This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/s4NM_hszI3NHoc-KUiwIxLtS-BE.roa File: s4NM_hszI3NHoc-KUiwIxLtS-BE.roa (raw, json) Hash identifier: hggXHUncC0nQtN6/Yxfqom6znMWdj3u4WYY/vXLUvws= Subject key identifier: B3:83:4C:FE:1B:33:23:73:47:A1:CF:8A:52:2C:08:C4:BB:52:F8:11 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38A27CB9C0F76AB85E028518252055 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/s4NM_hszI3NHoc-KUiwIxLtS-BE.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198730 IP address blocks: 2a04:9a00:1114::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a2:7c:b9:c0:f7:6a:b8:5e:02:85:18:25:20:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3834cfe1b33237347a1cf8a522c08c4bb52f811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:d5:25:92:fb:b3:ef:3b:a3:b8:ca:6c:83:6a: 9f:74:f2:a5:65:7a:9d:54:ec:e4:5a:4c:49:79:ff: 2d:35:a9:9b:74:45:a9:5b:10:e6:7f:43:a5:26:eb: 5e:e1:92:b2:5d:eb:44:4e:60:d6:1b:fb:66:18:f2: 76:b0:55:de:2b:ab:68:02:76:b0:7f:dd:fa:40:f9: 1c:06:09:1d:f8:99:88:96:ec:68:36:29:e0:3a:19: 5f:64:17:5d:56:5b:08:c2:89:25:81:81:08:24:34: 2c:56:81:49:27:84:4a:cf:54:c0:02:c3:3e:10:f7: 7f:f5:48:45:d3:e9:94:bf:e1:4c:4e:b6:4f:5c:b9: 8a:76:01:02:34:61:a7:72:4f:95:0e:8a:72:5a:43: 37:9a:a0:9d:97:0d:26:8b:9c:a9:b4:91:bb:d8:ab: 2b:27:5a:c0:35:2f:52:e3:7a:be:bc:bb:c8:05:58: b1:ea:af:fc:d7:f2:4d:b2:1d:0d:6c:3a:1f:13:7b: 24:fc:dc:8d:de:1d:2c:02:ec:ea:56:10:f0:f0:00: f0:c5:33:b7:df:fa:00:01:f7:7b:59:1e:c4:6a:9c: 42:0e:3c:fc:6e:0d:11:43:b1:d5:1c:ca:41:a3:fc: 71:7d:d3:0f:6f:6c:69:32:d1:05:2c:30:62:d9:c4: 6d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:83:4C:FE:1B:33:23:73:47:A1:CF:8A:52:2C:08:C4:BB:52:F8:11 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/s4NM_hszI3NHoc-KUiwIxLtS-BE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:9a00:1114::/48 Signature Algorithm: sha256WithRSAEncryption a6:13:37:3f:68:ed:ec:2a:d2:8e:18:a0:38:33:3a:ab:ae:3a: 2d:1a:0c:20:71:d2:d8:18:4c:d7:9d:8d:4a:c5:fd:25:f1:c1: a5:81:c4:04:22:4a:4d:42:0f:40:34:ed:2c:4c:e1:10:25:6b: e4:86:92:46:36:33:fb:8b:6f:ab:12:89:44:c1:3d:b2:05:18: 17:7b:3a:9e:a3:aa:34:68:db:9b:69:23:50:63:a7:7a:83:34: a1:d9:f6:ae:97:38:6a:be:d4:47:a1:ba:d8:b3:3e:ee:b1:89: 5c:20:4a:9a:6b:79:8e:ae:87:b9:a4:30:f9:0e:e9:96:85:70: a8:05:37:ad:25:02:af:be:bb:31:7f:c5:db:8f:03:9d:b2:26: 89:ea:ed:b9:a1:3b:b2:f2:f5:a7:56:c4:d0:34:77:48:e9:c3: a9:24:0f:d0:a9:75:b0:11:f1:f0:75:84:5a:13:ae:36:bb:50: 69:de:14:e4:b1:e7:fa:80:ae:0e:cd:2b:21:e5:1e:7c:8b:bf: 08:62:20:19:2d:fd:76:51:60:d1:ac:0f:01:a6:75:1e:4f:8d: aa:70:39:34:00:5f:4d:fc:f5:f1:65:64:f8:0a:7e:0a:0e:45: bb:0c:b3:26:76:ab:8f:5a:8c:7a:9d:e2:61:dd:ae:f4:5a:0f: 53:65:36:2a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OKJ8ucD3arheAoUYJSBVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzgzNGNmZTFiMzMyMzczNDdhMWNmOGE1MjJjMDhjNGJiNTJmODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+dUlkvuz7zujuMpsg2qfdPKlZXqd VOzkWkxJef8tNambdEWpWxDmf0OlJute4ZKyXetETmDWG/tmGPJ2sFXeK6toAnaw f936QPkcBgkd+JmIluxoNingOhlfZBddVlsIwoklgYEIJDQsVoFJJ4RKz1TAAsM+ EPd/9UhF0+mUv+FMTrZPXLmKdgECNGGnck+VDopyWkM3mqCdlw0mi5yptJG72Ksr J1rANS9S43q+vLvIBVix6q/81/JNsh0NbDofE3sk/NyN3h0sAuzqVhDw8ADwxTO3 3/oAAfd7WR7EapxCDjz8bg0RQ7HVHMpBo/xxfdMPb2xpMtEFLDBi2cRtiwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLODTP4bMyNzR6HPilIsCMS7UvgRMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvczROTV9oc3pJM05Ib2MtS1Vpd0l4THRTLUJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgSaABEU MA0GCSqGSIb3DQEBCwUAA4IBAQCmEzc/aO3sKtKOGKA4MzqrrjotGgwgcdLYGEzX nY1Kxf0l8cGlgcQEIkpNQg9ANO0sTOEQJWvkhpJGNjP7i2+rEolEwT2yBRgXezqe o6o0aNubaSNQY6d6gzSh2faulzhqvtRHobrYsz7usYlcIEqaa3mOroe5pDD5DumW hXCoBTetJQKvvrsxf8XbjwOdsiaJ6u25oTuy8vWnVsTQNHdI6cOpJA/QqXWwEfHw dYRaE642u1Bp3hTksef6gK4OzSsh5R58i78IYiAZLf12UWDRrA8BpnUeT42qcDk0 AF9N/PXxZWT4Cn4KDkW7DLMmdquPWox6neJh3a70Wg9TZTYq -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:49 2026 by rpki-client