This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/b-sd9ir3jEJJ-Na4TI9tcKh9-L8.roa File: b-sd9ir3jEJJ-Na4TI9tcKh9-L8.roa (raw, json) Hash identifier: mDKFLIH7FuHNI+kvtJPVf/r21pBRJq19BldP6s0xeXo= Subject key identifier: 6F:EB:1D:F6:2A:F7:8C:42:49:F8:D6:B8:4C:8F:6D:70:A8:7D:F8:BF Certificate issuer: /CN=7365ec12014f911f7205eecbc2fc818b9b35723c Certificate serial: 019B797EB4897252260FE1EA098DC1A4E54A Authority key identifier: 73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/b-sd9ir3jEJJ-Na4TI9tcKh9-L8.roa Signing time: Thu 01 Jan 2026 12:18:25 +0000 ROA not before: Thu 01 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 116.214.120.0/24 maxlen: 24 116.214.121.0/24 maxlen: 24 2001:3300::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b4:89:72:52:26:0f:e1:ea:09:8d:c1:a4:e5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7365ec12014f911f7205eecbc2fc818b9b35723c Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6feb1df62af78c4249f8d6b84c8f6d70a87df8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:f2:10:95:32:50:1f:d0:43:97:20:18:56: 75:74:22:7b:f6:64:0e:4b:2a:8f:9b:90:60:d9:d5: df:c3:da:52:bd:e3:59:06:de:7c:68:d4:4f:3f:63: 34:7d:fa:27:7d:ce:c1:fa:27:4f:aa:6e:d2:46:fa: cd:94:fd:44:94:f3:56:68:32:47:7f:f8:f7:80:e0: 75:5f:5e:30:be:88:2f:b5:93:fb:4e:b5:85:53:66: 8a:4a:40:d2:c8:3a:8e:28:50:90:3a:b6:6f:73:28: 64:00:69:30:f7:ef:86:3e:7c:f6:cf:94:70:2d:dd: e1:96:33:b7:4d:66:ca:80:b9:26:0d:71:2d:f7:84: 31:36:3e:6f:fb:8a:d8:b5:36:33:17:cc:f2:ce:4a: d8:5b:c7:07:aa:86:8e:0f:56:e0:31:52:98:70:bb: 2e:25:53:57:6f:48:44:be:85:d6:89:f7:08:6a:50: 9f:96:5f:de:73:9a:5b:fd:55:d2:33:cd:9b:73:13: 55:4a:f2:82:87:7e:b6:4d:2a:db:bc:a7:48:1f:8f: d6:a3:7e:b6:18:d9:16:1b:96:02:56:f3:1e:21:6a: fb:4f:dc:0f:eb:ae:8b:be:dd:ba:30:c8:b5:97:11: ae:67:11:e1:33:63:d0:52:02:59:1c:9c:f1:f4:04: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EB:1D:F6:2A:F7:8C:42:49:F8:D6:B8:4C:8F:6D:70:A8:7D:F8:BF X509v3 Authority Key Identifier: keyid:73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/b-sd9ir3jEJJ-Na4TI9tcKh9-L8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.214.120.0/23 IPv6: 2001:3300::/32 Signature Algorithm: sha256WithRSAEncryption 09:a8:90:af:c3:c2:de:1a:6c:2b:fd:33:16:03:5e:2a:82:8c: d6:a2:f0:62:e6:e0:f4:d0:fc:80:59:f9:c1:87:e1:ba:f3:c7: 11:72:f2:15:b1:62:37:51:a2:d1:89:81:6d:94:56:53:2e:98: 3b:3f:2a:22:8e:28:b7:b3:a6:a8:3b:3f:a1:47:aa:b0:31:a1: d1:2b:f8:0f:63:02:9d:ff:66:4e:7d:73:62:0b:a0:5b:9b:55: 72:f7:62:23:d6:44:5e:51:1b:5a:31:44:9b:fb:6e:b7:4f:3e: 67:63:d9:92:4d:1e:c8:ca:69:96:e2:a8:b4:3e:bb:11:cc:91: 30:67:36:85:ca:57:5a:77:4a:9c:8c:58:07:f1:5f:20:26:8a: 81:a2:38:dc:3c:20:26:78:c5:1a:bf:ae:65:4c:7f:01:7b:ab: 04:c8:c0:b6:c6:31:ff:83:a8:49:17:36:5b:01:39:92:99:51: 1c:50:77:30:a5:a7:13:eb:00:96:6c:78:fd:85:ce:8d:d0:ad: 1b:73:77:3f:6a:f7:0e:46:dd:bd:b9:46:14:e0:0e:b1:af:21: e7:75:57:1f:e0:3f:48:ac:ab:8b:17:fc:f0:22:52:67:68:80: e3:8d:12:a9:82:56:c9:67:4d:d3:a0:0e:97:94:eb:50:f5:dc: 23:34:a2:9c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5frSJclImD+HqCY3BpOVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNjVlYzEyMDE0ZjkxMWY3MjA1ZWVjYmMyZmM4MThiOWIz NTcyM2MwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmViMWRmNjJhZjc4YzQyNDlmOGQ2Yjg0YzhmNmQ3MGE4N2RmOGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssXyEJUyUB/QQ5cgGFZ1dCJ79mQO SyqPm5Bg2dXfw9pSveNZBt58aNRPP2M0ffonfc7B+idPqm7SRvrNlP1ElPNWaDJH f/j3gOB1X14wvogvtZP7TrWFU2aKSkDSyDqOKFCQOrZvcyhkAGkw9++GPnz2z5Rw Ld3hljO3TWbKgLkmDXEt94QxNj5v+4rYtTYzF8zyzkrYW8cHqoaOD1bgMVKYcLsu JVNXb0hEvoXWifcIalCfll/ec5pb/VXSM82bcxNVSvKCh362TSrbvKdIH4/Wo362 GNkWG5YCVvMeIWr7T9wP666Lvt26MMi1lxGuZxHhM2PQUgJZHJzx9ATW9QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG/rHfYq94xCSfjWuEyPbXCoffi/MB8GA1UdIwQY MBaAFHNl7BIBT5EfcgXuy8L8gYubNXI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzJYc0VnRlBrUjl5QmU3THd2eUJpNXMxY2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ZjYzYWMtYjFlNC00ZGJkLTk5OTYt NWExOWFmZGIwNmE3LzEvYi1zZDlpcjNqRUpKLU5hNFRJOXRjS2g5LUw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85ZjYzYWMtYjFlNC00ZGJkLTk5OTYtNWExOWFmZGIwNmE3 LzEvYzJYc0VnRlBrUjl5QmU3THd2eUJpNXMxY2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBdNZ4MA0E AgACMAcDBQAgATMAMA0GCSqGSIb3DQEBCwUAA4IBAQAJqJCvw8LeGmwr/TMWA14q gozWovBi5uD00PyAWfnBh+G688cRcvIVsWI3UaLRiYFtlFZTLpg7Pyoijii3s6ao Oz+hR6qwMaHRK/gPYwKd/2ZOfXNiC6Bbm1Vy92Ij1kReURtaMUSb+263Tz5nY9mS TR7IymmW4qi0PrsRzJEwZzaFyldad0qcjFgH8V8gJoqBojjcPCAmeMUav65lTH8B e6sEyMC2xjH/g6hJFzZbATmSmVEcUHcwpacT6wCWbHj9hc6N0K0bc3c/avcORt29 uUYU4A6xryHndVcf4D9IrKuLF/zwIlJnaIDjjRKpglbJZ03ToA6XlOtQ9dwjNKKc -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:25 2026 by rpki-client