This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/sSxGwrOuR1e8LjZxDV_PzwsG4nc.roa File: sSxGwrOuR1e8LjZxDV_PzwsG4nc.roa (raw, json) Hash identifier: gx26x6TvFiokT5dtfuOE+CLC/fqy9Y65HYX42R3PFbc= Subject key identifier: B1:2C:46:C2:B3:AE:47:57:BC:2E:36:71:0D:5F:CF:CF:0B:06:E2:77 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8021F2382975C10631F78404AC1D65 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/sSxGwrOuR1e8LjZxDV_PzwsG4nc.roa Signing time: Fri 02 Jan 2026 02:18:50 +0000 ROA not before: Fri 02 Jan 2026 02:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198266 IP address blocks: 2a0f:7803:f890::/44 maxlen: 48 2a0f:7803:ffd0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:21:f2:38:29:75:c1:06:31:f7:84:04:ac:1d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b12c46c2b3ae4757bc2e36710d5fcfcf0b06e277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:34:d2:50:6c:82:8f:27:31:ce:fa:71:b5:28: d5:6e:78:34:80:36:6f:5d:19:6f:16:a1:d0:36:7e: 18:32:8b:26:a2:36:b2:f4:db:ed:f6:f2:59:90:fb: 0e:a7:01:0b:e6:68:d0:c5:56:89:fa:5e:c3:ac:76: b5:31:53:5f:e5:48:df:7e:91:28:dd:10:e3:46:00: 70:22:b7:40:d3:69:78:79:8e:d2:35:6e:d9:48:7a: 17:05:27:e5:03:56:db:23:2b:b6:76:ff:00:8a:16: a4:2d:5e:76:ec:a9:ab:86:88:e3:0c:75:3f:f9:4a: 6c:9e:71:15:15:d6:17:1a:d7:9b:1f:f2:dc:b9:2a: 22:e0:9f:85:b6:51:01:d6:f1:9f:9e:bd:06:7c:97: 5b:7f:d9:5d:37:90:59:96:6a:42:11:ec:96:d4:f7: 94:8f:e9:0e:ff:77:cc:c3:81:45:5d:da:ba:9d:87: e9:95:7c:48:f7:ff:ea:af:e0:56:f2:35:d8:cf:81: 59:b7:6f:3a:0a:5a:5b:89:81:df:6a:08:64:4a:99: a0:65:8e:00:41:34:da:a2:4b:d0:58:03:46:b2:68: 60:ac:5b:5f:05:1d:5f:ea:24:16:3d:1f:ad:7d:95: 31:b6:50:1a:eb:b4:d6:86:62:63:08:73:8f:7d:85: 3c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2C:46:C2:B3:AE:47:57:BC:2E:36:71:0D:5F:CF:CF:0B:06:E2:77 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/sSxGwrOuR1e8LjZxDV_PzwsG4nc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:f890::/44 2a0f:7803:ffd0::/44 Signature Algorithm: sha256WithRSAEncryption 71:6c:73:50:7e:93:7b:45:ae:b3:50:17:94:81:ce:30:97:16: 13:a1:ce:3f:57:a4:bc:fa:14:9d:e6:85:a3:c9:66:e7:fc:b5: d0:48:fa:a7:74:2c:8d:9c:97:6d:fb:40:4f:48:c6:50:73:fc: 58:11:aa:f8:03:10:09:3a:bb:f9:9b:7a:d9:df:90:54:63:63: cb:b1:06:51:b8:b8:05:72:f4:d3:75:f9:73:8a:2c:66:97:de: 69:51:25:14:cb:e4:7c:2e:6d:92:fd:46:a0:f3:99:c3:cc:75: 98:fd:30:00:61:fa:f4:50:e6:a6:e1:bb:e9:0c:d2:c9:75:15: ce:f3:0a:37:de:13:da:fb:69:54:a2:a9:db:ad:72:d2:cb:02: ca:7d:55:2f:14:48:f7:4d:14:df:cc:3a:e7:44:09:09:8d:42: fc:73:bc:b8:b7:3e:35:03:09:68:73:2b:0b:be:02:c5:be:91: 3a:ca:49:08:83:ab:59:48:83:37:d6:0d:df:bf:5b:f1:9e:27: 79:28:fa:91:ad:e2:13:1a:82:7c:20:11:25:bf:4a:9e:a2:19: bc:be:c2:02:47:9a:e5:13:3a:f1:83:c6:67:3c:49:bd:57:75: 02:53:8c:38:3c:11:c8:6b:22:08:6c:44:5a:8d:37:c4:55:45: b3:3d:0d:fd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gCHyOCl1wQYx94QErB1lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTJjNDZjMmIzYWU0NzU3YmMyZTM2NzEwZDVmY2ZjZjBiMDZlMjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjTSUGyCjycxzvpxtSjVbng0gDZv XRlvFqHQNn4YMosmojay9Nvt9vJZkPsOpwEL5mjQxVaJ+l7DrHa1MVNf5UjffpEo 3RDjRgBwIrdA02l4eY7SNW7ZSHoXBSflA1bbIyu2dv8AihakLV527KmrhojjDHU/ +UpsnnEVFdYXGtebH/LcuSoi4J+FtlEB1vGfnr0GfJdbf9ldN5BZlmpCEeyW1PeU j+kO/3fMw4FFXdq6nYfplXxI9//qr+BW8jXYz4FZt286ClpbiYHfaghkSpmgZY4A QTTaokvQWANGsmhgrFtfBR1f6iQWPR+tfZUxtlAa67TWhmJjCHOPfYU88wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLEsRsKzrkdXvC42cQ1fz88LBuJ3MB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvc1N4R3dyT3VSMWU4TGpaeERWX1B6d3NHNG5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg94A/iQ AwcEKg94A//QMA0GCSqGSIb3DQEBCwUAA4IBAQBxbHNQfpN7Ra6zUBeUgc4wlxYT oc4/V6S8+hSd5oWjyWbn/LXQSPqndCyNnJdt+0BPSMZQc/xYEar4AxAJOrv5m3rZ 35BUY2PLsQZRuLgFcvTTdflziixml95pUSUUy+R8Lm2S/Uag85nDzHWY/TAAYfr0 UOam4bvpDNLJdRXO8wo33hPa+2lUoqnbrXLSywLKfVUvFEj3TRTfzDrnRAkJjUL8 c7y4tz41AwlocysLvgLFvpE6ykkIg6tZSIM31g3fv1vxnid5KPqRreITGoJ8IBEl v0qeohm8vsICR5rlEzrxg8ZnPEm9V3UCU4w4PBHIayIIbERajTfEVUWzPQ39 -----END CERTIFICATE-----Generated at Wed Jan 21 17:00:30 2026 by rpki-client