This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/slsZ68MPftYXN9pQnzxYluXDbhA.roa File: slsZ68MPftYXN9pQnzxYluXDbhA.roa (raw, json) Hash identifier: jrP6prWJ1ru05dcj4SCoZCFUzqKdj7enUCqjPJl+Z1U= Subject key identifier: B2:5B:19:EB:C3:0F:7E:D6:17:37:DA:50:9F:3C:58:96:E5:C3:6E:10 Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e Certificate serial: 019B7B36EFD5B94F39209AD51F781858CFEA Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/slsZ68MPftYXN9pQnzxYluXDbhA.roa Signing time: Thu 01 Jan 2026 20:19:16 +0000 ROA not before: Thu 01 Jan 2026 20:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199491 IP address blocks: 2a00:1908:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ef:d5:b9:4f:39:20:9a:d5:1f:78:18:58:cf:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e Validity Not Before: Jan 1 20:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b25b19ebc30f7ed61737da509f3c5896e5c36e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a5:7b:b6:26:5a:12:ac:1f:0b:ba:69:fe:a6: 49:cd:9e:99:38:06:a9:d5:c2:52:02:36:d6:a7:a4: 35:05:10:9b:c5:91:8d:dc:85:6f:fb:0e:20:a1:96: 4d:83:f6:9b:57:b9:ab:84:0b:cf:f0:73:d4:cb:30: a6:44:31:1b:72:10:00:c7:65:76:71:51:f3:3e:28: a8:f7:de:54:e0:ab:c6:dd:5f:39:98:90:6a:d7:ac: bb:ea:07:ed:0a:c6:96:62:e2:ef:cf:54:d5:8b:c5: de:52:b0:58:b6:73:90:16:ae:a5:cb:13:f4:f7:35: f2:fc:51:9d:c0:14:30:b9:ee:bb:88:74:1c:d6:f0: e6:be:38:7a:fd:e8:85:1f:f5:f3:4d:2b:e7:37:65: db:42:b2:0a:9b:c1:d0:d2:e4:88:ee:c7:5b:3a:ea: 92:02:15:ba:bb:3f:1d:cc:48:82:08:0c:90:0c:a4: 04:43:fd:57:65:3f:d5:36:32:71:08:76:d1:df:6f: 27:3e:3b:7a:6a:a8:e1:6d:bc:ab:f2:65:01:47:60: b3:f0:9f:c2:68:13:47:56:ec:67:fa:fd:5e:2d:98: c4:e9:9e:0b:cf:ae:ad:4b:b2:bd:c8:5c:64:a1:c2: b2:16:f0:32:6d:b9:bd:1c:80:16:31:d1:49:4d:e8: 36:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5B:19:EB:C3:0F:7E:D6:17:37:DA:50:9F:3C:58:96:E5:C3:6E:10 X509v3 Authority Key Identifier: keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/slsZ68MPftYXN9pQnzxYluXDbhA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:1908:e000::/48 Signature Algorithm: sha256WithRSAEncryption 70:83:17:35:c6:b2:3d:56:36:f1:be:10:37:14:74:da:6f:49: 3c:08:62:bc:7b:98:25:a7:21:b7:51:1a:f7:61:ce:36:24:54: 97:14:3f:62:d4:a8:9b:9e:6b:0c:8e:b5:d5:75:d5:d0:e2:cc: fa:2d:16:aa:ba:71:25:42:e7:ee:30:9d:90:02:69:42:52:a9: 02:98:b2:a6:38:4e:99:bd:b1:31:85:c5:24:65:5f:2f:88:be: ba:5d:70:11:d0:f6:86:1b:67:20:66:e5:81:7a:54:d8:ee:33: fd:88:18:3a:0b:6c:8c:ae:af:ba:da:53:23:b1:8e:c3:8c:b3: 72:e1:19:f1:ed:16:ec:ce:9f:fb:61:61:f0:4b:a2:2f:e2:fe: 50:ef:ba:82:57:72:c4:76:21:0b:18:92:e7:a9:7c:ce:07:a7: dc:f8:d1:26:ba:81:40:1b:e4:88:92:26:55:bf:96:7d:9f:fe: 9e:30:3f:d9:a9:44:24:ae:87:57:29:3f:e8:d4:33:8b:a7:00: 90:ac:49:b9:1d:6c:60:30:56:14:0c:b2:e0:31:13:3d:3c:6f: 7d:45:ba:3b:29:20:07:d8:9e:71:b8:1e:50:44:99:a8:3e:5e: 81:21:ad:e7:4b:e5:cd:4c:f6:be:95:b5:2f:72:1c:d2:60:de: f4:a0:9f:cf -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7Nu/VuU85IJrVH3gYWM/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZTQ0OGI0YTA4ZjBlNGM1OGEyODNkODA3MzVhOGE4MDNl MTBkNGUwHhcNMjYwMTAxMjAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjViMTllYmMzMGY3ZWQ2MTczN2RhNTA5ZjNjNTg5NmU1YzM2ZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKV7tiZaEqwfC7pp/qZJzZ6ZOAap 1cJSAjbWp6Q1BRCbxZGN3IVv+w4goZZNg/abV7mrhAvP8HPUyzCmRDEbchAAx2V2 cVHzPiio995U4KvG3V85mJBq16y76gftCsaWYuLvz1TVi8XeUrBYtnOQFq6lyxP0 9zXy/FGdwBQwue67iHQc1vDmvjh6/eiFH/XzTSvnN2XbQrIKm8HQ0uSI7sdbOuqS AhW6uz8dzEiCCAyQDKQEQ/1XZT/VNjJxCHbR328nPjt6aqjhbbyr8mUBR2Cz8J/C aBNHVuxn+v1eLZjE6Z4Lz66tS7K9yFxkocKyFvAybbm9HIAWMdFJTeg2ywIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLJbGevDD37WFzfaUJ88WJblw24QMB8GA1UdIwQY MBaAFLLkSLSgjw5MWKKD2Ac1qKgD4Q1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hNzA2OGEtOTJiYS00MmVhLTk5NjYt MjA1NGQ0ZTkwM2JjLzEvc2xzWjY4TVBmdFlYTjlwUW56eFlsdVhEYmhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9hNzA2OGEtOTJiYS00MmVhLTk5NjYtMjA1NGQ0ZTkwM2Jj LzEvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAZCOAA MA0GCSqGSIb3DQEBCwUAA4IBAQBwgxc1xrI9VjbxvhA3FHTab0k8CGK8e5glpyG3 URr3Yc42JFSXFD9i1KibnmsMjrXVddXQ4sz6LRaqunElQufuMJ2QAmlCUqkCmLKm OE6ZvbExhcUkZV8viL66XXAR0PaGG2cgZuWBelTY7jP9iBg6C2yMrq+62lMjsY7D jLNy4Rnx7Rbszp/7YWHwS6Iv4v5Q77qCV3LEdiELGJLnqXzOB6fc+NEmuoFAG+SI kiZVv5Z9n/6eMD/ZqUQkrodXKT/o1DOLpwCQrEm5HWxgMFYUDLLgMRM9PG99Rbo7 KSAH2J5xuB5QRJmoPl6BIa3nS+XNTPa+lbUvchzSYN70oJ/P -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:17 2026 by rpki-client