This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/SXzbkr9ag6whBhFjOa91lJDhlAQ.roa File: SXzbkr9ag6whBhFjOa91lJDhlAQ.roa (raw, json) Hash identifier: sBQSeWEJp8X125JY6iVCvYfnUu2XZVP076dBwmRdaPk= Subject key identifier: 49:7C:DB:92:BF:5A:83:AC:21:06:11:63:39:AF:75:94:90:E1:94:04 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1B8C3108559989F80EC0E5CB09501 Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/SXzbkr9ag6whBhFjOa91lJDhlAQ.roa Signing time: Fri 02 Jan 2026 18:21:46 +0000 ROA not before: Fri 02 Jan 2026 18:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200993 IP address blocks: 2a03:5840:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b8:c3:10:85:59:98:9f:80:ec:0e:5c:b0:95:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=497cdb92bf5a83ac2106116339af759490e19404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dc:29:fc:52:61:ac:e6:05:5b:4c:38:ac:51: 22:ad:25:fa:d4:4b:6c:c8:7f:71:05:31:01:77:74: 50:bf:1b:66:85:57:e4:0e:44:bc:62:24:56:e3:b0: 54:8f:61:a2:68:f6:61:5c:74:ed:e8:40:39:5f:a3: db:e9:9e:d6:65:c9:4f:c7:26:7f:a4:2c:1c:81:77: 01:ea:e6:08:3b:20:25:cf:79:e0:87:32:15:f8:3e: 8f:20:3f:8a:75:39:4b:70:2a:0c:6c:c0:48:c2:cc: 1d:64:04:f9:6e:fd:6c:0b:ee:2a:34:d5:be:55:93: c8:8e:d7:e6:fd:15:0f:93:6f:25:6e:fd:90:84:40: 64:a1:67:10:e5:96:2d:7d:a7:17:bf:ef:41:75:68: 38:d6:08:94:bd:fb:eb:a0:dd:8d:79:41:27:f5:24: 96:4c:ea:04:cd:ad:14:26:d8:7c:33:29:43:9c:79: fd:05:29:a1:08:21:59:84:e3:c1:da:65:d0:fd:8c: 2a:05:af:c0:f7:c1:45:b1:9c:e0:fe:e7:dc:2f:46: 1b:2d:e3:32:c7:44:58:c6:5f:8e:97:a1:4a:28:66: ad:d4:15:b2:60:70:30:3d:3b:c0:35:3a:0a:6b:cc: 76:82:d6:77:60:65:ee:35:d2:bb:6c:6f:58:4b:ae: eb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7C:DB:92:BF:5A:83:AC:21:06:11:63:39:AF:75:94:90:E1:94:04 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/SXzbkr9ag6whBhFjOa91lJDhlAQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:121::/48 Signature Algorithm: sha256WithRSAEncryption 3a:81:0c:01:28:82:79:d7:06:18:74:f3:c4:c9:4f:13:bb:26: 74:c4:fd:1c:c0:ce:85:79:0d:77:dc:cb:11:66:4c:03:69:fa: 07:5f:83:d1:db:5e:f9:6c:d6:0f:b9:6a:1f:50:a6:a2:01:b1: 15:a1:c8:77:ac:e3:c6:23:12:21:a4:bf:fb:12:79:93:ed:32: 0b:66:48:2b:a4:6c:56:f5:dd:72:41:11:b6:f0:b5:9e:c3:af: 3b:23:23:f2:a0:7f:0e:20:fb:19:db:58:9b:41:ba:63:8c:de: be:72:ef:de:f4:d7:a4:c1:82:f1:19:5f:a4:5a:19:69:34:ed: a6:c0:a6:2e:26:04:62:19:d2:db:02:b9:5f:b2:d1:2b:d8:7a: 88:c9:04:65:66:22:a5:dd:16:0d:97:f8:67:8e:be:84:e4:51: 01:f5:73:18:86:fb:0e:50:53:81:c8:67:2c:0a:ca:d8:d4:c7: f8:ee:9c:d6:2a:d1:8b:c8:4b:e1:45:4b:47:c4:e2:52:9b:d3: 39:5c:d6:cc:f6:d1:7f:f1:2f:68:69:e5:e0:40:2c:7a:07:29: a5:49:10:30:96:ef:2e:03:43:2b:5b:6e:d4:71:1e:5c:2a:73: 4e:54:13:65:62:f0:99:c2:16:3d:27:4f:fb:ab:51:b8:d9:a4: 10:96:63:af -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8bjDEIVZmJ+A7A5csJUBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTdjZGI5MmJmNWE4M2FjMjEwNjExNjMzOWFmNzU5NDkwZTE5NDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNwp/FJhrOYFW0w4rFEirSX61Ets yH9xBTEBd3RQvxtmhVfkDkS8YiRW47BUj2GiaPZhXHTt6EA5X6Pb6Z7WZclPxyZ/ pCwcgXcB6uYIOyAlz3nghzIV+D6PID+KdTlLcCoMbMBIwswdZAT5bv1sC+4qNNW+ VZPIjtfm/RUPk28lbv2QhEBkoWcQ5ZYtfacXv+9BdWg41giUvfvroN2NeUEn9SSW TOoEza0UJth8MylDnHn9BSmhCCFZhOPB2mXQ/YwqBa/A98FFsZzg/ufcL0YbLeMy x0RYxl+Ol6FKKGat1BWyYHAwPTvANToKa8x2gtZ3YGXuNdK7bG9YS67raQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEl825K/WoOsIQYRYzmvdZSQ4ZQEMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvU1h6YmtyOWFnNndoQmhGak9hOTFsSkRobEFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAEh MA0GCSqGSIb3DQEBCwUAA4IBAQA6gQwBKIJ51wYYdPPEyU8TuyZ0xP0cwM6FeQ13 3MsRZkwDafoHX4PR2175bNYPuWofUKaiAbEVoch3rOPGIxIhpL/7EnmT7TILZkgr pGxW9d1yQRG28LWew687IyPyoH8OIPsZ21ibQbpjjN6+cu/e9NekwYLxGV+kWhlp NO2mwKYuJgRiGdLbArlfstEr2HqIyQRlZiKl3RYNl/hnjr6E5FEB9XMYhvsOUFOB yGcsCsrY1Mf47pzWKtGLyEvhRUtHxOJSm9M5XNbM9tF/8S9oaeXgQCx6BymlSRAw lu8uA0MrW27UcR5cKnNOVBNlYvCZwhY9J0/7q1G42aQQlmOv -----END CERTIFICATE-----Generated at Fri Jan 23 15:22:43 2026 by rpki-client