This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SjmWQ8lmMJcwI6flW_kggAd4Mq8.roa File: SjmWQ8lmMJcwI6flW_kggAd4Mq8.roa (raw, json) Hash identifier: ZTSovXe2tl9npxRr0EyTgUN3YNai5hXy9MXAOkmAvg0= Subject key identifier: 4A:39:96:43:C9:66:30:97:30:23:A7:E5:5B:F9:20:80:07:78:32:AF Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CB790D86448335AF1E67E4DB480F9 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SjmWQ8lmMJcwI6flW_kggAd4Mq8.roa Signing time: Fri 02 Jan 2026 06:19:46 +0000 ROA not before: Fri 02 Jan 2026 06:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51217 IP address blocks: 2a06:de01:90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b7:90:d8:64:48:33:5a:f1:e6:7e:4d:b4:80:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a399643c96630973023a7e55bf92080077832af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c5:a6:55:55:ff:2a:43:fb:ba:94:0b:42:2f: 87:3c:7e:55:51:86:ac:b6:05:44:c6:a6:83:5e:b3: f8:8f:eb:90:57:07:8f:02:8e:ee:29:df:30:ee:f2: b2:90:96:ff:c7:b7:37:aa:7f:5e:00:5f:19:51:b5: 5c:a1:72:c0:df:f1:ba:6f:df:e0:a2:7a:e5:41:91: b9:ff:4a:0f:71:07:d5:8e:4a:12:51:a4:3a:c9:81: 59:28:aa:56:4a:51:18:56:af:13:9d:f0:41:d6:d2: cf:79:8d:bb:b8:de:8a:36:f2:c0:03:6e:cc:e4:5b: b6:44:3f:8f:60:89:8e:e7:17:54:78:92:2c:df:d4: c0:cd:2e:1e:95:21:56:72:24:10:7f:c6:dd:cb:9f: fb:67:b3:ff:5f:bb:fe:88:02:62:19:59:26:6e:84: 60:c3:45:ab:3e:11:94:2d:d3:6b:25:07:74:37:52: a6:ee:ae:69:41:5b:b7:5a:b9:c6:50:fa:39:5b:c0: b2:7d:9b:93:67:b1:60:d6:ae:56:a5:e3:23:f2:38: f3:3b:e9:2c:a5:52:d6:0d:4f:15:62:ac:9a:4d:56: 6e:91:4a:94:e4:76:da:21:d8:b9:ea:54:16:ce:08: e2:a6:84:f2:cd:d8:d4:ac:91:9d:54:9d:b3:e5:7e: 22:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:39:96:43:C9:66:30:97:30:23:A7:E5:5B:F9:20:80:07:78:32:AF X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SjmWQ8lmMJcwI6flW_kggAd4Mq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de01:90::/48 Signature Algorithm: sha256WithRSAEncryption 6f:ee:9d:97:91:19:3d:c0:a9:8b:80:e7:84:84:36:99:ea:10: 76:19:1c:87:75:b0:87:dc:21:cb:c9:13:d3:19:16:a4:ce:8e: b1:54:3f:5d:1e:db:fa:f6:6b:3b:db:43:29:4c:5d:35:c0:ff: 8d:a6:9e:56:12:74:5a:a0:2d:98:17:d5:4c:93:e0:e0:4a:9c: 7d:fb:9d:e4:b0:26:aa:9b:e7:33:cd:d0:49:bf:a6:ba:29:09: 7a:8b:a5:56:65:70:03:cc:27:f0:fd:2e:02:84:57:d4:3d:c7: 68:ee:99:cd:fb:ab:9f:25:b2:5f:59:e9:2d:f5:a1:3c:56:c4: f8:1b:b2:74:20:db:22:f4:24:b6:c2:f1:24:b9:73:c6:9f:96: a4:26:bd:36:2d:ed:a2:8c:d1:74:4f:af:58:eb:48:f5:57:e5: 9b:80:9c:80:00:bb:94:5d:5a:dd:fc:98:65:ee:36:3f:29:56: ef:eb:e2:81:47:7b:7d:87:c5:8b:05:bf:91:12:4e:99:bb:84: a1:44:84:fe:76:ed:83:fa:36:e3:b8:ca:bb:4a:d4:06:c0:91: 9a:d0:c2:a3:62:d4:24:ea:46:15:c1:6b:20:f1:7b:00:57:aa: 0c:2a:cc:5e:e0:06:56:fd:49:9b:e9:b3:f5:12:5d:46:07:65: 99:17:40:82 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XLeQ2GRIM1rx5n5NtID5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTM5OTY0M2M5NjYzMDk3MzAyM2E3ZTU1YmY5MjA4MDA3NzgzMmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MWmVVX/KkP7upQLQi+HPH5VUYas tgVExqaDXrP4j+uQVwePAo7uKd8w7vKykJb/x7c3qn9eAF8ZUbVcoXLA3/G6b9/g onrlQZG5/0oPcQfVjkoSUaQ6yYFZKKpWSlEYVq8TnfBB1tLPeY27uN6KNvLAA27M 5Fu2RD+PYImO5xdUeJIs39TAzS4elSFWciQQf8bdy5/7Z7P/X7v+iAJiGVkmboRg w0WrPhGULdNrJQd0N1Km7q5pQVu3WrnGUPo5W8CyfZuTZ7Fg1q5WpeMj8jjzO+ks pVLWDU8VYqyaTVZukUqU5HbaIdi56lQWzgjipoTyzdjUrJGdVJ2z5X4iwwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEo5lkPJZjCXMCOn5Vv5IIAHeDKvMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvU2ptV1E4bG1NSmN3STZmbFdfa2dnQWQ0TXE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbeAQCQ MA0GCSqGSIb3DQEBCwUAA4IBAQBv7p2XkRk9wKmLgOeEhDaZ6hB2GRyHdbCH3CHL yRPTGRakzo6xVD9dHtv69ms720MpTF01wP+Npp5WEnRaoC2YF9VMk+DgSpx9+53k sCaqm+czzdBJv6a6KQl6i6VWZXADzCfw/S4ChFfUPcdo7pnN+6ufJbJfWekt9aE8 VsT4G7J0INsi9CS2wvEkuXPGn5akJr02Le2ijNF0T69Y60j1V+WbgJyAALuUXVrd /Jhl7jY/KVbv6+KBR3t9h8WLBb+REk6Zu4ShRIT+du2D+jbjuMq7StQGwJGa0MKj YtQk6kYVwWsg8XsAV6oMKsxe4AZW/Umb6bP1El1GB2WZF0CC -----END CERTIFICATE-----Generated at Sat Jan 10 02:19:25 2026 by rpki-client