This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/sbMhgOAQnNAhPG-zeDNTfwUQSzE.roa File: sbMhgOAQnNAhPG-zeDNTfwUQSzE.roa (raw, json) Hash identifier: 0fsrSElISGl5fc2Oeen1Zkemgio3HCia7HQB3m6xfVc= Subject key identifier: B1:B3:21:80:E0:10:9C:D0:21:3C:6F:B3:78:33:53:7F:05:10:4B:31 Certificate issuer: /CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280 Certificate serial: 019B7910B4A4F01DC4AC1C6D10C38B4F73D8 Authority key identifier: C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/sbMhgOAQnNAhPG-zeDNTfwUQSzE.roa Signing time: Thu 01 Jan 2026 10:18:16 +0000 ROA not before: Thu 01 Jan 2026 10:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38937 IP address blocks: 2a03:6100:6100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b4:a4:f0:1d:c4:ac:1c:6d:10:c3:8b:4f:73:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280 Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1b32180e0109cd0213c6fb37833537f05104b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:b7:c8:2e:3a:f7:c7:42:ae:24:54:b4:49: 5e:6f:44:4a:f1:88:93:a2:4f:3d:9e:00:8b:59:a5: 7f:ac:ef:4b:d2:c7:35:3c:da:4b:e2:31:d7:b5:1c: a6:71:cc:10:01:cf:ca:8c:f0:9c:40:b9:8b:9f:fc: 7d:25:71:27:7f:45:bb:73:ff:be:d5:38:69:55:01: 65:69:c1:ba:be:5a:18:e6:03:13:e6:67:67:ff:48: c5:76:4b:13:bb:33:48:2f:f6:fd:81:b2:8a:25:bb: 88:b2:d1:fc:84:5f:a0:1d:ff:4e:02:96:26:6e:80: 9c:76:70:2a:c1:c9:a5:42:48:be:f7:7d:6e:de:c2: e6:78:e6:f2:23:9f:cd:b4:87:cd:36:cc:ae:76:9e: e5:ce:33:e3:cd:a0:5a:f6:3d:0c:e6:66:64:0c:34: c9:66:c2:40:48:ea:cd:6e:91:f3:d5:2a:1a:46:69: 4e:19:e1:6b:34:e0:27:94:7e:03:3d:0a:87:01:a3: 4d:a7:d7:4b:63:e8:8a:53:7b:f5:7f:cb:41:f2:f4: b0:59:70:b9:dd:3c:3a:ec:ba:04:a0:76:e0:30:e2: 43:0f:f3:6d:ce:2a:4f:26:c6:94:b8:dc:19:a6:f2: cf:d8:1a:27:be:5b:d1:fe:87:db:d6:25:82:7d:c9: 05:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B3:21:80:E0:10:9C:D0:21:3C:6F:B3:78:33:53:7F:05:10:4B:31 X509v3 Authority Key Identifier: keyid:C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/sbMhgOAQnNAhPG-zeDNTfwUQSzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:6100:6100::/48 Signature Algorithm: sha256WithRSAEncryption 97:20:48:36:7d:0e:19:59:d4:4c:1b:47:35:96:50:ea:c7:a9: ac:87:a8:ea:51:2d:dd:f9:b9:86:05:e2:aa:de:de:ec:e5:ce: f0:5c:0f:e0:ff:cd:ba:07:9c:96:bf:7a:bd:57:a7:90:7b:ca: 5f:a2:97:4e:7f:fa:51:53:4b:59:2c:90:0f:19:5c:d0:a8:33: ff:40:94:ea:2e:c0:0d:5e:1e:8e:d7:97:00:8e:15:42:ce:b9: b1:af:9e:8d:a0:cc:a5:6d:ce:3c:c7:58:32:40:89:1e:24:8c: dd:a4:d4:0f:71:3d:75:29:af:06:81:e7:21:ff:44:77:27:53: 02:6f:fc:91:46:20:ec:b9:e5:a8:8e:7e:76:e1:78:08:b3:55: fa:07:1a:2e:f4:9a:e9:bb:bb:ab:10:32:a0:b7:bd:7c:73:a5: 98:19:55:2b:c3:65:c9:c4:e2:1c:73:d3:cb:76:82:e1:30:7a: 29:38:03:25:f3:c0:31:11:42:98:d7:5a:0d:95:3b:cb:e8:35: 56:47:07:02:94:2e:44:c7:90:42:7f:6a:a4:10:13:49:5f:0f: c5:a5:db:fd:17:cb:04:90:67:bb:a0:2d:2b:4b:e0:fd:6c:23: 50:14:c1:da:bf:e1:05:27:30:6f:33:ad:3c:58:af:27:79:ea: 5c:ec:c1:b9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ELSk8B3ErBxtEMOLT3PYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNGQ1YmQzY2VlYWFiMDc4NmNlMTUxYTMxNzhkYWRjMTA3 YmYyODAwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWIzMjE4MGUwMTA5Y2QwMjEzYzZmYjM3ODMzNTM3ZjA1MTA0YjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKu3yC4698dCriRUtEleb0RK8YiT ok89ngCLWaV/rO9L0sc1PNpL4jHXtRymccwQAc/KjPCcQLmLn/x9JXEnf0W7c/++ 1ThpVQFlacG6vloY5gMT5mdn/0jFdksTuzNIL/b9gbKKJbuIstH8hF+gHf9OApYm boCcdnAqwcmlQki+931u3sLmeObyI5/NtIfNNsyudp7lzjPjzaBa9j0M5mZkDDTJ ZsJASOrNbpHz1SoaRmlOGeFrNOAnlH4DPQqHAaNNp9dLY+iKU3v1f8tB8vSwWXC5 3Tw67LoEoHbgMOJDD/NtzipPJsaUuNwZpvLP2BonvlvR/ofb1iWCfckF7wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLGzIYDgEJzQITxvs3gzU38FEEsxMB8GA1UdIwQY MBaAFMJNW9PO6qsHhs4VGjF42twQe/KAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2sxYjA4N3Fxd2VHemhVYU1YamEzQkI3OG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85ZTE2YzEtMzEwZi00MTBjLWIzNDEt NDFkODIzMjlmMjZkLzEvc2JNaGdPQVFuTkFoUEctemVETlRmd1VRU3pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85ZTE2YzEtMzEwZi00MTBjLWIzNDEtNDFkODIzMjlmMjZk LzEvd2sxYjA4N3Fxd2VHemhVYU1YamEzQkI3OG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNhAGEA MA0GCSqGSIb3DQEBCwUAA4IBAQCXIEg2fQ4ZWdRMG0c1llDqx6msh6jqUS3d+bmG BeKq3t7s5c7wXA/g/826B5yWv3q9V6eQe8pfopdOf/pRU0tZLJAPGVzQqDP/QJTq LsANXh6O15cAjhVCzrmxr56NoMylbc48x1gyQIkeJIzdpNQPcT11Ka8Ggech/0R3 J1MCb/yRRiDsueWojn524XgIs1X6Bxou9Jrpu7urEDKgt718c6WYGVUrw2XJxOIc c9PLdoLhMHopOAMl88AxEUKY11oNlTvL6DVWRwcClC5Ex5BCf2qkEBNJXw/Fpdv9 F8sEkGe7oC0rS+D9bCNQFMHav+EFJzBvM608WK8neepc7MG5 -----END CERTIFICATE-----Generated at Mon Jan 26 18:55:19 2026 by rpki-client