This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/StENb4oXUe_gqEhZ_cRSGTbf9h0.roa File: StENb4oXUe_gqEhZ_cRSGTbf9h0.roa (raw, json) Hash identifier: jpZ/aosQxaXXNjBqwfCSJNayGEKyZap7VBjnyDJ/cIU= Subject key identifier: 4A:D1:0D:6F:8A:17:51:EF:E0:A8:48:59:FD:C4:52:19:36:DF:F6:1D Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4 Certificate serial: 019B7E372E6277883B6831B8FD0CB6F0717B Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/StENb4oXUe_gqEhZ_cRSGTbf9h0.roa Signing time: Fri 02 Jan 2026 10:18:23 +0000 ROA not before: Fri 02 Jan 2026 10:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a07:eb80::/48 maxlen: 48 2a07:eb80:1::/48 maxlen: 48 2a07:eb80:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:2e:62:77:88:3b:68:31:b8:fd:0c:b6:f0:71:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4 Validity Not Before: Jan 2 10:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ad10d6f8a1751efe0a84859fdc4521936dff61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:25:35:a1:81:1c:c8:c6:b3:43:67:59:a9:0e: 07:32:e0:8b:1f:91:44:05:57:98:d5:f6:c8:b1:96: 35:ed:71:ef:d0:15:74:da:89:4b:1c:08:86:42:e5: 18:ab:b9:bf:f4:31:14:25:e3:47:97:1f:15:5b:e8: 1d:28:e1:1e:78:9b:e1:fa:6a:40:f5:62:8c:12:70: 0c:4f:b4:b6:a7:b2:7a:81:39:ed:18:a2:4a:e2:ed: ab:c0:d0:a5:32:68:d8:b1:ca:ac:04:3a:9b:19:bd: d1:6a:82:60:05:5a:49:d1:fe:d9:0e:34:db:a2:2a: ad:6b:61:31:14:ab:15:4b:fa:67:4f:5d:e8:84:9f: 73:60:28:6d:4e:bc:52:40:cb:af:71:6e:3f:71:2d: 6d:ac:27:3a:77:df:81:21:ff:53:31:9d:d4:b4:0a: a6:22:a5:16:a6:b7:26:e2:fb:a5:6f:80:e3:ce:3a: f8:c8:8b:fa:03:1c:cb:61:3e:36:4a:0a:1c:91:0d: e3:f1:bf:dd:d8:0c:36:05:e9:ad:aa:2d:d9:c6:9b: b6:3d:d3:50:f5:45:98:70:d7:a5:16:5d:5e:f6:09: df:cf:d9:7d:4f:23:ad:60:c2:d2:09:5d:4c:f1:73: b9:e3:7d:72:62:0e:16:68:42:db:f4:81:34:f0:03: a7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D1:0D:6F:8A:17:51:EF:E0:A8:48:59:FD:C4:52:19:36:DF:F6:1D X509v3 Authority Key Identifier: keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/StENb4oXUe_gqEhZ_cRSGTbf9h0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:eb80::-2a07:eb80:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 33:b8:a6:c4:3d:2b:83:98:6d:d6:32:ad:8b:2b:5b:6a:b5:b5: 59:f9:99:85:f5:ef:51:8b:8c:9b:6d:7b:b3:57:f6:84:cf:b7: 08:3d:13:b6:c4:bb:94:7c:5b:08:3c:42:38:30:8a:18:5a:6b: c2:41:64:f1:8e:00:5c:34:07:c9:30:dc:59:2d:20:f2:ac:86: 8c:47:9f:6d:f3:c3:80:40:8d:8b:51:4e:f8:2e:a0:3f:4e:cc: 92:14:06:c7:c0:dd:0c:a1:12:e5:b8:58:b6:52:3b:7c:34:45: 28:22:9a:c5:18:34:4f:88:1d:62:3e:eb:4c:33:3d:cd:cf:42: ef:7b:5b:2f:d6:62:a8:1f:fe:dd:5f:a3:8b:5e:55:49:56:8c: fa:97:f5:3e:d6:ce:71:92:3a:9f:45:d0:cc:79:17:54:7e:05: 4d:49:ca:d8:f9:86:77:ba:c5:7e:ae:d7:65:1b:84:b4:61:84: 3b:3f:e9:b4:49:2a:4a:fb:90:8e:83:30:10:85:63:18:8f:89: 40:78:0f:07:a1:e0:81:55:6a:16:df:23:41:0e:a5:65:0c:0d: 74:12:5c:1b:2f:98:32:ee:4b:15:fb:74:ff:b9:57:72:c8:c0: a6:de:e8:66:b5:ec:4d:07:52:fb:2a:9e:de:6f:3c:3f:85:15: 1e:f4:cc:b2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+Ny5id4g7aDG4/Qy28HF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNTIwZjhiMmFmOGExNDUzMDg5YTYyMGQyMzkyZjY2YjBh M2ViZjQwHhcNMjYwMTAyMTAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWQxMGQ2ZjhhMTc1MWVmZTBhODQ4NTlmZGM0NTIxOTM2ZGZmNjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iU1oYEcyMazQ2dZqQ4HMuCLH5FE BVeY1fbIsZY17XHv0BV02olLHAiGQuUYq7m/9DEUJeNHlx8VW+gdKOEeeJvh+mpA 9WKMEnAMT7S2p7J6gTntGKJK4u2rwNClMmjYscqsBDqbGb3RaoJgBVpJ0f7ZDjTb oiqta2ExFKsVS/pnT13ohJ9zYChtTrxSQMuvcW4/cS1trCc6d9+BIf9TMZ3UtAqm IqUWprcm4vulb4Djzjr4yIv6AxzLYT42SgockQ3j8b/d2Aw2Bemtqi3Zxpu2PdNQ 9UWYcNelFl1e9gnfz9l9TyOtYMLSCV1M8XO5431yYg4WaELb9IE08AOn6QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFErRDW+KF1Hv4KhIWf3EUhk23/YdMB8GA1UdIwQY MBaAFBJSD4sq+KFFMImmINI5L2awo+v0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTct MzQyMWVhNDFkZjM2LzEvU3RFTmI0b1hVZV9ncUVoWl9jUlNHVGJmOWgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTctMzQyMWVhNDFkZjM2 LzEvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBQcqB+uA AwcAKgfrgAACMA0GCSqGSIb3DQEBCwUAA4IBAQAzuKbEPSuDmG3WMq2LK1tqtbVZ +ZmF9e9Ri4ybbXuzV/aEz7cIPRO2xLuUfFsIPEI4MIoYWmvCQWTxjgBcNAfJMNxZ LSDyrIaMR59t88OAQI2LUU74LqA/TsySFAbHwN0MoRLluFi2Ujt8NEUoIprFGDRP iB1iPutMMz3Nz0Lve1sv1mKoH/7dX6OLXlVJVoz6l/U+1s5xkjqfRdDMeRdUfgVN ScrY+YZ3usV+rtdlG4S0YYQ7P+m0SSpK+5COgzAQhWMYj4lAeA8HoeCBVWoW3yNB DqVlDA10ElwbL5gy7ksV+3T/uVdyyMCm3uhmtexNB1L7Kp7ebzw/hRUe9Myy -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:50 2026 by rpki-client