This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Si3m8ouq3lTM_fci3JcIkkmerrM.roa File: Si3m8ouq3lTM_fci3JcIkkmerrM.roa (raw, json) Hash identifier: RNtwGKKLj8YTnTn9XrAMVapMexqab/qNLxo7eTQNVaY= Subject key identifier: 4A:2D:E6:F2:8B:AA:DE:54:CC:FD:F7:22:DC:97:08:92:49:9E:AE:B3 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1C37B4B8441191934BC70FD7D2AE6 Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Si3m8ouq3lTM_fci3JcIkkmerrM.roa Signing time: Fri 02 Jan 2026 18:21:49 +0000 ROA not before: Fri 02 Jan 2026 18:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213091 IP address blocks: 2a03:5840:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c3:7b:4b:84:41:19:19:34:bc:70:fd:7d:2a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a2de6f28baade54ccfdf722dc970892499eaeb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:19:aa:43:4e:cc:d7:8c:bb:c6:df:4f:6a: eb:88:c7:16:31:42:b2:73:9a:1b:86:bc:ad:37:87: 91:a7:c1:cb:5a:cf:29:69:c5:8a:84:0e:62:f5:4e: 13:b1:23:a3:55:33:fe:32:6b:ae:68:b6:be:d8:d4: 8d:9c:3f:69:7c:60:fa:53:fe:57:81:9e:1b:1d:0f: 61:e0:ea:af:4d:8a:7e:ab:7d:e6:80:df:1b:48:63: a0:aa:69:a2:73:51:d5:2e:2a:38:df:5b:3c:59:cf: ba:79:77:04:d8:97:e2:6a:55:ec:d6:f2:dc:b3:92: b8:94:61:64:f0:b4:a6:0c:a8:78:2d:30:d0:82:82: 67:63:a0:df:01:5e:38:70:74:c2:0e:8f:88:2d:46: 1e:4d:4f:e3:ff:1b:3e:3a:3c:e8:7f:6f:2a:43:cb: 6c:6f:fb:d5:2a:bc:24:9b:e8:8a:06:4c:7d:a8:d3: ca:0f:78:f5:ce:2d:0b:cc:17:d5:fc:2d:90:21:9b: 7d:9c:0e:21:87:35:be:88:f7:5a:8c:24:dc:7e:73: 0f:58:95:25:76:44:12:8d:a1:fe:bb:73:df:34:6e: 42:00:44:ec:cc:93:59:d7:a2:f4:9c:9d:cd:0c:40: 6a:f0:a8:cc:7c:9f:7d:9f:31:5d:e5:d3:fc:e6:aa: 17:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2D:E6:F2:8B:AA:DE:54:CC:FD:F7:22:DC:97:08:92:49:9E:AE:B3 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Si3m8ouq3lTM_fci3JcIkkmerrM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:122::/48 Signature Algorithm: sha256WithRSAEncryption 34:82:aa:a4:eb:d6:f8:88:ca:ff:d5:ef:8d:00:8d:d3:94:a2: c5:9b:67:e0:c0:29:72:81:74:a6:ba:e0:10:26:19:40:a5:60: 21:84:fc:ba:cd:f8:ae:86:5c:fa:52:a1:4f:3f:65:e7:93:99: 28:6f:65:55:7c:18:18:91:62:f7:a4:f1:9b:98:f6:f3:3d:cc: 1b:4f:e5:90:a7:56:31:3f:41:fd:16:84:d1:cf:44:28:18:09: 19:54:a2:4b:9b:56:54:e2:13:7e:7c:95:94:7a:81:51:cd:0d: 34:f7:bc:7b:dd:b5:d9:be:b5:b0:6f:c5:28:6a:c7:bf:b0:d5: 90:ba:15:ca:85:ef:7b:7d:8f:dc:eb:14:98:df:29:3e:fa:85: 90:c1:66:d3:ee:3c:2e:ba:0b:31:87:62:17:1a:89:de:7c:c5: be:d4:dd:37:6b:bf:f5:5d:49:18:9a:ba:8e:40:f0:ee:b8:c6: 0d:d5:66:1c:ea:ca:7b:22:4b:0c:5a:b0:d7:b1:4b:82:52:f1: 35:e1:11:e9:d7:b4:69:c2:79:75:2f:b1:f7:70:e2:30:cb:95: 4a:5a:c3:9c:c2:94:c1:34:e2:87:49:10:b0:20:1f:54:81:91: 72:43:86:e1:2e:3f:1b:85:c3:86:2d:67:0e:59:b1:d5:52:f0: ba:62:9a:80 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8cN7S4RBGRk0vHD9fSrmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTJkZTZmMjhiYWFkZTU0Y2NmZGY3MjJkYzk3MDg5MjQ5OWVhZWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrkZqkNOzNeMu8bfT2rriMcWMUKy c5obhrytN4eRp8HLWs8pacWKhA5i9U4TsSOjVTP+MmuuaLa+2NSNnD9pfGD6U/5X gZ4bHQ9h4OqvTYp+q33mgN8bSGOgqmmic1HVLio431s8Wc+6eXcE2JfialXs1vLc s5K4lGFk8LSmDKh4LTDQgoJnY6DfAV44cHTCDo+ILUYeTU/j/xs+Ojzof28qQ8ts b/vVKrwkm+iKBkx9qNPKD3j1zi0LzBfV/C2QIZt9nA4hhzW+iPdajCTcfnMPWJUl dkQSjaH+u3PfNG5CAETszJNZ16L0nJ3NDEBq8KjMfJ99nzFd5dP85qoXFwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEot5vKLqt5UzP33ItyXCJJJnq6zMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvU2kzbThvdXEzbFRNX2ZjaTNKY0lra21lcnJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAEi MA0GCSqGSIb3DQEBCwUAA4IBAQA0gqqk69b4iMr/1e+NAI3TlKLFm2fgwClygXSm uuAQJhlApWAhhPy6zfiuhlz6UqFPP2Xnk5kob2VVfBgYkWL3pPGbmPbzPcwbT+WQ p1YxP0H9FoTRz0QoGAkZVKJLm1ZU4hN+fJWUeoFRzQ0097x73bXZvrWwb8Uoase/ sNWQuhXKhe97fY/c6xSY3yk++oWQwWbT7jwuugsxh2IXGonefMW+1N03a7/1XUkY mrqOQPDuuMYN1WYc6sp7IksMWrDXsUuCUvE14RHp17Rpwnl1L7H3cOIwy5VKWsOc wpTBNOKHSRCwIB9UgZFyQ4bhLj8bhcOGLWcOWbHVUvC6YpqA -----END CERTIFICATE-----Generated at Fri Jan 23 15:22:45 2026 by rpki-client