This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ssTPwx3Ir2xDAbb7MdMwi5Ugm2k.roa File: ssTPwx3Ir2xDAbb7MdMwi5Ugm2k.roa (raw, json) Hash identifier: kI6+F1DWAcc+3XLZk055UBjOatQ51Syy2IyT4uzsHTY= Subject key identifier: B2:C4:CF:C3:1D:C8:AF:6C:43:01:B6:FB:31:D3:30:8B:95:20:9B:69 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F8443A223FA9510BBA85F2F46C1FF21 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ssTPwx3Ir2xDAbb7MdMwi5Ugm2k.roa Signing time: Fri 02 Jan 2026 16:22:13 +0000 ROA not before: Fri 02 Jan 2026 16:22:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 2a0c:fe06::/32 maxlen: 32 2a0c:fe07::/32 maxlen: 32 2a0e:cbc0::/32 maxlen: 32 2a0e:cbc1::/32 maxlen: 32 2a0e:cbc2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:43:a2:23:fa:95:10:bb:a8:5f:2f:46:c1:ff:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2c4cfc31dc8af6c4301b6fb31d3308b95209b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e1:9b:ef:5d:a0:32:d1:bf:7c:fe:65:09:16: 79:9c:cb:58:c5:6c:c8:2b:fe:9e:fc:91:0c:60:a5: 1d:b9:7a:00:3e:25:ae:69:06:2c:85:cc:60:97:bb: 14:63:c6:90:d0:2a:0b:28:06:50:c1:a7:07:8b:ae: a0:3c:f1:bb:3f:5d:6b:5a:2c:1e:39:fa:7c:fd:06: 81:6d:a9:1f:40:44:01:ca:4f:e5:f8:59:52:c1:cc: f6:57:1b:2a:35:07:d0:b8:c0:a6:66:fa:22:3a:f7: 80:4d:ba:c0:af:df:24:f0:cb:c1:72:c0:5c:d8:6a: a6:ed:5f:63:c1:29:71:d9:fd:3b:67:77:b7:31:9f: 4f:62:83:d3:04:72:30:cc:22:59:16:4e:31:bb:df: f6:f8:9b:fc:61:3e:91:4f:af:89:11:31:28:62:57: 93:bc:35:f4:72:70:d2:e6:fa:1c:3c:ae:85:8f:b9: bc:85:db:d1:ea:53:ac:5c:7d:90:f5:d9:c3:14:08: 91:d1:7f:c6:1c:82:e9:51:e9:fd:60:14:39:31:dd: 03:ab:ad:47:d7:3a:b7:e5:10:db:55:0a:9b:0e:f1: 3b:d4:b7:31:4b:de:18:33:a7:60:43:68:22:64:dc: 9e:c5:e7:b8:41:c7:73:15:17:b9:da:99:d9:f5:0d: d4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C4:CF:C3:1D:C8:AF:6C:43:01:B6:FB:31:D3:30:8B:95:20:9B:69 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ssTPwx3Ir2xDAbb7MdMwi5Ugm2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:fe06::/31 2a0e:cbc0::-2a0e:cbc2:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption bf:2c:f7:6b:7e:c7:8b:74:d9:b5:ca:48:ad:71:b1:01:87:66: 2e:d9:aa:9f:85:f9:97:72:44:58:d2:6e:8a:f0:9a:b2:15:ff: c7:a4:48:be:47:fd:28:ac:12:62:e6:5d:36:ff:04:d2:50:68: b8:17:55:5d:1a:00:be:31:10:49:78:38:13:28:98:a1:5f:55: f5:0f:b7:6f:c7:63:f2:49:d8:ea:a6:20:ca:7c:1e:02:a3:79: 67:72:e9:fa:0f:a1:b1:fc:39:61:11:9b:dc:d6:94:2a:71:a1: 7f:16:94:49:e3:76:9b:c6:af:50:bd:1f:58:f3:0c:24:25:18: e5:47:90:83:1b:25:92:ab:cb:dc:a1:d8:66:23:95:b6:73:bb: 48:da:eb:0c:77:3f:37:37:15:97:63:9a:08:5f:ca:7b:9d:25: 33:63:7e:18:ab:2d:7a:30:3f:dd:87:94:b0:0f:1c:34:95:03: 0e:d9:da:a5:e4:76:0a:e0:6e:0d:a1:54:7e:91:ba:97:d4:65: b5:a5:8a:67:32:3d:f2:65:cc:72:aa:b7:e2:17:d5:73:e0:92: dd:1a:5b:6d:17:74:1c:19:0f:b2:76:b6:c3:98:7c:e9:a2:6c: 14:29:e4:1b:7c:0d:ec:64:7f:7e:db:15:44:69:76:9f:1d:29: 16:6e:a9:9d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/hEOiI/qVELuoXy9Gwf8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmM0Y2ZjMzFkYzhhZjZjNDMwMWI2ZmIzMWQzMzA4Yjk1MjA5YjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuGb712gMtG/fP5lCRZ5nMtYxWzI K/6e/JEMYKUduXoAPiWuaQYshcxgl7sUY8aQ0CoLKAZQwacHi66gPPG7P11rWiwe Ofp8/QaBbakfQEQByk/l+FlSwcz2VxsqNQfQuMCmZvoiOveATbrAr98k8MvBcsBc 2Gqm7V9jwSlx2f07Z3e3MZ9PYoPTBHIwzCJZFk4xu9/2+Jv8YT6RT6+JETEoYleT vDX0cnDS5vocPK6Fj7m8hdvR6lOsXH2Q9dnDFAiR0X/GHILpUen9YBQ5Md0Dq61H 1zq35RDbVQqbDvE71LcxS94YM6dgQ2giZNyexee4QcdzFRe52pnZ9Q3U5QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLLEz8MdyK9sQwG2+zHTMIuVIJtpMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvc3NUUHd4M0lyMnhEQWJiN01kTXdpNVVnbTJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAAjAXAwUBKgz+BjAO AwUGKg7LwAMFACoOy8IwDQYJKoZIhvcNAQELBQADggEBAL8s92t+x4t02bXKSK1x sQGHZi7Zqp+F+ZdyRFjSborwmrIV/8ekSL5H/SisEmLmXTb/BNJQaLgXVV0aAL4x EEl4OBMomKFfVfUPt2/HY/JJ2OqmIMp8HgKjeWdy6foPobH8OWERm9zWlCpxoX8W lEnjdpvGr1C9H1jzDCQlGOVHkIMbJZKry9yh2GYjlbZzu0ja6wx3Pzc3FZdjmghf ynudJTNjfhirLXowP92HlLAPHDSVAw7Z2qXkdgrgbg2hVH6RupfUZbWlimcyPfJl zHKqt+IX1XPgkt0aW20XdBwZD7J2tsOYfOmibBQp5Bt8Dexkf37bFURpdp8dKRZu qZ0= -----END CERTIFICATE-----Generated at Sun Jan 18 10:02:34 2026 by rpki-client