This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/syiGHqWRr52kAI1vbn_mnBjc4MY.roa File: syiGHqWRr52kAI1vbn_mnBjc4MY.roa (raw, json) Hash identifier: tagtkwEIlDskbL5IUXv2uqWmzPh+xNBLyFzqwgk1zJc= Subject key identifier: B3:28:86:1E:A5:91:AF:9D:A4:00:8D:6F:6E:7F:E6:9C:18:DC:E0:C6 Certificate issuer: /CN=7be3ed22e0b77b150ff40a19ae156ed8f1e25cb5 Certificate serial: 019B76EB29B5E7A50D767AB9E4744C6E573C Authority key identifier: 7B:E3:ED:22:E0:B7:7B:15:0F:F4:0A:19:AE:15:6E:D8:F1:E2:5C:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/syiGHqWRr52kAI1vbn_mnBjc4MY.roa Signing time: Thu 01 Jan 2026 00:18:01 +0000 ROA not before: Thu 01 Jan 2026 00:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50066 IP address blocks: 2001:67c:2a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.mft rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:29:b5:e7:a5:0d:76:7a:b9:e4:74:4c:6e:57:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7be3ed22e0b77b150ff40a19ae156ed8f1e25cb5 Validity Not Before: Jan 1 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b328861ea591af9da4008d6f6e7fe69c18dce0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2d:ab:d4:31:52:98:15:63:00:c8:f9:d5:b6: 19:8b:d3:e7:80:83:6f:1f:79:d4:97:b6:f1:84:0f: 01:d8:2a:5b:3c:aa:4b:d4:07:e9:93:36:8b:b1:44: f2:f2:ec:ba:90:44:e7:45:e6:b9:c5:de:ad:16:a1: f5:3f:40:af:12:75:cd:ff:39:59:66:d8:c1:22:3e: a7:68:37:f9:a3:0c:07:b6:8a:1c:37:1e:24:a5:e0: 8b:40:09:1f:2f:89:92:83:45:2f:ff:0c:89:03:b3: f3:2e:37:33:e6:1e:5f:e7:3b:5c:8a:c2:f6:b6:ab: 7d:4e:fa:da:55:9c:6d:96:9d:53:62:97:7d:e5:fd: e2:d3:bd:1e:bc:ed:03:77:e8:3a:ab:79:c7:d2:8f: fb:09:55:1a:d1:d2:88:d7:24:f6:e1:c6:33:d7:26: dc:60:81:fc:e2:2e:33:75:83:0a:af:cd:69:4f:9a: 6b:ae:e5:3d:9a:2b:10:bf:ca:bb:cb:58:32:b7:43: 79:21:5d:77:f4:01:f0:48:fb:64:2a:43:b7:1d:81: b2:eb:d0:bc:8d:50:15:af:90:8a:3d:7e:cf:b2:11: c8:bf:d5:ff:96:df:9a:8b:4f:62:76:50:ec:41:d0: 5b:6b:3b:0c:48:d4:c5:25:00:e2:f7:11:36:f9:07: 48:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:28:86:1E:A5:91:AF:9D:A4:00:8D:6F:6E:7F:E6:9C:18:DC:E0:C6 X509v3 Authority Key Identifier: keyid:7B:E3:ED:22:E0:B7:7B:15:0F:F4:0A:19:AE:15:6E:D8:F1:E2:5C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-PtIuC3exUP9AoZrhVu2PHiXLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/syiGHqWRr52kAI1vbn_mnBjc4MY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/e-PtIuC3exUP9AoZrhVu2PHiXLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2a0::/48 Signature Algorithm: sha256WithRSAEncryption 7a:6b:3a:2d:17:8a:ac:0d:67:c7:ca:f4:65:2a:ad:b7:d7:a0: bc:28:bd:71:32:12:67:45:6b:59:0f:74:3d:07:ce:20:22:ed: 26:72:35:a4:14:42:3c:a4:7c:4a:92:0f:48:ac:d3:01:36:56: b8:e3:e1:61:fe:2f:ca:2a:ff:03:af:2d:0e:06:1d:8c:40:d0: 37:c1:9a:0d:c0:35:a1:43:29:9d:82:c4:c7:16:ed:29:4b:46: b8:a3:23:70:fc:d2:eb:63:f4:cf:21:f5:93:81:da:22:3c:28: 88:9b:98:69:78:26:3b:e0:83:00:cc:ed:c8:f8:d1:e6:05:41: f9:b2:1a:44:1a:c3:f7:5f:51:63:37:9f:fe:76:e0:60:86:47: 6a:60:03:f8:f3:08:c2:53:bf:94:61:57:c3:6b:09:06:f6:04: d6:ca:be:59:f0:6a:aa:2e:5c:bc:bd:09:35:22:be:cc:1c:e8: be:e5:e0:20:c0:65:f4:7c:2c:64:62:53:3b:1f:e9:6b:c8:a6: 44:41:79:58:75:d3:84:9f:bc:11:4f:5a:50:fd:61:40:90:69: 72:f3:c9:e3:80:6c:a2:59:c5:cd:c3:89:4b:bb:d7:8a:9b:ce: 0c:57:fe:72:b2:86:7f:c8:7c:0c:d4:5b:c8:7c:ff:d8:e0:9f: 1e:5e:62:8b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt26ym156UNdnq55HRMblc8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZTNlZDIyZTBiNzdiMTUwZmY0MGExOWFlMTU2ZWQ4ZjFl MjVjYjUwHhcNMjYwMTAxMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzI4ODYxZWE1OTFhZjlkYTQwMDhkNmY2ZTdmZTY5YzE4ZGNlMGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi2r1DFSmBVjAMj51bYZi9PngINv H3nUl7bxhA8B2CpbPKpL1AfpkzaLsUTy8uy6kETnRea5xd6tFqH1P0CvEnXN/zlZ ZtjBIj6naDf5owwHtoocNx4kpeCLQAkfL4mSg0Uv/wyJA7PzLjcz5h5f5ztcisL2 tqt9TvraVZxtlp1TYpd95f3i070evO0Dd+g6q3nH0o/7CVUa0dKI1yT24cYz1ybc YIH84i4zdYMKr81pT5prruU9misQv8q7y1gyt0N5IV139AHwSPtkKkO3HYGy69C8 jVAVr5CKPX7PshHIv9X/lt+ai09idlDsQdBbazsMSNTFJQDi9xE2+QdIEQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLMohh6lka+dpACNb25/5pwY3ODGMB8GA1UdIwQY MBaAFHvj7SLgt3sVD/QKGa4Vbtjx4ly1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZS1QdEl1QzNleFVQOUFvWnJoVnUyUEhpWExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9iNDUwYWYtMjA5MS00ZWYyLWI1ZjUt MmI3YzFlZGYxMTZhLzEvc3lpR0hxV1JyNTJrQUkxdmJuX21uQmpjNE1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9iNDUwYWYtMjA5MS00ZWYyLWI1ZjUtMmI3YzFlZGYxMTZh LzEvZS1QdEl1QzNleFVQOUFvWnJoVnUyUEhpWExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAKg MA0GCSqGSIb3DQEBCwUAA4IBAQB6azotF4qsDWfHyvRlKq2316C8KL1xMhJnRWtZ D3Q9B84gIu0mcjWkFEI8pHxKkg9IrNMBNla44+Fh/i/KKv8Dry0OBh2MQNA3wZoN wDWhQymdgsTHFu0pS0a4oyNw/NLrY/TPIfWTgdoiPCiIm5hpeCY74IMAzO3I+NHm BUH5shpEGsP3X1FjN5/+duBghkdqYAP48wjCU7+UYVfDawkG9gTWyr5Z8GqqLly8 vQk1Ir7MHOi+5eAgwGX0fCxkYlM7H+lryKZEQXlYddOEn7wRT1pQ/WFAkGly88nj gGyiWcXNw4lLu9eKm84MV/5ysoZ/yHwM1FvIfP/Y4J8eXmKL -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:40 2026 by rpki-client