This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/SZY6wsq_78e2nLvWAkeHk1piMW4.roa File: SZY6wsq_78e2nLvWAkeHk1piMW4.roa (raw, json) Hash identifier: crCAmARzqXmw7E9/kb/thI4py7GtbXwH0Xp22Jp2Zrs= Subject key identifier: 49:96:3A:C2:CA:BF:EF:C7:B6:9C:BB:D6:02:47:87:93:5A:62:31:6E Certificate issuer: /CN=ab7916f3609834ed4014da8c695b340a7b0a580e Certificate serial: 019B79ECA700A346A36B4CC2CCD55F8C10EE Authority key identifier: AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/SZY6wsq_78e2nLvWAkeHk1piMW4.roa Signing time: Thu 01 Jan 2026 14:18:30 +0000 ROA not before: Thu 01 Jan 2026 14:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49697 IP address blocks: 2001:678:964::/48 maxlen: 48 2001:678:a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a7:00:a3:46:a3:6b:4c:c2:cc:d5:5f:8c:10:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7916f3609834ed4014da8c695b340a7b0a580e Validity Not Before: Jan 1 14:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49963ac2cabfefc7b69cbbd6024787935a62316e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:47:9f:b2:f3:58:43:ee:b8:99:7c:ff:4f:ea: 53:2c:63:9d:f1:54:7f:e5:a4:c3:b4:96:79:96:36: d5:2f:96:27:5c:c5:ff:1e:d3:31:44:a9:eb:79:4b: ae:14:14:06:21:cc:10:6c:93:74:4b:32:eb:ea:18: 58:b6:4d:9e:6a:70:23:25:fa:7e:49:41:a1:f3:a1: df:ee:f8:32:f2:a2:a6:61:5b:18:ce:f2:50:e0:4b: c2:c0:da:0a:4a:fc:2a:f0:b1:83:0b:22:c5:5a:e5: ec:96:00:b4:ac:60:5c:32:b2:d7:10:02:50:9f:0f: 19:23:03:40:6a:48:71:d5:8b:84:d8:65:bf:68:ff: f5:f0:ad:a3:40:c1:a1:82:7d:f1:57:cc:b2:f3:56: ca:51:97:5a:d1:b8:bb:b4:c4:51:04:11:fb:1f:b0: 22:a6:c2:5a:3f:35:fb:d0:82:86:6e:fc:30:e7:0e: fe:52:b7:10:48:d1:86:75:fd:95:2c:04:a5:99:84: 5b:99:bf:ea:9e:13:51:37:89:69:3f:b7:73:57:f0: fe:b2:ec:b9:b7:38:37:22:53:ca:97:4c:6e:16:3a: 78:86:c7:57:d7:41:1b:55:c4:b1:f0:ed:9a:27:44: 51:da:9f:d1:c4:11:7b:0c:b0:6d:a9:db:15:f2:a2: 86:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:96:3A:C2:CA:BF:EF:C7:B6:9C:BB:D6:02:47:87:93:5A:62:31:6E X509v3 Authority Key Identifier: keyid:AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/SZY6wsq_78e2nLvWAkeHk1piMW4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:964::/48 2001:678:a00::/48 Signature Algorithm: sha256WithRSAEncryption d4:fa:e4:9e:91:09:97:48:fd:14:93:91:fb:08:82:de:39:45: 4c:79:37:ce:9e:e8:f9:5b:8b:83:d4:d0:97:66:90:38:93:12: 6f:c5:6a:f3:3d:65:dc:61:6f:5a:f3:9d:2c:19:c6:ee:98:cd: 5b:b7:ed:48:c6:b8:88:70:33:3f:a8:34:2a:8e:1a:be:da:44: cb:aa:fc:df:63:38:04:80:79:f4:3b:75:04:a6:4f:70:d8:1b: 81:3e:5c:6c:21:f4:4d:52:53:fd:d8:6a:44:d0:c0:ed:b7:79: 96:62:a8:ac:32:80:d3:14:52:f8:d9:da:85:83:8e:12:94:04: 67:48:e1:01:8e:e7:03:d6:1b:97:cd:a4:df:04:1a:e7:82:43: 73:3b:9c:34:36:dc:68:57:88:60:f8:69:3a:bc:60:24:a7:d1: e3:7c:b9:e0:da:a3:a1:76:2a:f8:47:ad:09:ff:eb:07:a6:53: 67:e0:f7:c2:a9:5c:ff:c0:a1:af:7e:e4:8b:ef:89:ec:74:60: be:83:e6:20:2c:9f:70:79:87:59:16:f0:5e:b5:f5:1d:b0:00: d0:a0:c0:79:64:3f:d1:cf:4a:7d:81:49:b1:11:8d:c3:71:98: 34:07:8e:d9:dd:f1:72:af:6a:f8:0c:84:03:cc:92:20:26:17: 70:da:e7:31 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57KcAo0aja0zCzNVfjBDuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNzkxNmYzNjA5ODM0ZWQ0MDE0ZGE4YzY5NWIzNDBhN2Iw YTU4MGUwHhcNMjYwMTAxMTQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTk2M2FjMmNhYmZlZmM3YjY5Y2JiZDYwMjQ3ODc5MzVhNjIzMTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUefsvNYQ+64mXz/T+pTLGOd8VR/ 5aTDtJZ5ljbVL5YnXMX/HtMxRKnreUuuFBQGIcwQbJN0SzLr6hhYtk2eanAjJfp+ SUGh86Hf7vgy8qKmYVsYzvJQ4EvCwNoKSvwq8LGDCyLFWuXslgC0rGBcMrLXEAJQ nw8ZIwNAakhx1YuE2GW/aP/18K2jQMGhgn3xV8yy81bKUZda0bi7tMRRBBH7H7Ai psJaPzX70IKGbvww5w7+UrcQSNGGdf2VLASlmYRbmb/qnhNRN4lpP7dzV/D+suy5 tzg3IlPKl0xuFjp4hsdX10EbVcSx8O2aJ0RR2p/RxBF7DLBtqdsV8qKGqwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEmWOsLKv+/Htpy71gJHh5NaYjFuMB8GA1UdIwQY MBaAFKt5FvNgmDTtQBTajGlbNAp7ClgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTNrVzgyQ1lOTzFBRk5xTWFWczBDbnNLV0E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mMjY1MTQtYWVmNS00YTQ2LTg4NTEt YjY2MzAwYTdmOWYxLzEvU1pZNndzcV83OGUybkx2V0FrZUhrMXBpTVc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9mMjY1MTQtYWVmNS00YTQ2LTg4NTEtYjY2MzAwYTdmOWYx LzEvcTNrVzgyQ1lOTzFBRk5xTWFWczBDbnNLV0E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeAlk AwcAIAEGeAoAMA0GCSqGSIb3DQEBCwUAA4IBAQDU+uSekQmXSP0Uk5H7CILeOUVM eTfOnuj5W4uD1NCXZpA4kxJvxWrzPWXcYW9a850sGcbumM1bt+1IxriIcDM/qDQq jhq+2kTLqvzfYzgEgHn0O3UEpk9w2BuBPlxsIfRNUlP92GpE0MDtt3mWYqisMoDT FFL42dqFg44SlARnSOEBjucD1huXzaTfBBrngkNzO5w0NtxoV4hg+Gk6vGAkp9Hj fLng2qOhdir4R60J/+sHplNn4PfCqVz/wKGvfuSL74nsdGC+g+YgLJ9weYdZFvBe tfUdsADQoMB5ZD/Rz0p9gUmxEY3DcZg0B47Z3fFyr2r4DIQDzJIgJhdw2ucx -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:07 2026 by rpki-client