This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/snrfUjBn7hs_JXI-JDADVPqBfu0.roa File: snrfUjBn7hs_JXI-JDADVPqBfu0.roa (raw, json) Hash identifier: chl5WtQulq1NJ8dnVwRq5DKzxSTQgdztVrgONAQmO1c= Subject key identifier: B2:7A:DF:52:30:67:EE:1B:3F:25:72:3E:24:30:03:54:FA:81:7E:ED Certificate issuer: /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183 Certificate serial: 019B7CEE484264534B94F8A791C01DB0675A Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/snrfUjBn7hs_JXI-JDADVPqBfu0.roa Signing time: Fri 02 Jan 2026 04:19:09 +0000 ROA not before: Fri 02 Jan 2026 04:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214712 IP address blocks: 2001:67c:6e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:48:42:64:53:4b:94:f8:a7:91:c0:1d:b0:67:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183 Validity Not Before: Jan 2 04:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b27adf523067ee1b3f25723e24300354fa817eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:73:97:e2:89:78:00:d1:cb:54:aa:25:24: 99:a5:bc:e1:a5:32:89:d9:60:0b:7b:bd:e4:b7:be: fc:9b:85:fe:f1:aa:2e:6a:cb:57:ee:9b:0e:ff:b9: cd:7c:d0:85:1a:0d:cf:61:d1:67:69:98:c4:a2:8d: 38:25:56:13:7d:ba:6f:28:d3:c5:2f:a7:ec:d9:1a: 3d:99:4d:33:98:09:7f:12:53:00:69:fa:fc:ce:3a: 11:17:39:24:a5:09:36:95:a6:1c:7e:65:ce:f3:20: 86:e9:70:bd:95:28:7e:9e:9c:0a:2c:ea:e1:c7:32: b4:2f:b6:62:2d:38:d1:5f:d7:b4:71:f0:5a:66:2f: 0d:b5:cb:e7:43:ab:c4:50:1c:25:95:0c:68:46:ea: 5d:2f:39:dc:18:7a:8b:c2:e1:56:94:b2:cb:27:f5: f6:2b:e0:fb:32:d7:8e:06:d2:e6:37:9e:1f:62:f4: 13:40:c6:4f:00:59:e2:9d:30:16:72:24:96:69:c1: 84:87:08:98:1d:da:fc:1d:6e:f2:39:5c:21:2c:fb: ac:2d:d0:e4:9f:46:c4:00:ad:d4:f1:80:4d:69:2e: b6:b2:81:42:c3:f6:87:6a:12:c2:35:dc:cf:b8:21: b3:9c:ec:12:ee:ec:df:9d:ac:b5:62:c4:38:39:ff: 59:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7A:DF:52:30:67:EE:1B:3F:25:72:3E:24:30:03:54:FA:81:7E:ED X509v3 Authority Key Identifier: keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/snrfUjBn7hs_JXI-JDADVPqBfu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:6e4::/48 Signature Algorithm: sha256WithRSAEncryption 8b:fe:b5:15:a5:c1:11:cc:f7:83:44:11:ba:0f:51:96:9b:2c: 5c:a9:f1:31:fb:c9:8e:bf:10:71:64:9b:56:ab:f1:03:a0:32: 12:f3:dc:db:c2:b5:69:b1:95:c3:04:5c:9b:fa:74:ed:85:26: e3:2b:41:4d:0d:86:de:35:7b:29:d0:76:a5:5d:84:58:d6:09: b5:98:8c:32:9a:68:7e:82:6e:42:3f:cd:da:0b:c9:56:89:6d: ca:c9:83:f6:87:61:99:05:88:00:ee:aa:8c:b9:49:2c:d7:01: 44:e1:c9:48:1d:39:8f:2f:e5:d9:89:9e:76:d6:87:81:21:e2: 35:4c:88:79:55:16:c2:a8:4d:1c:f2:59:0a:a8:ed:d8:bc:2d: ae:f0:15:da:95:d4:d4:26:58:c1:fb:d0:4a:5e:16:a0:a5:4b: fe:dd:af:3b:c0:3e:ae:92:62:54:6d:f6:c2:83:f7:87:81:f4: 83:91:fe:40:d8:23:72:19:42:5d:36:43:10:c9:b0:eb:8e:6f: 5f:d1:02:b1:8c:ce:b5:a1:d9:52:0b:6b:1f:78:60:2d:8b:c9: d4:63:6c:1d:60:33:cf:b8:f6:3c:02:cc:a4:cb:56:7a:f7:a0: 97:d9:2b:7e:bf:c0:38:64:77:6b:24:14:f3:df:2b:20:3a:dc: ff:f7:c3:32 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87khCZFNLlPinkcAdsGdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTM0YzcyODhhMGMxN2EzM2I4YjVmZThjNTgwNjZiNDQ0 MmYxODMwHhcNMjYwMTAyMDQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjdhZGY1MjMwNjdlZTFiM2YyNTcyM2UyNDMwMDM1NGZhODE3ZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK1zl+KJeADRy1SqJSSZpbzhpTKJ 2WALe73kt778m4X+8aouastX7psO/7nNfNCFGg3PYdFnaZjEoo04JVYTfbpvKNPF L6fs2Ro9mU0zmAl/ElMAafr8zjoRFzkkpQk2laYcfmXO8yCG6XC9lSh+npwKLOrh xzK0L7ZiLTjRX9e0cfBaZi8NtcvnQ6vEUBwllQxoRupdLzncGHqLwuFWlLLLJ/X2 K+D7MteOBtLmN54fYvQTQMZPAFninTAWciSWacGEhwiYHdr8HW7yOVwhLPusLdDk n0bEAK3U8YBNaS62soFCw/aHahLCNdzPuCGznOwS7uzfnay1YsQ4Of9ZQwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLJ631IwZ+4bPyVyPiQwA1T6gX7tMB8GA1UdIwQY MBaAFNITTHKIoMF6M7i1/oxYBmtEQvGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhOTWNvaWd3WG96dUxYLWpGZ0dhMFJDOFlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kZGFmNDctNGU2ZC00OTk0LTg3N2It MmE4OWRmMWFmMTZhLzEvc25yZlVqQm43aHNfSlhJLUpEQURWUHFCZnUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kZGFmNDctNGU2ZC00OTk0LTg3N2ItMmE4OWRmMWFmMTZh LzEvMGhOTWNvaWd3WG96dUxYLWpGZ0dhMFJDOFlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAbk MA0GCSqGSIb3DQEBCwUAA4IBAQCL/rUVpcERzPeDRBG6D1GWmyxcqfEx+8mOvxBx ZJtWq/EDoDIS89zbwrVpsZXDBFyb+nTthSbjK0FNDYbeNXsp0HalXYRY1gm1mIwy mmh+gm5CP83aC8lWiW3KyYP2h2GZBYgA7qqMuUks1wFE4clIHTmPL+XZiZ521oeB IeI1TIh5VRbCqE0c8lkKqO3YvC2u8BXaldTUJljB+9BKXhagpUv+3a87wD6ukmJU bfbCg/eHgfSDkf5A2CNyGUJdNkMQybDrjm9f0QKxjM61odlSC2sfeGAti8nUY2wd YDPPuPY8Asyky1Z696CX2St+v8A4ZHdrJBTz3ysgOtz/98My -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:38 2026 by rpki-client