This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/sMjP0DwIRUv_f7qQQgRGf3HaTWA.roa File: sMjP0DwIRUv_f7qQQgRGf3HaTWA.roa (raw, json) Hash identifier: DgS24JG1c/l8UCWAl1zW8utqR4YjdbEUYY2s38b7VVE= Subject key identifier: B0:C8:CF:D0:3C:08:45:4B:FF:7F:BA:90:42:04:46:7F:71:DA:4D:60 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA5513D2A2FEFFEF3D51B8AB74934AF Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/sMjP0DwIRUv_f7qQQgRGf3HaTWA.roa Signing time: Fri 02 Jan 2026 12:18:41 +0000 ROA not before: Fri 02 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39091 IP address blocks: 2a10:4646:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:51:3d:2a:2f:ef:fe:f3:d5:1b:8a:b7:49:34:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0c8cfd03c08454bff7fba904204467f71da4d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:da:09:db:0c:bd:a8:d3:00:fa:d6:5a:f5:d0: 08:a0:32:c1:e5:8a:f7:66:e4:a1:9d:be:8a:e9:e2: 5a:d0:a1:ba:ba:eb:73:bf:69:85:0e:18:1c:97:4c: bb:a5:41:ab:07:4f:16:02:b4:5d:79:17:41:10:bb: 77:ff:98:4d:38:36:f2:34:9f:17:27:a2:7a:34:4d: ad:07:23:1d:3c:cd:9a:36:18:1d:98:4e:dd:cd:1b: 17:75:fb:b9:f4:2f:c7:a9:2c:5e:6f:80:d3:81:e9: 6c:68:99:a7:36:3a:92:14:25:60:15:6a:90:7c:fd: 71:82:e8:67:b3:29:33:5b:0d:26:ef:43:23:68:9f: 89:24:cb:4a:34:dc:44:e4:c3:3e:11:7d:b4:9a:e7: 1b:76:2b:1e:86:fc:ea:dc:c1:78:6a:9a:60:92:ad: 3c:0a:cf:cd:7c:3a:09:e1:3b:f2:5d:32:ef:14:f6: db:4e:e7:fb:ba:ee:03:91:24:d0:7b:c3:5d:9c:e9: fd:bb:e5:4b:31:0f:89:52:56:d8:f8:3c:df:34:54: 9f:7f:d1:45:f8:4b:58:1d:78:a9:fc:48:75:26:2f: ba:ae:cc:c9:1e:fa:04:6d:cf:b1:e6:6b:38:22:96: 73:2b:54:8e:52:52:a6:d3:4c:25:42:1d:01:a3:ea: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C8:CF:D0:3C:08:45:4B:FF:7F:BA:90:42:04:46:7F:71:DA:4D:60 X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/sMjP0DwIRUv_f7qQQgRGf3HaTWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:9::/48 Signature Algorithm: sha256WithRSAEncryption 50:61:5a:bb:31:5f:de:e6:3e:a5:97:cd:c9:c6:a8:d3:f0:4e: f4:42:9f:22:a4:2d:23:66:90:be:b6:5b:3b:9e:7a:94:19:24: 00:03:c5:52:56:c1:51:f5:d0:09:a4:8b:c2:19:06:51:07:d0: a3:d2:ae:e7:b4:06:2f:79:da:57:5d:9e:b9:de:68:93:03:7a: ec:58:ca:8f:80:da:80:24:a7:47:b1:c0:fe:3f:e0:93:86:d7: 49:73:02:8f:4e:a7:c1:09:a0:9d:87:03:90:7f:73:fd:40:5f: 69:48:78:c6:23:e1:3e:e9:1e:04:7e:8a:08:58:da:6a:cb:ea: 4d:92:c7:c8:6b:b6:26:56:ac:8e:89:a2:f3:16:d1:b1:cd:00: a5:b9:46:58:9e:73:41:2b:57:dc:75:2e:3d:74:22:0e:a5:73: 67:45:d3:94:7b:06:9d:df:d2:d1:fa:04:1a:29:8b:3a:fe:f3: be:8f:8a:d3:59:f8:cb:91:07:03:81:ee:f9:5e:af:c5:8e:b7: 31:d7:7f:bd:0a:f8:01:c9:dd:03:17:ac:c2:e4:a5:34:81:b9: 1b:3e:e2:79:d5:38:0e:72:81:7c:0d:05:25:1f:e0:f8:61:2f: 75:4b:de:6f:ae:43:17:f6:4a:c0:6e:e7:57:c6:98:2e:dd:22: 9b:de:98:11 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pVE9Ki/v/vPVG4q3STSvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGM4Y2ZkMDNjMDg0NTRiZmY3ZmJhOTA0MjA0NDY3ZjcxZGE0ZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdoJ2wy9qNMA+tZa9dAIoDLB5Yr3 ZuShnb6K6eJa0KG6uutzv2mFDhgcl0y7pUGrB08WArRdeRdBELt3/5hNODbyNJ8X J6J6NE2tByMdPM2aNhgdmE7dzRsXdfu59C/HqSxeb4DTgelsaJmnNjqSFCVgFWqQ fP1xguhnsykzWw0m70MjaJ+JJMtKNNxE5MM+EX20mucbdisehvzq3MF4appgkq08 Cs/NfDoJ4TvyXTLvFPbbTuf7uu4DkSTQe8NdnOn9u+VLMQ+JUlbY+DzfNFSff9FF +EtYHXip/Eh1Ji+6rszJHvoEbc+x5ms4IpZzK1SOUlKm00wlQh0Bo+pSlwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLDIz9A8CEVL/3+6kEIERn9x2k1gMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvc01qUDBEd0lSVXZfZjdxUVFnUkdmM0hhVFdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhBGRgAJ MA0GCSqGSIb3DQEBCwUAA4IBAQBQYVq7MV/e5j6ll83JxqjT8E70Qp8ipC0jZpC+ tls7nnqUGSQAA8VSVsFR9dAJpIvCGQZRB9Cj0q7ntAYvedpXXZ653miTA3rsWMqP gNqAJKdHscD+P+CThtdJcwKPTqfBCaCdhwOQf3P9QF9pSHjGI+E+6R4EfooIWNpq y+pNksfIa7YmVqyOiaLzFtGxzQCluUZYnnNBK1fcdS49dCIOpXNnRdOUewad39LR +gQaKYs6/vO+j4rTWfjLkQcDge75Xq/Fjrcx13+9CvgByd0DF6zC5KU0gbkbPuJ5 1TgOcoF8DQUlH+D4YS91S95vrkMX9krAbudXxpgu3SKb3pgR -----END CERTIFICATE-----Generated at Fri Jan 30 22:55:37 2026 by rpki-client