This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/S9y_mjJCuyfIr_MbkN0I6q2Sal0.roa File: S9y_mjJCuyfIr_MbkN0I6q2Sal0.roa (raw, json) Hash identifier: I9W4EXfcs40EaNwRjx83ENL6UFsD7ERkdwPfQdNXweA= Subject key identifier: 4B:DC:BF:9A:32:42:BB:27:C8:AF:F3:1B:90:DD:08:EA:AD:92:6A:5D Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82D972B97AB1C3112BB40165482C8D Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/S9y_mjJCuyfIr_MbkN0I6q2Sal0.roa Signing time: Fri 02 Jan 2026 16:20:40 +0000 ROA not before: Fri 02 Jan 2026 16:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212154 IP address blocks: 2a0b:b87:ffa2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:d9:72:b9:7a:b1:c3:11:2b:b4:01:65:48:2c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bdcbf9a3242bb27c8aff31b90dd08eaad926a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a1:85:2e:2c:8e:3f:88:de:91:89:62:64:a4: 4b:f8:9f:c1:c5:c8:7e:89:3b:8d:fd:d6:f6:2b:91: cb:ae:61:86:35:94:ab:e9:eb:15:01:65:f3:a5:14: 31:8a:5b:e7:79:dc:d6:2a:f1:aa:05:af:46:83:cc: 09:90:e9:5d:d2:7a:ea:ce:77:07:bd:c1:5a:b6:43: 79:1d:62:21:e2:cd:a9:6e:77:3a:80:ef:46:c4:77: 4c:4f:a2:13:19:e4:16:c1:9e:04:96:e4:f9:f4:5b: d1:ec:8a:37:fa:fb:c2:5d:0d:36:c9:d2:6d:d1:0f: 36:f0:f1:2b:0d:fa:3e:6b:0b:ef:55:b3:28:67:51: 5d:f3:6f:28:81:b4:19:d0:90:65:17:d2:8f:55:81: 9b:da:40:ea:2b:19:dc:23:a3:9e:74:26:59:69:ab: 8f:e9:53:75:38:3a:de:de:9d:38:ce:f3:f6:2a:6a: 91:68:6b:07:ef:dc:85:08:87:86:eb:84:76:66:4d: c0:ab:53:ae:e7:78:29:f5:2e:7e:d4:61:e8:96:c2: 95:5c:3b:ec:c7:be:b4:a3:9b:f6:ae:3c:b6:c8:ef: 8b:cd:aa:43:8f:6c:63:e2:04:9a:75:3e:20:8e:16: a7:05:78:13:c3:55:86:f5:be:b0:64:7a:fd:bd:e7: ab:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DC:BF:9A:32:42:BB:27:C8:AF:F3:1B:90:DD:08:EA:AD:92:6A:5D X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/S9y_mjJCuyfIr_MbkN0I6q2Sal0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b87:ffa2::/48 Signature Algorithm: sha256WithRSAEncryption b7:cd:56:19:f2:a3:69:02:62:df:9b:e1:7e:ad:84:29:0d:67: 91:47:8d:ed:ca:3b:0a:fc:9d:00:e7:de:91:97:b0:d9:59:1e: aa:5e:d8:69:d6:39:26:8b:9c:a7:10:94:e0:9e:bc:17:1f:ea: f4:1e:0b:36:e1:cb:3c:21:82:c5:81:1d:68:31:cd:cc:68:ef: d3:de:88:b1:16:2f:38:6d:4c:b6:12:df:1d:90:f8:eb:86:70: de:1d:0b:da:21:6d:cf:3e:c1:20:49:2e:48:ff:54:5e:a5:9a: 66:65:0f:f7:52:c1:8a:92:6e:13:ef:c2:6d:d3:d9:95:4d:fc: 52:2f:ef:8a:81:23:25:78:01:b1:5a:03:78:6e:1a:3e:e8:2f: ac:45:33:80:29:20:2a:2a:fd:36:1e:67:ce:2e:27:fa:53:57: 6e:15:88:3d:74:5b:0f:67:90:3c:a2:4d:99:40:a3:47:ef:73: 78:b8:4c:23:70:a9:23:84:da:0f:29:f2:1b:00:6a:9b:ea:92: 64:3d:92:40:8c:95:a9:b4:89:c6:ea:69:b6:12:61:27:54:b0: de:3c:66:c8:8a:75:f6:49:0d:4f:10:1e:af:76:6b:8a:1f:d2: ca:96:24:01:05:7f:ff:77:7d:42:10:a8:de:d6:e6:ef:64:3c: 75:93:4a:bf -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gtlyuXqxwxErtAFlSCyNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmRjYmY5YTMyNDJiYjI3YzhhZmYzMWI5MGRkMDhlYWFkOTI2YTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaGFLiyOP4jekYliZKRL+J/Bxch+ iTuN/db2K5HLrmGGNZSr6esVAWXzpRQxilvnedzWKvGqBa9Gg8wJkOld0nrqzncH vcFatkN5HWIh4s2pbnc6gO9GxHdMT6ITGeQWwZ4EluT59FvR7Io3+vvCXQ02ydJt 0Q828PErDfo+awvvVbMoZ1Fd828ogbQZ0JBlF9KPVYGb2kDqKxncI6OedCZZaauP 6VN1ODre3p04zvP2KmqRaGsH79yFCIeG64R2Zk3Aq1Ou53gp9S5+1GHolsKVXDvs x760o5v2rjy2yO+LzapDj2xj4gSadT4gjhanBXgTw1WG9b6wZHr9veerGwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEvcv5oyQrsnyK/zG5DdCOqtkmpdMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvUzl5X21qSkN1eWZJcl9NYmtOMEk2cTJTYWwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh/+i MA0GCSqGSIb3DQEBCwUAA4IBAQC3zVYZ8qNpAmLfm+F+rYQpDWeRR43tyjsK/J0A 596Rl7DZWR6qXthp1jkmi5ynEJTgnrwXH+r0Hgs24cs8IYLFgR1oMc3MaO/T3oix Fi84bUy2Et8dkPjrhnDeHQvaIW3PPsEgSS5I/1RepZpmZQ/3UsGKkm4T78Jt09mV TfxSL++KgSMleAGxWgN4bho+6C+sRTOAKSAqKv02HmfOLif6U1duFYg9dFsPZ5A8 ok2ZQKNH73N4uEwjcKkjhNoPKfIbAGqb6pJkPZJAjJWptInG6mm2EmEnVLDePGbI inX2SQ1PEB6vdmuKH9LKliQBBX//d31CEKje1ubvZDx1k0q/ -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:04 2026 by rpki-client