This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sf081sLTMNmaXI2i9QjEam0_75I.roa File: sf081sLTMNmaXI2i9QjEam0_75I.roa (raw, json) Hash identifier: 4nstHchcxotqzbBA9nuvlMRuYyXEPAp3mDCWBtl6gGk= Subject key identifier: B1:FD:3C:D6:C2:D3:30:D9:9A:5C:8D:A2:F5:08:C4:6A:6D:3F:EF:92 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CE3DE15FD54429273CD8A56FEDE4D Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sf081sLTMNmaXI2i9QjEam0_75I.roa Signing time: Fri 02 Jan 2026 06:19:58 +0000 ROA not before: Fri 02 Jan 2026 06:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200516 IP address blocks: 2a0e:b107:f60::/48 maxlen: 48 2a0e:b107:f61::/48 maxlen: 48 2a0e:b107:f65::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e3:de:15:fd:54:42:92:73:cd:8a:56:fe:de:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1fd3cd6c2d330d99a5c8da2f508c46a6d3fef92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:29:08:6a:85:43:5a:50:fa:57:dd:d0:03:7e: 5a:a5:7c:b5:4a:6a:b7:b5:0b:a0:8a:6c:9f:ee:f1: 3a:f7:25:65:75:34:e3:5a:c9:d7:12:69:e0:6b:dc: a6:ae:1e:4e:25:f5:b7:ae:e0:51:c4:09:91:d3:02: 24:ab:6b:09:29:be:39:76:91:5f:1a:bb:b6:dc:ae: c4:55:a4:af:05:a4:77:1e:e0:af:9c:81:af:70:73: 62:ae:c2:d3:d6:34:0f:92:d5:2e:41:88:1d:7e:4e: 2c:ed:b7:af:67:69:81:8f:f6:e9:7f:3a:fd:3b:a6: 3c:1c:fa:f6:51:a5:f5:9f:1c:db:57:82:da:33:3a: ac:33:ac:9f:ce:e8:a9:8c:ac:5a:59:32:84:ed:3b: e7:83:bb:8c:96:38:c7:bd:cb:1f:61:5d:a1:6d:e0: 49:5c:78:f8:d3:a6:3a:37:f2:f0:02:fa:25:68:89: 8b:c0:ee:7b:2a:3e:dd:76:c9:ee:ec:ff:26:ae:64: ed:02:12:25:ce:ba:a5:f9:b0:a5:d8:b9:c7:9d:51: 61:04:31:50:a5:8e:37:85:13:62:51:01:e9:b1:f3: 23:99:26:47:31:dc:1d:65:70:86:a3:db:5f:7a:e4: 5a:a4:ea:d0:6e:24:40:4c:13:7c:87:b8:87:3f:7c: 4e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FD:3C:D6:C2:D3:30:D9:9A:5C:8D:A2:F5:08:C4:6A:6D:3F:EF:92 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sf081sLTMNmaXI2i9QjEam0_75I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:f60::/47 2a0e:b107:f65::/48 Signature Algorithm: sha256WithRSAEncryption 15:88:ec:34:ab:b4:4c:48:11:07:24:53:b4:20:38:17:7f:3e: 81:a0:86:bd:88:89:5d:71:6f:41:02:87:c8:31:b0:57:b0:f3: 88:16:8d:f9:da:c2:8a:dd:ed:c8:6a:ba:9e:3c:17:08:ea:6f: 83:08:45:c8:6f:6d:bc:17:bc:22:a6:f0:11:58:f7:bd:b0:8b: f4:bf:61:e1:21:92:ec:43:d7:02:88:32:cd:e4:d3:32:49:53: de:2b:2f:fe:8e:ea:1f:1c:9a:7e:cd:91:21:8e:e3:4f:ee:38: 82:c0:a5:01:8e:8e:7f:90:9b:6d:86:9d:27:ed:a4:18:f2:7a: 7a:2b:1c:fd:41:37:b1:63:dc:6c:2f:5b:d9:36:e7:a8:20:13: 12:49:09:a2:e2:85:f2:02:08:66:3f:28:d9:17:3c:ef:c8:c5: 43:32:e6:27:e1:36:c9:97:0f:fa:db:0a:1f:ce:a4:96:e7:9e: 8a:9d:fb:c9:83:78:1c:9e:47:3d:b4:06:2d:49:d5:7e:f8:0a: 07:eb:a2:38:75:d9:b3:24:b1:c9:30:1f:c6:7b:e2:cf:e6:b3: 73:e2:df:50:74:08:9e:9f:f9:2c:3b:ae:b2:da:bc:ed:d5:4e: 62:f7:30:87:63:d3:18:21:a7:f5:25:49:84:2b:b2:df:97:fc: 39:b8:d9:5c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XOPeFf1UQpJzzYpW/t5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWZkM2NkNmMyZDMzMGQ5OWE1YzhkYTJmNTA4YzQ2YTZkM2ZlZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCkIaoVDWlD6V93QA35apXy1Smq3 tQugimyf7vE69yVldTTjWsnXEmnga9ymrh5OJfW3ruBRxAmR0wIkq2sJKb45dpFf Gru23K7EVaSvBaR3HuCvnIGvcHNirsLT1jQPktUuQYgdfk4s7bevZ2mBj/bpfzr9 O6Y8HPr2UaX1nxzbV4LaMzqsM6yfzuipjKxaWTKE7Tvng7uMljjHvcsfYV2hbeBJ XHj406Y6N/LwAvolaImLwO57Kj7ddsnu7P8mrmTtAhIlzrql+bCl2LnHnVFhBDFQ pY43hRNiUQHpsfMjmSZHMdwdZXCGo9tfeuRapOrQbiRATBN8h7iHP3xOPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLH9PNbC0zDZmlyNovUIxGptP++SMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvc2YwODFzTFRNTm1hWEkyaTlRakVhbTBfNzVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBKg6xBw9g AwcAKg6xBw9lMA0GCSqGSIb3DQEBCwUAA4IBAQAViOw0q7RMSBEHJFO0IDgXfz6B oIa9iIldcW9BAofIMbBXsPOIFo352sKK3e3IarqePBcI6m+DCEXIb228F7wipvAR WPe9sIv0v2HhIZLsQ9cCiDLN5NMySVPeKy/+juofHJp+zZEhjuNP7jiCwKUBjo5/ kJtthp0n7aQY8np6Kxz9QTexY9xsL1vZNueoIBMSSQmi4oXyAghmPyjZFzzvyMVD MuYn4TbJlw/62wofzqSW556KnfvJg3gcnkc9tAYtSdV++AoH66I4ddmzJLHJMB/G e+LP5rNz4t9QdAien/ksO66y2rzt1U5i9zCHY9MYIaf1JUmEK7Lfl/w5uNlc -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:07 2026 by rpki-client