This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SIwukkGojXaofXfaI4vtKpAbSFs.roa File: SIwukkGojXaofXfaI4vtKpAbSFs.roa (raw, json) Hash identifier: /n2bGEjE77pr0Dfi3fPxgpGgX/zsA4NP0bBXcIuh1pE= Subject key identifier: 48:8C:2E:92:41:A8:8D:76:A8:7D:77:DA:23:8B:ED:2A:90:1B:48:5B Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D307C878D5471C02D320FCD28CE3D Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SIwukkGojXaofXfaI4vtKpAbSFs.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2a0b:64c4::/32 maxlen: 48 2a0b:64c5::/32 maxlen: 48 2a0b:64c7::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:30:7c:87:8d:54:71:c0:2d:32:0f:cd:28:ce:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=488c2e9241a88d76a87d77da238bed2a901b485b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4a:be:ff:bd:70:76:5f:31:1d:89:0e:40:2d: 1e:7e:86:7c:34:b0:87:19:74:9d:15:c7:dc:28:80: c1:f7:56:69:f6:77:8f:2f:68:81:79:c1:f5:21:73: ce:5a:11:83:87:ed:d7:0c:fc:c7:28:af:d8:ea:83: 71:af:62:61:ba:e7:9e:28:bc:d0:46:67:1b:62:8e: 30:50:b3:c0:00:de:9b:84:22:a2:65:7f:ef:74:8c: 2e:0c:f3:a1:d4:73:62:d9:37:58:54:7f:12:4b:50: 30:b4:5c:3d:42:00:32:12:14:33:77:99:3c:5f:aa: d1:5e:66:82:6c:ed:3b:62:0b:8e:4d:0e:ab:45:f2: 73:a7:73:3d:17:a0:64:c5:b5:7b:4d:d7:8a:7e:f1: 3f:73:d1:bb:bd:11:54:6a:9f:da:3f:01:39:2d:d7: 95:a0:37:6b:d3:7f:cb:53:91:03:cc:ff:f8:97:9c: 3e:d5:00:75:f0:1d:70:8d:73:88:a7:ad:1b:6c:d5: 20:3c:d0:da:09:34:65:6e:db:bb:e3:ef:67:8d:23: 92:25:f7:dc:51:f5:7e:54:d5:d2:23:05:f5:5c:c6: 4c:7c:3e:0c:53:a1:b7:57:fb:42:6e:50:a6:e2:7c: 8f:41:0f:eb:91:2c:74:91:0f:6a:a6:5b:1e:1f:2c: 4c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8C:2E:92:41:A8:8D:76:A8:7D:77:DA:23:8B:ED:2A:90:1B:48:5B X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SIwukkGojXaofXfaI4vtKpAbSFs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:64c4::/31 2a0b:64c7::/32 Signature Algorithm: sha256WithRSAEncryption 0e:7b:af:f2:7d:a5:9a:2d:cd:96:25:ce:a5:6e:49:c6:f2:4f: a5:6a:fa:f2:93:42:e8:73:f3:33:47:7a:7a:f1:2d:70:83:ad: 56:fe:ff:c1:6f:61:3c:0b:e4:df:4e:6d:51:ee:2c:43:2f:4d: f7:68:c8:57:60:d0:a7:84:e1:18:7a:41:04:e1:d0:18:1f:fe: 70:cf:9f:ac:93:c7:c2:a6:e2:56:89:ac:65:bd:bb:8d:7e:65: 02:97:d7:7e:be:60:89:23:46:b7:28:aa:ca:8d:36:a3:9c:cc: e7:db:1b:75:75:2f:67:49:3d:b1:b4:df:c8:bf:07:2a:0e:80: 43:09:2f:6d:7c:f5:e2:61:98:eb:17:47:5f:61:95:0a:bd:68: 38:0b:10:d0:e3:ea:7b:f9:63:36:ed:79:a2:a5:fd:a8:35:99: 92:77:6c:84:88:e6:23:c9:19:9a:69:ba:59:65:b3:aa:76:aa: 72:27:5c:cb:44:dd:09:26:36:c5:4f:f6:4d:2e:79:ef:a6:53: 0d:67:5b:51:8a:82:8b:70:32:cd:5a:d4:91:d3:d5:fb:12:4a: c4:41:24:92:21:50:eb:a7:cf:0e:4e:48:02:b5:19:fc:e9:21: ee:78:77:6f:fd:88:8d:c6:f1:87:94:2c:6b:38:28:8c:ec:83: 64:2c:e6:ec -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9XTB8h41UccAtMg/NKM49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODhjMmU5MjQxYTg4ZDc2YTg3ZDc3ZGEyMzhiZWQyYTkwMWI0ODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Eq+/71wdl8xHYkOQC0efoZ8NLCH GXSdFcfcKIDB91Zp9nePL2iBecH1IXPOWhGDh+3XDPzHKK/Y6oNxr2JhuueeKLzQ RmcbYo4wULPAAN6bhCKiZX/vdIwuDPOh1HNi2TdYVH8SS1AwtFw9QgAyEhQzd5k8 X6rRXmaCbO07YguOTQ6rRfJzp3M9F6BkxbV7TdeKfvE/c9G7vRFUap/aPwE5LdeV oDdr03/LU5EDzP/4l5w+1QB18B1wjXOIp60bbNUgPNDaCTRlbtu74+9njSOSJffc UfV+VNXSIwX1XMZMfD4MU6G3V/tCblCm4nyPQQ/rkSx0kQ9qplseHyxM2QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEiMLpJBqI12qH132iOL7SqQG0hbMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvU0l3dWtrR29qWGFvZlhmYUk0dnRLcEFiU0ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUBKgtkxAMF ACoLZMcwDQYJKoZIhvcNAQELBQADggEBAA57r/J9pZotzZYlzqVuScbyT6Vq+vKT Quhz8zNHenrxLXCDrVb+/8FvYTwL5N9ObVHuLEMvTfdoyFdg0KeE4Rh6QQTh0Bgf /nDPn6yTx8Km4laJrGW9u41+ZQKX136+YIkjRrcoqsqNNqOczOfbG3V1L2dJPbG0 38i/ByoOgEMJL2189eJhmOsXR19hlQq9aDgLENDj6nv5YzbteaKl/ag1mZJ3bISI 5iPJGZppullls6p2qnInXMtE3QkmNsVP9k0uee+mUw1nW1GKgotwMs1a1JHT1fsS SsRBJJIhUOunzw5OSAK1GfzpIe54d2/9iI3G8YeULGs4KIzsg2Qs5uw= -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:18 2026 by rpki-client