This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/sD-0ngnI6LrphnOEQB665zDOhTo.roa File: sD-0ngnI6LrphnOEQB665zDOhTo.roa (raw, json) Hash identifier: hETqRILHPyyOM7qnGCxXTMLjjrJbDKhIzUOOLHDep7Y= Subject key identifier: B0:3F:B4:9E:09:C8:E8:BA:E9:86:73:84:40:1E:BA:E7:30:CE:85:3A Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1C6BFCEF7D0384D427A320F2E5964 Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/sD-0ngnI6LrphnOEQB665zDOhTo.roa Signing time: Fri 02 Jan 2026 18:21:50 +0000 ROA not before: Fri 02 Jan 2026 18:21:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215554 IP address blocks: 2a03:5840:116::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c6:bf:ce:f7:d0:38:4d:42:7a:32:0f:2e:59:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b03fb49e09c8e8bae9867384401ebae730ce853a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:74:46:53:c6:7a:71:47:59:e8:68:8d:92: 85:9e:84:5f:e8:7c:11:ff:f0:89:62:93:d7:0d:6e: de:1e:35:87:19:ff:51:be:7b:c6:6b:bc:ef:05:0d: 51:83:c8:a0:b9:67:d8:00:25:66:4d:34:5d:45:73: fa:b1:d5:2a:79:2a:90:2c:72:0a:71:ad:6f:80:45: 3e:54:81:92:a6:d5:9f:ff:93:17:2b:6d:e5:61:cb: 3d:6c:49:95:b0:89:11:a7:63:b4:12:49:3d:bf:d9: 6b:a9:a4:8e:bb:16:97:1a:f2:4e:30:29:32:05:d7: 8b:58:67:74:1b:08:a1:b9:2c:2f:cf:fd:67:0e:df: f3:07:e0:b3:fa:a4:fa:cb:f2:f9:23:2a:57:1c:8a: 6a:3f:38:a6:35:ec:26:9c:92:4e:ea:70:93:b0:b3: 5f:43:7a:40:f0:d5:6e:98:55:d0:ec:67:6f:ec:3d: 39:c4:5c:c1:9f:45:e8:15:c0:fb:14:ab:8c:48:72: 68:cf:62:c4:06:fa:4d:98:ce:76:37:8f:f2:f7:49: 5d:40:48:a2:55:71:42:e3:c9:bf:0f:4c:b6:65:cf: 2c:db:05:7f:0f:f1:23:04:fe:4b:49:45:0d:fc:65: f7:d7:f5:f7:3b:e7:5f:36:35:9e:87:53:af:54:58: bf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3F:B4:9E:09:C8:E8:BA:E9:86:73:84:40:1E:BA:E7:30:CE:85:3A X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/sD-0ngnI6LrphnOEQB665zDOhTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:116::/48 Signature Algorithm: sha256WithRSAEncryption 65:ce:a3:15:21:7a:c9:c6:aa:c7:31:fa:18:7b:bf:b1:c1:73: 9e:18:34:ce:b6:47:69:94:b2:32:f9:b3:ac:73:a6:a6:95:f9: f4:a5:e7:bf:fe:89:d2:0e:f8:a0:20:cd:3c:ef:af:07:df:52: d7:7e:59:3c:07:5d:d4:f5:1b:d5:e9:a2:ed:d0:15:be:78:56: f5:a8:7f:b5:c0:19:9d:ed:8e:2e:e4:d7:30:91:47:b9:7c:f3: bc:08:15:01:72:79:a1:78:f6:d8:26:57:c5:ed:2b:7d:4f:1d: 58:1f:79:c6:39:be:f5:4b:12:5e:ae:78:8a:5b:47:7c:14:7e: 3b:38:71:66:41:b4:ba:5e:6c:ec:2f:47:76:05:3e:b2:bf:40: 89:dc:ed:b9:06:ca:fe:32:be:de:41:9c:bb:d5:d7:69:1d:9a: 36:7a:f6:2d:3e:05:56:38:0a:18:85:62:ce:af:22:27:cc:6b: f5:1c:76:ef:e8:ed:a8:f7:69:a1:44:36:77:02:59:ea:fa:0c: 6e:88:61:f1:c4:7d:ea:98:e3:c0:33:05:01:3a:b6:c6:69:64: 4d:56:97:27:bc:d8:83:43:1c:8a:f5:d8:e5:51:d3:e6:dd:1e: 65:22:d8:33:e6:bc:72:1b:4b:ba:ba:f8:08:46:dc:8a:1d:88: 8b:d2:e7:1e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8ca/zvfQOE1CejIPLllkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDNmYjQ5ZTA5YzhlOGJhZTk4NjczODQ0MDFlYmFlNzMwY2U4NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOJ0RlPGenFHWehojZKFnoRf6HwR //CJYpPXDW7eHjWHGf9RvnvGa7zvBQ1Rg8iguWfYACVmTTRdRXP6sdUqeSqQLHIK ca1vgEU+VIGSptWf/5MXK23lYcs9bEmVsIkRp2O0Ekk9v9lrqaSOuxaXGvJOMCky BdeLWGd0GwihuSwvz/1nDt/zB+Cz+qT6y/L5IypXHIpqPzimNewmnJJO6nCTsLNf Q3pA8NVumFXQ7Gdv7D05xFzBn0XoFcD7FKuMSHJoz2LEBvpNmM52N4/y90ldQEii VXFC48m/D0y2Zc8s2wV/D/EjBP5LSUUN/GX31/X3O+dfNjWeh1OvVFi/jQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLA/tJ4JyOi66YZzhEAeuucwzoU6MB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvc0QtMG5nbkk2THJwaG5PRVFCNjY1ekRPaFRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAEW MA0GCSqGSIb3DQEBCwUAA4IBAQBlzqMVIXrJxqrHMfoYe7+xwXOeGDTOtkdplLIy +bOsc6amlfn0pee//onSDvigIM08768H31LXflk8B13U9RvV6aLt0BW+eFb1qH+1 wBmd7Y4u5NcwkUe5fPO8CBUBcnmhePbYJlfF7St9Tx1YH3nGOb71SxJerniKW0d8 FH47OHFmQbS6XmzsL0d2BT6yv0CJ3O25Bsr+Mr7eQZy71ddpHZo2evYtPgVWOAoY hWLOryInzGv1HHbv6O2o92mhRDZ3Alnq+gxuiGHxxH3qmOPAMwUBOrbGaWRNVpcn vNiDQxyK9djlUdPm3R5lItgz5rxyG0u6uvgIRtyKHYiL0uce -----END CERTIFICATE-----Generated at Fri Jan 23 15:22:44 2026 by rpki-client