This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/sB-L4JrKA9D3H7uMQdIKSAlPulA.roa File: sB-L4JrKA9D3H7uMQdIKSAlPulA.roa (raw, json) Hash identifier: NJvVl9eks4BHzKayTTKdpdPVy4jCLKYpuFF0TROWgBo= Subject key identifier: B0:1F:8B:E0:9A:CA:03:D0:F7:1F:BB:8C:41:D2:0A:48:09:4F:BA:50 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38B142439BA24D540DFC061561E534 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/sB-L4JrKA9D3H7uMQdIKSAlPulA.roa Signing time: Fri 02 Jan 2026 10:20:03 +0000 ROA not before: Fri 02 Jan 2026 10:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140915 IP address blocks: 2a13:a5c3:ff10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b1:42:43:9b:a2:4d:54:0d:fc:06:15:61:e5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b01f8be09aca03d0f71fbb8c41d20a48094fba50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:c6:0d:fc:12:1a:0d:73:17:5c:84:af:2b: bc:0b:0a:93:6a:df:ee:c2:01:13:7e:1e:51:c2:8b: a4:17:13:72:e1:2f:68:c9:f3:12:01:16:ea:3e:60: 6f:6a:c8:b5:6f:85:0a:8c:00:db:0e:c0:76:1c:da: 37:58:ad:89:56:6a:e5:b2:2c:3d:ba:75:b2:7b:0f: 5a:cd:e2:76:4d:d3:f8:83:93:8d:f4:29:85:40:8d: a8:63:30:0c:37:ec:53:cd:22:d1:3f:80:d4:63:c7: 53:16:69:b2:af:40:2e:b1:48:91:05:2e:8b:30:c2: fb:ef:06:7d:54:05:c5:70:aa:72:ef:8c:48:b0:f1: fd:33:be:68:25:dc:46:e2:1c:19:fd:88:88:3f:ad: a5:9b:c0:18:e4:fd:74:14:08:f6:7c:fb:01:37:40: aa:11:f0:58:22:34:29:e9:67:ca:4e:ec:b8:fc:c1: 42:4f:2c:4c:b6:2c:f8:c4:96:d3:26:f5:2f:8e:50: bc:50:55:29:73:42:62:2c:0b:c5:a9:ae:07:45:5d: 53:a0:46:14:0f:05:09:35:71:fc:0d:d2:e7:09:2a: 22:86:5a:3e:8f:35:d7:a5:7d:54:16:6e:12:36:ab: 34:e0:7c:c3:6c:3e:fe:25:40:7f:72:ce:08:64:76: b9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1F:8B:E0:9A:CA:03:D0:F7:1F:BB:8C:41:D2:0A:48:09:4F:BA:50 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/sB-L4JrKA9D3H7uMQdIKSAlPulA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c3:ff10::/44 Signature Algorithm: sha256WithRSAEncryption 81:7f:04:2d:19:13:ac:80:06:b9:a9:90:79:0d:cd:95:21:d5: ae:fe:94:27:5e:0d:03:31:c5:6a:f8:b7:e7:0f:c7:ef:16:20: 2f:1c:9a:c0:0b:c1:f8:57:8c:49:78:46:90:14:0c:08:56:bc: e4:54:13:0b:53:a0:4c:7a:7a:64:0a:3e:ac:ee:60:a1:9b:60: 52:a7:57:01:10:1b:29:a2:4b:c3:74:c3:55:57:d4:49:b7:fb: 57:d4:5d:7c:5a:61:91:96:f5:92:74:34:a6:73:7c:d8:37:13: dd:cb:9f:b2:2e:62:85:93:d6:56:14:f0:09:cf:86:de:2c:dc: 0e:76:23:cd:ad:3a:30:0d:cb:39:74:e5:75:08:27:a2:93:2e: 52:ba:29:82:d0:9f:16:12:c5:4c:90:cd:ce:55:9f:83:d9:2a: b6:21:94:cc:17:9a:2b:c5:6c:68:33:7d:a1:b3:e1:2a:ed:3f: 03:cf:9b:ab:3a:32:b8:3a:28:e4:f4:9e:a9:66:c2:69:35:fb: cb:bc:d0:d6:19:98:a8:63:00:5d:26:8d:b0:d1:6b:ba:18:c7: 59:b5:c1:55:1a:ef:4b:e3:4c:26:82:4c:29:9d:0f:1a:10:7a: f5:db:53:ba:76:67:42:f9:31:c1:2b:21:a7:4e:9a:fc:f3:6b: f5:2b:26:fa -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OLFCQ5uiTVQN/AYVYeU0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDFmOGJlMDlhY2EwM2QwZjcxZmJiOGM0MWQyMGE0ODA5NGZiYTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwunGDfwSGg1zF1yEryu8CwqTat/u wgETfh5RwoukFxNy4S9oyfMSARbqPmBvasi1b4UKjADbDsB2HNo3WK2JVmrlsiw9 unWyew9azeJ2TdP4g5ON9CmFQI2oYzAMN+xTzSLRP4DUY8dTFmmyr0AusUiRBS6L MML77wZ9VAXFcKpy74xIsPH9M75oJdxG4hwZ/YiIP62lm8AY5P10FAj2fPsBN0Cq EfBYIjQp6WfKTuy4/MFCTyxMtiz4xJbTJvUvjlC8UFUpc0JiLAvFqa4HRV1ToEYU DwUJNXH8DdLnCSoihlo+jzXXpX1UFm4SNqs04HzDbD7+JUB/cs4IZHa5cQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLAfi+CaygPQ9x+7jEHSCkgJT7pQMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvc0ItTDRKcktBOUQzSDd1TVFkSUtTQWxQdWxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhOlw/8Q MA0GCSqGSIb3DQEBCwUAA4IBAQCBfwQtGROsgAa5qZB5Dc2VIdWu/pQnXg0DMcVq +LfnD8fvFiAvHJrAC8H4V4xJeEaQFAwIVrzkVBMLU6BMenpkCj6s7mChm2BSp1cB EBspokvDdMNVV9RJt/tX1F18WmGRlvWSdDSmc3zYNxPdy5+yLmKFk9ZWFPAJz4be LNwOdiPNrTowDcs5dOV1CCeiky5SuimC0J8WEsVMkM3OVZ+D2Sq2IZTMF5orxWxo M32hs+Eq7T8Dz5urOjK4Oijk9J6pZsJpNfvLvNDWGZioYwBdJo2w0Wu6GMdZtcFV Gu9L40wmgkwpnQ8aEHr121O6dmdC+THBKyGnTpr882v1Kyb6 -----END CERTIFICATE-----Generated at Mon Jan 5 03:46:56 2026 by rpki-client