This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/smKaRyBksPR8VVMeNllW4CrXk_U.roa File: smKaRyBksPR8VVMeNllW4CrXk_U.roa (raw, json) Hash identifier: dXCbu0CsSAQ16fQlnuw0mfD9ky7E36GElPP7CmVSu8Y= Subject key identifier: B2:62:9A:47:20:64:B0:F4:7C:55:53:1E:36:59:56:E0:2A:D7:93:F5 Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc Certificate serial: 019B7BA4DE5988D209832D52A09C47263182 Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/smKaRyBksPR8VVMeNllW4CrXk_U.roa Signing time: Thu 01 Jan 2026 22:19:20 +0000 ROA not before: Thu 01 Jan 2026 22:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36040 IP address blocks: 2a14:1000:2::/64 maxlen: 64 2a14:1000:2:1::/64 maxlen: 64 2a14:1000:2:2::/64 maxlen: 64 2a14:1000:2:3::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:de:59:88:d2:09:83:2d:52:a0:9c:47:26:31:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc Validity Not Before: Jan 1 22:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2629a472064b0f47c55531e365956e02ad793f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d7:d3:fc:33:ea:cc:d0:b8:2b:94:c4:61:0f: f7:85:f9:38:6d:e1:c0:02:f2:25:12:a7:4e:5b:08: bf:9c:41:23:32:e5:8e:20:52:4f:af:b5:bb:1d:36: 40:1c:d2:d2:fa:b2:0b:e9:2d:18:80:fe:e2:5a:73: 05:ba:ef:1d:03:56:1d:c9:00:e9:fb:63:54:2d:ef: 51:03:99:8d:25:fc:e4:8b:69:96:b1:e9:59:91:d6: ab:03:45:bf:3f:7d:f4:94:bf:53:b2:8b:e7:ee:a7: 8c:08:6c:12:d5:22:6e:a4:02:f5:5c:1f:98:51:75: 4a:ae:13:69:37:a0:59:cb:d9:cc:f7:82:6c:41:8e: 91:4f:c0:ba:49:c9:16:3a:68:a8:01:c5:e1:8d:4e: 0d:26:9a:cc:e7:f9:c4:35:27:ee:98:d7:d5:fe:be: 3f:6e:44:8b:d8:3a:c9:a2:7d:f0:35:5d:75:c7:f1: 69:3a:25:38:f3:df:04:3f:d5:2b:15:3c:d7:ed:39: c2:a1:8c:b4:38:ce:72:45:37:5e:19:28:09:e9:0f: 4f:46:da:2a:fb:72:02:bf:af:10:32:49:0d:20:58: 79:ba:8f:db:12:1b:c5:82:e8:41:f6:e1:5a:36:98: e6:e4:d9:5d:18:c9:c9:de:ff:71:f1:19:b2:78:52: 5e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:62:9A:47:20:64:B0:F4:7C:55:53:1E:36:59:56:E0:2A:D7:93:F5 X509v3 Authority Key Identifier: keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/smKaRyBksPR8VVMeNllW4CrXk_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1000:2::/62 Signature Algorithm: sha256WithRSAEncryption 3a:ef:42:32:c4:e1:48:6e:60:4a:83:59:be:fe:b0:12:18:1a: 6d:fc:ad:62:45:74:94:3c:ce:de:7c:7c:32:a9:6c:c2:86:92: 32:86:2c:8f:ea:fd:9d:26:c9:b9:7f:6e:0b:74:94:9d:09:8e: 5f:35:fe:d2:4c:74:f1:14:13:ab:3e:28:a7:3d:f7:54:c6:dd: 24:a0:8c:64:41:5a:d3:65:c5:e2:3b:9e:f9:55:9b:48:c5:57: 17:1c:ff:11:9c:95:3e:12:e6:8c:6e:e3:9b:59:46:91:1e:95: 45:5f:dd:6a:c9:e0:c2:88:bc:2d:d5:90:c1:39:76:b8:26:51: 22:31:09:18:0c:8d:fd:a3:ba:2c:8d:f7:83:99:a2:99:57:91: d0:ba:c0:bf:fa:4d:31:13:9c:d4:a3:cd:8b:c1:39:a9:03:5a: d5:81:1d:5b:01:ba:6e:c6:09:9a:30:4d:31:95:60:c4:a9:b1: 32:43:77:a2:5c:65:95:fe:8e:7b:ea:7c:74:bf:21:f1:36:28: 1a:34:08:90:b2:c7:68:aa:aa:87:af:b7:f0:8f:ea:80:72:a4: b1:8b:fb:54:9c:15:f0:68:88:c3:07:b4:1a:81:db:73:21:4a: 3d:53:b0:62:ed:c2:b5:73:88:ef:b9:18:d8:0c:26:56:98:60: 4f:fe:24:75 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt7pN5ZiNIJgy1SoJxHJjGCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MmQ5ZjRkNmFmZjM4M2M1OWU5ZGU3ODAyZGJlZTAyNGVl ODg3ZGMwHhcNMjYwMTAxMjIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjYyOWE0NzIwNjRiMGY0N2M1NTUzMWUzNjU5NTZlMDJhZDc5M2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tfT/DPqzNC4K5TEYQ/3hfk4beHA AvIlEqdOWwi/nEEjMuWOIFJPr7W7HTZAHNLS+rIL6S0YgP7iWnMFuu8dA1YdyQDp +2NULe9RA5mNJfzki2mWselZkdarA0W/P330lL9Tsovn7qeMCGwS1SJupAL1XB+Y UXVKrhNpN6BZy9nM94JsQY6RT8C6SckWOmioAcXhjU4NJprM5/nENSfumNfV/r4/ bkSL2DrJon3wNV11x/FpOiU4898EP9UrFTzX7TnCoYy0OM5yRTdeGSgJ6Q9PRtoq +3ICv68QMkkNIFh5uo/bEhvFguhB9uFaNpjm5NldGMnJ3v9x8RmyeFJeOwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFLJimkcgZLD0fFVTHjZZVuAq15P1MB8GA1UdIwQY MBaAFAQtn01q/zg8WeneeALb7gJO6IfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEt YWFlMTQ0NzYwM2MwLzEvc21LYVJ5QmtzUFI4VlZNZU5sbFc0Q3JYa19VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEtYWFlMTQ0NzYwM2Mw LzEvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkCKhQQAAAC AAAwDQYJKoZIhvcNAQELBQADggEBADrvQjLE4UhuYEqDWb7+sBIYGm38rWJFdJQ8 zt58fDKpbMKGkjKGLI/q/Z0mybl/bgt0lJ0Jjl81/tJMdPEUE6s+KKc991TG3SSg jGRBWtNlxeI7nvlVm0jFVxcc/xGclT4S5oxu45tZRpEelUVf3WrJ4MKIvC3VkME5 drgmUSIxCRgMjf2juiyN94OZoplXkdC6wL/6TTETnNSjzYvBOakDWtWBHVsBum7G CZowTTGVYMSpsTJDd6JcZZX+jnvqfHS/IfE2KBo0CJCyx2iqqoevt/CP6oBypLGL +1ScFfBoiMMHtBqB23MhSj1TsGLtwrVziO+5GNgMJlaYYE/+JHU= -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:19 2026 by rpki-client