This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/stYBdowOVPO4I6l2lk6N70Rzn-E.roa File: stYBdowOVPO4I6l2lk6N70Rzn-E.roa (raw, json) Hash identifier: YY8VJy7fjrv/nyUerV6XVPDCUnj9z+ve+4ysfFvneOU= Subject key identifier: B2:D6:01:76:8C:0E:54:F3:B8:23:A9:76:96:4E:8D:EF:44:73:9F:E1 Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754 Certificate serial: 019B7C12AD1E9DB543A158D566FCE5920AF5 Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/stYBdowOVPO4I6l2lk6N70Rzn-E.roa Signing time: Fri 02 Jan 2026 00:19:17 +0000 ROA not before: Fri 02 Jan 2026 00:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211967 IP address blocks: 2001:67c:26c8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ad:1e:9d:b5:43:a1:58:d5:66:fc:e5:92:0a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754 Validity Not Before: Jan 2 00:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2d601768c0e54f3b823a976964e8def44739fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9d:69:d3:cb:45:2b:86:b4:25:6a:0c:3d:a3: b6:06:b4:8a:fb:de:1b:25:04:65:f9:3a:da:dd:6f: 7b:04:21:11:7a:9a:11:de:c2:f9:d9:e9:4b:05:64: c8:fa:36:67:c9:d6:cb:3c:8c:86:9e:e7:b1:15:d9: 91:39:cf:61:9c:2b:0d:f9:f3:6f:5a:24:90:eb:fe: aa:8f:d8:e3:76:29:16:e9:7c:35:08:f2:6b:9f:d6: 58:2e:20:00:d2:b0:3f:15:72:d3:a5:b7:63:39:cf: 92:43:59:02:a3:a8:be:91:37:a6:df:7c:21:87:0a: 1c:d9:64:96:2e:94:7f:ee:45:a8:46:d2:dd:40:32: d6:bf:0b:a9:e2:3a:6a:fd:80:cc:e2:0d:4d:e6:17: de:a1:52:2d:51:0b:b1:48:e6:d0:3f:00:6d:91:af: 84:a1:76:cf:48:a0:16:42:e1:5c:19:06:e3:97:97: 4d:b1:77:18:a3:6f:7f:75:71:65:6a:5c:f1:80:3f: 70:59:91:e9:21:b2:bc:f1:93:36:48:75:40:02:aa: a5:fe:53:a2:c0:77:f8:22:e1:6b:0a:4a:c2:bf:10: 86:66:70:84:34:a2:77:18:87:33:39:45:0c:2f:97: 87:52:de:c5:2d:c1:4b:f5:ec:a9:42:76:45:af:cf: 38:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D6:01:76:8C:0E:54:F3:B8:23:A9:76:96:4E:8D:EF:44:73:9F:E1 X509v3 Authority Key Identifier: keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/stYBdowOVPO4I6l2lk6N70Rzn-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:26c8::/48 Signature Algorithm: sha256WithRSAEncryption 6e:5c:ef:b1:35:51:03:b7:05:81:38:5a:96:ea:1b:8f:95:b8: cb:b2:cc:b0:34:a9:2d:c2:4a:7e:fe:2f:c0:8e:a8:8e:c9:f2: 5c:7e:72:36:ba:0d:e5:3d:b0:e0:5c:1f:5f:63:1f:d7:c3:c8: c9:73:1e:d9:04:83:cf:b8:93:4e:e7:33:44:da:ad:e9:75:84: b2:50:34:e1:84:db:1f:0f:f8:3b:79:b9:f1:cd:e3:de:df:f8: e8:81:ce:1e:b1:90:ee:4d:78:75:81:af:4a:38:04:c4:93:77: 87:de:f5:c6:e4:f3:2f:07:0c:4e:26:80:8a:36:7a:0f:eb:7e: 0d:b9:a0:86:f4:96:f4:14:13:6c:b2:ab:a4:20:20:e7:de:4d: 50:51:f0:fa:71:63:dd:a6:08:c0:21:b7:df:e4:31:97:3c:b9: 09:52:7a:c0:eb:80:c9:f9:f8:5c:e0:5f:25:7a:fc:59:24:b8: 82:31:e0:ce:1f:16:76:6a:55:87:8f:5a:81:d4:d2:60:18:3a: 63:8f:d6:e8:ff:95:b4:f1:00:72:4a:8c:a8:b4:93:3d:e1:2e: 69:51:22:b6:2d:94:01:16:e0:af:9b:4e:6c:c6:1e:c7:e0:e4: c8:60:6a:77:97:89:37:29:ba:9e:14:a5:ff:6d:38:d2:bb:e9: 41:d0:4f:e2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8Eq0enbVDoVjVZvzlkgr1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMmE2YTI2MGQxZTY3ZTBhN2I0ZTZkY2Y0MDNmZDM5ZjZk ZTk3NTQwHhcNMjYwMTAyMDAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmQ2MDE3NjhjMGU1NGYzYjgyM2E5NzY5NjRlOGRlZjQ0NzM5ZmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy51p08tFK4a0JWoMPaO2BrSK+94b JQRl+Tra3W97BCERepoR3sL52elLBWTI+jZnydbLPIyGnuexFdmROc9hnCsN+fNv WiSQ6/6qj9jjdikW6Xw1CPJrn9ZYLiAA0rA/FXLTpbdjOc+SQ1kCo6i+kTem33wh hwoc2WSWLpR/7kWoRtLdQDLWvwup4jpq/YDM4g1N5hfeoVItUQuxSObQPwBtka+E oXbPSKAWQuFcGQbjl5dNsXcYo29/dXFlalzxgD9wWZHpIbK88ZM2SHVAAqql/lOi wHf4IuFrCkrCvxCGZnCENKJ3GIczOUUML5eHUt7FLcFL9eypQnZFr884AwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLLWAXaMDlTzuCOpdpZOje9Ec5/hMB8GA1UdIwQY MBaAFBEqaiYNHmfgp7Tm3PQD/Tn23pdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVNwcUpnMGVaLUNudE9iYzlBUDlPZmJlbDFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84NGZhZWQtMGNiNS00Nzk5LTk0NDct YTM5ODhmYzkwZDYwLzEvc3RZQmRvd09WUE80STZsMmxrNk43MFJ6bi1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84NGZhZWQtMGNiNS00Nzk5LTk0NDctYTM5ODhmYzkwZDYw LzEvRVNwcUpnMGVaLUNudE9iYzlBUDlPZmJlbDFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCbI MA0GCSqGSIb3DQEBCwUAA4IBAQBuXO+xNVEDtwWBOFqW6huPlbjLssywNKktwkp+ /i/AjqiOyfJcfnI2ug3lPbDgXB9fYx/Xw8jJcx7ZBIPPuJNO5zNE2q3pdYSyUDTh hNsfD/g7ebnxzePe3/jogc4esZDuTXh1ga9KOATEk3eH3vXG5PMvBwxOJoCKNnoP 634NuaCG9Jb0FBNssqukICDn3k1QUfD6cWPdpgjAIbff5DGXPLkJUnrA64DJ+fhc 4F8levxZJLiCMeDOHxZ2alWHj1qB1NJgGDpjj9bo/5W08QBySoyotJM94S5pUSK2 LZQBFuCvm05sxh7H4OTIYGp3l4k3KbqeFKX/bTjSu+lB0E/i -----END CERTIFICATE-----Generated at Mon Jan 26 10:16:08 2026 by rpki-client