This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/S0wTrYMK4z6zYiBnvurDE4pZdJg.roa File: S0wTrYMK4z6zYiBnvurDE4pZdJg.roa (raw, json) Hash identifier: B2Yc6JKBvzSgKFnQrs1HOJW3lqzkoArqrNA6iKtEWfo= Subject key identifier: 4B:4C:13:AD:83:0A:E3:3E:B3:62:20:67:BE:EA:C3:13:8A:59:74:98 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB8611FD7AA679A5DA97070D56FB28 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/S0wTrYMK4z6zYiBnvurDE4pZdJg.roa Signing time: Fri 02 Jan 2026 08:20:48 +0000 ROA not before: Fri 02 Jan 2026 08:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215290 IP address blocks: 2a0e:19c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:86:11:fd:7a:a6:79:a5:da:97:07:0d:56:fb:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b4c13ad830ae33eb3622067beeac3138a597498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d6:ea:31:8e:02:46:09:e4:6a:f7:e1:26:cc: d6:64:31:d6:20:d6:68:54:83:23:30:b5:07:8a:c6: e5:21:0f:75:e1:81:28:1d:6d:05:7c:dd:8e:5a:85: d3:7e:7f:71:9a:6f:b1:1b:3a:be:cb:65:d7:22:16: a0:d0:39:d2:00:4c:a2:38:12:54:0c:97:09:ac:bb: 89:5c:6c:13:c5:9e:2a:89:77:39:75:5b:fb:94:ef: 7c:89:bd:8e:e4:32:fc:24:f0:e6:e9:d2:80:38:72: c1:c0:7b:4d:9f:bb:2e:c7:f9:f7:03:7d:14:82:b9: b5:f4:70:c3:01:ca:3d:c8:fb:c4:85:02:4d:97:ea: 3d:6a:c0:c9:f1:67:0f:df:2e:92:03:c5:4f:65:7f: a9:fd:f5:e9:ee:5f:dc:95:8f:f5:47:55:ed:0e:12: 6e:90:8b:0c:f5:5f:b2:66:8f:0e:b4:f4:1e:67:ad: 8e:5e:ed:32:1f:3a:a6:d7:79:7b:f4:57:91:49:dc: 06:89:2c:f0:25:bc:f0:af:50:d0:b5:a4:5c:33:0f: 59:3e:39:4c:58:98:ce:f3:18:b7:44:35:10:d0:09: 74:f3:31:e2:3b:cd:80:0a:23:d5:54:c3:61:06:87: 6c:d0:1f:db:81:6b:99:99:a9:b1:7c:0f:ed:b6:45: 38:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4C:13:AD:83:0A:E3:3E:B3:62:20:67:BE:EA:C3:13:8A:59:74:98 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/S0wTrYMK4z6zYiBnvurDE4pZdJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:19c7::/32 Signature Algorithm: sha256WithRSAEncryption 6b:42:17:40:0c:28:1f:43:7f:d0:43:c1:9a:0f:92:5c:50:2d: 6d:fb:e1:1f:f2:c3:35:c3:42:f3:dc:79:67:01:66:02:c4:e0: f6:c8:30:08:de:be:f2:63:b0:55:29:fd:37:7b:01:6d:59:a6: f3:8a:28:d1:26:4c:86:f2:48:b0:d6:89:b2:fc:cd:ad:0d:5b: d1:c2:02:5e:78:0e:d4:8c:49:ab:09:e5:63:3c:fa:6f:8c:d1: a6:51:8b:b3:22:92:67:8e:f2:a8:0c:2c:0a:e0:be:73:fc:41: 9a:6b:c7:74:83:99:d2:e6:26:3f:26:91:69:e7:68:ea:20:e6: 50:84:45:c6:8d:ce:e4:79:79:74:dd:af:5d:2a:f1:00:5a:80: 04:ba:06:8c:ad:66:12:21:7e:e5:c4:ab:a3:c6:0e:65:7d:43: 1b:cc:6d:89:ee:74:d8:4f:61:31:1c:7f:d8:60:f1:32:25:61: 19:ed:b8:ad:a8:49:c3:26:b5:97:17:07:d3:c8:6c:51:11:7c: aa:4b:f4:da:84:ed:b8:35:f6:45:54:0c:e1:5b:51:d4:ec:f0: a5:8e:1d:6d:f8:87:40:0c:87:5a:95:86:db:8d:55:73:21:d0: d5:e4:5e:92:eb:c1:1e:14:26:35:41:1d:43:ec:b7:e0:90:1d: b2:2b:f2:d2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9y4YR/XqmeaXalwcNVvsoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjRjMTNhZDgzMGFlMzNlYjM2MjIwNjdiZWVhYzMxMzhhNTk3NDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NbqMY4CRgnkavfhJszWZDHWINZo VIMjMLUHisblIQ914YEoHW0FfN2OWoXTfn9xmm+xGzq+y2XXIhag0DnSAEyiOBJU DJcJrLuJXGwTxZ4qiXc5dVv7lO98ib2O5DL8JPDm6dKAOHLBwHtNn7sux/n3A30U grm19HDDAco9yPvEhQJNl+o9asDJ8WcP3y6SA8VPZX+p/fXp7l/clY/1R1XtDhJu kIsM9V+yZo8OtPQeZ62OXu0yHzqm13l79FeRSdwGiSzwJbzwr1DQtaRcMw9ZPjlM WJjO8xi3RDUQ0Al08zHiO82ACiPVVMNhBods0B/bgWuZmamxfA/ttkU4EwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEtME62DCuM+s2IgZ77qwxOKWXSYMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvUzB3VHJZTUs0ejZ6WWlCbnZ1ckRFNHBaZEpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg4ZxzAN BgkqhkiG9w0BAQsFAAOCAQEAa0IXQAwoH0N/0EPBmg+SXFAtbfvhH/LDNcNC89x5 ZwFmAsTg9sgwCN6+8mOwVSn9N3sBbVmm84oo0SZMhvJIsNaJsvzNrQ1b0cICXngO 1IxJqwnlYzz6b4zRplGLsyKSZ47yqAwsCuC+c/xBmmvHdIOZ0uYmPyaRaedo6iDm UIRFxo3O5Hl5dN2vXSrxAFqABLoGjK1mEiF+5cSro8YOZX1DG8xtie502E9hMRx/ 2GDxMiVhGe24rahJwya1lxcH08hsURF8qkv02oTtuDX2RVQM4VtR1OzwpY4dbfiH QAyHWpWG241VcyHQ1eRekuvBHhQmNUEdQ+y34JAdsivy0g== -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:54 2026 by rpki-client