This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa File: sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa (raw, json) Hash identifier: Z9uXxxsZvFu7pBxXBLrY1eCir1sHPNXI5kimRZXqQpE= Subject key identifier: B1:B1:8A:22:26:1A:2F:50:32:8B:76:BF:AA:AA:34:5F:D2:81:1E:7E Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739 Certificate serial: 019B79ECA115BB916DADD2438B919C1E8F26 Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa Signing time: Thu 01 Jan 2026 14:18:29 +0000 ROA not before: Thu 01 Jan 2026 14:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211088 IP address blocks: 2001:678:f94::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a1:15:bb:91:6d:ad:d2:43:8b:91:9c:1e:8f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a16747018e944e405a6d23a564701a155f43739 Validity Not Before: Jan 1 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1b18a22261a2f50328b76bfaaaa345fd2811e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c6:08:3b:71:98:c6:09:b6:db:1b:1f:55:88: 64:82:18:63:ea:ae:99:7f:60:0e:8d:91:9c:68:69: 04:82:56:e9:d6:c7:07:1e:ed:4d:f6:11:35:93:c2: 74:a3:cb:fd:5c:8b:4b:7b:b9:2d:0c:25:f0:56:80: 23:f1:2d:e3:9f:df:81:5c:a1:73:1a:6d:c0:ab:d7: 90:a2:16:09:c6:eb:ac:b2:17:b6:80:b7:63:8a:78: da:29:13:67:18:d3:3c:17:7d:6e:30:7a:44:97:f9: 2e:7a:d8:51:7b:9e:14:1b:8d:e6:bb:9f:5d:49:3c: 22:5f:e5:af:d8:2b:c7:ab:ac:f2:78:89:c0:72:06: ca:21:70:ca:13:63:ca:02:a7:83:3f:26:25:ce:b8: 31:64:a4:44:19:1c:5d:eb:8a:7a:51:8b:9c:02:4a: a5:0c:3c:58:84:80:2d:17:72:77:c2:b1:cb:aa:db: 97:c6:35:2c:2b:77:01:38:d7:c1:9d:5b:a5:42:b9: 2b:86:b9:3c:4c:04:57:61:78:a0:04:c0:a1:43:4b: ba:6f:23:b8:f8:c3:5f:f1:4d:08:c1:ba:bb:15:ca: 1d:bb:5a:11:b7:b7:b5:04:b8:c3:77:cc:42:75:55: 77:7b:9a:0c:54:c9:51:1f:8c:25:db:b7:05:8a:1b: 05:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B1:8A:22:26:1A:2F:50:32:8B:76:BF:AA:AA:34:5F:D2:81:1E:7E X509v3 Authority Key Identifier: keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:f94::/48 Signature Algorithm: sha256WithRSAEncryption 07:24:92:5f:a0:3a:85:6b:de:c6:3e:21:e0:cd:73:45:4b:8b: 62:e8:50:0c:99:29:2e:b5:69:42:21:7f:41:76:13:5f:2d:58: a6:de:f4:13:7f:4a:f1:08:c3:c0:d0:ec:16:9e:7e:a6:82:9c: 0c:12:b4:c6:1e:6f:42:5e:3d:c6:3a:05:51:74:f8:44:34:b1: c7:08:39:c8:52:0f:d8:c4:f2:c4:62:eb:48:ac:1f:68:a5:76: 5b:e1:f1:0d:08:b0:dc:3d:2d:95:89:0f:36:6d:85:11:b0:07: 2a:87:63:7c:d9:30:b0:23:60:66:27:dc:7f:35:02:91:da:6d: 78:26:6b:7a:ef:df:e2:64:8c:61:44:e6:9d:57:30:0e:68:00: 5d:fc:d5:fd:5c:9e:56:0f:90:69:48:c0:80:28:fc:45:64:0a: 0c:7a:3f:58:df:4b:d8:31:56:cf:e9:64:9c:cd:26:69:ac:b2: c5:7e:0a:c4:91:a4:01:8e:ff:a7:5d:2c:4c:f9:db:c4:e8:66: d6:83:16:0b:63:e4:f7:8c:f0:aa:40:18:3d:0e:9a:7f:80:56: 45:bd:73:9e:05:fc:e9:9e:72:47:fa:2b:da:fb:a1:10:45:3e: 8e:45:e6:e6:11:27:d1:1a:4d:70:9b:93:cb:13:18:29:0f:e7: ec:71:c0:af -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57KEVu5FtrdJDi5GcHo8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMTY3NDcwMThlOTQ0ZTQwNWE2ZDIzYTU2NDcwMWExNTVm NDM3MzkwHhcNMjYwMTAxMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWIxOGEyMjI2MWEyZjUwMzI4Yjc2YmZhYWFhMzQ1ZmQyODExZTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MYIO3GYxgm22xsfVYhkghhj6q6Z f2AOjZGcaGkEglbp1scHHu1N9hE1k8J0o8v9XItLe7ktDCXwVoAj8S3jn9+BXKFz Gm3Aq9eQohYJxuusshe2gLdjinjaKRNnGNM8F31uMHpEl/kuethRe54UG43mu59d STwiX+Wv2CvHq6zyeInAcgbKIXDKE2PKAqeDPyYlzrgxZKREGRxd64p6UYucAkql DDxYhIAtF3J3wrHLqtuXxjUsK3cBONfBnVulQrkrhrk8TARXYXigBMChQ0u6byO4 +MNf8U0Iwbq7Fcodu1oRt7e1BLjDd8xCdVV3e5oMVMlRH4wl27cFihsF0wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLGxiiImGi9QMot2v6qqNF/SgR5+MB8GA1UdIwQY MBaAFAoWdHAY6UTkBabSOlZHAaFV9Dc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTA2OTAtOTYzNy00ZmM1LWI0MWIt ZDlkMGFhMjhhYjJiLzEvc2JHS0lpWWFMMUF5aTNhX3FxbzBYOUtCSG40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hZTA2OTAtOTYzNy00ZmM1LWI0MWItZDlkMGFhMjhhYjJi LzEvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA+U MA0GCSqGSIb3DQEBCwUAA4IBAQAHJJJfoDqFa97GPiHgzXNFS4ti6FAMmSkutWlC IX9BdhNfLVim3vQTf0rxCMPA0OwWnn6mgpwMErTGHm9CXj3GOgVRdPhENLHHCDnI Ug/YxPLEYutIrB9opXZb4fENCLDcPS2ViQ82bYURsAcqh2N82TCwI2BmJ9x/NQKR 2m14Jmt679/iZIxhROadVzAOaABd/NX9XJ5WD5BpSMCAKPxFZAoMej9Y30vYMVbP 6WSczSZprLLFfgrEkaQBjv+nXSxM+dvE6GbWgxYLY+T3jPCqQBg9Dpp/gFZFvXOe BfzpnnJH+iva+6EQRT6ORebmESfRGk1wm5PLExgpD+fsccCv -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:07 2026 by rpki-client