This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/SljFkDXNsq7mf2JKVKtWNfaMHYI.roa
File: SljFkDXNsq7mf2JKVKtWNfaMHYI.roa (raw, json)
Hash identifier: UQDsXFS6OQOvy/ZzRN024zvrl2KSRwaHGDpLX5AP3Qo=
Subject key identifier: 4A:58:C5:90:35:CD:B2:AE:E6:7F:62:4A:54:AB:56:35:F6:8C:1D:82
Certificate issuer: /CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Certificate serial: 019B797F10793AADEB51711052D64A9514EE
Authority key identifier: 1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/SljFkDXNsq7mf2JKVKtWNfaMHYI.roa
Signing time: Thu 01 Jan 2026 12:18:48 +0000
ROA not before: Thu 01 Jan 2026 12:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211638
IP address blocks: 2001:678:f0c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:10:79:3a:ad:eb:51:71:10:52:d6:4a:95:14:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Validity
Not Before: Jan 1 12:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a58c59035cdb2aee67f624a54ab5635f68c1d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:12:f9:58:ef:2b:1c:2c:82:ac:08:25:be:
92:11:4f:90:ee:c6:99:fa:52:d2:5e:35:a7:0f:8f:
ec:12:25:c5:b8:47:ba:73:d4:34:a6:e2:6b:4d:ce:
be:2f:1c:a7:39:a0:e4:b8:e3:6f:16:f3:9b:a6:38:
db:52:d9:2c:92:df:7a:54:75:ad:07:ea:ef:0a:7f:
61:76:8d:25:8a:e5:78:8e:ff:90:c5:cb:71:f7:be:
1a:65:45:d6:38:66:c4:b0:44:ac:10:8d:0a:d8:2b:
b3:0c:de:49:47:ef:dc:4b:e7:63:7f:9c:78:df:76:
ee:b7:2a:33:75:74:f7:09:d9:0d:d4:60:32:4b:ad:
29:2b:59:97:25:ca:09:57:1b:9c:c4:d0:c0:1e:77:
de:13:51:5e:37:c0:6b:1d:30:8e:66:97:a0:5d:70:
1f:d5:16:48:cf:fa:94:c7:66:f8:fd:36:f4:07:08:
ec:54:4d:a0:88:30:6f:86:81:13:f6:51:74:53:45:
42:52:f5:ac:48:3a:c3:47:7d:2a:53:ee:e8:e9:2a:
1a:89:04:93:c6:40:b5:47:55:b5:6f:6d:c1:e8:72:
52:e1:97:f8:45:9c:39:44:37:1c:ce:04:c3:ce:69:
ec:24:36:cc:1f:e5:2f:89:ce:15:7b:89:b4:08:3a:
fc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:58:C5:90:35:CD:B2:AE:E6:7F:62:4A:54:AB:56:35:F6:8C:1D:82
X509v3 Authority Key Identifier:
keyid:1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/SljFkDXNsq7mf2JKVKtWNfaMHYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f0c::/48
Signature Algorithm: sha256WithRSAEncryption
48:d8:06:73:5e:c2:76:90:96:18:ce:b2:81:f9:f6:d0:a7:ad:
68:38:e8:f3:00:ca:ad:cd:30:45:ea:9c:c4:e9:69:0d:b8:4e:
b0:10:d4:8c:97:f1:dd:b6:c3:f9:a8:3a:23:b4:44:fd:1e:85:
d6:bb:40:b2:64:c4:3b:10:f7:ed:69:fc:b2:7c:e7:e3:f9:ce:
c1:3b:87:22:8a:d6:b5:d3:25:72:03:d8:df:27:81:b7:bf:6d:
b9:4e:8f:9e:ae:09:00:cf:f9:63:71:ef:4e:11:bb:48:0d:9c:
1d:bc:43:0b:fa:3c:90:0a:74:0e:2b:9a:04:98:03:79:59:32:
83:ff:67:85:f8:94:57:03:07:04:3c:22:9b:ab:3d:6c:dd:da:
f5:c6:63:59:51:af:94:97:a8:01:b2:e9:82:c1:ad:4c:c0:f5:
1b:4b:85:21:9b:7a:cc:b2:72:e3:1e:c1:57:df:a6:c9:27:09:
87:fb:a3:ad:0c:53:af:33:20:c6:ba:da:2a:4c:2b:35:f4:01:
2f:43:67:3b:2a:cd:7a:d6:70:f2:df:f3:28:fb:81:ef:4a:21:
f1:de:7e:79:ed:95:1b:9a:3b:f1:f7:3d:9f:62:0d:e6:9f:bc:
e2:e5:53:e9:1b:ad:d1:78:a0:8f:e0:d1:b1:15:78:5c:dc:a5:
4f:4a:41:ea
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt5fxB5Oq3rUXEQUtZKlRTuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYjVjMWJiYWVkNDRjOGI2YWUzZjJiNTY2ZDAxY2MyNThk
ZmMyY2UwHhcNMjYwMTAxMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTU4YzU5MDM1Y2RiMmFlZTY3ZjYyNGE1NGFiNTYzNWY2OGMxZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8ES+VjvKxwsgqwIJb6SEU+Q7saZ
+lLSXjWnD4/sEiXFuEe6c9Q0puJrTc6+LxynOaDkuONvFvObpjjbUtkskt96VHWt
B+rvCn9hdo0liuV4jv+Qxctx974aZUXWOGbEsESsEI0K2CuzDN5JR+/cS+djf5x4
33butyozdXT3CdkN1GAyS60pK1mXJcoJVxucxNDAHnfeE1FeN8BrHTCOZpegXXAf
1RZIz/qUx2b4/Tb0BwjsVE2giDBvhoET9lF0U0VCUvWsSDrDR30qU+7o6SoaiQST
xkC1R1W1b23B6HJS4Zf4RZw5RDcczgTDzmnsJDbMH+Uvic4Ve4m0CDr8ywIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEpYxZA1zbKu5n9iSlSrVjX2jB2CMB8GA1UdIwQY
MBaAFB+1wbuu1EyLauPytWbQHMJY38LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDdYQnU2N1VUSXRxNF9LMVp0QWN3bGpmd3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zYzRiNTMtZWNhMy00NTk5LTlkOTQt
ZDcxZmM5MGM3YjE2LzEvU2xqRmtEWE5zcTdtZjJKS1ZLdFdOZmFNSFlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8zYzRiNTMtZWNhMy00NTk5LTlkOTQtZDcxZmM5MGM3YjE2
LzEvSDdYQnU2N1VUSXRxNF9LMVp0QWN3bGpmd3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA8M
MA0GCSqGSIb3DQEBCwUAA4IBAQBI2AZzXsJ2kJYYzrKB+fbQp61oOOjzAMqtzTBF
6pzE6WkNuE6wENSMl/HdtsP5qDojtET9HoXWu0CyZMQ7EPftafyyfOfj+c7BO4ci
ita10yVyA9jfJ4G3v225To+ergkAz/ljce9OEbtIDZwdvEML+jyQCnQOK5oEmAN5
WTKD/2eF+JRXAwcEPCKbqz1s3dr1xmNZUa+Ul6gBsumCwa1MwPUbS4Uhm3rMsnLj
HsFX36bJJwmH+6OtDFOvMyDGutoqTCs19AEvQ2c7Ks161nDy3/Mo+4HvSiHx3n55
7ZUbmjvx9z2fYg3mn7zi5VPpG63ReKCP4NGxFXhc3KVPSkHq
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:13:17 2026 by rpki-client