This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/SzzN2_utFSlvLUqgvOUxnZyU9VQ.roa File: SzzN2_utFSlvLUqgvOUxnZyU9VQ.roa (raw, json) Hash identifier: eMVjdl3Mgz85B4WMxfHAJkDWuvHzhFy3/1YUmCiTiuE= Subject key identifier: 4B:3C:CD:DB:FB:AD:15:29:6F:2D:4A:A0:BC:E5:31:9D:9C:94:F5:54 Certificate issuer: /CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448 Certificate serial: 019B7FF205943CBEA83E34DABCC0165EB724 Authority key identifier: 49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/SzzN2_utFSlvLUqgvOUxnZyU9VQ.roa Signing time: Fri 02 Jan 2026 18:22:06 +0000 ROA not before: Fri 02 Jan 2026 18:22:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31686 IP address blocks: 2a14:4440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:05:94:3c:be:a8:3e:34:da:bc:c0:16:5e:b7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448 Validity Not Before: Jan 2 18:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b3ccddbfbad15296f2d4aa0bce5319d9c94f554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9a:3a:9c:bb:53:99:0f:34:05:d5:c5:33:29: c6:d8:42:c7:1b:ab:bd:19:5a:ec:f7:44:34:d7:15: e8:9d:c0:36:41:c5:d5:35:70:8b:11:5e:79:26:70: 62:a6:e7:12:96:92:31:2b:da:f6:5b:50:4d:30:0c: 20:b5:11:3b:ff:a0:e2:cd:75:88:b9:b7:43:e2:79: 7e:04:6f:9a:02:10:97:a6:7e:66:d9:c2:0e:d6:ea: a8:a2:26:6e:da:c8:a6:d3:81:e6:11:f0:86:73:be: 17:1d:ba:ef:23:3b:35:1a:39:59:10:bc:6a:3c:fa: 9f:83:f1:da:a7:08:e3:38:b4:3c:65:7b:57:37:5d: 24:3b:7a:7c:31:bc:ba:0f:42:56:0c:a5:05:32:3e: 1b:76:a0:14:9d:29:a1:c0:c3:ce:ac:7c:d0:e1:26: 15:8e:37:92:82:94:8a:9a:a7:23:fd:5a:31:a5:02: f2:16:97:36:87:5c:b7:11:68:89:6d:2d:53:4b:9e: 95:3a:b4:c7:5e:c9:86:e5:c4:e6:c5:89:52:ec:80: 2a:7a:ac:7c:79:8b:b2:ad:29:43:7f:ca:e1:4b:98: 90:cb:2b:c5:f6:53:6d:25:6c:02:ea:8c:4e:a2:62: 12:e3:89:86:2a:43:d6:72:29:0a:a0:06:b7:21:62: d3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3C:CD:DB:FB:AD:15:29:6F:2D:4A:A0:BC:E5:31:9D:9C:94:F5:54 X509v3 Authority Key Identifier: keyid:49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/SzzN2_utFSlvLUqgvOUxnZyU9VQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:4440::/29 Signature Algorithm: sha256WithRSAEncryption a0:3d:ef:ff:df:06:d1:03:7e:ba:9b:14:0f:c7:85:ba:b6:85: 03:f3:3b:47:cb:47:7e:51:de:fc:1e:2b:f0:2c:fb:fd:5c:c4: 25:cb:f3:40:4d:99:b7:12:e2:8e:12:02:5e:35:4a:d4:30:4f: cc:9f:35:52:17:9f:da:51:01:57:c1:19:1b:e5:c1:42:88:d6: a2:08:78:2c:b3:9f:96:41:07:20:b8:fd:4a:a2:1c:50:cc:6f: 54:d8:7f:8f:8f:61:b3:89:62:eb:93:23:d3:b7:2f:32:8a:90: 6b:86:54:46:47:72:6c:77:c0:d3:25:ba:ed:33:39:94:b2:0a: 72:de:f3:21:ae:c4:cf:28:f2:4d:0e:6d:e7:19:59:c2:41:a7: b7:3c:d3:62:e1:58:a0:84:15:54:b2:b2:b3:91:ae:dd:1a:9a: bc:06:51:41:f9:43:9f:1c:a7:55:ce:a3:bf:3b:0b:a3:50:6e: af:3a:6c:b3:c9:98:7c:d4:18:e3:45:5e:80:8b:d3:fd:48:30: 58:02:6d:a6:5e:e6:8b:a9:f0:76:0f:88:74:b4:42:a6:60:8c: cc:62:3c:ab:cd:51:6f:18:03:9a:90:e8:2d:d7:36:1c:4d:94: ff:7a:19:f1:f5:c4:94:07:81:23:a7:0c:74:e0:15:09:08:1b: e3:92:b0:6c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8gWUPL6oPjTavMAWXrckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTk3NTNiNWQ5OWZjNmM5YmQ4MzViZDZlNGExNTMyMDFj OWM0NDgwHhcNMjYwMTAyMTgyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjNjY2RkYmZiYWQxNTI5NmYyZDRhYTBiY2U1MzE5ZDljOTRmNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJo6nLtTmQ80BdXFMynG2ELHG6u9 GVrs90Q01xXoncA2QcXVNXCLEV55JnBipucSlpIxK9r2W1BNMAwgtRE7/6DizXWI ubdD4nl+BG+aAhCXpn5m2cIO1uqooiZu2sim04HmEfCGc74XHbrvIzs1GjlZELxq PPqfg/HapwjjOLQ8ZXtXN10kO3p8Mby6D0JWDKUFMj4bdqAUnSmhwMPOrHzQ4SYV jjeSgpSKmqcj/VoxpQLyFpc2h1y3EWiJbS1TS56VOrTHXsmG5cTmxYlS7IAqeqx8 eYuyrSlDf8rhS5iQyyvF9lNtJWwC6oxOomIS44mGKkPWcikKoAa3IWLTqQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEs8zdv7rRUpby1KoLzlMZ2clPVUMB8GA1UdIwQY MBaAFEnpdTtdmfxsm9g1vW5KFTIBycRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VsMU8xMlpfR3liMkRXOWJrb1ZNZ0hKeEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kOTJjZmMtOTVlOC00OTllLWE2ZmQt ZjFiNDdiMTJhNzVjLzEvU3p6TjJfdXRGU2x2TFVxZ3ZPVXhuWnlVOVZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9kOTJjZmMtOTVlOC00OTllLWE2ZmQtZjFiNDdiMTJhNzVj LzEvU2VsMU8xMlpfR3liMkRXOWJrb1ZNZ0hKeEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhREQDAN BgkqhkiG9w0BAQsFAAOCAQEAoD3v/98G0QN+upsUD8eFuraFA/M7R8tHflHe/B4r 8Cz7/VzEJcvzQE2ZtxLijhICXjVK1DBPzJ81Uhef2lEBV8EZG+XBQojWogh4LLOf lkEHILj9SqIcUMxvVNh/j49hs4li65Mj07cvMoqQa4ZURkdybHfA0yW67TM5lLIK ct7zIa7EzyjyTQ5t5xlZwkGntzzTYuFYoIQVVLKys5Gu3RqavAZRQflDnxynVc6j vzsLo1Burzpss8mYfNQY40VegIvT/UgwWAJtpl7mi6nwdg+IdLRCpmCMzGI8q81R bxgDmpDoLdc2HE2U/3oZ8fXElAeBI6cMdOAVCQgb45KwbA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:13 2026 by rpki-client