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:ca:15:df:e2:36:8a:4a:b7:6a:ed:33:93:52:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0 Validity Not Before: Jan 2 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=439eaf103dfed7f87ddfa43e89f589b39ddcd866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:70:d3:37:e5:02:7a:42:7f:f1:3b:6a:3c: 9a:c1:31:9d:a4:63:c2:fd:bd:7a:7c:52:db:be:c4: 48:52:74:b3:f4:5c:4f:26:1c:8c:63:10:32:e3:35: 92:f5:c7:c7:d4:28:34:58:da:6d:ee:86:94:e6:3c: 6a:15:83:07:34:c1:1e:09:23:7e:50:5e:06:96:c9: 8f:f5:a6:93:06:3b:7c:c8:4f:0a:73:9c:f2:88:7a: 8d:b7:ba:e9:b0:9d:9c:5a:85:d2:b5:d5:ec:d6:19: d3:a7:bf:0e:d3:bb:98:22:60:71:6b:73:fb:1e:96: 2d:2f:e3:79:79:cd:14:89:ef:67:02:c4:ab:64:1f: 75:f5:dd:49:b1:cb:33:1a:e2:5b:cb:c6:22:c1:63: 97:ff:1d:f4:d3:f6:fb:67:20:79:51:e2:93:d4:13: b7:b4:8b:d9:40:aa:d9:05:94:91:f5:91:bb:2f:6a: d4:d0:c0:26:b3:60:e5:c6:1b:cf:d5:77:84:6d:95: e2:bb:3b:f3:42:57:f0:ae:ba:67:21:40:a1:6a:c9: fc:01:f5:16:cf:34:1c:5e:34:34:ea:3f:96:e3:95: ca:1f:ce:1c:a3:a8:63:b2:58:06:ac:df:72:61:a6: 1e:2d:28:69:2c:0b:3a:cd:e7:93:32:96:5b:77:34: bd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9E:AF:10:3D:FE:D7:F8:7D:DF:A4:3E:89:F5:89:B3:9D:DC:D8:66 X509v3 Authority Key Identifier: keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/Q56vED3-1_h936Q-ifWJs53c2GY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.208.0/21 193.227.124.0/24 194.62.220.0/24 IPv6: 2a02:608::/32 Signature Algorithm: sha256WithRSAEncryption 68:6a:8d:d2:ca:8d:1d:53:1d:6f:ae:20:d1:fd:04:af:aa:ab: c6:73:98:04:52:2b:b9:c9:1d:e7:9c:34:2f:e4:25:38:3f:ff: 2c:89:01:1c:7d:58:44:f3:fc:28:0c:87:3a:01:d0:98:ce:b3: 15:5f:97:55:7c:b9:fb:18:70:40:cf:bc:ca:bf:22:f1:47:84: 29:9e:99:9c:0f:e1:cf:d9:88:39:b6:fe:13:18:2a:5e:c3:cc: 12:bd:ae:9a:75:25:8d:47:57:ad:99:5c:f7:d5:4a:47:e0:7c: cf:ae:3b:7c:2b:54:8d:00:f3:54:06:b6:d2:51:c9:31:1b:7b: c0:cd:97:56:d2:71:55:65:99:72:70:c4:99:6d:17:62:ef:dc: 2d:b5:2b:77:5e:89:29:9b:3e:9b:c3:ac:6f:cd:43:93:43:f9: 96:37:3a:6c:b1:99:4f:c5:d8:4f:b3:05:32:78:ab:52:1f:ee: e9:45:68:cc:ea:ff:0d:cc:4a:f7:4f:f5:9b:32:18:a2:c1:dd: 20:e7:6e:e8:23:dc:ff:d3:d6:9d:be:73:2e:cb:ce:f8:a6:1c: 14:ac:5a:29:66:13:9a:f6:fa:f6:54:40:6c:68:94:d1:a0:5e: 63:c5:8e:76:48:90:7a:c0:f7:e9:75:d1:a1:1a:ba:57:fa:ef: e5:3d:6e:01 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+pMoV3+I2ikq3au0zk1KEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjhlMDRiMGUxYTRkNGUzYTI4ZGYxNWViNTg0OTNlNzYz NzdlYjAwHhcNMjYwMTAyMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzllYWYxMDNkZmVkN2Y4N2RkZmE0M2U4OWY1ODliMzlkZGNkODY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcVw0zflAnpCf/E7ajyawTGdpGPC /b16fFLbvsRIUnSz9FxPJhyMYxAy4zWS9cfH1Cg0WNpt7oaU5jxqFYMHNMEeCSN+ UF4GlsmP9aaTBjt8yE8Kc5zyiHqNt7rpsJ2cWoXStdXs1hnTp78O07uYImBxa3P7 HpYtL+N5ec0Uie9nAsSrZB919d1JscszGuJby8YiwWOX/x300/b7ZyB5UeKT1BO3 tIvZQKrZBZSR9ZG7L2rU0MAms2DlxhvP1XeEbZXiuzvzQlfwrrpnIUChasn8AfUW zzQcXjQ06j+W45XKH84co6hjslgGrN9yYaYeLShpLAs6zeeTMpZbdzS9bwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFEOerxA9/tf4fd+kPon1ibOd3NhmMB8GA1UdIwQY MBaAFFS44EsOGk1OOijfFetYST52N36wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxqZ1N3NGFUVTQ2S044VjYxaEpQblkzZnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iNzJiOTctZjlhNS00NDg2LWFhYWIt NjM5MTZmN2YxNzRiLzEvUTU2dkVEMy0xX2g5MzZRLWlmV0pzNTNjMkdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9iNzJiOTctZjlhNS00NDg2LWFhYWItNjM5MTZmN2YxNzRi LzEvVkxqZ1N3NGFUVTQ2S044VjYxaEpQblkzZnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDX4DQAwQA weN8AwQAwj7cMA0EAgACMAcDBQAqAgYIMA0GCSqGSIb3DQEBCwUAA4IBAQBoao3S yo0dUx1vriDR/QSvqqvGc5gEUiu5yR3nnDQv5CU4P/8siQEcfVhE8/woDIc6AdCY zrMVX5dVfLn7GHBAz7zKvyLxR4QpnpmcD+HP2Yg5tv4TGCpew8wSva6adSWNR1et mVz31UpH4HzPrjt8K1SNAPNUBrbSUckxG3vAzZdW0nFVZZlycMSZbRdi79wttSt3 Xokpmz6bw6xvzUOTQ/mWNzpssZlPxdhPswUyeKtSH+7pRWjM6v8NzEr3T/WbMhii wd0g527oI9z/09advnMuy874phwUrFopZhOa9vr2VEBsaJTRoF5jxY52SJB6wPfp ddGhGrpX+u/lPW4B -----END CERTIFICATE-----Generated at Sun Jan 11 07:32:39 2026 by rpki-client