This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/RtWwKcK2LDIjas-ulsxRsUjaK4M.roa File: RtWwKcK2LDIjas-ulsxRsUjaK4M.roa (raw, json) Hash identifier: Nk8WU6N/NT7dIyIzmcm+LGk7xSw6YEDSuJLyOhdKvQY= Subject key identifier: 46:D5:B0:29:C2:B6:2C:32:23:6A:CF:AE:96:CC:51:B1:48:DA:2B:83 Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Certificate serial: 019B22BFBF1272DAA071B72C21725B54029C Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/RtWwKcK2LDIjas-ulsxRsUjaK4M.roa Signing time: Mon 15 Dec 2025 16:02:30 +0000 ROA not before: Mon 15 Dec 2025 16:02:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200216 IP address blocks: 2001:3181::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:bf:bf:12:72:da:a0:71:b7:2c:21:72:5b:54:02:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Validity Not Before: Dec 15 16:02:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=46d5b029c2b62c32236acfae96cc51b148da2b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1d:27:45:ad:71:db:70:f5:64:89:1f:a8:74: 26:40:7b:18:d7:53:54:52:58:56:35:7b:56:3e:b2: c1:72:2d:33:6b:88:1d:51:4f:d4:87:e1:39:66:9d: b6:59:8d:9d:95:29:dc:94:41:f1:75:3b:21:eb:cd: 01:5c:91:0a:8f:6e:0d:ea:da:88:7a:5a:f8:64:17: 83:31:3c:ad:c8:bc:8f:a0:d4:d7:be:d4:78:6a:3f: 57:80:d0:58:19:8b:da:c4:9b:b1:95:d9:9d:9a:ef: 7f:e3:74:5e:82:64:7f:59:2b:5e:27:af:fd:e6:45: e1:30:70:ed:65:64:ca:52:f7:27:e2:21:b4:10:75: 27:ba:f7:98:92:7e:7b:c7:df:05:96:bd:8f:54:83: 7f:1b:12:8e:1b:ba:a0:70:5a:1d:b0:1a:42:b4:2c: 97:a6:29:0a:1e:a3:1c:7f:2e:fa:f5:1d:74:19:3f: 21:28:12:ac:bc:06:49:f2:70:58:63:5d:0a:11:0f: f5:d2:55:b1:54:67:21:36:5a:e9:c3:0a:00:06:b8: 0b:9e:4c:8e:c7:9b:b0:b5:dc:76:e4:76:47:a6:ee: d9:ee:5b:7f:bc:35:9b:cd:66:b9:51:72:99:35:46: fb:ba:bf:94:38:c8:be:59:45:97:6e:34:98:69:09: df:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D5:B0:29:C2:B6:2C:32:23:6A:CF:AE:96:CC:51:B1:48:DA:2B:83 X509v3 Authority Key Identifier: keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/RtWwKcK2LDIjas-ulsxRsUjaK4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3181::/32 Signature Algorithm: sha256WithRSAEncryption 11:64:dc:a3:54:6f:2a:e5:9a:a6:86:66:5e:bd:cb:1b:0b:5a: 36:50:02:e0:14:12:2d:fa:e4:5c:1a:bc:74:4e:76:c6:c0:a0: 1c:99:31:56:b5:da:45:46:55:dd:77:06:aa:7c:9d:e2:db:e4: 94:e9:a4:11:b6:26:cd:9a:99:d9:30:78:54:5a:6f:83:45:ac: 43:16:7d:79:f6:b0:c1:71:f0:aa:0a:30:46:35:e5:37:28:49: 9f:e9:a1:4f:08:06:a0:53:de:4c:15:21:ba:6a:c0:e5:02:32: 35:89:46:13:54:d9:0b:50:21:be:c1:c9:9d:8b:ba:3d:e9:b7: 6b:19:6e:c5:92:61:87:cc:d0:92:7b:34:9f:8f:e2:24:32:29: ed:21:23:a7:89:c6:cd:15:90:f3:c7:77:02:3d:ef:f7:66:89: 29:69:c4:a4:a9:c3:c2:83:ae:af:39:de:00:56:0c:8e:05:fe: 83:fe:4c:96:9c:0b:1e:12:d9:75:3f:57:b5:3f:d5:f0:63:76: 25:ae:91:ea:6b:c1:ae:b4:a8:3d:d9:6e:10:a8:d3:02:38:75: ee:68:de:9b:82:e5:3c:dc:8b:fc:9b:e4:1f:0b:7a:9e:a1:4a: b8:f9:e8:76:94:7b:54:d8:0d:8b:cf:2d:d4:f1:6f:53:e3:87: a4:05:a8:f3 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZsiv78SctqgcbcsIXJbVAKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy NjhmNTQwHhcNMjUxMjE1MTYwMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmQ1YjAyOWMyYjYyYzMyMjM2YWNmYWU5NmNjNTFiMTQ4ZGEyYjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh0nRa1x23D1ZIkfqHQmQHsY11NU UlhWNXtWPrLBci0za4gdUU/Uh+E5Zp22WY2dlSnclEHxdTsh680BXJEKj24N6tqI elr4ZBeDMTytyLyPoNTXvtR4aj9XgNBYGYvaxJuxldmdmu9/43RegmR/WSteJ6/9 5kXhMHDtZWTKUvcn4iG0EHUnuveYkn57x98Flr2PVIN/GxKOG7qgcFodsBpCtCyX pikKHqMcfy769R10GT8hKBKsvAZJ8nBYY10KEQ/10lWxVGchNlrpwwoABrgLnkyO x5uwtdx25HZHpu7Z7lt/vDWbzWa5UXKZNUb7ur+UOMi+WUWXbjSYaQnfAwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEbVsCnCtiwyI2rPrpbMUbFI2iuDMB8GA1UdIwQY MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt N2FhN2ZjMzU5NjU1LzEvUnRXd0tjSzJMRElqYXMtdWxzeFJzVWphSzRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1 LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAExgTAN BgkqhkiG9w0BAQsFAAOCAQEAEWTco1RvKuWapoZmXr3LGwtaNlAC4BQSLfrkXBq8 dE52xsCgHJkxVrXaRUZV3XcGqnyd4tvklOmkEbYmzZqZ2TB4VFpvg0WsQxZ9efaw wXHwqgowRjXlNyhJn+mhTwgGoFPeTBUhumrA5QIyNYlGE1TZC1AhvsHJnYu6Pem3 axluxZJhh8zQkns0n4/iJDIp7SEjp4nGzRWQ88d3Aj3v92aJKWnEpKnDwoOurzne AFYMjgX+g/5MlpwLHhLZdT9XtT/V8GN2Ja6R6mvBrrSoPdluEKjTAjh17mjem4Ll PNyL/JvkHwt6nqFKuPnodpR7VNgNi88t1PFvU+OHpAWo8w== -----END CERTIFICATE-----Generated at Sat Dec 20 16:07:18 2025 by rpki-client