This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sZNRmX5-TWMqt6EpnEWQ2z3JLLw.roa File: sZNRmX5-TWMqt6EpnEWQ2z3JLLw.roa (raw, json) Hash identifier: vs+YC5ijta6AkuKsZWovwWmRuOBXgPOrn33z33jIpW8= Subject key identifier: B1:93:51:99:7E:7E:4D:63:2A:B7:A1:29:9C:45:90:DB:3D:C9:2C:BC Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38A02DC680C3E7B609FA9B1F4F3138 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sZNRmX5-TWMqt6EpnEWQ2z3JLLw.roa Signing time: Fri 02 Jan 2026 10:19:58 +0000 ROA not before: Fri 02 Jan 2026 10:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50554 IP address blocks: 2a07:3501:1230::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a0:2d:c6:80:c3:e7:b6:09:fa:9b:1f:4f:31:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b19351997e7e4d632ab7a1299c4590db3dc92cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:94:7c:0d:ae:73:e8:df:f3:37:ab:5f:49:d0: 59:63:0b:41:f8:6c:2a:9e:9d:91:e0:cd:e9:1b:5c: 19:b4:0e:b8:53:bb:49:2e:ea:76:7f:b7:a9:bf:b3: b7:d2:7d:a5:4d:ca:95:99:36:4d:a5:a5:e8:55:56: 0e:ff:c4:36:3c:a2:6b:66:de:27:61:70:8c:b0:35: ae:d2:5c:4e:86:4c:9e:78:63:a2:e2:6e:af:7c:0a: ed:d2:2d:28:21:a2:f3:07:e3:d5:b5:10:c1:b2:92: ba:4d:8c:ba:ca:fa:c7:d0:84:c1:5e:cf:df:28:9d: dd:df:db:a8:9b:48:5c:20:b1:18:29:99:43:a5:90: 0c:88:16:ec:76:77:7f:0d:8c:83:69:19:36:11:36: c0:d4:ed:b5:8d:36:25:24:53:2d:ef:24:cc:90:e3: 83:9d:41:56:23:16:77:90:fa:e6:96:6e:d1:e8:87: 19:78:6f:3c:bb:42:d5:21:3c:36:10:8b:ba:a0:0f: 31:b8:5c:c2:73:39:03:e0:07:f5:e6:d6:00:06:df: 00:c6:c3:2d:a6:a8:4a:67:6c:d0:bd:79:f1:32:d7: 79:ff:9a:ba:13:63:e1:7a:8e:ef:f4:1e:33:46:1d: 45:a8:d5:5a:50:ea:42:b8:25:bb:d1:56:46:0a:71: 15:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:93:51:99:7E:7E:4D:63:2A:B7:A1:29:9C:45:90:DB:3D:C9:2C:BC X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sZNRmX5-TWMqt6EpnEWQ2z3JLLw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3501:1230::/48 Signature Algorithm: sha256WithRSAEncryption 62:69:21:05:ba:6b:c6:4e:4f:b5:12:ad:13:15:67:0f:ee:3e: 0a:0c:26:35:8a:7a:f0:4a:a7:08:c9:70:f2:9d:b3:43:bf:7f: 5c:5d:dd:98:72:ca:68:fd:ae:98:05:81:ca:71:ef:31:1a:21: 53:51:c5:d1:a5:1f:5b:e7:28:60:20:2f:c7:05:72:87:39:9f: 25:76:b5:d3:7c:c2:1c:a6:ce:5c:18:c1:c6:7e:3e:34:e2:29: 08:6d:23:99:bb:ee:1d:b4:32:08:c5:9c:b1:46:60:4b:e1:a3: 10:83:01:c0:bb:90:25:d1:36:b6:da:5c:2e:46:95:04:b6:de: 78:ac:51:68:2b:f3:19:ee:f5:6e:96:cb:89:ad:a1:75:58:5d: 06:57:20:8e:f1:88:9f:2a:c7:3a:0d:09:30:40:1c:fc:25:68: f2:d9:94:cb:2f:66:39:36:29:b4:28:01:0e:4c:6f:43:ff:7d: 76:8e:5f:1c:56:98:75:fd:c0:2a:97:4e:26:e8:81:1e:14:a9: 19:60:3a:51:4d:17:aa:5f:e8:f5:8c:1a:da:c9:3d:e6:91:b8: 33:6d:cd:0f:cc:aa:19:41:1c:47:e2:8b:c6:69:6c:4b:79:b5: 0d:f0:5a:2b:61:57:8d:0c:cc:64:ff:2e:76:72:55:14:ca:3f: f9:8c:6f:38 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OKAtxoDD57YJ+psfTzE4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTkzNTE5OTdlN2U0ZDYzMmFiN2ExMjk5YzQ1OTBkYjNkYzkyY2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZR8Da5z6N/zN6tfSdBZYwtB+Gwq np2R4M3pG1wZtA64U7tJLup2f7epv7O30n2lTcqVmTZNpaXoVVYO/8Q2PKJrZt4n YXCMsDWu0lxOhkyeeGOi4m6vfArt0i0oIaLzB+PVtRDBspK6TYy6yvrH0ITBXs/f KJ3d39uom0hcILEYKZlDpZAMiBbsdnd/DYyDaRk2ETbA1O21jTYlJFMt7yTMkOOD nUFWIxZ3kPrmlm7R6IcZeG88u0LVITw2EIu6oA8xuFzCczkD4Af15tYABt8AxsMt pqhKZ2zQvXnxMtd5/5q6E2Pheo7v9B4zRh1FqNVaUOpCuCW70VZGCnEVzwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLGTUZl+fk1jKrehKZxFkNs9ySy8MB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvc1pOUm1YNS1UV01xdDZFcG5FV1EyejNKTEx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgc1ARIw MA0GCSqGSIb3DQEBCwUAA4IBAQBiaSEFumvGTk+1Eq0TFWcP7j4KDCY1inrwSqcI yXDynbNDv39cXd2Ycspo/a6YBYHKce8xGiFTUcXRpR9b5yhgIC/HBXKHOZ8ldrXT fMIcps5cGMHGfj404ikIbSOZu+4dtDIIxZyxRmBL4aMQgwHAu5Al0Ta22lwuRpUE tt54rFFoK/MZ7vVulsuJraF1WF0GVyCO8YifKsc6DQkwQBz8JWjy2ZTLL2Y5Nim0 KAEOTG9D/312jl8cVph1/cAql04m6IEeFKkZYDpRTReqX+j1jBrayT3mkbgzbc0P zKoZQRxH4ovGaWxLebUN8ForYVeNDMxk/y52clUUyj/5jG84 -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:58 2026 by rpki-client