This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/ShCcGsFHIiXE6iQ9mjukZmgKlpI.roa File: ShCcGsFHIiXE6iQ9mjukZmgKlpI.roa (raw, json) Hash identifier: CWzStSwFtF0yAwYVo/sI4q7AfdF95XDfRyeTmtd1nsw= Subject key identifier: 4A:10:9C:1A:C1:47:22:25:C4:EA:24:3D:9A:3B:A4:66:68:0A:96:92 Certificate issuer: /CN=e738a5f93064239ab4ff793df8a879e1baa8e1c7 Certificate serial: 019B7DC9ECD6678F0A0985E9264E66CF0493 Authority key identifier: E7:38:A5:F9:30:64:23:9A:B4:FF:79:3D:F8:A8:79:E1:BA:A8:E1:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/ShCcGsFHIiXE6iQ9mjukZmgKlpI.roa Signing time: Fri 02 Jan 2026 08:19:03 +0000 ROA not before: Fri 02 Jan 2026 08:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212596 IP address blocks: 2001:678:e60::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.crl rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:ec:d6:67:8f:0a:09:85:e9:26:4e:66:cf:04:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e738a5f93064239ab4ff793df8a879e1baa8e1c7 Validity Not Before: Jan 2 08:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a109c1ac1472225c4ea243d9a3ba466680a9692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:72:c9:be:17:26:fd:77:71:4e:e0:fc:7e: 0a:1f:08:0d:fb:ed:52:a9:d3:e8:7a:4e:50:fe:f4: c1:70:d6:de:53:a9:65:cd:92:2c:d1:1d:67:ba:b8: 32:73:77:0f:8c:c7:d5:64:78:e8:ac:ad:65:49:07: 6e:4e:25:ea:28:1d:cd:7a:0d:73:04:98:ce:ca:b7: 2c:db:b8:0d:0e:ac:03:90:c5:94:76:0d:3d:9e:b5: c9:6d:13:29:8f:05:68:2d:69:1a:b5:b2:8a:10:01: 51:a7:e2:d5:c9:02:09:32:7f:dd:a9:49:1a:96:83: 6b:fe:ab:dd:77:17:99:f3:96:ce:34:b9:ce:30:25: 71:c3:56:30:e0:80:a2:8f:b0:b4:40:be:80:95:4d: 10:57:e1:5f:b0:73:23:e3:c3:0f:21:e6:aa:5e:49: 9d:5a:ef:8a:df:6b:0d:b7:d7:d9:72:48:54:5f:dc: 05:2d:51:bc:ed:d3:c7:14:3d:5b:5d:2c:72:47:e0: c0:79:a9:e2:13:ab:6a:6c:85:b1:cc:dc:85:05:ec: ee:e5:81:56:bd:e3:72:0e:02:c4:b6:01:41:c8:d5: 22:89:8c:de:87:48:c0:9a:cb:af:f4:c2:7e:28:92: c8:3c:10:95:b4:90:18:be:3d:1b:77:f7:cd:3b:4d: 3f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:10:9C:1A:C1:47:22:25:C4:EA:24:3D:9A:3B:A4:66:68:0A:96:92 X509v3 Authority Key Identifier: keyid:E7:38:A5:F9:30:64:23:9A:B4:FF:79:3D:F8:A8:79:E1:BA:A8:E1:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/ShCcGsFHIiXE6iQ9mjukZmgKlpI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:e60::/48 Signature Algorithm: sha256WithRSAEncryption 7c:ce:a2:e8:a6:0e:41:67:b5:21:fb:41:85:78:c5:c5:30:56: 9f:f1:a8:da:3d:c7:c6:56:17:bb:d5:21:6c:d6:50:04:47:2f: 26:97:cf:5c:9b:5b:3c:b5:d0:77:ed:d3:20:83:ca:f9:e6:00: bb:a5:a2:b4:42:6c:53:1f:a4:7a:36:cc:7c:b7:01:73:c0:dc: ec:92:a0:ef:dd:24:b9:62:c6:bc:f5:2a:eb:d7:f4:41:96:49: de:17:1c:a7:d2:b9:39:b7:24:ae:b6:b6:dd:cf:eb:eb:59:b0: 17:ef:c9:da:de:1a:72:82:23:76:26:89:74:28:6a:e4:89:86: ba:63:0a:ce:0f:c4:d9:2c:dc:b8:a1:f1:f3:f8:1b:0f:94:b4: ff:3e:62:28:49:b5:97:c4:01:6f:59:15:86:18:ea:dc:99:29: 6a:5e:7f:8f:dd:57:da:e2:c2:8c:86:2a:29:b8:97:94:e8:88: d2:77:3e:d4:d5:74:b3:63:f1:ac:5f:14:dd:fe:6d:9b:e3:b3: 9a:2e:e5:1f:fe:0b:35:aa:a9:bd:50:e4:e2:cc:9d:10:bb:a6: 10:22:6c:8a:54:bf:2a:8a:25:1e:be:b7:df:8c:c1:5a:78:91: 6f:68:fe:31:7d:39:bb:5a:f8:05:f6:e4:ee:d0:a8:ae:8c:04: 2f:1f:ff:cb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yezWZ48KCYXpJk5mzwSTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MzhhNWY5MzA2NDIzOWFiNGZmNzkzZGY4YTg3OWUxYmFh OGUxYzcwHhcNMjYwMTAyMDgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTEwOWMxYWMxNDcyMjI1YzRlYTI0M2Q5YTNiYTQ2NjY4MGE5NjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv25yyb4XJv13cU7g/H4KHwgN++1S qdPoek5Q/vTBcNbeU6llzZIs0R1nurgyc3cPjMfVZHjorK1lSQduTiXqKB3Neg1z BJjOyrcs27gNDqwDkMWUdg09nrXJbRMpjwVoLWkatbKKEAFRp+LVyQIJMn/dqUka loNr/qvddxeZ85bONLnOMCVxw1Yw4ICij7C0QL6AlU0QV+FfsHMj48MPIeaqXkmd Wu+K32sNt9fZckhUX9wFLVG87dPHFD1bXSxyR+DAeaniE6tqbIWxzNyFBezu5YFW veNyDgLEtgFByNUiiYzeh0jAmsuv9MJ+KJLIPBCVtJAYvj0bd/fNO00/LwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEoQnBrBRyIlxOokPZo7pGZoCpaSMB8GA1UdIwQY MBaAFOc4pfkwZCOatP95PfioeeG6qOHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXppbC1UQmtJNXEwXzNrOS1LaDU0YnFvNGNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lNzY3MDEtOTg3My00ZmUwLTliNzEt Zjg5YmNmZjY5NTlmLzEvU2hDY0dzRkhJaVhFNmlROW1qdWtabWdLbHBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9lNzY3MDEtOTg3My00ZmUwLTliNzEtZjg5YmNmZjY5NTlm LzEvNXppbC1UQmtJNXEwXzNrOS1LaDU0YnFvNGNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA5g MA0GCSqGSIb3DQEBCwUAA4IBAQB8zqLopg5BZ7Uh+0GFeMXFMFaf8ajaPcfGVhe7 1SFs1lAERy8ml89cm1s8tdB37dMgg8r55gC7paK0QmxTH6R6Nsx8twFzwNzskqDv 3SS5Ysa89Srr1/RBlkneFxyn0rk5tySutrbdz+vrWbAX78na3hpygiN2Jol0KGrk iYa6YwrOD8TZLNy4ofHz+BsPlLT/PmIoSbWXxAFvWRWGGOrcmSlqXn+P3Vfa4sKM hiopuJeU6IjSdz7U1XSzY/GsXxTd/m2b47OaLuUf/gs1qqm9UOTizJ0Qu6YQImyK VL8qiiUevrffjMFaeJFvaP4xfTm7WvgF9uTu0KiujAQvH//L -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:14 2026 by rpki-client