This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/snWlJ9KWiKllVlOYxcTSSk2w5Qc.roa File: snWlJ9KWiKllVlOYxcTSSk2w5Qc.roa (raw, json) Hash identifier: ZxgfjmsocDadOVUIv+6VPgxBAaxcQnvX/Wg+wlyzBz8= Subject key identifier: B2:75:A5:27:D2:96:88:A9:65:56:53:98:C5:C4:D2:4A:4D:B0:E5:07 Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e Certificate serial: 019B7B36EF63750ECF66174E23E7BD335263 Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/snWlJ9KWiKllVlOYxcTSSk2w5Qc.roa Signing time: Thu 01 Jan 2026 20:19:16 +0000 ROA not before: Thu 01 Jan 2026 20:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50475 IP address blocks: 2a00:1908:e965::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ef:63:75:0e:cf:66:17:4e:23:e7:bd:33:52:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e Validity Not Before: Jan 1 20:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b275a527d29688a965565398c5c4d24a4db0e507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:43:ae:16:93:c4:b4:ac:3b:21:21:5d:04: b0:7e:8e:e8:e0:91:2e:e9:a5:84:26:1d:c7:a2:a3: 97:6d:79:65:9e:d8:a9:65:8d:5e:ca:31:37:a7:8b: d7:12:a6:37:b2:60:b5:4b:ad:fa:ee:42:9a:c9:68: c9:ff:86:63:b3:04:c1:88:82:f1:9c:fe:64:1d:76: 26:8a:d5:af:1c:19:86:5e:ac:41:3d:3d:04:cf:ab: ac:75:06:96:6e:18:1d:3e:c1:b0:88:ae:17:d8:79: 71:d7:99:22:5d:62:a7:6f:d4:56:56:e6:0a:1a:f9: 56:5f:10:06:70:3e:45:98:a0:a8:67:b9:63:b6:33: 6d:b1:e1:69:cd:bc:81:53:6a:5a:e0:ac:69:19:e4: 90:b7:f3:58:3c:ea:ea:b3:9a:98:f9:e0:23:98:8f: b4:a1:46:02:82:05:26:f4:32:06:7b:8e:54:0e:d7: cd:ed:e2:da:53:ac:55:48:e3:5e:0f:5f:bb:5a:cb: e3:4a:de:c4:ed:7b:ba:f1:8c:c6:0d:67:76:82:3b: 39:9f:6a:f4:78:c7:01:00:e1:cc:f9:e7:5b:55:37: 86:dc:3c:15:0b:0a:89:88:a9:d7:36:e5:cd:96:fd: fa:c1:2f:e4:97:67:76:ad:56:9a:14:f7:34:8f:9a: 27:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:75:A5:27:D2:96:88:A9:65:56:53:98:C5:C4:D2:4A:4D:B0:E5:07 X509v3 Authority Key Identifier: keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/snWlJ9KWiKllVlOYxcTSSk2w5Qc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:1908:e965::/48 Signature Algorithm: sha256WithRSAEncryption 54:20:86:48:af:b0:fe:93:12:28:c3:71:5c:5b:ef:d5:6b:ed: e9:df:12:b1:f2:4d:bf:b6:ba:ce:75:d1:12:d5:70:fc:d8:23: 09:df:4c:a9:15:07:c1:09:1b:85:b9:21:ba:d5:17:03:92:d2: 74:bd:86:08:7f:7f:31:2d:09:5e:1d:34:29:e6:bb:9d:20:9c: e4:bd:65:a5:08:75:0f:b7:bc:d9:06:2e:5d:5d:29:18:bd:5c: a8:87:1d:97:76:da:7c:11:61:57:15:00:93:7f:ed:e8:cf:91: d7:65:98:90:89:a7:18:3b:55:c3:0b:76:4a:2b:85:5d:e1:5e: f7:ef:14:80:2c:a9:ae:05:35:2d:ca:d1:15:d6:71:0c:e4:2a: 9c:0f:f7:97:67:d0:63:70:33:1b:74:9b:f1:70:95:9d:ae:ee: ca:0c:77:70:77:4c:2c:d1:71:3e:4c:ff:87:b2:40:79:e6:2b: 96:26:70:dd:b3:e1:10:e8:0d:84:c1:c6:6a:3f:10:08:91:2f: c5:67:87:a6:6a:b0:b7:f8:28:a7:49:46:0e:48:0f:ce:fa:a1: f6:2e:f8:9e:fb:1b:b9:25:a7:59:1b:ca:2f:fe:03:7a:e1:28: 07:b7:e8:07:47:20:91:fb:11:f9:bf:e7:02:8b:30:98:51:35: 2d:d6:11:49 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7Nu9jdQ7PZhdOI+e9M1JjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZTQ0OGI0YTA4ZjBlNGM1OGEyODNkODA3MzVhOGE4MDNl MTBkNGUwHhcNMjYwMTAxMjAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjc1YTUyN2QyOTY4OGE5NjU1NjUzOThjNWM0ZDI0YTRkYjBlNTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRpDrhaTxLSsOyEhXQSwfo7o4JEu 6aWEJh3HoqOXbXllntipZY1eyjE3p4vXEqY3smC1S6367kKayWjJ/4ZjswTBiILx nP5kHXYmitWvHBmGXqxBPT0Ez6usdQaWbhgdPsGwiK4X2Hlx15kiXWKnb9RWVuYK GvlWXxAGcD5FmKCoZ7ljtjNtseFpzbyBU2pa4KxpGeSQt/NYPOrqs5qY+eAjmI+0 oUYCggUm9DIGe45UDtfN7eLaU6xVSONeD1+7WsvjSt7E7Xu68YzGDWd2gjs5n2r0 eMcBAOHM+edbVTeG3DwVCwqJiKnXNuXNlv36wS/kl2d2rVaaFPc0j5onZQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLJ1pSfSloipZVZTmMXE0kpNsOUHMB8GA1UdIwQY MBaAFLLkSLSgjw5MWKKD2Ac1qKgD4Q1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hNzA2OGEtOTJiYS00MmVhLTk5NjYt MjA1NGQ0ZTkwM2JjLzEvc25XbEo5S1dpS2xsVmxPWXhjVFNTazJ3NVFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9hNzA2OGEtOTJiYS00MmVhLTk5NjYtMjA1NGQ0ZTkwM2Jj LzEvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAZCOll MA0GCSqGSIb3DQEBCwUAA4IBAQBUIIZIr7D+kxIow3FcW+/Va+3p3xKx8k2/trrO ddES1XD82CMJ30ypFQfBCRuFuSG61RcDktJ0vYYIf38xLQleHTQp5rudIJzkvWWl CHUPt7zZBi5dXSkYvVyohx2Xdtp8EWFXFQCTf+3oz5HXZZiQiacYO1XDC3ZKK4Vd 4V737xSALKmuBTUtytEV1nEM5CqcD/eXZ9BjcDMbdJvxcJWdru7KDHdwd0ws0XE+ TP+HskB55iuWJnDds+EQ6A2EwcZqPxAIkS/FZ4emarC3+CinSUYOSA/O+qH2Lvie +xu5JadZG8ov/gN64SgHt+gHRyCR+xH5v+cCizCYUTUt1hFJ -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:30 2026 by rpki-client