This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa File: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (raw, json) Hash identifier: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY= Subject key identifier: 6D:28:BD:5D:B1:DB:9E:C8:24:F5:19:FA:2A:44:64:7E:A3:CB:0D:CB Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019B78A37740D4A23CD05E4161DF25A98D8D Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61163 IP address blocks: 2a03:f87:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:77:40:d4:a2:3c:d0:5e:41:61:df:25:a9:8d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d28bd5db1db9ec824f519fa2a44647ea3cb0dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b6:a0:6f:02:24:cc:b7:77:c8:19:ad:85:b4: 1d:84:29:e3:71:0e:31:25:da:58:7f:17:2e:b4:28: 84:1f:80:36:e9:f3:2b:0d:ea:25:5a:ca:09:a5:6f: ac:d5:68:49:fc:a6:10:39:4e:5b:38:0f:41:db:ff: 2a:83:0b:60:34:2a:df:a4:34:d1:3f:37:dc:6f:08: 73:a3:78:95:fc:ae:4a:d8:98:37:64:f0:ee:a4:c8: 65:46:26:73:d2:c6:26:3c:cd:67:b6:97:33:bf:99: ce:a5:25:e6:b6:be:18:d6:b7:9b:0f:f7:2d:e8:dd: da:fa:98:61:cf:9d:37:c2:cf:a0:17:44:38:42:92: f0:bd:e9:c2:60:a1:e4:79:6d:a1:2d:71:14:1a:d8: 7e:91:bd:14:7d:29:b0:fd:3a:f9:13:42:9b:0f:58: b0:4c:ae:bb:34:49:23:15:f6:dd:e5:99:e1:28:7e: 70:35:54:20:52:47:0a:1c:19:19:90:56:9f:70:e5: 43:bd:fb:3d:82:e2:f4:be:c1:2a:01:e9:77:6a:b7: 92:aa:ea:60:77:88:3f:00:a6:ce:59:66:ee:8b:a7: ef:cc:b8:5f:ba:47:5c:47:5e:1d:a6:17:9f:33:5f: 0f:41:b8:9e:92:86:c5:a1:ff:f1:85:56:1c:8c:f1: 76:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:28:BD:5D:B1:DB:9E:C8:24:F5:19:FA:2A:44:64:7E:A3:CB:0D:CB X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:f87:3::/48 Signature Algorithm: sha256WithRSAEncryption 25:99:e2:a7:61:a3:d7:6a:92:c9:70:e6:8c:92:5b:d7:0a:06: a9:7f:a2:97:9c:f4:9d:8c:84:d2:8a:e1:61:92:27:86:0e:27: 1a:bc:cc:1c:40:4e:8e:5f:94:83:8a:f9:ed:bc:cb:bb:1b:9f: 8a:0c:45:93:69:9b:80:3d:21:e8:64:4a:98:68:f4:53:b3:99: af:01:1c:3f:a4:b8:fb:88:06:85:8a:90:ca:7a:da:17:70:5b: d9:c8:e9:95:dd:e1:dd:22:26:c8:20:da:dd:61:cc:bd:22:f5: 5b:e1:e4:da:a9:a5:5b:bf:f4:7c:7f:50:0e:dc:1d:fe:28:49: 6e:41:69:aa:78:e3:b8:68:99:a4:5f:bf:c4:e0:68:0b:27:c3: 8c:cf:7b:83:ae:e6:fa:76:98:32:09:e4:43:c6:39:ab:8f:e9: a7:16:77:fe:a8:32:16:97:fd:00:9e:59:94:06:f1:89:51:cc: 5d:05:be:19:6c:bd:2d:11:c5:20:e8:a5:8f:20:e1:0a:e5:f2: 70:9f:57:7d:ae:3f:97:1e:c0:c8:e4:f8:61:e3:39:b0:4a:21: 2b:5a:43:41:9b:6b:4d:4e:56:6f:bc:99:4b:e0:d3:b5:cc:df: 86:cd:0d:8b:bb:38:c6:c6:ab:a9:65:3b:16:a2:4f:c0:b2:75: 95:8e:98:1a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4o3dA1KI80F5BYd8lqY2NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDI4YmQ1ZGIxZGI5ZWM4MjRmNTE5ZmEyYTQ0NjQ3ZWEzY2IwZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuragbwIkzLd3yBmthbQdhCnjcQ4x JdpYfxcutCiEH4A26fMrDeolWsoJpW+s1WhJ/KYQOU5bOA9B2/8qgwtgNCrfpDTR Pzfcbwhzo3iV/K5K2Jg3ZPDupMhlRiZz0sYmPM1ntpczv5nOpSXmtr4Y1rebD/ct 6N3a+phhz503ws+gF0Q4QpLwvenCYKHkeW2hLXEUGth+kb0UfSmw/Tr5E0KbD1iw TK67NEkjFfbd5ZnhKH5wNVQgUkcKHBkZkFafcOVDvfs9guL0vsEqAel3areSqupg d4g/AKbOWWbui6fvzLhfukdcR14dphefM18PQbiekobFof/xhVYcjPF28wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG0ovV2x257IJPUZ+ipEZH6jyw3LMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvYlNpOVhiSGJuc2drOVJuNktrUmtmcVBMRGNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgMPhwAD MA0GCSqGSIb3DQEBCwUAA4IBAQAlmeKnYaPXapLJcOaMklvXCgapf6KXnPSdjITS iuFhkieGDicavMwcQE6OX5SDivntvMu7G5+KDEWTaZuAPSHoZEqYaPRTs5mvARw/ pLj7iAaFipDKetoXcFvZyOmV3eHdIibIINrdYcy9IvVb4eTaqaVbv/R8f1AO3B3+ KEluQWmqeOO4aJmkX7/E4GgLJ8OMz3uDrub6dpgyCeRDxjmrj+mnFnf+qDIWl/0A nlmUBvGJUcxdBb4ZbL0tEcUg6KWPIOEK5fJwn1d9rj+XHsDI5Phh4zmwSiErWkNB m2tNTlZvvJlL4NO1zN+GzQ2LuzjGxqupZTsWok/AsnWVjpga -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:33 2026 by rpki-client