This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/SkLvZ5Dbszu5Ja6SZaZJdMQE4pc.roa File: SkLvZ5Dbszu5Ja6SZaZJdMQE4pc.roa (raw, json) Hash identifier: 9kMmjyII7OTjyzZhQiyLV/xT9EZKQBXnIUw2KfgEoV8= Subject key identifier: 4A:42:EF:67:90:DB:B3:3B:B9:25:AE:92:65:A6:49:74:C4:04:E2:97 Certificate issuer: /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1 Certificate serial: 019B7C80BF5F361F7DF9B5025C181AF61417 Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/SkLvZ5Dbszu5Ja6SZaZJdMQE4pc.roa Signing time: Fri 02 Jan 2026 02:19:30 +0000 ROA not before: Fri 02 Jan 2026 02:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48635 IP address blocks: 2001:678:3a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:bf:5f:36:1f:7d:f9:b5:02:5c:18:1a:f6:14:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1 Validity Not Before: Jan 2 02:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a42ef6790dbb33bb925ae9265a64974c404e297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ac:11:73:af:a1:b4:bf:85:37:c4:09:df:b5: 42:fc:6e:a9:7a:fa:f1:96:c7:dd:c2:d9:a3:95:16: b3:80:88:1d:1d:7c:fb:52:f9:55:34:82:2d:af:8b: 71:3e:bf:e1:2b:69:3b:06:ca:9c:71:91:70:bd:f6: 47:2a:ff:1a:e3:33:05:c1:ea:d4:9c:73:83:35:1e: 2c:1e:8a:31:ef:de:92:2b:03:e3:d2:c5:0c:00:5e: 2c:1c:0a:cc:e0:b2:30:1a:66:62:30:9a:0f:98:06: 02:d2:0c:60:b9:ae:93:7f:ed:65:f6:9b:77:66:ec: 2a:1d:0d:45:4d:a5:2b:92:2c:50:90:93:7a:46:ad: 55:e1:eb:a3:70:2a:6e:9e:4e:96:0e:77:e3:e5:0b: 00:a6:83:39:fd:d2:67:39:d3:cb:34:b4:9b:11:8c: 66:eb:c3:06:4d:29:12:4b:f4:93:6d:61:6f:f5:0d: 34:31:fd:b9:9c:da:11:4d:04:bb:75:99:3f:b8:55: ee:fe:90:d8:62:7c:a4:f3:ab:67:ad:60:33:51:ff: 56:80:fc:e1:3c:ce:a8:77:7a:fe:fc:ef:56:60:c4: 25:3b:e7:b5:c6:09:97:02:c5:cb:34:89:22:1a:60: 1c:1b:85:2a:7b:36:c5:3d:12:ee:55:18:4f:87:08: 14:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:42:EF:67:90:DB:B3:3B:B9:25:AE:92:65:A6:49:74:C4:04:E2:97 X509v3 Authority Key Identifier: keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/SkLvZ5Dbszu5Ja6SZaZJdMQE4pc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:3a4::/48 Signature Algorithm: sha256WithRSAEncryption 19:cf:41:b8:c0:e7:70:d1:c3:ce:36:b2:11:c6:3e:ac:c5:de: 07:dc:ae:30:e1:4a:38:18:70:fd:d3:95:cd:46:a3:1f:35:32: 5d:57:c7:00:4e:d8:bc:a3:dd:9d:6f:6a:e7:f2:30:fc:f2:55: 75:80:12:49:cc:1e:e8:9b:b5:39:fb:49:b7:f1:1a:c2:84:07: c1:0e:1a:ca:c9:24:ea:e4:5b:1b:a3:cc:ed:45:19:52:8b:e3: a9:3d:90:7d:d0:a6:d3:0b:4d:1c:a4:5f:f0:ea:59:d9:eb:4a: 69:cf:cc:aa:ba:cc:64:c3:64:21:f5:e9:f0:58:41:45:60:85: 05:d7:23:39:f3:d0:34:e4:e2:52:c9:24:ff:7e:a0:89:b1:af: 79:65:0f:70:05:7a:6f:cd:5a:60:da:26:97:dc:37:0f:36:95: bc:fa:f9:96:85:17:ad:ef:e4:53:36:bf:89:f7:55:6c:a9:2e: 7b:1e:d5:59:4a:9e:12:9e:4b:de:de:39:7f:a8:e8:80:f2:1e: 0b:86:1d:68:7e:63:d0:86:c3:ab:92:6a:0e:70:95:db:9a:dd: fd:18:89:2d:d1:d6:26:7f:a2:00:d2:c8:3e:38:cb:4b:88:26: 2f:28:69:72:32:ad:cd:5b:51:12:97:28:ca:9f:53:13:10:18: 7a:5d:5d:33 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gL9fNh99+bUCXBga9hQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNmUyZTY5NjZlMDZhYjI1Y2EwZTFkYTY2ZTFlM2Q2NDI0 OGIzYTEwHhcNMjYwMTAyMDIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTQyZWY2NzkwZGJiMzNiYjkyNWFlOTI2NWE2NDk3NGM0MDRlMjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKwRc6+htL+FN8QJ37VC/G6pevrx lsfdwtmjlRazgIgdHXz7UvlVNIItr4txPr/hK2k7BsqccZFwvfZHKv8a4zMFwerU nHODNR4sHoox796SKwPj0sUMAF4sHArM4LIwGmZiMJoPmAYC0gxgua6Tf+1l9pt3 ZuwqHQ1FTaUrkixQkJN6Rq1V4eujcCpunk6WDnfj5QsApoM5/dJnOdPLNLSbEYxm 68MGTSkSS/STbWFv9Q00Mf25nNoRTQS7dZk/uFXu/pDYYnyk86tnrWAzUf9WgPzh PM6od3r+/O9WYMQlO+e1xgmXAsXLNIkiGmAcG4UqezbFPRLuVRhPhwgUmwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEpC72eQ27M7uSWukmWmSXTEBOKXMB8GA1UdIwQY MBaAFH5uLmlm4GqyXKDh2mbh49ZCSLOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm00dWFXYmdhckpjb09IYVp1SGoxa0pJczZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hNzUzOGEtNjliZS00ZmJlLTk3ZTEt ODdkOTdlMmFhZGM0LzEvU2tMdlo1RGJzenU1SmE2U1phWkpkTVFFNHBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9hNzUzOGEtNjliZS00ZmJlLTk3ZTEtODdkOTdlMmFhZGM0 LzEvZm00dWFXYmdhckpjb09IYVp1SGoxa0pJczZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAOk MA0GCSqGSIb3DQEBCwUAA4IBAQAZz0G4wOdw0cPONrIRxj6sxd4H3K4w4Uo4GHD9 05XNRqMfNTJdV8cATti8o92db2rn8jD88lV1gBJJzB7om7U5+0m38RrChAfBDhrK ySTq5Fsbo8ztRRlSi+OpPZB90KbTC00cpF/w6lnZ60ppz8yqusxkw2Qh9enwWEFF YIUF1yM589A05OJSyST/fqCJsa95ZQ9wBXpvzVpg2iaX3DcPNpW8+vmWhRet7+RT Nr+J91VsqS57HtVZSp4Snkve3jl/qOiA8h4Lhh1ofmPQhsOrkmoOcJXbmt39GIkt 0dYmf6IA0sg+OMtLiCYvKGlyMq3NW1ESlyjKn1MTEBh6XV0z -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:16 2026 by rpki-client