This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/sv4FoJpHxihbjQVOHGih_J_ffUs.roa File: sv4FoJpHxihbjQVOHGih_J_ffUs.roa (raw, json) Hash identifier: aDxEXYa4qCra57+aM/aAUjJp5FE00bEh1/avX6X6ENQ= Subject key identifier: B2:FE:05:A0:9A:47:C6:28:5B:8D:05:4E:1C:68:A1:FC:9F:DF:7D:4B Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Certificate serial: 019B7C12BE4F04B7DD6B4AE1505DB2B9E636 Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/sv4FoJpHxihbjQVOHGih_J_ffUs.roa Signing time: Fri 02 Jan 2026 00:19:21 +0000 ROA not before: Fri 02 Jan 2026 00:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216343 IP address blocks: 2a0a:280::/36 maxlen: 48 2a0a:280:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:be:4f:04:b7:dd:6b:4a:e1:50:5d:b2:b9:e6:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Validity Not Before: Jan 2 00:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2fe05a09a47c6285b8d054e1c68a1fc9fdf7d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c5:96:14:16:6f:9b:fa:00:d5:3a:72:49:03: 90:bd:06:5d:d5:63:be:19:cf:94:36:0c:eb:ef:53: ef:42:44:dd:71:a5:a5:fc:69:29:3f:00:b5:33:a4: 02:22:93:bb:71:ff:48:74:44:3f:63:1d:0f:6c:4e: c4:9e:ea:83:58:be:fa:93:51:52:9d:de:42:af:74: 7b:22:63:ff:2e:c5:bc:6c:6c:06:f1:0d:58:fa:a5: 21:5b:a2:53:b9:76:a3:16:88:fa:4b:1a:74:88:25: 32:6f:26:72:c7:6c:5b:02:73:02:04:00:c4:e7:fc: 94:33:cb:d0:da:bc:f8:20:af:26:61:d4:3a:93:f0: 34:23:a3:9b:b2:0c:8f:7a:50:66:d3:0e:b8:e1:cb: bd:d1:87:1e:8d:a7:53:b3:72:b4:47:7a:0c:e7:75: 85:b4:9b:99:05:18:66:78:45:16:7f:18:a6:42:49: 73:77:97:3e:f2:82:aa:73:1b:a1:85:49:86:38:1b: 79:ed:d2:56:78:3f:e1:34:77:68:ae:85:b2:2e:b9: d3:35:fc:ca:7c:88:dd:98:44:38:b4:5a:76:10:14: 20:7e:43:4b:c2:69:b5:81:3e:03:5f:81:5f:68:08: 4a:7a:5e:44:07:13:fc:b6:3d:69:4e:cd:a7:03:4b: 9c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FE:05:A0:9A:47:C6:28:5B:8D:05:4E:1C:68:A1:FC:9F:DF:7D:4B X509v3 Authority Key Identifier: keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/sv4FoJpHxihbjQVOHGih_J_ffUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:280::-2a0a:280:10ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 4b:f8:bc:3d:8d:2f:95:2e:86:a3:60:2d:eb:12:e9:b3:e2:cc: 86:5b:93:de:87:c2:2f:19:f8:d0:d0:3e:e8:35:07:fc:e4:9d: e2:88:c9:94:1f:74:60:77:74:47:b9:ca:c9:ab:c5:f2:80:03: 53:99:08:62:ba:a8:12:b3:d1:19:c7:5c:0b:87:83:60:d6:4f: 7b:4e:c6:9f:56:70:69:4e:3d:95:d0:cb:d7:6b:da:d8:3a:62: e6:2c:13:b0:58:dc:d1:37:fc:4d:bc:9d:44:40:80:0d:de:ab: be:0e:4b:a7:b3:4b:e7:2d:b5:21:72:ad:48:94:73:bf:d2:05: a5:9d:5e:53:7d:91:6f:88:57:1d:80:d4:42:a9:d0:63:c4:89: 0a:a2:50:cf:35:0d:4b:a4:be:64:b7:ca:5e:70:fa:6f:43:48: 42:48:37:2c:45:66:7c:5e:0e:21:25:aa:42:14:ca:c8:39:1b: 2c:40:9c:cc:4d:d8:2c:fa:51:c5:88:1c:9a:06:c5:10:97:8b: 2a:0c:6b:fb:16:15:06:fc:d6:c0:c6:97:68:2c:d8:97:06:54: ed:a3:de:bb:6b:dc:3d:9c:18:f5:ff:37:6b:80:ca:64:60:04: 1e:ae:f6:20:19:f2:ce:9e:a9:77:39:d6:a1:6a:dd:9d:9b:6d: fa:1d:35:fd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt8Er5PBLfda0rhUF2yueY2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi MzM2OWYwHhcNMjYwMTAyMDAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmZlMDVhMDlhNDdjNjI4NWI4ZDA1NGUxYzY4YTFmYzlmZGY3ZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMWWFBZvm/oA1TpySQOQvQZd1WO+ Gc+UNgzr71PvQkTdcaWl/GkpPwC1M6QCIpO7cf9IdEQ/Yx0PbE7EnuqDWL76k1FS nd5Cr3R7ImP/LsW8bGwG8Q1Y+qUhW6JTuXajFoj6Sxp0iCUybyZyx2xbAnMCBADE 5/yUM8vQ2rz4IK8mYdQ6k/A0I6ObsgyPelBm0w644cu90YcejadTs3K0R3oM53WF tJuZBRhmeEUWfximQklzd5c+8oKqcxuhhUmGOBt57dJWeD/hNHdoroWyLrnTNfzK fIjdmEQ4tFp2EBQgfkNLwmm1gT4DX4FfaAhKel5EBxP8tj1pTs2nA0ucHQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFLL+BaCaR8YoW40FThxoofyf331LMB8GA1UdIwQY MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt ZjUxYzVmYjNkZjlhLzEvc3Y0Rm9KcEh4aWhialFWT0hHaWhfSl9mZlVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARMA8DBQcqCgKA AwYAKgoCgBAwDQYJKoZIhvcNAQELBQADggEBAEv4vD2NL5UuhqNgLesS6bPizIZb k96Hwi8Z+NDQPug1B/zkneKIyZQfdGB3dEe5ysmrxfKAA1OZCGK6qBKz0RnHXAuH g2DWT3tOxp9WcGlOPZXQy9dr2tg6YuYsE7BY3NE3/E28nURAgA3eq74OS6ezS+ct tSFyrUiUc7/SBaWdXlN9kW+IVx2A1EKp0GPEiQqiUM81DUukvmS3yl5w+m9DSEJI NyxFZnxeDiElqkIUysg5GyxAnMxN2Cz6UcWIHJoGxRCXiyoMa/sWFQb81sDGl2gs 2JcGVO2j3rtr3D2cGPX/N2uAymRgBB6u9iAZ8s6eqXc51qFq3Z2bbfodNf0= -----END CERTIFICATE-----Generated at Wed Jan 21 17:34:12 2026 by rpki-client