This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/siv7eihEdKW_ap7AUDG7_39jUmI.roa File: siv7eihEdKW_ap7AUDG7_39jUmI.roa (raw, json) Hash identifier: WFYLo+dkgFW4+MbeoyoZaYOFmKk3TOwdJdQSzSoQ9SE= Subject key identifier: B2:2B:FB:7A:28:44:74:A5:BF:6A:9E:C0:50:31:BB:FF:7F:63:52:62 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA5625F57858F928C715472E6D2D2B6 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/siv7eihEdKW_ap7AUDG7_39jUmI.roa Signing time: Fri 02 Jan 2026 12:18:46 +0000 ROA not before: Fri 02 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214560 IP address blocks: 2a10:4646:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:62:5f:57:85:8f:92:8c:71:54:72:e6:d2:d2:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b22bfb7a284474a5bf6a9ec05031bbff7f635262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:34:60:44:c5:4f:55:c1:f0:f7:1e:ef:80: f8:ea:54:9b:c4:93:e5:07:a3:3c:e1:9c:ff:4f:8c: 52:ec:6d:7b:a5:b8:5a:6e:75:55:84:a4:a0:0c:84: ba:a6:40:07:e9:01:bb:39:99:d7:bf:41:85:1e:2d: 18:41:cb:a7:c6:3f:8a:ff:08:df:12:87:0d:d5:6e: f9:40:b8:8f:13:6a:0c:0d:60:38:8a:89:d2:3d:87: f9:c9:b6:7a:14:76:d1:52:9b:08:a6:25:44:6d:9c: 8f:34:a8:80:fa:d1:4b:db:fa:5f:35:f9:ed:e1:b5: c8:39:01:40:a9:0b:5d:44:28:05:90:69:06:99:3a: e8:52:81:a2:80:24:07:ba:3d:99:5b:2f:a9:29:e0: 02:10:be:cc:ba:34:ac:89:b7:cd:81:a6:2c:b2:0e: 2b:2b:a3:0a:94:1e:d3:fe:0a:01:d3:ba:96:bf:61: 5b:d1:35:6f:a1:59:4d:ba:1a:0c:2a:cf:da:4e:57: fe:0c:57:a5:71:32:43:14:a5:79:8d:e1:29:61:4a: f7:11:31:8a:51:af:d0:26:ef:f8:1c:ef:04:d3:3f: 99:7e:2e:ce:78:db:e2:5f:8d:c8:3b:e2:4a:d1:fd: 0e:69:85:71:26:89:ee:36:9b:9c:4c:16:df:57:f1: a1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2B:FB:7A:28:44:74:A5:BF:6A:9E:C0:50:31:BB:FF:7F:63:52:62 X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/siv7eihEdKW_ap7AUDG7_39jUmI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:123::/48 Signature Algorithm: sha256WithRSAEncryption 20:96:c7:9c:40:a4:6f:56:97:90:a3:96:96:ca:85:a5:cb:83: bd:5c:ae:ca:1b:28:db:45:c0:1d:0c:c7:f3:a8:dd:3b:c4:9a: 60:73:15:4b:b4:e0:ab:04:5d:87:2f:fc:6d:ca:e9:ee:1b:d2: 5a:44:b4:87:10:6e:54:ea:73:f2:5a:a5:10:23:eb:4d:bd:49: b6:4e:b4:45:ba:b0:70:fd:68:90:e1:8d:c2:63:e3:37:74:ab: 4c:1e:75:51:cf:40:eb:a2:2b:a8:59:bd:2e:bd:08:95:8d:54: f3:00:da:f4:4e:d0:e4:b6:ac:f3:4f:ef:e5:30:b5:3d:a4:54: 0b:54:e1:c8:bf:d9:9f:1f:94:9e:4f:e7:78:7c:61:8b:c6:f8: 20:43:17:c3:1a:30:4e:15:c5:b7:80:1f:69:58:6f:65:af:16: 68:da:9c:e8:9e:4c:e5:9c:8d:05:05:3c:62:34:41:b9:c4:79: 90:a2:b6:90:89:e3:9f:ed:6b:fd:c1:91:e3:55:97:0e:81:43: e1:2b:cb:b2:77:b9:82:f2:b6:05:e8:2e:44:c6:06:80:d5:a1: a4:ad:9b:b0:ab:b9:d2:b0:54:72:87:bb:15:05:28:de:52:3b: b8:af:58:3c:a0:c6:90:c2:14:52:00:82:9e:97:e6:3d:ca:1e: 0c:ef:33:0d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pWJfV4WPkoxxVHLm0tK2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjJiZmI3YTI4NDQ3NGE1YmY2YTllYzA1MDMxYmJmZjdmNjM1MjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0U0YETFT1XB8Pce74D46lSbxJPl B6M84Zz/T4xS7G17pbhabnVVhKSgDIS6pkAH6QG7OZnXv0GFHi0YQcunxj+K/wjf EocN1W75QLiPE2oMDWA4ionSPYf5ybZ6FHbRUpsIpiVEbZyPNKiA+tFL2/pfNfnt 4bXIOQFAqQtdRCgFkGkGmTroUoGigCQHuj2ZWy+pKeACEL7MujSsibfNgaYssg4r K6MKlB7T/goB07qWv2Fb0TVvoVlNuhoMKs/aTlf+DFelcTJDFKV5jeEpYUr3ETGK Ua/QJu/4HO8E0z+Zfi7OeNviX43IO+JK0f0OaYVxJonuNpucTBbfV/GhZwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLIr+3ooRHSlv2qewFAxu/9/Y1JiMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvc2l2N2VpaEVkS1dfYXA3QVVERzdfMzlqVW1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhBGRgEj MA0GCSqGSIb3DQEBCwUAA4IBAQAglsecQKRvVpeQo5aWyoWly4O9XK7KGyjbRcAd DMfzqN07xJpgcxVLtOCrBF2HL/xtyunuG9JaRLSHEG5U6nPyWqUQI+tNvUm2TrRF urBw/WiQ4Y3CY+M3dKtMHnVRz0DroiuoWb0uvQiVjVTzANr0TtDktqzzT+/lMLU9 pFQLVOHIv9mfH5SeT+d4fGGLxvggQxfDGjBOFcW3gB9pWG9lrxZo2pzonkzlnI0F BTxiNEG5xHmQoraQieOf7Wv9wZHjVZcOgUPhK8uyd7mC8rYF6C5ExgaA1aGkrZuw q7nSsFRyh7sVBSjeUju4r1g8oMaQwhRSAIKel+Y9yh4M7zMN -----END CERTIFICATE-----Generated at Wed Jan 14 09:32:37 2026 by rpki-client