This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/Sp4JhFUAyekIacUgRv336KvjT_o.roa File: Sp4JhFUAyekIacUgRv336KvjT_o.roa (raw, json) Hash identifier: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk= Subject key identifier: 4A:9E:09:84:55:00:C9:E9:08:69:C5:20:46:FD:F7:E8:AB:E3:4F:FA Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b Certificate serial: 019B7A5AFE8798339BDD6B039888E03BF631 Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/Sp4JhFUAyekIacUgRv336KvjT_o.roa Signing time: Thu 01 Jan 2026 16:19:02 +0000 ROA not before: Thu 01 Jan 2026 16:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56815 IP address blocks: 2a05:a6c7:ffff:ff00::/56 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fe:87:98:33:9b:dd:6b:03:98:88:e0:3b:f6:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b Validity Not Before: Jan 1 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a9e09845500c9e90869c52046fdf7e8abe34ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:cf:77:91:c8:d4:c0:31:0c:be:5d:44:79: cf:85:29:91:a5:d0:7c:38:d9:f2:15:54:ea:85:48: 5c:19:4d:1f:4a:65:45:4a:73:0b:b2:48:1d:ec:f8: 57:14:d2:22:0c:3b:20:0b:b1:7f:29:85:14:2a:6e: c6:0f:47:a7:16:fc:b8:b1:60:4d:19:e8:c2:67:18: 37:7f:87:13:04:b1:7f:c7:ac:5c:92:f7:d6:b9:1d: 1d:d6:1a:9b:20:8c:27:cc:4e:da:26:8f:12:b9:0b: b4:ce:a2:df:85:a9:4f:ef:11:c6:c8:e5:56:fa:0b: 03:fa:00:10:80:2a:dd:f0:d4:64:fa:a7:ec:8c:b2: 5f:da:e6:df:a4:a6:d0:6b:87:8a:24:3f:6c:23:97: 6d:00:0c:6a:98:c9:59:91:e3:4b:a3:82:e0:99:a9: 86:a7:cd:1b:99:32:77:ce:b2:34:e4:9b:b3:40:aa: ca:b2:9c:18:14:07:71:4f:a3:73:c9:79:18:c7:22: 5c:d3:ec:54:cf:a4:2d:a1:af:16:9a:65:99:7d:d8: 11:51:3d:17:4b:2e:74:f5:86:4d:db:e5:64:b7:12: cc:fb:bd:08:68:8e:b1:1f:28:6e:c9:d7:84:e5:39: 4d:a0:d8:5b:2a:ce:9b:60:c6:0f:9d:14:99:40:aa: 81:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9E:09:84:55:00:C9:E9:08:69:C5:20:46:FD:F7:E8:AB:E3:4F:FA X509v3 Authority Key Identifier: keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/Sp4JhFUAyekIacUgRv336KvjT_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:a6c7:ffff:ff00::/56 Signature Algorithm: sha256WithRSAEncryption 64:69:87:9a:3e:f8:3a:ed:86:28:33:74:4c:4f:fa:72:f3:c4: 8a:c8:70:05:48:7c:69:02:b9:fb:fa:63:50:3a:7b:b1:1a:b2: 55:be:5f:e3:d0:de:94:21:fb:81:2f:22:12:2d:fe:f2:87:31: 6a:c4:71:d7:f7:bb:a2:d8:28:e8:4d:cf:47:e6:9e:7c:17:37: 6d:ac:88:eb:9e:f9:9a:eb:ee:6c:3d:ea:b8:63:50:21:07:25: 62:d9:5a:78:84:3d:1a:b8:dc:da:5c:9e:6a:fc:02:c9:f3:9f: 1d:56:07:fa:d9:a2:77:94:3a:70:a7:d0:f7:f2:82:14:4b:33: 08:6d:23:a7:e2:67:a8:fc:9a:dd:86:6e:d9:8f:c1:12:26:6e: 4b:b7:40:c9:04:a9:7d:d1:0e:5c:be:9e:39:af:bd:1b:bd:68: 40:50:5b:04:1c:24:ba:40:bf:07:a4:3f:ce:0d:cd:8b:53:c2: ae:62:a3:94:b0:6c:8e:a1:20:10:7b:00:9f:7e:0b:78:08:b0: 30:3d:b3:93:9a:a1:ad:4a:57:bf:40:ef:ff:75:ee:3d:85:d4: cd:ac:82:2c:a4:49:09:3c:96:37:1d:dc:f9:c6:fc:f4:d0:e8: 68:fd:e7:bb:8a:6f:49:0b:b9:0f:ac:96:93:c2:f3:fa:62:3d: 2d:49:cc:66 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt6Wv6HmDOb3WsDmIjgO/YxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy YjE4MWIwHhcNMjYwMTAxMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTllMDk4NDU1MDBjOWU5MDg2OWM1MjA0NmZkZjdlOGFiZTM0ZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5/Pd5HI1MAxDL5dRHnPhSmRpdB8 ONnyFVTqhUhcGU0fSmVFSnMLskgd7PhXFNIiDDsgC7F/KYUUKm7GD0enFvy4sWBN GejCZxg3f4cTBLF/x6xckvfWuR0d1hqbIIwnzE7aJo8SuQu0zqLfhalP7xHGyOVW +gsD+gAQgCrd8NRk+qfsjLJf2ubfpKbQa4eKJD9sI5dtAAxqmMlZkeNLo4LgmamG p80bmTJ3zrI05JuzQKrKspwYFAdxT6NzyXkYxyJc0+xUz6Qtoa8WmmWZfdgRUT0X Sy509YZN2+VktxLM+70IaI6xHyhuydeE5TlNoNhbKs6bYMYPnRSZQKqB2wIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFEqeCYRVAMnpCGnFIEb99+ir40/6MB8GA1UdIwQY MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct YWE4NTllMTkyYjE2LzEvU3A0SmhGVUF5ZWtJYWNVZ1J2MzM2S3ZqVF9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2 LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAKgWmx/// /zANBgkqhkiG9w0BAQsFAAOCAQEAZGmHmj74Ou2GKDN0TE/6cvPEishwBUh8aQK5 +/pjUDp7sRqyVb5f49DelCH7gS8iEi3+8ocxasRx1/e7otgo6E3PR+aefBc3bayI 6575muvubD3quGNQIQclYtlaeIQ9Grjc2lyeavwCyfOfHVYH+tmid5Q6cKfQ9/KC FEszCG0jp+JnqPya3YZu2Y/BEiZuS7dAyQSpfdEOXL6eOa+9G71oQFBbBBwkukC/ B6Q/zg3Ni1PCrmKjlLBsjqEgEHsAn34LeAiwMD2zk5qhrUpXv0Dv/3XuPYXUzayC LKRJCTyWNx3c+cb89NDoaP3nu4pvSQu5D6yWk8Lz+mI9LUnMZg== -----END CERTIFICATE-----Generated at Thu Jan 8 16:21:37 2026 by rpki-client