This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SjQciH_o3DddEgj5labedyQaP1o.roa File: SjQciH_o3DddEgj5labedyQaP1o.roa (raw, json) Hash identifier: 1ohrYG8dI4Na80omN6745EJkOiUtI3c/N7XmNnP/PtQ= Subject key identifier: 4A:34:1C:88:7F:E8:DC:37:5D:12:08:F9:95:A6:DE:77:24:1A:3F:5A Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6F50FA0EC398756FF3934F3DE7083 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SjQciH_o3DddEgj5labedyQaP1o.roa Signing time: Fri 02 Jan 2026 12:20:29 +0000 ROA not before: Fri 02 Jan 2026 12:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208752 IP address blocks: 2a0c:9a40:81c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f5:0f:a0:ec:39:87:56:ff:39:34:f3:de:70:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a341c887fe8dc375d1208f995a6de77241a3f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a0:ab:cb:72:cf:86:24:2d:e0:e4:5f:b6:cc: b0:c0:cb:e4:c1:f9:39:9a:d2:a2:00:e9:d8:85:dc: 70:de:88:9a:c9:f4:27:1e:a1:ef:7d:55:4c:d4:e1: f2:56:5d:e2:57:66:c2:c3:cd:aa:93:c4:bc:08:ad: 00:8a:6e:b2:ee:20:4a:d8:e1:b9:66:ea:d7:bd:49: f7:f6:db:27:6e:01:a9:0f:54:a0:ea:b5:f1:21:22: 8f:37:2b:c5:d8:bf:15:e5:9a:6a:85:ee:89:81:1c: 51:db:26:81:b2:52:ed:72:4f:3a:c2:dd:fb:fe:6d: 7a:57:cf:51:53:88:b5:5d:2d:ea:b8:6a:07:ea:45: 71:2a:2a:29:a7:30:ce:b2:3a:50:4a:9a:d5:be:9f: 1a:93:38:1e:60:a9:af:4f:51:45:02:55:99:19:46: 45:37:c5:56:c5:4e:89:80:d7:4d:7f:d5:44:60:27: 13:1e:6b:5f:4e:1b:04:90:49:5f:d1:15:21:cf:74: 08:8d:3e:6e:69:77:d5:ba:d6:69:34:0c:4f:3e:b1: 8f:db:0d:99:69:cb:a1:bc:4a:28:94:d1:26:4c:67: 4a:17:73:f3:e0:4f:00:4d:96:2d:e3:8c:14:4d:6b: ae:f0:98:c4:cc:e4:d3:40:13:27:60:28:68:dc:7f: 92:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:34:1C:88:7F:E8:DC:37:5D:12:08:F9:95:A6:DE:77:24:1A:3F:5A X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SjQciH_o3DddEgj5labedyQaP1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:81c0::/48 Signature Algorithm: sha256WithRSAEncryption 01:1f:f9:c9:38:7c:44:e2:b8:b2:51:2d:00:90:ba:b9:ba:4f: 92:70:82:c0:c6:43:af:76:59:04:44:11:99:ed:bd:fe:1c:aa: 5b:47:3f:b9:81:d0:19:cd:55:1d:8a:68:06:9a:e4:6d:5f:83: 54:01:ec:4a:64:b2:9c:52:e4:12:df:2e:07:9b:64:09:90:05: be:43:9b:4c:64:c1:8c:0f:5c:74:8e:fe:ec:0b:60:e0:2f:b8: 95:28:b5:60:24:a8:36:be:14:94:8f:7a:fd:81:72:55:f7:fa: 22:2f:9e:86:51:b3:e8:34:dc:8b:2f:36:3f:e4:d2:2d:7d:74: 40:e6:c5:04:19:23:f4:f4:98:da:ee:71:17:97:ce:71:5d:ca: 78:ae:6c:53:a5:0d:17:bb:b2:3a:76:5b:9d:11:cf:29:7c:f7: 09:8d:e4:20:12:4c:1f:46:45:b5:64:2b:4f:5f:b0:77:6c:27: bc:1d:20:87:55:c3:dc:fe:35:e6:ff:b6:88:81:97:32:70:e8: 7e:36:c7:18:01:38:b9:66:ed:52:c6:48:60:c0:fa:94:ef:55: 82:d0:a8:6b:15:48:fb:50:06:dc:7f:c6:1c:5a:0b:bd:fc:54: b1:ec:41:91:8a:3e:3c:17:83:8f:f4:c9:b4:c4:5b:e5:24:96: b1:f5:af:34 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pvUPoOw5h1b/OTTz3nCDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTM0MWM4ODdmZThkYzM3NWQxMjA4Zjk5NWE2ZGU3NzI0MWEzZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKCry3LPhiQt4ORftsywwMvkwfk5 mtKiAOnYhdxw3oiayfQnHqHvfVVM1OHyVl3iV2bCw82qk8S8CK0Aim6y7iBK2OG5 ZurXvUn39tsnbgGpD1Sg6rXxISKPNyvF2L8V5Zpqhe6JgRxR2yaBslLtck86wt37 /m16V89RU4i1XS3quGoH6kVxKioppzDOsjpQSprVvp8akzgeYKmvT1FFAlWZGUZF N8VWxU6JgNdNf9VEYCcTHmtfThsEkElf0RUhz3QIjT5uaXfVutZpNAxPPrGP2w2Z acuhvEoolNEmTGdKF3Pz4E8ATZYt44wUTWuu8JjEzOTTQBMnYCho3H+SowIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEo0HIh/6Nw3XRII+ZWm3nckGj9aMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvU2pRY2lIX28zRGRkRWdqNWxhYmVkeVFhUDFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIHA MA0GCSqGSIb3DQEBCwUAA4IBAQABH/nJOHxE4riyUS0AkLq5uk+ScILAxkOvdlkE RBGZ7b3+HKpbRz+5gdAZzVUdimgGmuRtX4NUAexKZLKcUuQS3y4Hm2QJkAW+Q5tM ZMGMD1x0jv7sC2DgL7iVKLVgJKg2vhSUj3r9gXJV9/oiL56GUbPoNNyLLzY/5NIt fXRA5sUEGSP09Jja7nEXl85xXcp4rmxTpQ0Xu7I6dludEc8pfPcJjeQgEkwfRkW1 ZCtPX7B3bCe8HSCHVcPc/jXm/7aIgZcycOh+NscYATi5Zu1SxkhgwPqU71WC0Khr FUj7UAbcf8YcWgu9/FSx7EGRij48F4OP9Mm0xFvlJJax9a80 -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:43 2026 by rpki-client