This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/syCImBDKif2bUtThCCVdzEwc7QE.roa
File: syCImBDKif2bUtThCCVdzEwc7QE.roa (raw, json)
Hash identifier: 8y2FNl/f8a0Vfh4WRqYOLlLPLqOFqvfWKIKxsP9/a+k=
Subject key identifier: B3:20:88:98:10:CA:89:FD:9B:52:D4:E1:08:25:5D:CC:4C:1C:ED:01
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 019B77C6CC7710735C6C70DA76ACB2FF27C7
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/syCImBDKif2bUtThCCVdzEwc7QE.roa
Signing time: Thu 01 Jan 2026 04:17:55 +0000
ROA not before: Thu 01 Jan 2026 04:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64404
IP address blocks: 2a05:2d01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 10:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:cc:77:10:73:5c:6c:70:da:76:ac:b2:ff:27:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 04:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b320889810ca89fd9b52d4e108255dcc4c1ced01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:03:a7:ee:a5:72:2a:12:f9:4a:e4:7f:f4:
b8:85:72:fd:b7:5d:d2:bb:05:25:e5:3f:25:d5:a1:
a8:fc:16:80:e0:25:05:b3:fc:57:e8:d5:30:f9:1e:
0d:5c:90:01:36:f7:1a:58:42:17:d4:7f:07:7c:79:
8d:29:54:36:87:56:35:a6:b6:36:ca:0c:c0:a7:0b:
07:6b:10:8a:7e:84:9f:11:1a:09:66:01:f0:c0:e3:
45:ec:bc:3e:d0:d5:d2:22:90:ad:0a:12:f2:51:b0:
3a:89:01:af:2f:b1:dc:71:b3:9d:3a:2d:93:5e:e4:
93:a4:83:58:b5:8b:0e:08:c3:2a:8e:74:46:ad:13:
32:43:85:83:f5:d3:a4:83:50:d5:d2:b2:3f:37:46:
96:58:e8:b5:a8:2d:bf:93:82:f1:20:4a:53:e6:fa:
96:89:a5:98:35:df:2a:f8:cc:e8:b8:4d:fa:d1:77:
63:91:fb:26:01:62:56:c6:cb:19:19:7a:8d:b2:61:
d2:ea:a0:2e:3d:39:b5:e7:69:70:3a:be:53:4f:56:
82:76:15:ed:1a:0b:27:1d:c3:35:91:4c:21:09:d1:
ff:e2:6c:d1:23:ec:ee:2d:60:c2:d5:92:ea:a5:72:
75:b0:b2:ce:bd:e6:8c:e5:3e:09:f8:e3:8d:cc:ac:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:20:88:98:10:CA:89:FD:9B:52:D4:E1:08:25:5D:CC:4C:1C:ED:01
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/syCImBDKif2bUtThCCVdzEwc7QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:2d01::/32
Signature Algorithm: sha256WithRSAEncryption
02:b6:e4:ea:56:5c:55:01:eb:8b:af:5e:5d:fb:c3:7f:68:e4:
e7:d1:93:03:4d:07:9f:17:bf:97:56:41:c7:78:e3:75:2e:b1:
6f:32:d9:90:57:a1:ca:ab:78:66:c4:a7:3b:d3:b6:c0:53:fc:
69:d3:8f:ea:76:e1:95:31:67:00:72:93:1b:75:13:9f:60:b8:
24:6e:d5:69:e5:0c:6c:ad:21:f1:39:df:c6:9e:dc:97:37:f3:
48:b2:ed:95:00:f6:51:33:b7:97:24:e2:17:ba:9b:de:03:ab:
29:0d:9a:74:1b:04:4c:f6:bf:32:ad:8b:ad:00:eb:8c:1c:d0:
34:ca:5b:19:68:65:7e:a3:b7:fd:81:8e:97:1b:6e:42:b9:0c:
ca:c6:f7:3f:38:b0:2a:a8:38:7d:7e:27:eb:e5:52:71:2d:38:
f3:8f:22:6a:5e:5e:f4:c2:c3:cb:78:32:ca:77:f3:37:5e:b6:
2f:88:01:7e:d6:1b:34:dd:dd:48:27:16:cd:78:d4:cb:cf:be:
46:c1:8d:71:01:34:f7:6a:2f:8e:24:6c:3e:8a:7e:d9:4c:14:
90:22:b9:e4:88:1e:02:75:aa:eb:d4:b5:8f:15:84:30:dd:04:
21:54:c5:fb:c0:ac:6b:e1:38:6c:e5:36:2e:4f:d2:55:04:06:
11:6c:7a:87
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZt3xsx3EHNcbHDadqyy/yfHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy
NzFlMTAwHhcNMjYwMTAxMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzIwODg5ODEwY2E4OWZkOWI1MmQ0ZTEwODI1NWRjYzRjMWNlZDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jsDp+6lcioS+Urkf/S4hXL9t13S
uwUl5T8l1aGo/BaA4CUFs/xX6NUw+R4NXJABNvcaWEIX1H8HfHmNKVQ2h1Y1prY2
ygzApwsHaxCKfoSfERoJZgHwwONF7Lw+0NXSIpCtChLyUbA6iQGvL7HccbOdOi2T
XuSTpINYtYsOCMMqjnRGrRMyQ4WD9dOkg1DV0rI/N0aWWOi1qC2/k4LxIEpT5vqW
iaWYNd8q+MzouE360XdjkfsmAWJWxssZGXqNsmHS6qAuPTm152lwOr5TT1aCdhXt
GgsnHcM1kUwhCdH/4mzRI+zuLWDC1ZLqpXJ1sLLOveaM5T4J+OONzKyxcwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLMgiJgQyon9m1LU4QglXcxMHO0BMB8GA1UdIwQY
MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt
NjM0MTEzNjdkOTBhLzEvc3lDSW1CREtpZjJiVXRUaENDVmR6RXdjN1FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh
LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgUtATAN
BgkqhkiG9w0BAQsFAAOCAQEAArbk6lZcVQHri69eXfvDf2jk59GTA00Hnxe/l1ZB
x3jjdS6xbzLZkFehyqt4ZsSnO9O2wFP8adOP6nbhlTFnAHKTG3UTn2C4JG7VaeUM
bK0h8Tnfxp7clzfzSLLtlQD2UTO3lyTiF7qb3gOrKQ2adBsETPa/Mq2LrQDrjBzQ
NMpbGWhlfqO3/YGOlxtuQrkMysb3PziwKqg4fX4n6+VScS04848ial5e9MLDy3gy
ynfzN162L4gBftYbNN3dSCcWzXjUy8++RsGNcQE092ovjiRsPop+2UwUkCK55Ige
AnWq69S1jxWEMN0EIVTF+8Csa+E4bOU2Lk/SVQQGEWx6hw==
-----END CERTIFICATE-----
Generated at Tue Jan 20 17:19:15 2026 by rpki-client