This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SVx-SvtoidmYACKmX5np8wWNc-M.roa File: SVx-SvtoidmYACKmX5np8wWNc-M.roa (raw, json) Hash identifier: kKvKpYcINy7le2V8ksurtPNSjxPI5aoq/qiP1iZm0ps= Subject key identifier: 49:5C:7E:4A:FB:68:89:D9:98:00:22:A6:5F:99:E9:F3:05:8D:73:E3 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910B2A5F06BCD64B5E619FCDDEC4598 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SVx-SvtoidmYACKmX5np8wWNc-M.roa Signing time: Thu 01 Jan 2026 10:18:16 +0000 ROA not before: Thu 01 Jan 2026 10:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214417 IP address blocks: 2a12:bec4:1280::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b2:a5:f0:6b:cd:64:b5:e6:19:fc:dd:ec:45:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=495c7e4afb6889d9980022a65f99e9f3058d73e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:00:99:7c:ae:0e:92:45:7f:10:49:d9:aa:3d: 31:45:84:fb:fb:2f:c0:51:fb:bb:3d:99:f3:aa:7d: 3f:6e:63:0d:e7:ad:b6:db:ae:e9:6a:20:10:ef:6a: 29:c4:b9:cb:1a:f8:7a:59:df:65:36:de:c0:ff:fe: c1:37:cd:08:06:bc:16:fd:c4:d6:41:e6:d2:d1:3e: 65:14:7b:2a:da:93:5f:ea:a8:64:eb:14:13:15:2e: 5a:79:17:1e:c3:41:f9:5a:f1:37:b3:e7:df:2f:8b: ca:d1:de:38:2e:eb:25:c9:52:7d:5c:4c:1a:f6:96: da:ca:2f:a1:cf:29:0c:13:e6:77:4c:1b:73:4b:eb: 06:42:e4:79:d4:f0:ee:fd:a9:4c:75:38:c7:61:ff: 4b:23:1e:41:ec:89:ac:ee:e7:78:93:84:f5:27:ee: 5b:79:af:22:3c:d9:1c:c5:73:f5:b8:a0:08:b5:2a: ac:f5:08:a7:ba:4c:33:f6:71:18:73:b0:42:f0:f5: 36:5c:83:1d:61:f6:fa:ba:c5:6d:96:32:7f:3b:ac: e4:8a:f2:01:da:cf:10:4d:fc:2a:d7:e7:0f:d5:41: d9:84:66:ce:0a:07:c0:c7:a5:86:f3:0e:32:9e:05: c6:f2:5f:18:3a:54:af:bd:f2:a6:67:df:f2:7f:8c: 1a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5C:7E:4A:FB:68:89:D9:98:00:22:A6:5F:99:E9:F3:05:8D:73:E3 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SVx-SvtoidmYACKmX5np8wWNc-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1280::/44 Signature Algorithm: sha256WithRSAEncryption 19:3f:99:cf:81:9f:e9:f9:53:e1:e7:04:e4:3f:41:28:e4:70: 46:ad:1e:ef:0f:0c:57:1d:d7:88:e8:0f:09:1a:23:3d:e3:da: 42:b5:ab:45:24:da:28:dc:6a:1d:8e:2b:ee:86:bc:63:5b:64: 97:04:34:9d:a7:4c:b0:f5:b5:2d:c6:9d:4b:21:ae:9d:e3:f0: e2:84:93:3c:61:ac:38:46:d9:73:e3:21:cf:b5:e4:66:72:12: 87:bb:89:ba:60:33:b6:d3:08:24:29:65:3d:47:15:09:c0:a9: f4:53:ca:fe:d5:a0:ac:03:43:70:be:a3:6b:ec:85:0c:79:26: e6:6f:55:49:a8:e1:c0:83:59:25:86:a7:04:14:fe:f8:8c:ea: 7f:08:48:8c:8c:da:56:7b:3e:b9:2b:2a:4b:8c:1d:d2:74:7e: 0e:af:ae:dc:80:05:cd:0f:f1:e3:f3:9f:fc:7b:b3:a6:da:26: e9:bc:65:c6:89:ae:ff:6c:61:58:af:e7:be:54:94:eb:08:b8: 55:62:00:ab:65:a4:a6:78:5e:8a:6d:48:21:18:f4:2d:fd:df: a3:0f:6f:13:85:39:bf:bd:f5:70:98:f1:b3:97:70:b7:59:f7: ba:2f:29:9e:0e:78:a5:c8:8d:1e:cb:6f:ed:e0:b5:ed:fd:2f: b9:ca:92:be -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ELKl8GvNZLXmGfzd7EWYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTVjN2U0YWZiNjg4OWQ5OTgwMDIyYTY1Zjk5ZTlmMzA1OGQ3M2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQCZfK4OkkV/EEnZqj0xRYT7+y/A Ufu7PZnzqn0/bmMN5622267paiAQ72opxLnLGvh6Wd9lNt7A//7BN80IBrwW/cTW QebS0T5lFHsq2pNf6qhk6xQTFS5aeRcew0H5WvE3s+ffL4vK0d44LuslyVJ9XEwa 9pbayi+hzykME+Z3TBtzS+sGQuR51PDu/alMdTjHYf9LIx5B7Ims7ud4k4T1J+5b ea8iPNkcxXP1uKAItSqs9Qinukwz9nEYc7BC8PU2XIMdYfb6usVtljJ/O6zkivIB 2s8QTfwq1+cP1UHZhGbOCgfAx6WG8w4yngXG8l8YOlSvvfKmZ9/yf4wa0wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFElcfkr7aInZmAAipl+Z6fMFjXPjMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvU1Z4LVN2dG9pZG1ZQUNLbVg1bnA4d1dOYy1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBKA MA0GCSqGSIb3DQEBCwUAA4IBAQAZP5nPgZ/p+VPh5wTkP0Eo5HBGrR7vDwxXHdeI 6A8JGiM949pCtatFJNoo3GodjivuhrxjW2SXBDSdp0yw9bUtxp1LIa6d4/DihJM8 Yaw4Rtlz4yHPteRmchKHu4m6YDO20wgkKWU9RxUJwKn0U8r+1aCsA0NwvqNr7IUM eSbmb1VJqOHAg1klhqcEFP74jOp/CEiMjNpWez65KypLjB3SdH4Or67cgAXND/Hj 85/8e7Om2ibpvGXGia7/bGFYr+e+VJTrCLhVYgCrZaSmeF6KbUghGPQt/d+jD28T hTm/vfVwmPGzl3C3Wfe6LymeDnilyI0ey2/t4LXt/S+5ypK+ -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:45 2026 by rpki-client