This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sLo2TicIYG5GVu1KFUjE9v8KRZU.roa File: sLo2TicIYG5GVu1KFUjE9v8KRZU.roa (raw, json) Hash identifier: Hq3tWBiuRlVuFhwQ0Kyfj4wmNi7euzSp9keNdR/3zDo= Subject key identifier: B0:BA:36:4E:27:08:60:6E:46:56:ED:4A:15:48:C4:F6:FF:0A:45:95 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6FDDC22BFD88E41990EC0D085271F Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sLo2TicIYG5GVu1KFUjE9v8KRZU.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212529 IP address blocks: 2a0c:9a40:8900::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fd:dc:22:bf:d8:8e:41:99:0e:c0:d0:85:27:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0ba364e2708606e4656ed4a1548c4f6ff0a4595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:19:97:cc:68:46:37:a8:aa:d3:cd:80:c5: b2:d8:17:0d:96:32:cb:e1:08:16:37:25:71:d7:7f: 84:10:28:90:4b:16:76:dd:69:a6:14:7a:7b:a8:d9: eb:01:15:d9:a1:36:36:0e:0d:b0:ec:bf:f7:c2:e8: ef:b9:46:29:54:8c:a7:53:26:64:81:5c:21:7a:34: 2a:50:aa:91:29:9c:91:63:2a:22:a5:16:e0:4a:97: 64:74:5c:9a:c5:7f:a6:f9:d4:47:2f:8a:6b:a8:c0: 3c:a8:c7:4c:ea:6f:88:5c:47:37:28:24:19:69:c2: 19:81:50:63:1c:9a:db:84:eb:3c:a0:d8:c5:9b:ac: e4:02:61:17:7a:ef:63:d9:25:33:c0:e0:d7:b3:4d: 08:d6:e9:62:1a:62:2f:ac:8e:4d:dd:0a:01:9f:57: 26:8c:4f:ad:26:99:90:64:cb:6b:98:a3:de:e2:9c: 0b:64:66:73:8b:44:d5:50:01:c3:87:3b:b1:cf:31: af:f6:30:32:79:55:99:b5:fa:a4:15:20:68:5f:4f: b5:80:f7:b3:56:e0:4d:69:dc:c6:36:9d:cf:26:87: c2:f1:0b:c8:19:a1:37:70:80:65:11:84:8b:cd:fb: 29:81:13:33:29:0f:8f:8b:6d:01:c1:ed:b3:29:1c: 81:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BA:36:4E:27:08:60:6E:46:56:ED:4A:15:48:C4:F6:FF:0A:45:95 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sLo2TicIYG5GVu1KFUjE9v8KRZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8900::/44 Signature Algorithm: sha256WithRSAEncryption ab:d5:82:e6:ec:b5:8f:fe:27:15:67:ac:16:1c:2f:73:59:cb: 8f:38:8f:f9:c9:d2:00:61:bf:42:64:42:5c:14:d0:66:57:b1: b5:d2:f7:2b:d3:7a:29:3f:8f:9e:44:9f:75:34:bc:1a:57:a2: a1:31:09:5b:c9:55:5f:89:f3:7c:76:a0:41:34:28:f6:58:0d: 32:1b:66:1b:1a:a3:18:88:39:f1:ca:83:0c:1e:21:64:89:06: 1e:e7:4b:68:f7:6d:1a:6e:f8:dc:0c:e6:7c:25:cb:cd:7e:60: 18:6c:71:73:6a:d9:3e:da:94:d8:f9:31:1f:96:e5:62:80:ab: 47:89:1c:13:48:26:b2:6f:15:be:3b:a0:e2:30:62:21:1e:13: 23:2b:f5:d6:4f:0d:72:0d:63:4f:2f:4e:13:a5:53:9a:7a:d7: d0:e0:50:9c:03:26:ff:75:ad:a3:73:29:ad:5b:fe:82:25:13: 58:1b:97:79:25:8b:24:32:67:77:19:6d:09:16:d5:80:76:b2: 2f:a5:2c:78:c5:12:61:6f:b9:25:86:da:ea:ca:bd:92:01:07: 1f:3b:d1:9c:97:40:5a:63:65:c5:de:b4:d7:95:35:8c:71:58: 50:f0:21:40:4f:0e:6a:d4:63:a6:02:09:64:9c:2c:bf:18:94: 3a:96:70:ba -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pv3cIr/YjkGZDsDQhScfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGJhMzY0ZTI3MDg2MDZlNDY1NmVkNGExNTQ4YzRmNmZmMGE0NTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAIZl8xoRjeoqtPNgMWy2BcNljLL 4QgWNyVx13+EECiQSxZ23WmmFHp7qNnrARXZoTY2Dg2w7L/3wujvuUYpVIynUyZk gVwhejQqUKqRKZyRYyoipRbgSpdkdFyaxX+m+dRHL4prqMA8qMdM6m+IXEc3KCQZ acIZgVBjHJrbhOs8oNjFm6zkAmEXeu9j2SUzwODXs00I1uliGmIvrI5N3QoBn1cm jE+tJpmQZMtrmKPe4pwLZGZzi0TVUAHDhzuxzzGv9jAyeVWZtfqkFSBoX0+1gPez VuBNadzGNp3PJofC8QvIGaE3cIBlEYSLzfspgRMzKQ+Pi20Bwe2zKRyBLwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLC6Nk4nCGBuRlbtShVIxPb/CkWVMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvc0xvMlRpY0lZRzVHVnUxS0ZVakU5djhLUlpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIkA MA0GCSqGSIb3DQEBCwUAA4IBAQCr1YLm7LWP/icVZ6wWHC9zWcuPOI/5ydIAYb9C ZEJcFNBmV7G10vcr03opP4+eRJ91NLwaV6KhMQlbyVVfifN8dqBBNCj2WA0yG2Yb GqMYiDnxyoMMHiFkiQYe50to920abvjcDOZ8JcvNfmAYbHFzatk+2pTY+TEfluVi gKtHiRwTSCaybxW+O6DiMGIhHhMjK/XWTw1yDWNPL04TpVOaetfQ4FCcAyb/da2j cymtW/6CJRNYG5d5JYskMmd3GW0JFtWAdrIvpSx4xRJhb7klhtrqyr2SAQcfO9Gc l0BaY2XF3rTXlTWMcVhQ8CFATw5q1GOmAglknCy/GJQ6lnC6 -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:16 2026 by rpki-client