This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/sAk06Tsd-_YR9NQduC3T-piAvWk.roa File: sAk06Tsd-_YR9NQduC3T-piAvWk.roa (raw, json) Hash identifier: xw7/19cXkRCZDOVeEPf+Eoup5YiNyQhWAOUhvYY+IJo= Subject key identifier: B0:09:34:E9:3B:1D:FB:F6:11:F4:D4:1D:B8:2D:D3:FA:98:80:BD:69 Certificate issuer: /CN=29b79380fe407439cc2ecd3fac18157db36cf768 Certificate serial: 019B7834CB813179D843D72F372CB4E34964 Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/sAk06Tsd-_YR9NQduC3T-piAvWk.roa Signing time: Thu 01 Jan 2026 06:18:04 +0000 ROA not before: Thu 01 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3549 IP address blocks: 2a05:6744::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:cb:81:31:79:d8:43:d7:2f:37:2c:b4:e3:49:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768 Validity Not Before: Jan 1 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b00934e93b1dfbf611f4d41db82dd3fa9880bd69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:24:bd:7d:d9:f1:25:d1:4d:cb:98:68:83:5e: b7:50:85:5f:93:50:18:a0:04:92:20:45:05:c2:9a: 82:f5:59:f7:74:33:a2:6e:54:46:77:30:81:0b:7d: f6:ab:5a:5a:31:33:a7:16:05:0d:09:66:cd:ab:70: 1b:f4:82:73:27:55:2a:d9:8a:68:39:e8:2c:a1:63: 2a:46:a6:cf:06:3b:db:db:6c:4b:34:d9:f9:b0:73: d9:78:92:73:cf:7c:59:3f:b2:ab:b6:b5:66:14:ec: fa:5c:97:cf:86:18:6c:77:b1:f0:df:43:e0:62:c9: a1:89:cd:40:83:af:e1:68:0d:1d:ee:7f:94:65:10: 32:5e:81:94:55:39:7d:57:85:33:3a:f5:ba:60:a9: 28:db:01:dd:eb:36:84:5a:cf:6f:c3:ab:d5:f1:22: 04:71:6e:91:7f:05:12:cd:5c:85:e0:9b:10:c2:d2: 06:25:18:c3:68:00:f9:0e:0a:06:9e:2e:7c:0d:7f: 93:90:21:f9:45:79:79:5d:b0:09:59:8a:28:14:8d: cb:32:cf:b4:63:2b:e5:ac:14:b0:d4:19:98:cc:6a: 46:ed:b4:5d:92:0f:3c:d8:dc:81:2e:18:ec:8b:6d: 03:cb:9b:6e:88:cd:e9:fd:16:02:5c:3a:98:6d:bf: 88:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:09:34:E9:3B:1D:FB:F6:11:F4:D4:1D:B8:2D:D3:FA:98:80:BD:69 X509v3 Authority Key Identifier: keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/sAk06Tsd-_YR9NQduC3T-piAvWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:6744::/46 Signature Algorithm: sha256WithRSAEncryption 37:0d:ff:92:24:b1:f0:1f:3e:93:46:6f:9b:e1:31:36:74:95: 55:29:5a:82:18:db:e5:94:8d:14:d0:03:86:79:f9:74:21:38: 82:74:e7:51:e2:2e:98:95:f0:e1:f9:08:a8:eb:79:52:22:43: 45:67:76:f6:3c:60:b5:f7:16:b1:35:e1:fc:cc:7a:08:e3:49: 5e:87:bb:63:c1:b0:cc:48:bf:ec:f8:e0:94:2c:41:9b:1c:69: 9a:57:b8:19:fe:4b:51:58:96:7f:19:8c:bc:b2:8e:bc:ed:ae: ad:42:45:3b:51:1b:81:ac:f0:78:3f:fc:db:06:e2:84:e2:a1: 47:a0:dc:b5:2c:7f:9f:22:b2:67:25:57:39:52:fa:6f:7f:8f: aa:85:82:f1:44:29:15:a7:c7:3d:71:f4:ac:8c:82:3d:ee:11: b3:ed:ec:2d:0d:eb:b3:bb:44:ce:79:38:82:e7:ac:70:dc:ea: ed:84:83:dc:0d:f9:2c:9a:22:65:d0:a1:98:d5:54:ec:5a:a2: 38:d4:76:32:18:41:5b:22:75:83:d7:b8:8e:25:7f:1f:e9:57: f9:6b:5b:b6:51:43:0a:31:d5:d8:56:33:c1:a9:46:4d:01:89: e9:4b:e9:30:89:e5:df:1c:3e:c9:38:bf:22:f3:e2:4b:38:a7: 44:45:3c:05 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NMuBMXnYQ9cvNyy040lkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Yjc5MzgwZmU0MDc0MzljYzJlY2QzZmFjMTgxNTdkYjM2 Y2Y3NjgwHhcNMjYwMTAxMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDA5MzRlOTNiMWRmYmY2MTFmNGQ0MWRiODJkZDNmYTk4ODBiZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yS9fdnxJdFNy5hog163UIVfk1AY oASSIEUFwpqC9Vn3dDOiblRGdzCBC332q1paMTOnFgUNCWbNq3Ab9IJzJ1Uq2Ypo OegsoWMqRqbPBjvb22xLNNn5sHPZeJJzz3xZP7KrtrVmFOz6XJfPhhhsd7Hw30Pg Ysmhic1Ag6/haA0d7n+UZRAyXoGUVTl9V4UzOvW6YKko2wHd6zaEWs9vw6vV8SIE cW6RfwUSzVyF4JsQwtIGJRjDaAD5DgoGni58DX+TkCH5RXl5XbAJWYooFI3LMs+0 YyvlrBSw1BmYzGpG7bRdkg882NyBLhjsi20Dy5tuiM3p/RYCXDqYbb+IaQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLAJNOk7Hfv2EfTUHbgt0/qYgL1pMB8GA1UdIwQY MBaAFCm3k4D+QHQ5zC7NP6wYFX2zbPdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWIt MWU4NDIxMThkYjZmLzEvc0FrMDZUc2QtX1lSOU5RZHVDM1QtcGlBdldrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWItMWU4NDIxMThkYjZm LzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgVnRAAA MA0GCSqGSIb3DQEBCwUAA4IBAQA3Df+SJLHwHz6TRm+b4TE2dJVVKVqCGNvllI0U 0AOGefl0ITiCdOdR4i6YlfDh+Qio63lSIkNFZ3b2PGC19xaxNeH8zHoI40leh7tj wbDMSL/s+OCULEGbHGmaV7gZ/ktRWJZ/GYy8so687a6tQkU7URuBrPB4P/zbBuKE 4qFHoNy1LH+fIrJnJVc5Uvpvf4+qhYLxRCkVp8c9cfSsjII97hGz7ewtDeuzu0TO eTiC56xw3OrthIPcDfksmiJl0KGY1VTsWqI41HYyGEFbInWD17iOJX8f6Vf5a1u2 UUMKMdXYVjPBqUZNAYnpS+kwieXfHD7JOL8i8+JLOKdERTwF -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:37 2026 by rpki-client