This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/0SKuPZPHgx0DuZsSA5jf1vAaZOQ.roa File: 0SKuPZPHgx0DuZsSA5jf1vAaZOQ.roa (raw, json) Hash identifier: oJFIU8Cu0N2S9/wG/IfXoDuZ2TzeSG92c58fXMAz65w= Subject key identifier: D1:22:AE:3D:93:C7:83:1D:03:B9:9B:12:03:98:DF:D6:F0:1A:64:E4 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA5548B3A9E92D253C65A8650BA451D Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/0SKuPZPHgx0DuZsSA5jf1vAaZOQ.roa Signing time: Fri 02 Jan 2026 12:18:42 +0000 ROA not before: Fri 02 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198180 IP address blocks: 2a10:4646:370::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:54:8b:3a:9e:92:d2:53:c6:5a:86:50:ba:45:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d122ae3d93c7831d03b99b120398dfd6f01a64e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:39:6a:f1:4f:8b:bc:4d:5f:9e:8f:4d:02: 04:f6:a8:37:ad:82:93:c3:b1:20:2d:e7:e3:c8:98: ef:56:85:ef:a7:23:05:90:e6:5b:29:4e:f4:c1:c1: 04:d2:bb:73:32:79:8a:15:5d:73:e8:e7:2c:05:16: 67:5f:ce:db:00:aa:a6:70:52:5e:8e:e9:6b:ae:9b: 25:b9:ea:a0:15:3e:c8:37:38:e8:03:b5:b7:bc:eb: f6:6c:3a:13:ba:d1:80:c0:fe:cb:ca:7d:92:18:1b: 0f:c3:35:cf:99:f2:32:bc:61:d8:32:b3:46:1d:7b: a8:99:52:ea:5a:7a:8f:ad:fe:63:07:3c:5e:c6:44: 45:14:cb:1b:44:e9:b6:c6:b0:3e:cd:35:02:7d:56: b2:c4:4b:c2:1e:18:b5:6b:9f:dc:c1:e8:c8:63:12: d2:55:c2:f3:55:8d:c8:57:f7:02:5c:01:c3:6f:56: e0:7e:f4:20:39:0b:c3:78:2b:73:3e:5d:69:1a:84: b3:ea:1e:30:e1:8d:7c:9a:f6:44:0b:a1:3d:30:6e: 34:da:5b:c9:4b:da:f5:d3:6f:fa:af:62:2b:be:ef: 98:fe:1b:8a:5f:49:95:18:06:b2:75:22:e0:cf:f3: ee:42:09:94:84:da:dd:79:77:a9:6d:4e:38:fa:21: 2b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:22:AE:3D:93:C7:83:1D:03:B9:9B:12:03:98:DF:D6:F0:1A:64:E4 X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/0SKuPZPHgx0DuZsSA5jf1vAaZOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:370::/44 Signature Algorithm: sha256WithRSAEncryption 7b:a6:5c:6d:d8:63:7e:13:91:8e:33:6f:bb:c7:33:d6:28:1b: d1:ad:59:78:0b:7e:03:26:f6:5d:5c:77:ea:c1:52:dd:6d:49: ee:b9:2f:7e:54:4a:96:32:91:1d:18:bc:be:f1:54:d2:35:b8: 07:76:ea:ab:1d:9c:5a:30:ff:d7:a8:be:de:31:c8:d3:a4:c4: 23:17:08:e2:ff:67:b8:cb:65:59:d6:be:a2:b4:c5:45:82:8e: 2b:f9:58:08:89:91:b2:bb:64:61:f9:fe:d3:c8:56:19:b4:76: c0:9d:cb:20:50:97:1c:99:59:31:10:59:9a:73:e8:0a:7e:9b: 98:46:8e:4d:40:c4:0a:e9:c7:10:a7:6d:01:ae:0e:18:b7:77: 0b:c0:5f:67:11:4c:65:4e:db:79:13:97:21:a3:b8:7c:dd:07: c2:f3:ad:5e:ea:28:52:85:93:06:c7:a8:a3:9f:24:e7:0b:fa: 6b:47:f6:3a:e2:32:c1:df:97:bf:bc:a0:ac:00:5c:ea:9a:aa: 7b:dd:84:a1:89:1f:e6:d4:63:82:53:b0:1f:4e:89:f7:87:0e: a0:22:85:cd:2f:79:f9:db:3e:eb:a6:e3:a6:62:9b:bf:3f:79: 5b:89:7e:3b:32:35:3d:35:12:28:83:29:e8:1f:b3:62:cc:6a: aa:4b:9e:2e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pVSLOp6S0lPGWoZQukUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTIyYWUzZDkzYzc4MzFkMDNiOTliMTIwMzk4ZGZkNmYwMWE2NGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst05avFPi7xNX56PTQIE9qg3rYKT w7EgLefjyJjvVoXvpyMFkOZbKU70wcEE0rtzMnmKFV1z6OcsBRZnX87bAKqmcFJe julrrpslueqgFT7INzjoA7W3vOv2bDoTutGAwP7Lyn2SGBsPwzXPmfIyvGHYMrNG HXuomVLqWnqPrf5jBzxexkRFFMsbROm2xrA+zTUCfVayxEvCHhi1a5/cwejIYxLS VcLzVY3IV/cCXAHDb1bgfvQgOQvDeCtzPl1pGoSz6h4w4Y18mvZEC6E9MG402lvJ S9r102/6r2Irvu+Y/huKX0mVGAaydSLgz/PuQgmUhNrdeXepbU44+iEr5wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNEirj2Tx4MdA7mbEgOY39bwGmTkMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvMFNLdVBaUEhneDBEdVpzU0E1amYxdkFhWk9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgNw MA0GCSqGSIb3DQEBCwUAA4IBAQB7plxt2GN+E5GOM2+7xzPWKBvRrVl4C34DJvZd XHfqwVLdbUnuuS9+VEqWMpEdGLy+8VTSNbgHduqrHZxaMP/XqL7eMcjTpMQjFwji /2e4y2VZ1r6itMVFgo4r+VgIiZGyu2Rh+f7TyFYZtHbAncsgUJccmVkxEFmac+gK fpuYRo5NQMQK6ccQp20Brg4Yt3cLwF9nEUxlTtt5E5cho7h83QfC861e6ihShZMG x6ijnyTnC/prR/Y64jLB35e/vKCsAFzqmqp73YShiR/m1GOCU7AfTon3hw6gIoXN L3n52z7rpuOmYpu/P3lbiX47MjU9NRIogynoH7NizGqqS54u -----END CERTIFICATE-----Generated at Fri Jan 30 22:55:37 2026 by rpki-client