This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/SZ_6ylScpPiEH0ZCa12sLX6zagk.roa
File: SZ_6ylScpPiEH0ZCa12sLX6zagk.roa (raw, json)
Hash identifier: vrYlrzbxZBY+EsFYdOVrTApQB/bbmGVeGVEG1+3s1HQ=
Subject key identifier: 49:9F:FA:CA:54:9C:A4:F8:84:1F:46:42:6B:5D:AC:2D:7E:B3:6A:09
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019B7FF1BE5C59E852EC95D54E5F0F16F469
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/SZ_6ylScpPiEH0ZCa12sLX6zagk.roa
Signing time: Fri 02 Jan 2026 18:21:47 +0000
ROA not before: Fri 02 Jan 2026 18:21:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208084
IP address blocks: 2a03:5840:12b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:be:5c:59:e8:52:ec:95:d5:4e:5f:0f:16:f4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 18:21:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=499ffaca549ca4f8841f46426b5dac2d7eb36a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:c2:fa:3c:ad:a7:fe:62:78:b8:ca:ac:ba:
5f:9f:e3:da:29:51:9a:68:84:05:b5:a1:3c:17:2c:
d8:15:34:e1:4f:ec:57:cf:ad:fe:66:d2:60:00:de:
2e:ac:de:89:e2:34:3a:ef:96:01:f2:74:20:ca:3d:
37:02:b2:e7:7c:85:e4:4e:28:f1:1a:ab:2c:49:0f:
b2:19:65:d5:fe:41:83:ae:d6:3b:06:61:17:5d:40:
b4:11:5b:96:5d:03:ba:ef:19:90:c1:32:53:97:55:
54:a3:8e:70:08:62:8c:91:34:f5:52:c5:2a:35:3e:
72:8b:fe:3c:01:56:85:93:02:da:5a:15:a6:1a:9f:
f9:8c:49:d1:ed:5c:a8:78:8a:02:49:5b:7c:21:83:
3f:37:58:3c:28:83:bb:09:37:d9:a4:47:e3:15:b3:
a4:06:b2:33:c3:6c:f2:87:ba:f5:98:43:f6:73:4c:
c9:ed:11:44:78:b2:d3:e3:c1:2c:a1:d5:38:84:3e:
b2:01:d5:81:cd:22:bf:91:49:e9:0c:d6:56:5f:89:
d5:e8:29:03:5a:e1:15:82:95:dd:c2:df:18:65:d3:
27:34:52:f0:79:33:7c:7e:a8:54:7c:63:e6:b0:8c:
1d:3b:72:10:e0:e7:4c:53:70:e7:77:8d:87:10:22:
e4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9F:FA:CA:54:9C:A4:F8:84:1F:46:42:6B:5D:AC:2D:7E:B3:6A:09
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/SZ_6ylScpPiEH0ZCa12sLX6zagk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:12b::/48
Signature Algorithm: sha256WithRSAEncryption
4f:65:71:d7:57:d3:80:b2:07:b2:0d:8a:f5:b5:c5:39:b5:59:
3d:69:32:1a:5e:5d:67:87:8b:a1:19:b4:d2:5c:17:10:af:8d:
6a:65:44:e7:b1:8f:1f:44:40:2f:9f:a6:2a:32:a2:71:05:bc:
15:2b:a7:4f:f8:42:ac:80:1c:dc:c8:4f:bb:a2:ee:7a:4f:e6:
7e:5d:7d:17:11:b6:96:02:a9:dc:63:e5:2c:55:c8:df:88:28:
6b:78:c3:83:19:46:e4:25:52:b2:56:95:0f:cd:8c:fc:65:83:
98:78:b8:28:6c:a2:e3:cf:7f:35:e2:44:f5:63:22:63:1f:53:
6e:92:3b:6c:89:11:68:2d:94:a3:b1:f6:44:9c:47:28:10:8a:
fb:7b:14:12:fc:f7:b0:6e:f1:60:da:b8:3e:fc:60:c0:aa:cf:
3b:41:8d:17:f9:57:68:b0:8b:23:9d:a1:00:d3:cf:c3:dd:64:
21:c7:f5:85:3c:46:36:f4:1d:e9:03:88:eb:f3:4f:78:bd:09:
59:66:a5:b4:d6:d9:2a:fe:fd:7a:dc:18:3a:5d:df:03:97:fa:
9a:d1:4f:ce:d7:a7:eb:8b:0c:d4:69:1f:ef:de:60:3e:59:65:
74:e4:e6:bf:d1:2b:0b:ff:3f:80:cd:d0:e1:36:32:16:35:af:
59:0c:b8:13
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt/8b5cWehS7JXVTl8PFvRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjYwMTAyMTgyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTlmZmFjYTU0OWNhNGY4ODQxZjQ2NDI2YjVkYWMyZDdlYjM2YTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLfC+jytp/5ieLjKrLpfn+PaKVGa
aIQFtaE8FyzYFTThT+xXz63+ZtJgAN4urN6J4jQ675YB8nQgyj03ArLnfIXkTijx
GqssSQ+yGWXV/kGDrtY7BmEXXUC0EVuWXQO67xmQwTJTl1VUo45wCGKMkTT1UsUq
NT5yi/48AVaFkwLaWhWmGp/5jEnR7VyoeIoCSVt8IYM/N1g8KIO7CTfZpEfjFbOk
BrIzw2zyh7r1mEP2c0zJ7RFEeLLT48EsodU4hD6yAdWBzSK/kUnpDNZWX4nV6CkD
WuEVgpXdwt8YZdMnNFLweTN8fqhUfGPmsIwdO3IQ4OdMU3Dnd42HECLkPwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEmf+spUnKT4hB9GQmtdrC1+s2oJMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvU1pfNnlsU2NwUGlFSDBaQ2ExMnNMWDZ6YWdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAEr
MA0GCSqGSIb3DQEBCwUAA4IBAQBPZXHXV9OAsgeyDYr1tcU5tVk9aTIaXl1nh4uh
GbTSXBcQr41qZUTnsY8fREAvn6YqMqJxBbwVK6dP+EKsgBzcyE+7ou56T+Z+XX0X
EbaWAqncY+UsVcjfiChreMODGUbkJVKyVpUPzYz8ZYOYeLgobKLjz3814kT1YyJj
H1NukjtsiRFoLZSjsfZEnEcoEIr7exQS/PewbvFg2rg+/GDAqs87QY0X+VdosIsj
naEA08/D3WQhx/WFPEY29B3pA4jr8094vQlZZqW01tkq/v163Bg6Xd8Dl/qa0U/O
16friwzUaR/v3mA+WWV05Oa/0SsL/z+AzdDhNjIWNa9ZDLgT
-----END CERTIFICATE-----
Generated at Fri Jan 23 15:22:08 2026 by rpki-client