This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/SAktSd8Yfiv8Z7AAoq9HqjAql5s.roa File: SAktSd8Yfiv8Z7AAoq9HqjAql5s.roa (raw, json) Hash identifier: LtM8gbZ0jSfixz/hSjfeNQJi14O3+yjoZzQHAO5Ggx8= Subject key identifier: 48:09:2D:49:DF:18:7E:2B:FC:67:B0:00:A2:AF:47:AA:30:2A:97:9B Certificate issuer: /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd Certificate serial: 019B7AC869CE023B8E1E50C629CD457871C2 Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/SAktSd8Yfiv8Z7AAoq9HqjAql5s.roa Signing time: Thu 01 Jan 2026 18:18:33 +0000 ROA not before: Thu 01 Jan 2026 18:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a02:6fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:69:ce:02:3b:8e:1e:50:c6:29:cd:45:78:71:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd Validity Not Before: Jan 1 18:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48092d49df187e2bfc67b000a2af47aa302a979b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b9:5d:26:ff:db:ca:1b:59:e4:30:5b:62:fb: 1e:61:9b:38:61:ba:a0:16:5f:f8:0d:03:93:d9:8c: 0c:d9:1c:6a:36:63:4e:f7:7f:f9:6b:08:e9:03:73: 8e:6f:04:34:87:1e:5e:2d:8e:a5:ca:8e:7a:fa:65: 0c:7b:e9:87:37:08:71:97:7b:ff:03:d2:b9:50:11: 6b:a5:b2:19:08:98:90:b2:5c:ce:b9:f3:0c:ba:89: cb:3b:d2:50:f2:f7:6c:a9:38:bc:22:60:0c:94:5b: 1f:31:42:1d:e7:e3:c2:27:e3:5b:9c:ce:62:16:c2: 88:5a:89:a5:9e:37:e1:cb:17:e4:d7:af:df:67:c7: c1:5d:22:81:f0:8b:fe:38:04:e5:6d:f2:3c:fa:7f: 57:b2:dc:4a:a0:35:47:57:b5:ff:d9:79:4c:9d:4d: 07:09:1e:63:4a:06:6c:43:17:48:a8:18:4f:bf:c0: fc:39:31:e7:50:47:7d:fb:21:c6:85:af:fd:4b:14: e5:29:63:de:23:b8:1e:5f:ba:71:86:60:3f:5b:70: 33:0a:97:f5:8b:f7:cc:75:ea:0d:27:a8:08:34:5c: f6:e2:72:07:5d:f4:de:00:da:bf:18:51:e6:ac:7b: 5f:a5:4a:17:d1:8c:a3:de:bd:ab:66:4c:e9:46:a4: 22:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:09:2D:49:DF:18:7E:2B:FC:67:B0:00:A2:AF:47:AA:30:2A:97:9B X509v3 Authority Key Identifier: keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/SAktSd8Yfiv8Z7AAoq9HqjAql5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:6fc0::/32 Signature Algorithm: sha256WithRSAEncryption 54:4c:a7:2a:43:97:32:e1:fa:54:96:18:2b:c3:d4:fa:37:fa: a5:e8:9d:af:3b:77:cc:0e:12:9d:a9:58:a6:48:3e:82:9b:85: ae:2e:cb:ea:f8:01:0f:53:3d:96:89:84:5f:fc:fc:24:85:74: f7:7b:cf:26:4f:12:a9:84:d5:3f:b1:62:39:6c:be:fc:f6:c8: 5a:54:ad:10:ab:25:68:cd:2a:79:b6:af:80:f8:5d:cb:0a:29: 8e:98:81:61:00:88:81:93:bf:34:ce:5c:57:99:ba:34:d4:fd: 40:15:fd:b7:90:2d:a7:a3:46:bd:21:b1:ff:7f:c4:9b:1f:d8: 17:5b:f8:df:5f:37:f4:be:3c:4a:04:2a:d7:57:73:91:28:f8: 5b:6a:d9:93:c8:f5:cb:dc:7d:48:ad:7e:ae:6a:37:95:ee:19: 19:5a:2c:b4:c9:83:a9:37:9e:91:d6:e5:82:91:43:c7:04:18: 4d:6d:ec:e4:e1:7e:e8:f3:b1:9c:8a:76:33:49:e2:a2:ee:91: e9:6a:fc:8a:7a:84:6d:47:71:cf:78:38:60:6a:f0:4e:15:c7: 72:c6:f2:9d:27:5d:11:66:9b:37:9d:a3:bf:4c:eb:5d:c7:f9: 28:35:1e:44:f1:9b:12:b2:bb:95:1f:a5:1e:c1:09:27:b3:da: 96:32:04:c7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6yGnOAjuOHlDGKc1FeHHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxOGVmODIzYmIwNDFlYTNhYzdjODkzNmM3NTBiNjAxODEz N2UyY2QwHhcNMjYwMTAxMTgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODA5MmQ0OWRmMTg3ZTJiZmM2N2IwMDBhMmFmNDdhYTMwMmE5NzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbldJv/byhtZ5DBbYvseYZs4Ybqg Fl/4DQOT2YwM2RxqNmNO93/5awjpA3OObwQ0hx5eLY6lyo56+mUMe+mHNwhxl3v/ A9K5UBFrpbIZCJiQslzOufMMuonLO9JQ8vdsqTi8ImAMlFsfMUId5+PCJ+NbnM5i FsKIWomlnjfhyxfk16/fZ8fBXSKB8Iv+OATlbfI8+n9XstxKoDVHV7X/2XlMnU0H CR5jSgZsQxdIqBhPv8D8OTHnUEd9+yHGha/9SxTlKWPeI7geX7pxhmA/W3AzCpf1 i/fMdeoNJ6gINFz24nIHXfTeANq/GFHmrHtfpUoX0Yyj3r2rZkzpRqQi0QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEgJLUnfGH4r/GewAKKvR6owKpebMB8GA1UdIwQY MBaAFJGO+CO7BB6jrHyJNsdQtgGBN+LNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1k3NEk3c0VIcU9zZklrMngxQzJBWUUzNHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82NTQyMGMtZjVlMi00ZDI5LWI1MDMt NjUyOTc1MWIyYjAxLzEvU0FrdFNkOFlmaXY4WjdBQW9xOUhxakFxbDVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS82NTQyMGMtZjVlMi00ZDI5LWI1MDMtNjUyOTc1MWIyYjAx LzEva1k3NEk3c0VIcU9zZklrMngxQzJBWUUzNHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgJvwDAN BgkqhkiG9w0BAQsFAAOCAQEAVEynKkOXMuH6VJYYK8PU+jf6peidrzt3zA4SnalY pkg+gpuFri7L6vgBD1M9lomEX/z8JIV093vPJk8SqYTVP7FiOWy+/PbIWlStEKsl aM0qebavgPhdywopjpiBYQCIgZO/NM5cV5m6NNT9QBX9t5Atp6NGvSGx/3/Emx/Y F1v431839L48SgQq11dzkSj4W2rZk8j1y9x9SK1+rmo3le4ZGVostMmDqTeekdbl gpFDxwQYTW3s5OF+6POxnIp2M0niou6R6Wr8inqEbUdxz3g4YGrwThXHcsbynSdd EWabN52jv0zrXcf5KDUeRPGbErK7lR+lHsEJJ7PaljIExw== -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:06 2026 by rpki-client