This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/S2NtNrD7ZufgDefn0It1m0jFD_o.roa File: S2NtNrD7ZufgDefn0It1m0jFD_o.roa (raw, json) Hash identifier: teqwa5M4Fo9psWpVDj++i8YfVwXeB64QbaIQpomJ2GE= Subject key identifier: 4B:63:6D:36:B0:FB:66:E7:E0:0D:E7:E7:D0:8B:75:9B:48:C5:0F:FA Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1C1EBEDB4B65B6DED1B070780F0E5 Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/S2NtNrD7ZufgDefn0It1m0jFD_o.roa Signing time: Fri 02 Jan 2026 18:21:48 +0000 ROA not before: Fri 02 Jan 2026 18:21:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212400 IP address blocks: 2a03:5840:138::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c1:eb:ed:b4:b6:5b:6d:ed:1b:07:07:80:f0:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b636d36b0fb66e7e00de7e7d08b759b48c50ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e0:ee:2d:de:5c:f4:dc:8a:10:f9:1c:97:15: b4:4a:06:14:ea:e4:9a:09:b7:5d:3f:ca:fa:ee:a0: 4c:e8:b0:63:ee:8a:a4:e7:68:4d:dc:c0:94:a9:fc: a0:8a:6b:b6:70:3d:e7:44:c8:00:92:6b:cf:00:83: 0d:32:95:88:e4:28:0d:b0:1f:68:a3:a2:9b:33:38: b8:ad:b0:cb:f7:bb:45:e8:f8:cf:17:8f:96:12:49: c4:2e:b4:a6:1a:51:96:c5:7a:8c:7b:6d:62:59:93: 39:29:08:fb:8a:e0:55:23:b1:f2:92:03:97:6c:bb: 1b:f5:fa:a7:38:51:5c:39:20:ec:48:9f:ed:c2:fe: 56:76:54:23:f8:a6:39:91:67:a4:85:36:77:2f:b6: 94:da:51:02:b3:6f:b0:cf:25:3f:64:e5:8f:b5:fd: 83:15:cd:d0:93:54:9b:a7:8f:85:6e:84:48:df:9f: 29:35:c5:2a:37:f4:60:ad:f2:c2:30:e7:3f:c0:8a: 4e:e7:68:88:a5:b4:84:a6:a9:e8:ad:6e:4d:16:c3: 47:85:56:80:be:08:e2:73:17:00:6c:7e:4e:51:b6: 47:2e:d3:27:88:5a:e4:2f:11:24:bc:4a:7d:a4:0b: a2:47:8f:be:65:15:b8:66:84:81:84:37:ae:04:11: e0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:63:6D:36:B0:FB:66:E7:E0:0D:E7:E7:D0:8B:75:9B:48:C5:0F:FA X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/S2NtNrD7ZufgDefn0It1m0jFD_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:138::/48 Signature Algorithm: sha256WithRSAEncryption 4d:1b:58:a6:4a:41:eb:e1:e7:73:ef:13:88:19:1f:b3:6f:88: d7:c4:4e:87:b8:61:3f:47:05:d8:1b:d3:fa:0b:37:03:fb:d8: 74:97:e9:0f:b2:35:e3:9a:36:9e:38:b4:b8:85:9c:50:6d:ed: f7:6d:0f:f8:c8:fb:0d:75:16:14:f5:e1:a9:82:38:bd:81:d4: 0d:1d:2f:d1:05:77:eb:05:bd:60:4e:00:c4:b0:22:3d:27:6f: 0f:66:38:6f:32:11:ff:c2:e4:1b:db:93:df:e2:68:55:65:1b: 69:af:3c:b5:e4:c2:39:2a:7b:6d:6f:88:63:fb:12:d3:d8:cd: 00:0a:c4:29:ed:04:5f:db:4a:53:cf:25:38:f5:51:ec:7d:f8: 47:40:43:27:a0:8a:4c:43:4d:37:9e:02:e8:0c:a0:cd:ba:b1: 14:a5:b6:55:1d:e6:a4:3d:9b:62:27:d3:69:0f:0c:f0:b9:5e: 1f:1d:c8:a1:6b:54:06:a7:05:f3:1d:45:88:96:95:d8:0e:26: 40:80:d1:24:c1:5e:d0:16:0d:59:e1:79:e1:35:57:b7:58:63: 6d:73:8c:db:0e:26:a6:f7:6b:63:62:d4:0b:a0:b9:8e:64:91: 30:c7:5e:88:14:26:82:92:62:5a:82:ef:23:1d:44:ed:58:cb: 54:7b:92:b7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8cHr7bS2W23tGwcHgPDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjYzNmQzNmIwZmI2NmU3ZTAwZGU3ZTdkMDhiNzU5YjQ4YzUwZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+DuLd5c9NyKEPkclxW0SgYU6uSa CbddP8r67qBM6LBj7oqk52hN3MCUqfygimu2cD3nRMgAkmvPAIMNMpWI5CgNsB9o o6KbMzi4rbDL97tF6PjPF4+WEknELrSmGlGWxXqMe21iWZM5KQj7iuBVI7HykgOX bLsb9fqnOFFcOSDsSJ/twv5WdlQj+KY5kWekhTZ3L7aU2lECs2+wzyU/ZOWPtf2D Fc3Qk1Sbp4+FboRI358pNcUqN/RgrfLCMOc/wIpO52iIpbSEpqnorW5NFsNHhVaA vgjicxcAbH5OUbZHLtMniFrkLxEkvEp9pAuiR4++ZRW4ZoSBhDeuBBHgNQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEtjbTaw+2bn4A3n59CLdZtIxQ/6MB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvUzJOdE5yRDdadWZnRGVmbjBJdDFtMGpGRF9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAE4 MA0GCSqGSIb3DQEBCwUAA4IBAQBNG1imSkHr4edz7xOIGR+zb4jXxE6HuGE/RwXY G9P6CzcD+9h0l+kPsjXjmjaeOLS4hZxQbe33bQ/4yPsNdRYU9eGpgji9gdQNHS/R BXfrBb1gTgDEsCI9J28PZjhvMhH/wuQb25Pf4mhVZRtprzy15MI5Knttb4hj+xLT 2M0ACsQp7QRf20pTzyU49VHsffhHQEMnoIpMQ003ngLoDKDNurEUpbZVHeakPZti J9NpDwzwuV4fHciha1QGpwXzHUWIlpXYDiZAgNEkwV7QFg1Z4XnhNVe3WGNtc4zb Diam92tjYtQLoLmOZJEwx16IFCaCkmJagu8jHUTtWMtUe5K3 -----END CERTIFICATE-----Generated at Fri Jan 23 15:20:51 2026 by rpki-client