This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/SebffTJZqAhjn9b2tB5fFNf4TVo.roa File: SebffTJZqAhjn9b2tB5fFNf4TVo.roa (raw, json) Hash identifier: gyrU041nZbWUtGgHmkEeVRe5OSCwzL356v2625rtYDU= Subject key identifier: 49:E6:DF:7D:32:59:A8:08:63:9F:D6:F6:B4:1E:5F:14:D7:F8:4D:5A Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4 Certificate serial: 019B7E37D1A80708FE4B2823629DE9BD8613 Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/SebffTJZqAhjn9b2tB5fFNf4TVo.roa Signing time: Fri 02 Jan 2026 10:19:05 +0000 ROA not before: Fri 02 Jan 2026 10:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43350 IP address blocks: 2a05:e9c0:8200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d1:a8:07:08:fe:4b:28:23:62:9d:e9:bd:86:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4 Validity Not Before: Jan 2 10:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49e6df7d3259a808639fd6f6b41e5f14d7f84d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2d:ea:37:c4:bd:9a:71:f6:2c:ce:34:36:4d: 23:01:3c:b9:7b:8b:75:fe:8a:19:8d:c8:51:bc:cd: fa:4c:b1:bb:52:3a:c4:47:a7:49:61:9b:8a:d4:4a: 2e:05:af:cb:bb:1b:b0:94:22:ec:55:31:e2:e7:60: 53:65:98:fb:5c:ce:9e:b2:45:7f:34:fe:b4:17:9a: ac:72:41:da:f8:65:3f:8e:4b:c5:8e:71:07:2c:32: b3:71:28:38:33:36:24:bd:d1:dc:26:95:65:a7:2f: ea:ed:aa:b2:9c:6a:41:09:08:f5:ea:d8:24:d5:a1: e8:6c:31:44:8b:d4:dd:25:ac:9c:81:db:ff:a5:45: 74:4a:3b:ce:40:2a:05:f5:c2:4d:2e:82:2a:10:4f: 09:ca:2e:9b:83:94:55:ca:72:be:7c:31:93:e0:5b: 67:62:e9:a3:82:e4:35:a5:1f:37:00:ab:a9:5c:c1: 2a:93:88:da:88:46:36:0f:5b:82:be:78:d3:4c:5d: df:69:04:31:d6:3a:8e:67:ac:78:69:61:de:28:86: 70:e5:f1:27:b9:6b:42:8a:f5:c1:76:1b:fc:e6:10: a5:fb:de:b0:8a:71:17:74:76:91:e5:bd:ed:8d:4d: e7:6a:a9:8d:29:07:40:3a:4e:73:e2:9f:0e:ce:ce: 10:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E6:DF:7D:32:59:A8:08:63:9F:D6:F6:B4:1E:5F:14:D7:F8:4D:5A X509v3 Authority Key Identifier: keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/SebffTJZqAhjn9b2tB5fFNf4TVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:e9c0:8200::/40 Signature Algorithm: sha256WithRSAEncryption ae:02:6d:85:11:08:33:75:9a:bf:5a:0e:e1:c5:e6:57:04:f4: 0f:a8:3c:58:8f:f0:9d:e9:0a:c2:eb:2b:09:23:28:ab:aa:85: 31:e9:41:33:b6:9e:37:b9:4f:f7:fe:c3:82:d1:2b:9b:7d:d8: 0a:5d:8d:e4:2e:51:b8:7a:7a:53:d7:21:90:68:7d:ee:1c:02: 2e:34:51:21:91:45:be:00:de:20:cb:32:b2:55:84:1d:97:e2: 7d:3c:84:1f:c5:e5:36:5d:35:18:73:8f:3d:5b:90:8d:d2:09: 9a:49:94:a5:be:4f:92:89:b2:1e:78:bb:38:0b:c4:b8:cb:06: 0c:83:20:36:c7:18:7f:60:7d:e9:ce:f9:db:05:1a:cc:07:5f: ad:3b:0f:14:21:26:3e:89:51:52:5a:b0:36:84:3c:01:eb:e1: 62:4d:36:69:f5:c7:a1:9f:c4:c5:50:85:4a:33:86:a8:bb:60: a4:40:a5:10:f5:35:31:3d:57:2c:77:5e:dd:b2:f5:12:15:5f: ce:d2:4a:e9:ff:b1:a4:2a:74:e0:01:f7:42:62:2e:bd:43:47: 24:a0:cf:94:6f:5f:c5:0d:f5:f6:5a:bd:36:60:09:d8:5e:3e: 92:75:84:b5:08:9b:95:53:35:df:df:60:bf:6f:92:eb:8d:fe: 3c:bb:7c:6e -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+N9GoBwj+SygjYp3pvYYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlODE5OWU4MzQ1NTY3ZDg1MTZiNzg4ZmUyZTFkMzk3ZTI3 YzczYTQwHhcNMjYwMTAyMTAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWU2ZGY3ZDMyNTlhODA4NjM5ZmQ2ZjZiNDFlNWYxNGQ3Zjg0ZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti3qN8S9mnH2LM40Nk0jATy5e4t1 /ooZjchRvM36TLG7UjrER6dJYZuK1EouBa/LuxuwlCLsVTHi52BTZZj7XM6eskV/ NP60F5qsckHa+GU/jkvFjnEHLDKzcSg4MzYkvdHcJpVlpy/q7aqynGpBCQj16tgk 1aHobDFEi9TdJaycgdv/pUV0SjvOQCoF9cJNLoIqEE8Jyi6bg5RVynK+fDGT4Ftn YumjguQ1pR83AKupXMEqk4jaiEY2D1uCvnjTTF3faQQx1jqOZ6x4aWHeKIZw5fEn uWtCivXBdhv85hCl+96winEXdHaR5b3tjU3naqmNKQdAOk5z4p8Ozs4QYwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEnm330yWagIY5/W9rQeXxTX+E1aMB8GA1UdIwQY MBaAFP6Bmeg0VWfYUWt4j+Lh05fifHOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQt ODQwY2NiMzRiM2Y1LzEvU2ViZmZUSlpxQWhqbjliMnRCNWZGTmY0VFZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQtODQwY2NiMzRiM2Y1 LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXpwIIw DQYJKoZIhvcNAQELBQADggEBAK4CbYURCDN1mr9aDuHF5lcE9A+oPFiP8J3pCsLr KwkjKKuqhTHpQTO2nje5T/f+w4LRK5t92ApdjeQuUbh6elPXIZBofe4cAi40USGR Rb4A3iDLMrJVhB2X4n08hB/F5TZdNRhzjz1bkI3SCZpJlKW+T5KJsh54uzgLxLjL BgyDIDbHGH9gfenO+dsFGswHX607DxQhJj6JUVJasDaEPAHr4WJNNmn1x6GfxMVQ hUozhqi7YKRApRD1NTE9Vyx3Xt2y9RIVX87SSun/saQqdOAB90JiLr1DRySgz5Rv X8UN9fZavTZgCdhePpJ1hLUIm5VTNd/fYL9vkuuN/jy7fG4= -----END CERTIFICATE-----Generated at Sat Jan 3 03:23:02 2026 by rpki-client