This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/SV0SEyqsS9AeFhJr1lmEqSTEddw.roa File: SV0SEyqsS9AeFhJr1lmEqSTEddw.roa (raw, json) Hash identifier: 1lOqURGStvlGudeRWIOEVRYZ6DVvAbkSlZfTs7a1mso= Subject key identifier: 49:5D:12:13:2A:AC:4B:D0:1E:16:12:6B:D6:59:84:A9:24:C4:75:DC Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA75B02DE8680CD10038056C03D2242 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/SV0SEyqsS9AeFhJr1lmEqSTEddw.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208226 IP address blocks: 2a06:e881:7000::/44 maxlen: 44 2a0a:79c0:e00::/44 maxlen: 44 2a0a:79c0:1000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5b:02:de:86:80:cd:10:03:80:56:c0:3d:22:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=495d12132aac4bd01e16126bd65984a924c475dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:df:84:41:2f:ea:97:38:c4:fd:17:7f:f2:50: f6:c9:6d:8d:b6:b7:6a:13:b2:7f:8a:57:d7:f7:4b: 05:8b:df:80:d7:cd:8f:cb:64:df:36:36:14:9d:7d: 5e:87:bc:5c:71:56:a4:04:28:96:31:92:c0:a1:92: cd:a3:6f:cd:24:5d:10:7a:72:83:29:a8:9e:bb:0d: 53:1b:2c:76:e4:30:8f:bb:34:0d:2e:e8:dd:d0:a6: 5c:a1:67:aa:09:84:d7:23:77:19:78:2c:fd:5c:66: d3:5e:e8:3a:81:79:c4:76:ea:0d:df:1e:ca:06:ef: 1b:aa:f2:77:1d:2c:62:58:87:e9:74:d9:81:b7:02: c6:8a:a5:97:7f:ad:98:70:d0:75:ed:7a:c2:e2:e8: c1:5f:a8:61:42:c7:41:42:2e:22:cc:77:f1:9b:6f: f3:c0:13:4f:0d:6d:c1:6a:b7:66:8d:92:bb:f1:ae: cd:12:dc:02:ad:00:67:db:2e:ae:73:21:7d:6e:97: fd:f3:44:59:e2:94:c9:b8:de:b9:f6:70:82:f5:1d: b9:d2:0b:e5:cd:7c:dc:40:2a:e5:96:93:6c:35:65: 1f:95:37:06:12:60:22:98:80:56:dc:70:43:35:2a: 53:0a:d9:57:73:64:f1:ed:8f:21:ca:9b:2e:9f:b1: f3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5D:12:13:2A:AC:4B:D0:1E:16:12:6B:D6:59:84:A9:24:C4:75:DC X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/SV0SEyqsS9AeFhJr1lmEqSTEddw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:7000::/44 2a0a:79c0:e00::/44 2a0a:79c0:1000::/44 Signature Algorithm: sha256WithRSAEncryption 65:16:48:93:e2:05:d3:5f:1d:1e:4f:07:23:d0:89:35:c6:fe: 1d:b4:46:9a:53:03:1e:b0:17:a6:22:6e:eb:d9:fb:4c:c6:0d: e3:f6:cd:a7:17:d7:f6:de:c9:90:47:d8:45:6f:69:05:a5:cf: 1f:d4:54:2d:2e:6f:8a:84:9b:c8:44:43:28:20:a8:f7:63:d8: 0e:6f:a9:fa:43:c6:7e:c9:db:13:df:82:dd:39:03:aa:54:0b: d8:fe:d5:38:55:3f:71:13:98:98:ec:3f:16:55:97:d2:1d:40: 70:3a:11:44:f5:3e:4b:e7:49:c0:48:f3:ad:e1:24:6e:9b:c1: ae:37:2b:fb:6c:fe:e2:8d:0e:20:2c:3c:44:96:9d:32:96:2c: 00:2c:07:25:ac:94:86:54:f3:81:88:e2:ed:af:ab:78:f4:d8: 44:8e:bf:f9:72:3a:a8:b0:bb:6c:bc:09:9e:f6:d6:bf:0c:a9: 56:14:86:39:7c:23:55:48:4e:5b:04:b7:79:33:28:6f:6b:27: 34:d1:69:c3:ad:df:61:8d:89:e9:de:cd:e8:46:9f:6e:67:82: 03:dc:01:61:e4:8f:f8:57:34:60:ae:9f:fe:94:84:75:50:2d: 1f:e7:72:1a:7b:ad:a8:1e:f0:b4:8b:f4:e5:87:8a:2e:80:84: 08:3f:53:f6 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+p1sC3oaAzRADgFbAPSJCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTVkMTIxMzJhYWM0YmQwMWUxNjEyNmJkNjU5ODRhOTI0YzQ3NWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7N+EQS/qlzjE/Rd/8lD2yW2Ntrdq E7J/ilfX90sFi9+A182Py2TfNjYUnX1eh7xccVakBCiWMZLAoZLNo2/NJF0QenKD Kaieuw1TGyx25DCPuzQNLujd0KZcoWeqCYTXI3cZeCz9XGbTXug6gXnEduoN3x7K Bu8bqvJ3HSxiWIfpdNmBtwLGiqWXf62YcNB17XrC4ujBX6hhQsdBQi4izHfxm2/z wBNPDW3BardmjZK78a7NEtwCrQBn2y6ucyF9bpf980RZ4pTJuN659nCC9R250gvl zXzcQCrllpNsNWUflTcGEmAimIBW3HBDNSpTCtlXc2Tx7Y8hypsun7Hz3QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEldEhMqrEvQHhYSa9ZZhKkkxHXcMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvU1YwU0V5cXNTOUFlRmhKcjFsbUVxU1RFZGR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKgbogXAA AwcEKgp5wA4AAwcEKgp5wBAAMA0GCSqGSIb3DQEBCwUAA4IBAQBlFkiT4gXTXx0e Twcj0Ik1xv4dtEaaUwMesBemIm7r2ftMxg3j9s2nF9f23smQR9hFb2kFpc8f1FQt Lm+KhJvIREMoIKj3Y9gOb6n6Q8Z+ydsT34LdOQOqVAvY/tU4VT9xE5iY7D8WVZfS HUBwOhFE9T5L50nASPOt4SRum8GuNyv7bP7ijQ4gLDxElp0yliwALAclrJSGVPOB iOLtr6t49NhEjr/5cjqosLtsvAme9ta/DKlWFIY5fCNVSE5bBLd5Myhvayc00WnD rd9hjYnp3s3oRp9uZ4ID3AFh5I/4VzRgrp/+lIR1UC0f53Iae62oHvC0i/Tlh4ou gIQIP1P2 -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:37 2026 by rpki-client