This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/sFonxK-Y58VpBEBeRzqHkdF8ojA.roa File: sFonxK-Y58VpBEBeRzqHkdF8ojA.roa (raw, json) Hash identifier: 3844hgTnl1FX+Rx774ovA6z2yPS2q62u+c8Vt6GI/5E= Subject key identifier: B0:5A:27:C4:AF:98:E7:C5:69:04:40:5E:47:3A:87:91:D1:7C:A2:30 Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Certificate serial: 019B7E391DB1619B13F8061383AD5B18B32C Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/sFonxK-Y58VpBEBeRzqHkdF8ojA.roa Signing time: Fri 02 Jan 2026 10:20:30 +0000 ROA not before: Fri 02 Jan 2026 10:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212027 IP address blocks: 2a06:2840::/48 maxlen: 48 2a12:7b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1d:b1:61:9b:13:f8:06:13:83:ad:5b:18:b3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Validity Not Before: Jan 2 10:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b05a27c4af98e7c56904405e473a8791d17ca230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ce:3e:3f:52:c4:0b:3c:9c:e9:66:22:08:41: f6:1d:c3:61:0b:62:66:51:a4:50:82:66:f9:20:f0: c8:b6:a9:65:39:9a:30:37:08:c6:9c:64:20:25:32: 83:4a:f3:b0:da:9e:97:21:22:de:44:2b:29:2d:4a: 73:5c:9f:b0:d8:3b:96:2d:ef:b5:8e:7e:67:a2:16: e6:29:a0:91:89:8f:45:24:13:df:eb:95:c5:6a:4b: 94:13:6b:d5:34:a0:a2:ee:b9:e6:2b:4c:b0:d9:1e: e9:2e:66:41:52:c5:a9:a0:0d:2d:ae:d6:c2:20:2c: 93:a3:5b:36:e7:6c:4c:5b:d0:25:ea:e6:68:65:57: e1:ac:7a:bd:fd:58:7b:d2:75:4b:ed:2e:09:72:ed: fb:20:05:77:6f:53:f8:ab:69:72:1b:14:0e:da:1d: ec:17:21:cf:fd:6b:47:29:1b:88:82:fd:47:8b:1b: e1:ea:97:6b:54:57:5b:a6:0b:77:80:fc:51:0c:d0: 9c:fa:2a:80:cc:b9:bc:01:2a:1e:c2:90:c0:53:96: 7d:63:e6:3c:29:4b:7d:09:ed:f7:54:4f:fd:9c:5d: bc:70:15:60:83:85:43:ca:6c:5d:33:a1:89:e4:0e: 84:a0:13:59:46:ca:1e:72:76:48:82:9b:51:85:44: 4a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5A:27:C4:AF:98:E7:C5:69:04:40:5E:47:3A:87:91:D1:7C:A2:30 X509v3 Authority Key Identifier: keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/sFonxK-Y58VpBEBeRzqHkdF8ojA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:2840::/48 2a12:7b40::/48 Signature Algorithm: sha256WithRSAEncryption 76:84:27:f6:b8:db:18:2b:72:9a:59:f0:4f:a4:37:2a:5b:d6: f0:f2:a6:8f:42:36:c5:c3:c7:91:ac:b2:1f:68:5a:fe:5e:b0: 54:ca:c9:8b:57:6a:36:c1:e3:5b:7c:02:77:37:70:03:08:15: 6d:be:ee:96:9f:12:7b:a2:b8:e6:2f:98:41:6d:c3:5c:d2:6b: e2:0f:cb:f6:33:48:b0:bb:b4:f3:ce:93:91:ca:f2:1e:cb:4f: 9c:09:3c:df:54:e3:38:87:88:9c:73:28:0c:1f:10:7e:1a:45: 98:ea:a2:4f:37:2a:76:1b:5d:49:b5:fa:e6:a5:68:6f:a3:89: 2a:f1:05:1c:e6:07:b0:9f:c8:5a:88:ff:0d:10:9b:4a:43:5f: 3e:45:f1:a0:95:92:02:13:a1:55:47:de:3a:70:6f:e3:e9:8a: 5e:69:6c:d8:e6:35:16:21:31:49:4a:d2:54:8b:1a:f0:c7:13: 5e:19:b3:70:02:b6:5c:57:8e:24:da:2e:24:eb:ee:df:9c:ba: 61:74:f2:4c:06:a6:d9:ac:c7:3c:bc:1f:c4:46:91:a0:62:a2: 0c:d6:cc:2b:6f:08:3d:a5:47:13:44:65:f0:c3:43:93:52:64: 0f:b3:62:2f:a2:e5:ee:6f:7c:7d:a1:bf:a5:97:9a:4b:0f:a4: bc:c2:ec:13 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OR2xYZsT+AYTg61bGLMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk ZTBlYzAwHhcNMjYwMTAyMTAyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDVhMjdjNGFmOThlN2M1NjkwNDQwNWU0NzNhODc5MWQxN2NhMjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c4+P1LECzyc6WYiCEH2HcNhC2Jm UaRQgmb5IPDItqllOZowNwjGnGQgJTKDSvOw2p6XISLeRCspLUpzXJ+w2DuWLe+1 jn5nohbmKaCRiY9FJBPf65XFakuUE2vVNKCi7rnmK0yw2R7pLmZBUsWpoA0trtbC ICyTo1s252xMW9Al6uZoZVfhrHq9/Vh70nVL7S4Jcu37IAV3b1P4q2lyGxQO2h3s FyHP/WtHKRuIgv1Hixvh6pdrVFdbpgt3gPxRDNCc+iqAzLm8ASoewpDAU5Z9Y+Y8 KUt9Ce33VE/9nF28cBVgg4VDymxdM6GJ5A6EoBNZRsoecnZIgptRhURKSwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLBaJ8SvmOfFaQRAXkc6h5HRfKIwMB8GA1UdIwQY MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt NmYyY2Y0ZjAzY2ViLzEvc0ZvbnhLLVk1OFZwQkVCZVJ6cUhrZEY4b2pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgYoQAAA AwcAKhJ7QAAAMA0GCSqGSIb3DQEBCwUAA4IBAQB2hCf2uNsYK3KaWfBPpDcqW9bw 8qaPQjbFw8eRrLIfaFr+XrBUysmLV2o2weNbfAJ3N3ADCBVtvu6WnxJ7orjmL5hB bcNc0mviD8v2M0iwu7TzzpORyvIey0+cCTzfVOM4h4iccygMHxB+GkWY6qJPNyp2 G11JtfrmpWhvo4kq8QUc5gewn8haiP8NEJtKQ18+RfGglZICE6FVR946cG/j6Ype aWzY5jUWITFJStJUixrwxxNeGbNwArZcV44k2i4k6+7fnLphdPJMBqbZrMc8vB/E RpGgYqIM1swrbwg9pUcTRGXww0OTUmQPs2IvouXub3x9ob+ll5pLD6S8wuwT -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:25 2026 by rpki-client