This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/SrEzEjwK-3uKVpak9gMqzGNpdCg.roa File: SrEzEjwK-3uKVpak9gMqzGNpdCg.roa (raw, json) Hash identifier: 42ZM42HvDr7NNH3ONprmjvWUIm8DwnTLbUUIzVU2/1Y= Subject key identifier: 4A:B1:33:12:3C:0A:FB:7B:8A:56:96:A4:F6:03:2A:CC:63:69:74:28 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019B78A330E0513ADFA983C43B18C0725C8E Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/SrEzEjwK-3uKVpak9gMqzGNpdCg.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202717 IP address blocks: 2a02:bc8:37::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:30:e0:51:3a:df:a9:83:c4:3b:18:c0:72:5c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ab133123c0afb7b8a5696a4f6032acc63697428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:2c:09:89:32:b6:13:17:2a:e0:d8:dd:8f:0d: 2d:54:51:7d:4b:68:8a:b8:31:fc:48:3a:80:eb:4b: a7:ca:92:96:5d:8b:91:27:38:78:b1:15:dd:3c:d9: 6c:ae:1a:b9:e7:1a:85:60:d7:c4:05:80:0a:b2:66: e3:ce:2d:c9:1e:9e:62:36:9c:27:7a:de:15:b9:cb: c2:9f:97:a3:95:22:5e:1f:4e:d3:c2:3b:79:f8:bd: 6a:c6:3e:af:0a:13:84:f2:88:98:df:e2:eb:b2:37: c0:a4:36:fe:e6:3d:50:4e:e1:91:03:f8:4a:71:61: 57:ac:8c:67:96:ee:06:e6:d0:5f:3f:d1:29:5c:63: b2:bf:72:51:39:e0:b1:f0:23:55:43:7f:1f:fe:a2: af:5c:1a:3f:ed:02:a1:e1:f6:24:ac:c2:4c:a2:44: ad:5b:1e:e1:2d:f5:bd:7a:b8:e8:76:1c:5f:9d:9a: e5:07:7a:64:48:1d:24:52:40:b7:78:6e:f7:3c:8c: db:12:2a:16:46:af:71:1d:3d:6e:76:f0:95:be:fd: 8e:da:0a:c8:32:20:84:ae:6d:c0:f5:58:81:b3:30: aa:5a:ae:26:80:61:4c:d6:75:41:58:db:8e:6d:5c: 54:43:b3:ef:a8:88:30:13:db:6a:28:2e:70:ff:ce: 50:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B1:33:12:3C:0A:FB:7B:8A:56:96:A4:F6:03:2A:CC:63:69:74:28 X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/SrEzEjwK-3uKVpak9gMqzGNpdCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:bc8:37::/48 Signature Algorithm: sha256WithRSAEncryption 25:b8:12:0f:09:9d:85:ac:c8:de:7d:da:77:6a:55:c1:9a:1f: 8f:bc:b3:47:2c:ac:fd:16:c0:f6:55:c3:fd:ed:25:28:a1:c5: a4:6b:27:62:89:d0:cc:9c:4e:e4:ca:58:10:61:80:39:bc:71: 3b:08:a0:be:37:f7:ac:74:02:dd:ed:e0:80:ff:73:9b:e8:38: c0:b9:fd:a1:fb:5e:c2:6a:39:13:95:f0:66:9e:26:49:6a:ab: ee:05:72:4a:1f:e1:69:53:d3:a5:26:39:dc:c1:e9:39:8e:74: 08:78:18:ed:63:2c:6f:3a:54:27:ed:c8:96:2f:96:40:91:0e: 99:da:84:b3:07:87:0a:5d:c2:b3:09:32:c1:9a:5c:c1:c1:6c: e7:8b:ea:b2:94:a3:6d:bf:b2:28:ed:0a:fb:f4:34:f7:e2:25: 78:ea:52:04:fb:c4:63:d1:76:bd:a5:4c:47:ef:ed:72:e8:8b: f0:e0:74:2a:81:ff:02:fd:ae:be:c0:ae:35:82:36:fc:c1:99: 48:19:b8:be:3b:1b:ee:d6:dc:20:e7:94:11:21:b3:02:28:8c: 94:32:2b:64:e2:a2:3c:c7:d4:b3:7b:52:73:b4:78:1a:b9:94: fd:cb:e7:0d:4b:3e:55:d4:e7:90:01:51:b7:5b:a5:54:6c:43: 03:65:dc:30 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4ozDgUTrfqYPEOxjAclyOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWIxMzMxMjNjMGFmYjdiOGE1Njk2YTRmNjAzMmFjYzYzNjk3NDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9SwJiTK2Excq4Njdjw0tVFF9S2iK uDH8SDqA60unypKWXYuRJzh4sRXdPNlsrhq55xqFYNfEBYAKsmbjzi3JHp5iNpwn et4VucvCn5ejlSJeH07Twjt5+L1qxj6vChOE8oiY3+LrsjfApDb+5j1QTuGRA/hK cWFXrIxnlu4G5tBfP9EpXGOyv3JROeCx8CNVQ38f/qKvXBo/7QKh4fYkrMJMokSt Wx7hLfW9erjodhxfnZrlB3pkSB0kUkC3eG73PIzbEioWRq9xHT1udvCVvv2O2grI MiCErm3A9ViBszCqWq4mgGFM1nVBWNuObVxUQ7PvqIgwE9tqKC5w/85QfQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEqxMxI8Cvt7ilaWpPYDKsxjaXQoMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvU3JFekVqd0stM3VLVnBhazlnTXF6R05wZENnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgILyAA3 MA0GCSqGSIb3DQEBCwUAA4IBAQAluBIPCZ2FrMjefdp3alXBmh+PvLNHLKz9FsD2 VcP97SUoocWkaydiidDMnE7kylgQYYA5vHE7CKC+N/esdALd7eCA/3Ob6DjAuf2h +17CajkTlfBmniZJaqvuBXJKH+FpU9OlJjncwek5jnQIeBjtYyxvOlQn7ciWL5ZA kQ6Z2oSzB4cKXcKzCTLBmlzBwWzni+qylKNtv7Io7Qr79DT34iV46lIE+8Rj0Xa9 pUxH7+1y6Ivw4HQqgf8C/a6+wK41gjb8wZlIGbi+Oxvu1twg55QRIbMCKIyUMitk 4qI8x9Sze1JztHgauZT9y+cNSz5V1OeQAVG3W6VUbEMDZdww -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:19 2026 by rpki-client