This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/S3FXkXzy3Kk8Jk2j1HLvioIgDlc.roa File: S3FXkXzy3Kk8Jk2j1HLvioIgDlc.roa (raw, json) Hash identifier: K3q9EwbqCBABfYJ1V/CSD4YCx9VoXbubpukbuCyy8vI= Subject key identifier: 4B:71:57:91:7C:F2:DC:A9:3C:26:4D:A3:D4:72:EF:8A:82:20:0E:57 Certificate issuer: /CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482 Certificate serial: 019B78A288E85E583FDB64AF2DA8B5CEF180 Authority key identifier: 6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/S3FXkXzy3Kk8Jk2j1HLvioIgDlc.roa Signing time: Thu 01 Jan 2026 08:17:56 +0000 ROA not before: Thu 01 Jan 2026 08:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35506 IP address blocks: 2a10:d000::/29 maxlen: 29 2a10:d000:3::/48 maxlen: 48 2a10:d000:14::/48 maxlen: 48 2a10:d000:1c::/48 maxlen: 48 2a10:d001::/36 maxlen: 36 2a10:d001::/38 maxlen: 38 2a10:d001:1000::/36 maxlen: 36 2a10:d001:1000::/38 maxlen: 38 2a10:d001:1800::/38 maxlen: 38 2a10:d001:2000::/36 maxlen: 36 2a10:d001:2000::/38 maxlen: 38 2a10:d001:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.crl rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:88:e8:5e:58:3f:db:64:af:2d:a8:b5:ce:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482 Validity Not Before: Jan 1 08:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b7157917cf2dca93c264da3d472ef8a82200e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:8f:40:52:ff:51:21:60:39:af:92:48:eb: 5c:8d:c1:5c:d7:80:f8:40:7f:8d:b1:df:05:a4:c2: b2:81:07:51:cc:17:a8:ba:89:d6:be:0d:c7:f1:03: bf:16:13:91:8d:49:74:48:bc:33:bc:78:25:bb:d2: de:f4:56:44:36:4c:f9:02:a9:cf:7f:b6:a7:7b:04: 66:02:df:3f:11:a6:d5:e6:0b:df:b7:2b:48:dd:80: 17:6f:a5:cc:4f:19:a9:36:19:97:9c:bd:78:46:3f: c4:f5:2d:8f:bf:0b:dc:80:5b:b7:df:bf:bc:85:bc: 96:f6:2a:f7:5f:af:c3:d2:40:fd:c4:c0:d1:38:8b: ab:ba:47:56:cb:12:4f:c1:7d:c6:21:23:51:14:93: 86:d0:68:e7:d5:ab:29:98:e3:66:c4:7e:22:ea:df: 53:4b:1f:28:4b:66:3f:eb:55:05:24:7b:d7:ae:bc: 75:78:83:98:2f:bb:fc:e1:fc:3f:21:7b:da:6d:60: bc:c5:3a:4d:ec:67:66:b3:e0:5a:81:d2:b7:6a:da: 4e:3e:48:74:cf:b6:b7:30:58:ec:fd:b4:03:07:4f: 56:9e:2e:a6:8d:04:99:24:1d:62:b0:58:50:f6:0b: 58:a6:12:bd:b5:d4:f6:57:ac:a4:e6:05:2c:0b:1b: ae:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:71:57:91:7C:F2:DC:A9:3C:26:4D:A3:D4:72:EF:8A:82:20:0E:57 X509v3 Authority Key Identifier: keyid:6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/S3FXkXzy3Kk8Jk2j1HLvioIgDlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:d000::/29 Signature Algorithm: sha256WithRSAEncryption 93:d5:5f:51:1c:e5:69:35:e8:c1:35:49:69:f4:c6:51:c5:13: aa:d8:97:79:e0:00:23:43:46:8b:37:1d:e7:99:97:8e:9d:25: ba:00:d1:ba:32:20:02:5b:0b:67:4f:cb:bc:22:3b:92:40:ed: 09:23:92:d6:a7:39:5b:0c:12:5f:c3:6c:df:17:4e:fb:54:d8: ae:67:eb:20:f4:10:a6:34:1a:83:e3:62:4a:6c:83:17:9a:b6: 67:1d:9d:64:d2:dd:6d:f3:83:45:52:60:df:f7:ec:49:6e:90: ca:eb:c0:b6:ce:6e:07:22:18:ac:ec:c6:6b:72:55:07:eb:74: 3b:15:70:f4:53:4f:de:07:e6:78:fb:7d:cb:c9:2e:4a:84:5a: 23:57:54:0a:ee:6a:4b:38:ca:33:7a:3d:7a:cf:3b:d0:b8:33: 60:e0:80:db:53:fa:51:5c:51:a7:51:4f:8f:ac:c8:31:44:2c: 3f:c6:15:ac:71:bd:cc:9b:b5:6f:77:2f:33:6e:3c:43:93:78: e0:d2:1d:2d:37:d5:b3:a2:f7:51:61:ff:c7:87:43:8b:87:ff: b3:97:bf:07:e7:55:6b:96:c8:52:96:b6:f4:a1:ec:fc:9b:2d: fd:da:a3:2a:96:4b:96:0e:a7:fb:eb:65:e5:1b:c9:95:11:2b: 38:38:01:01 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4oojoXlg/22SvLai1zvGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiODc3ZjA4MmZmNWZlZjRiMDdjZjhmN2MwZjcxMzM0YmM4 Yjg0ODIwHhcNMjYwMTAxMDgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjcxNTc5MTdjZjJkY2E5M2MyNjRkYTNkNDcyZWY4YTgyMjAwZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEmPQFL/USFgOa+SSOtcjcFc14D4 QH+Nsd8FpMKygQdRzBeouonWvg3H8QO/FhORjUl0SLwzvHglu9Le9FZENkz5AqnP f7anewRmAt8/EabV5gvftytI3YAXb6XMTxmpNhmXnL14Rj/E9S2PvwvcgFu337+8 hbyW9ir3X6/D0kD9xMDROIurukdWyxJPwX3GISNRFJOG0Gjn1aspmONmxH4i6t9T Sx8oS2Y/61UFJHvXrrx1eIOYL7v84fw/IXvabWC8xTpN7Gdms+BagdK3atpOPkh0 z7a3MFjs/bQDB09Wni6mjQSZJB1isFhQ9gtYphK9tdT2V6yk5gUsCxuu+wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEtxV5F88typPCZNo9Ry74qCIA5XMB8GA1UdIwQY MBaAFGuHfwgv9f70sHz498D3EzS8i4SCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTRkX0NDXzFfdlN3ZlBqM3dQY1ROTHlMaElJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xMWNmNGUtNjBhMy00NjIyLWIyMTIt NzMxNGU2OTRiYWM5LzEvUzNGWGtYenkzS2s4SmsyajFITHZpb0lnRGxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8xMWNmNGUtNjBhMy00NjIyLWIyMTItNzMxNGU2OTRiYWM5 LzEvYTRkX0NDXzFfdlN3ZlBqM3dQY1ROTHlMaElJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhDQADAN BgkqhkiG9w0BAQsFAAOCAQEAk9VfURzlaTXowTVJafTGUcUTqtiXeeAAI0NGizcd 55mXjp0lugDRujIgAlsLZ0/LvCI7kkDtCSOS1qc5WwwSX8Ns3xdO+1TYrmfrIPQQ pjQag+NiSmyDF5q2Zx2dZNLdbfODRVJg3/fsSW6QyuvAts5uByIYrOzGa3JVB+t0 OxVw9FNP3gfmePt9y8kuSoRaI1dUCu5qSzjKM3o9es870LgzYOCA21P6UVxRp1FP j6zIMUQsP8YVrHG9zJu1b3cvM248Q5N44NIdLTfVs6L3UWH/x4dDi4f/s5e/B+dV a5bIUpa29KHs/Jst/dqjKpZLlg6n++tl5RvJlRErODgBAQ== -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:25 2026 by rpki-client