This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sTOg-YmYCaPoBkg06KZ-uenCvWc.roa File: sTOg-YmYCaPoBkg06KZ-uenCvWc.roa (raw, json) Hash identifier: SQiAT8qGlRKxud1MgSy0BRymz1wy9i1d8f0nLF03GWw= Subject key identifier: B1:33:A0:F9:89:98:09:A3:E8:06:48:34:E8:A6:7E:B9:E9:C2:BD:67 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D37F68B9EAC120565F1E6B7DE7B6E Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sTOg-YmYCaPoBkg06KZ-uenCvWc.roa Signing time: Fri 02 Jan 2026 06:20:19 +0000 ROA not before: Fri 02 Jan 2026 06:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211194 IP address blocks: 2a0e:b107:2430::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:37:f6:8b:9e:ac:12:05:65:f1:e6:b7:de:7b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b133a0f9899809a3e8064834e8a67eb9e9c2bd67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:9e:22:ec:5f:92:28:c8:bd:67:b7:bc:1b: 03:a0:5b:87:a7:af:6c:bf:8e:40:15:02:82:e3:2a: 9d:92:2b:d4:a1:fb:81:71:5c:95:32:11:5d:02:80: 22:b1:5f:3d:cb:24:a6:cd:d5:bf:e0:5d:0e:2e:a0: 24:e8:3f:6f:64:f6:e0:c5:39:7d:51:15:a7:79:57: 28:ff:5e:b8:b1:81:cb:8b:bd:15:63:74:04:d7:b3: 87:30:d2:9a:e4:93:bd:01:18:1c:c0:c9:cf:56:9a: f6:b2:a0:e1:b4:89:01:d3:f7:4d:5f:6d:3e:c3:f0: 8b:5f:f1:36:a1:1a:0f:61:e9:d3:46:d5:f8:61:66: 78:55:46:cf:3f:3b:ca:61:50:6c:1d:ac:b4:0f:c6: e6:89:af:d0:1e:8c:06:27:75:7f:70:0e:18:99:87: dc:ef:c4:36:70:05:2d:40:6c:16:ab:5d:71:82:62: 7a:88:7d:78:f6:de:65:d0:98:48:1f:70:61:ff:b3: 6b:af:ce:45:d0:d6:ee:6e:df:d4:b3:ef:96:b4:b3: 28:d9:d0:db:44:98:1f:d1:d4:01:4f:93:c2:eb:eb: e6:6b:3e:a3:61:fc:a9:2a:46:a8:ae:45:9d:7c:28: 05:b3:c0:e0:97:86:c4:8b:fd:c2:c1:c4:00:db:f2: e5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:33:A0:F9:89:98:09:A3:E8:06:48:34:E8:A6:7E:B9:E9:C2:BD:67 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sTOg-YmYCaPoBkg06KZ-uenCvWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:2430::/48 Signature Algorithm: sha256WithRSAEncryption c3:c0:a6:fa:22:0f:91:22:11:f4:3b:b6:65:6c:9c:2e:a5:94: 25:4d:e3:37:65:ff:b0:9e:05:c1:86:e8:e6:11:6d:ba:66:4d: 82:31:a5:be:db:ac:cb:f2:08:fa:3c:57:08:88:41:15:0e:9d: f2:ae:78:18:9a:14:d7:b3:ea:6d:43:9d:90:0c:cf:45:6a:85: 2f:b3:2a:40:fc:df:61:65:d8:36:43:94:4a:a4:04:2e:2f:20: da:63:1a:c5:25:ef:6b:d5:34:31:a4:c4:8e:7c:88:43:81:39: f6:37:35:c1:e9:bd:cb:eb:51:a1:3c:5b:36:b6:6b:99:8d:77: d3:0f:e7:85:be:cb:14:52:5a:e6:d4:3c:39:9a:ff:23:d5:0e: b0:3e:0b:1b:51:fd:ec:e1:ea:63:47:26:af:40:92:ad:ae:ab: b7:d1:21:b7:93:64:a1:86:de:82:f0:58:a4:77:28:73:fc:f4: 05:e1:47:12:98:81:5f:46:73:e0:9f:dd:43:dd:52:3c:8f:9d: 5c:5e:dc:ca:99:68:d9:5d:a9:7a:01:42:05:f2:ca:ca:e6:1c: a8:f6:1d:2a:02:aa:89:b0:1a:36:06:bc:59:39:b5:ad:b7:bc: aa:05:a8:2f:90:13:72:21:f8:e5:2b:34:18:e2:7d:92:81:c0: b4:7d:64:f7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XTf2i56sEgVl8ea33ntuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTMzYTBmOTg5OTgwOWEzZTgwNjQ4MzRlOGE2N2ViOWU5YzJiZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWKeIuxfkijIvWe3vBsDoFuHp69s v45AFQKC4yqdkivUofuBcVyVMhFdAoAisV89yySmzdW/4F0OLqAk6D9vZPbgxTl9 URWneVco/164sYHLi70VY3QE17OHMNKa5JO9ARgcwMnPVpr2sqDhtIkB0/dNX20+ w/CLX/E2oRoPYenTRtX4YWZ4VUbPPzvKYVBsHay0D8bmia/QHowGJ3V/cA4YmYfc 78Q2cAUtQGwWq11xgmJ6iH149t5l0JhIH3Bh/7Nrr85F0Nbubt/Us++WtLMo2dDb RJgf0dQBT5PC6+vmaz6jYfypKkaorkWdfCgFs8Dgl4bEi/3CwcQA2/LllQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLEzoPmJmAmj6AZINOimfrnpwr1nMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvc1RPZy1ZbVlDYVBvQmtnMDZLWi11ZW5DdldjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xByQw MA0GCSqGSIb3DQEBCwUAA4IBAQDDwKb6Ig+RIhH0O7ZlbJwupZQlTeM3Zf+wngXB hujmEW26Zk2CMaW+26zL8gj6PFcIiEEVDp3yrngYmhTXs+ptQ52QDM9FaoUvsypA /N9hZdg2Q5RKpAQuLyDaYxrFJe9r1TQxpMSOfIhDgTn2NzXB6b3L61GhPFs2tmuZ jXfTD+eFvssUUlrm1Dw5mv8j1Q6wPgsbUf3s4epjRyavQJKtrqu30SG3k2Shht6C 8Fikdyhz/PQF4UcSmIFfRnPgn91D3VI8j51cXtzKmWjZXal6AUIF8srK5hyo9h0q AqqJsBo2BrxZObWtt7yqBagvkBNyIfjlKzQY4n2SgcC0fWT3 -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:59 2026 by rpki-client