This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/sQhlhQF42dcocq5duZHLdQzBA9g.roa File: sQhlhQF42dcocq5duZHLdQzBA9g.roa (raw, json) Hash identifier: akgpfGx0nQxJk8TcEmTS0m+MwP660iAv5arUAH9NKIg= Subject key identifier: B1:08:65:85:01:78:D9:D7:28:72:AE:5D:B9:91:CB:75:0C:C1:03:D8 Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd Certificate serial: 019B7C80D2C05763333020B230BA31F4F1AD Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/sQhlhQF42dcocq5duZHLdQzBA9g.roa Signing time: Fri 02 Jan 2026 02:19:35 +0000 ROA not before: Fri 02 Jan 2026 02:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206394 IP address blocks: 2001:67c:124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d2:c0:57:63:33:30:20:b2:30:ba:31:f4:f1:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd Validity Not Before: Jan 2 02:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b10865850178d9d72872ae5db991cb750cc103d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:8f:3b:20:f0:e5:e9:9f:52:08:25:52:f3: 64:fc:47:01:5e:4e:fe:4e:13:25:81:41:04:e3:c1: 25:d0:03:6b:44:e9:e9:ff:c9:d1:7c:8c:07:43:47: 30:d8:b3:11:2b:a4:af:01:18:3d:eb:c8:54:86:2a: 2f:76:63:ab:50:65:75:94:98:82:29:fa:d0:01:0b: fb:d1:a7:86:a3:19:e6:f5:a0:4c:c6:3b:ec:47:1c: d1:a4:8e:72:41:6a:42:73:3b:9b:a7:8a:49:71:83: 97:db:35:9e:2f:d1:ec:f7:94:f7:ec:5f:46:2c:f2: 65:38:92:a5:61:9d:da:0e:b9:ce:53:a6:e3:4e:43: 30:d7:e4:a0:9c:ac:d6:c4:43:6b:41:13:2d:4e:53: 4a:42:24:37:55:f6:84:2d:d3:a0:0b:61:37:26:84: a9:73:1e:65:78:cb:2d:26:ef:95:94:b7:e6:d4:fd: 7e:9d:e9:4b:4d:9d:50:be:f3:81:b3:da:9b:6c:57: f1:42:a0:a6:f4:63:56:34:e0:24:ce:c8:a0:b6:c8: 66:81:a8:73:f3:5b:29:e6:02:ef:cc:0f:b6:ff:53: 66:70:1e:03:f1:47:4b:e2:e3:2e:c9:df:8d:76:30: 42:46:3c:e3:be:db:cb:17:cf:ca:f5:45:c7:02:e9: 78:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:08:65:85:01:78:D9:D7:28:72:AE:5D:B9:91:CB:75:0C:C1:03:D8 X509v3 Authority Key Identifier: keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/sQhlhQF42dcocq5duZHLdQzBA9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:124::/48 Signature Algorithm: sha256WithRSAEncryption 52:d9:24:ee:c8:c8:1a:f0:c6:03:f6:3f:f3:0e:a4:2c:ad:fb: 70:53:fc:3d:7a:25:15:21:7f:ad:7e:ff:18:d9:3a:f9:d5:c8: cd:cd:cc:45:bf:63:bf:4f:06:58:d7:3a:5f:91:00:3a:63:34: 2e:57:c7:aa:52:cb:bc:6a:38:13:1f:dc:40:b2:14:2e:f3:65: e2:c0:81:e3:c3:ff:b1:b0:9d:45:2d:95:31:17:90:1b:9c:4d: 7e:8f:a3:d0:e7:af:7e:9e:3b:5f:51:f3:c9:07:f8:78:44:e8: 79:80:73:a8:34:c5:3c:f7:4e:39:22:71:e0:35:39:4a:c0:cf: e6:fb:15:d4:c0:ea:eb:e3:16:84:bc:98:49:c9:43:88:1c:4b: 7d:32:63:63:4e:77:5a:c9:94:4d:b5:76:44:f5:58:68:90:e0: cd:8d:ad:13:d7:b5:7c:4b:03:81:cc:b0:85:31:84:16:08:1e: 0d:79:da:94:ff:a0:65:45:f2:d0:f8:59:52:aa:9b:68:d0:d0: 72:c6:6c:24:38:55:5f:a6:37:d6:bc:5c:1a:7a:23:9a:91:9b: 3f:f8:85:c7:e6:50:26:e6:44:f5:36:a2:ec:fc:33:a7:58:a8: 0d:27:64:d4:c6:b3:43:9f:8d:f6:35:1a:97:e9:c4:39:ed:c0: 28:9d:fa:2c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gNLAV2MzMCCyMLox9PGtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MDkwOWQ3M2EyNzk4ODNlMjU3MTExZTQ4NGU3ZjA3OGI1 ZWM4ZmQwHhcNMjYwMTAyMDIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTA4NjU4NTAxNzhkOWQ3Mjg3MmFlNWRiOTkxY2I3NTBjYzEwM2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9OPOyDw5emfUgglUvNk/EcBXk7+ ThMlgUEE48El0ANrROnp/8nRfIwHQ0cw2LMRK6SvARg968hUhiovdmOrUGV1lJiC KfrQAQv70aeGoxnm9aBMxjvsRxzRpI5yQWpCczubp4pJcYOX2zWeL9Hs95T37F9G LPJlOJKlYZ3aDrnOU6bjTkMw1+SgnKzWxENrQRMtTlNKQiQ3VfaELdOgC2E3JoSp cx5leMstJu+VlLfm1P1+nelLTZ1QvvOBs9qbbFfxQqCm9GNWNOAkzsigtshmgahz 81sp5gLvzA+2/1NmcB4D8UdL4uMuyd+NdjBCRjzjvtvLF8/K9UXHAul4JwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLEIZYUBeNnXKHKuXbmRy3UMwQPYMB8GA1UdIwQY MBaAFCYJCdc6J5iD4lcRHkhOfweLXsj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmdrSjF6b25tSVBpVnhFZVNFNV9CNHRleVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wZmE4OGUtYTVkYi00OGU4LWIxNWIt NjU2MTMxN2NmMjYzLzEvc1FobGhRRjQyZGNvY3E1ZHVaSExkUXpCQTlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wZmE4OGUtYTVkYi00OGU4LWIxNWItNjU2MTMxN2NmMjYz LzEvSmdrSjF6b25tSVBpVnhFZVNFNV9CNHRleVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAEk MA0GCSqGSIb3DQEBCwUAA4IBAQBS2STuyMga8MYD9j/zDqQsrftwU/w9eiUVIX+t fv8Y2Tr51cjNzcxFv2O/TwZY1zpfkQA6YzQuV8eqUsu8ajgTH9xAshQu82XiwIHj w/+xsJ1FLZUxF5AbnE1+j6PQ569+njtfUfPJB/h4ROh5gHOoNMU89045InHgNTlK wM/m+xXUwOrr4xaEvJhJyUOIHEt9MmNjTndayZRNtXZE9VhokODNja0T17V8SwOB zLCFMYQWCB4NedqU/6BlRfLQ+FlSqpto0NByxmwkOFVfpjfWvFwaeiOakZs/+IXH 5lAm5kT1NqLs/DOnWKgNJ2TUxrNDn432NRqX6cQ57cAonfos -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:18 2026 by rpki-client