This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SIiK7KO9qRsYGFDrQF29ZYeRN28.roa File: SIiK7KO9qRsYGFDrQF29ZYeRN28.roa (raw, json) Hash identifier: V80trQbO4tDLVeGxGEbPS8GIdLCj2usc5m9tpR0hd4U= Subject key identifier: 48:88:8A:EC:A3:BD:A9:1B:18:18:50:EB:40:5D:BD:65:87:91:37:6F Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F84421E94D32157E8CA97BCF30E7D0B Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SIiK7KO9qRsYGFDrQF29ZYeRN28.roa Signing time: Fri 02 Jan 2026 16:22:12 +0000 ROA not before: Fri 02 Jan 2026 16:22:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4826 IP address blocks: 2a0e:eb44::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:42:1e:94:d3:21:57:e8:ca:97:bc:f3:0e:7d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48888aeca3bda91b181850eb405dbd658791376f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5d:4d:fc:46:5c:ed:14:a1:14:f8:db:69:a8: c5:bb:60:9d:7c:a8:f3:0a:20:bd:fc:37:73:f9:52: a4:2e:f9:84:91:f9:0b:b6:d9:9f:b4:b4:83:93:f7: 8b:65:77:70:75:06:96:5c:ed:f0:ef:28:c8:79:5d: a8:94:b3:42:00:19:1f:1f:e5:01:bb:8e:de:ba:0b: 18:10:ce:b3:f9:a9:d4:b5:0c:66:f5:33:50:72:f3: 91:24:e2:20:b9:3a:55:ee:d3:97:31:3a:7a:ac:b9: 1a:eb:2f:d0:6c:19:a4:64:c0:32:67:d7:60:d1:5e: 13:0d:d2:e1:b2:3e:7f:4f:90:40:36:13:e2:13:db: f1:43:a5:e4:a5:e7:79:8d:9b:0b:0b:fc:3a:3c:47: 9a:6f:19:72:c5:15:5d:8e:23:08:ff:2e:ba:33:13: f6:bd:ab:b7:ea:60:46:fc:ca:37:1e:86:3f:72:fb: 30:b8:cc:a4:66:d7:32:5e:a9:e2:21:6d:70:71:f0: 3f:97:b4:12:58:23:43:a6:f6:dc:b6:df:85:5e:da: 17:73:5f:33:f7:4b:11:3e:28:5d:c8:a3:42:ab:2b: 8e:85:5c:63:3a:1f:dc:b8:49:eb:85:f1:43:91:3c: 0e:d9:69:f5:04:26:95:79:e4:fe:e8:82:57:0a:d7: 40:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:88:8A:EC:A3:BD:A9:1B:18:18:50:EB:40:5D:BD:65:87:91:37:6F X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/SIiK7KO9qRsYGFDrQF29ZYeRN28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:eb44::/32 Signature Algorithm: sha256WithRSAEncryption 6f:ff:79:5f:6b:b4:c4:89:f7:7e:21:67:ce:54:1c:91:94:53: 94:18:55:b7:2a:d2:23:a3:d2:93:ad:05:d6:89:35:7d:4f:a4: 9d:6b:2f:c7:5e:99:b1:9f:1b:77:80:4a:c9:60:29:d5:1b:0f: 84:61:62:c9:39:a9:e5:e7:2b:ca:ce:9a:51:fd:57:6e:8a:99: e1:d6:72:44:b4:99:7e:eb:0a:ed:38:f9:cf:f4:7e:2b:1f:37: f9:93:cf:be:c4:ac:c1:e8:87:f6:18:87:80:b5:ab:80:84:36: cb:90:58:fe:d0:3d:18:27:70:61:4b:29:bd:9e:50:23:ba:d4: 88:09:df:e2:6b:49:8e:fb:ed:a2:ef:01:4c:2e:b8:37:19:b8: d7:29:0d:e3:2c:54:c4:54:90:ab:83:40:b0:3f:96:3b:7c:7c: 6f:00:5b:7a:03:cf:ac:f7:af:ca:d4:dc:09:9a:05:ab:6c:2d: 94:87:98:1f:32:8b:68:5d:85:c4:67:cc:07:b1:52:8a:51:b2: c2:95:bb:9e:18:82:dd:cb:93:aa:51:6c:63:02:87:89:a3:ed: c1:4d:a9:79:f3:43:97:29:5c:9f:e7:59:44:f4:1d:6c:df:e8: 22:ae:dd:45:d3:72:17:50:95:6c:39:22:b5:a5:d6:83:c2:06: 6a:f4:aa:2d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hEIelNMhV+jKl7zzDn0LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODg4OGFlY2EzYmRhOTFiMTgxODUwZWI0MDVkYmQ2NTg3OTEzNzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF1N/EZc7RShFPjbaajFu2CdfKjz CiC9/Ddz+VKkLvmEkfkLttmftLSDk/eLZXdwdQaWXO3w7yjIeV2olLNCABkfH+UB u47eugsYEM6z+anUtQxm9TNQcvORJOIguTpV7tOXMTp6rLka6y/QbBmkZMAyZ9dg 0V4TDdLhsj5/T5BANhPiE9vxQ6Xkped5jZsLC/w6PEeabxlyxRVdjiMI/y66MxP2 vau36mBG/Mo3HoY/cvswuMykZtcyXqniIW1wcfA/l7QSWCNDpvbctt+FXtoXc18z 90sRPihdyKNCqyuOhVxjOh/cuEnrhfFDkTwO2Wn1BCaVeeT+6IJXCtdAmwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEiIiuyjvakbGBhQ60BdvWWHkTdvMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvU0lpSzdLTzlxUnNZR0ZEclFGMjlaWWVSTjI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg7rRDAN BgkqhkiG9w0BAQsFAAOCAQEAb/95X2u0xIn3fiFnzlQckZRTlBhVtyrSI6PSk60F 1ok1fU+knWsvx16ZsZ8bd4BKyWAp1RsPhGFiyTmp5ecrys6aUf1XboqZ4dZyRLSZ fusK7Tj5z/R+Kx83+ZPPvsSsweiH9hiHgLWrgIQ2y5BY/tA9GCdwYUspvZ5QI7rU iAnf4mtJjvvtou8BTC64Nxm41ykN4yxUxFSQq4NAsD+WO3x8bwBbegPPrPevytTc CZoFq2wtlIeYHzKLaF2FxGfMB7FSilGywpW7nhiC3cuTqlFsYwKHiaPtwU2pefND lylcn+dZRPQdbN/oIq7dRdNyF1CVbDkitaXWg8IGavSqLQ== -----END CERTIFICATE-----Generated at Wed Jan 21 14:12:48 2026 by rpki-client