This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SCtYUSgTvq5eP5rmgd-DoPonyvQ.roa File: SCtYUSgTvq5eP5rmgd-DoPonyvQ.roa (raw, json) Hash identifier: JOPwk41McP9iBqs+UHOPgzrwIycJYMDEKRY6rYByUCk= Subject key identifier: 48:2B:58:51:28:13:BE:AE:5E:3F:9A:E6:81:DF:83:A0:FA:27:CA:F4 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758D9BCC34EA53EC31B22F2EBD415EF Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SCtYUSgTvq5eP5rmgd-DoPonyvQ.roa Signing time: Thu 01 Jan 2026 02:17:50 +0000 ROA not before: Thu 01 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34924 IP address blocks: 2a0f:5707:aa00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d9:bc:c3:4e:a5:3e:c3:1b:22:f2:eb:d4:15:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=482b58512813beae5e3f9ae681df83a0fa27caf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:02:cb:43:59:5b:14:f3:a5:16:1c:f3:96:d3: 24:68:0a:a8:63:9c:7a:d5:35:43:09:ff:48:1f:be: b4:f4:80:dc:52:b5:30:e3:54:1c:79:8d:46:2d:b3: ad:7b:79:f5:28:e0:23:ff:2a:10:9e:ef:a2:f4:cf: 7a:db:7e:f7:52:42:91:d1:81:84:99:27:4a:a3:10: ff:1b:63:85:d3:8b:4f:15:e0:d9:df:d4:34:e0:67: d5:83:a4:fc:67:af:de:8a:27:60:d6:f3:52:37:0f: 9b:e3:dd:aa:29:38:27:41:2c:81:68:af:d7:4c:fc: 97:4f:cf:c4:b7:d0:af:60:9e:87:95:81:b2:c6:55: ce:e0:37:17:39:9f:6d:25:34:f6:18:33:1b:2d:dc: 81:77:2a:d1:e0:ec:b8:59:1d:d7:01:ca:1d:43:24: 0c:a4:c7:cf:47:0a:8d:ab:4a:75:8c:57:fb:2f:02: f7:8d:05:ff:7d:6f:07:1f:15:56:19:e3:f9:35:05: 9a:6e:e9:5a:75:cb:f6:70:ac:19:cc:25:b7:94:35: 97:79:73:83:0d:59:84:f6:61:a9:58:bb:bd:be:a7: 9b:ad:78:2b:9a:b3:b6:1e:43:35:14:c4:ef:61:44: 85:67:a0:19:21:51:7f:ec:eb:17:e6:2a:1f:a4:2e: 50:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2B:58:51:28:13:BE:AE:5E:3F:9A:E6:81:DF:83:A0:FA:27:CA:F4 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SCtYUSgTvq5eP5rmgd-DoPonyvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:aa00::/44 Signature Algorithm: sha256WithRSAEncryption a1:99:c9:8b:4f:2e:ad:7f:66:f4:dd:c3:26:27:2c:4e:ae:e2: dd:61:46:a0:2f:26:10:27:c9:eb:90:67:f5:f8:f1:57:cd:89: 90:54:4b:cb:db:10:8b:a1:a3:73:63:32:55:5a:80:0a:77:30: 25:09:13:3b:5a:04:41:ad:3d:92:04:39:0c:60:16:d8:95:38: 14:42:e5:9f:d3:eb:8b:33:88:25:4b:6d:68:48:00:8b:31:21: 2d:4e:70:10:0c:e1:d0:97:be:ab:da:72:38:e6:7f:79:aa:53: e4:ba:18:70:54:4f:d5:21:68:6f:20:9c:d5:af:9c:be:dd:34: 71:58:ea:b3:f2:0e:d0:ab:48:c9:15:fb:33:57:7f:d7:54:1b: 0c:22:35:cf:37:6c:b2:5c:82:12:a3:80:66:9a:66:32:ab:55: a2:de:a8:21:9d:a0:ec:83:39:63:2a:41:6f:97:ee:20:cb:2d: d7:b9:07:10:1f:5d:8e:d9:12:b0:08:58:51:f5:31:15:21:70: b0:70:a5:c2:f5:12:02:b4:91:b9:d6:06:9b:56:10:1d:55:0d: 47:2e:7e:c5:d6:b7:8f:59:f9:7c:5d:8f:23:e1:3c:ff:95:b2: 4b:68:71:2f:3c:bd:8f:ed:49:a5:83:34:04:a1:74:fb:ef:09: e8:13:89:c6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WNm8w06lPsMbIvLr1BXvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODJiNTg1MTI4MTNiZWFlNWUzZjlhZTY4MWRmODNhMGZhMjdjYWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygLLQ1lbFPOlFhzzltMkaAqoY5x6 1TVDCf9IH7609IDcUrUw41QceY1GLbOte3n1KOAj/yoQnu+i9M962373UkKR0YGE mSdKoxD/G2OF04tPFeDZ39Q04GfVg6T8Z6/eiidg1vNSNw+b492qKTgnQSyBaK/X TPyXT8/Et9CvYJ6HlYGyxlXO4DcXOZ9tJTT2GDMbLdyBdyrR4Oy4WR3XAcodQyQM pMfPRwqNq0p1jFf7LwL3jQX/fW8HHxVWGeP5NQWabuladcv2cKwZzCW3lDWXeXOD DVmE9mGpWLu9vqebrXgrmrO2HkM1FMTvYUSFZ6AZIVF/7OsX5iofpC5QkwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEgrWFEoE76uXj+a5oHfg6D6J8r0MB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvU0N0WVVTZ1R2cTVlUDVybWdkLURvUG9ueXZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6oA MA0GCSqGSIb3DQEBCwUAA4IBAQChmcmLTy6tf2b03cMmJyxOruLdYUagLyYQJ8nr kGf1+PFXzYmQVEvL2xCLoaNzYzJVWoAKdzAlCRM7WgRBrT2SBDkMYBbYlTgUQuWf 0+uLM4glS21oSACLMSEtTnAQDOHQl76r2nI45n95qlPkuhhwVE/VIWhvIJzVr5y+ 3TRxWOqz8g7Qq0jJFfszV3/XVBsMIjXPN2yyXIISo4BmmmYyq1Wi3qghnaDsgzlj KkFvl+4gyy3XuQcQH12O2RKwCFhR9TEVIXCwcKXC9RICtJG51gabVhAdVQ1HLn7F 1rePWfl8XY8j4Tz/lbJLaHEvPL2P7UmlgzQEoXT77wnoE4nG -----END CERTIFICATE-----Generated at Mon Jan 26 12:31:44 2026 by rpki-client