This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/Sh_0eGA4pFFGTsJ_JR1HATFe-Tw.roa File: Sh_0eGA4pFFGTsJ_JR1HATFe-Tw.roa (raw, json) Hash identifier: C9qojbsI3Xlw6OIL8wWbpyEwtHBl4MzqP3Rqmjk310k= Subject key identifier: 4A:1F:F4:78:60:38:A4:51:46:4E:C2:7F:25:1D:47:01:31:5E:F9:3C Certificate issuer: /CN=ababd67e3e108c19f34fc00c76c6005993233512 Certificate serial: 019BDC7AEBFC9DD73D1F275ECF4C43ECF21E Authority key identifier: AB:AB:D6:7E:3E:10:8C:19:F3:4F:C0:0C:76:C6:00:59:93:23:35:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/Sh_0eGA4pFFGTsJ_JR1HATFe-Tw.roa Signing time: Tue 20 Jan 2026 17:36:41 +0000 ROA not before: Tue 20 Jan 2026 17:36:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212316 IP address blocks: 107.6.126.0/23 maxlen: 24 2a05:dc80::/29 maxlen: 48 2a05:dc80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:7a:eb:fc:9d:d7:3d:1f:27:5e:cf:4c:43:ec:f2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ababd67e3e108c19f34fc00c76c6005993233512 Validity Not Before: Jan 20 17:36:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a1ff4786038a451464ec27f251d4701315ef93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b4:72:76:0b:0b:79:af:2b:8a:51:0f:d3:61: 15:75:87:97:1f:8c:3f:1c:5a:be:12:f6:91:79:ab: 51:d7:4e:26:4b:72:65:66:80:94:81:16:4b:4c:35: 9b:6c:ec:b2:01:73:3b:2b:c3:4e:6f:c4:5a:df:d7: 88:23:09:82:3b:a9:8d:f9:ef:d3:ee:e4:64:96:b0: d0:f9:54:48:06:3b:dc:ea:1d:af:ff:45:07:bf:59: 6e:89:a0:06:c4:32:87:d0:52:d4:a0:17:4a:f1:67: b7:11:98:bb:9a:c4:06:8f:09:3d:ad:e9:af:c2:6e: a4:c7:91:5a:de:ef:b8:17:ab:cc:bd:37:89:f8:60: 87:2a:3d:b0:9e:89:d2:32:f1:ff:1b:ad:14:a1:52: 5a:76:b4:f2:ca:88:fa:f7:03:4f:3a:1d:99:4f:e6: 91:95:8e:ab:03:e6:46:e9:e1:67:e0:6a:b3:04:25: fe:d1:ba:c2:65:c7:79:8e:72:f3:54:74:8c:cf:40: 97:2c:8e:15:c0:7a:c4:b8:28:20:d9:ce:4b:53:59: fb:89:de:c0:47:96:67:a1:09:40:47:7d:5d:73:a7: 85:93:d9:1b:d3:33:f2:23:9f:2e:fa:84:be:d1:6b: 87:af:de:f0:b6:6a:b9:77:07:62:f7:55:2c:8f:14: 32:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1F:F4:78:60:38:A4:51:46:4E:C2:7F:25:1D:47:01:31:5E:F9:3C X509v3 Authority Key Identifier: keyid:AB:AB:D6:7E:3E:10:8C:19:F3:4F:C0:0C:76:C6:00:59:93:23:35:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/Sh_0eGA4pFFGTsJ_JR1HATFe-Tw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.6.126.0/23 IPv6: 2a05:dc80::/29 Signature Algorithm: sha256WithRSAEncryption ac:c7:b5:cf:d9:b8:4b:57:99:bd:39:fc:9e:0e:7b:ff:d9:50: fd:36:5e:1c:c4:73:1c:a1:43:5d:a3:e8:e3:bc:ea:e5:c0:34: 99:ba:cb:87:ba:03:5e:be:de:c0:c9:8f:84:d2:e3:46:b5:84: c1:ac:ad:4b:c6:b7:35:c0:96:2b:b7:eb:c4:21:55:46:f6:b8: d2:0e:83:22:f1:5d:7f:40:da:be:78:62:93:13:0b:c0:31:2b: 90:62:97:6d:85:30:32:10:f6:ff:4a:5f:5f:1d:13:b6:04:7d: 2c:5a:eb:2e:f4:f7:d8:8d:f6:90:da:58:31:ce:ca:d8:3a:5c: 64:d5:49:95:11:79:aa:ae:a7:ed:e8:d1:33:9d:db:b7:45:49: df:5c:e2:0f:8c:01:82:60:ac:0d:37:62:19:2f:d7:e5:24:e6: c9:a4:dc:f5:c1:60:bc:dd:dc:19:96:72:6a:6a:33:e8:21:7c: 3a:e7:b5:0a:ba:32:b3:27:a4:f4:ff:90:e0:6d:36:2f:19:7c: 4a:3a:d8:69:62:47:26:c7:a9:77:61:6b:67:03:12:93:77:ff: a4:f2:69:a6:f5:de:55:34:91:d2:a1:0e:db:3a:6c:cc:f0:26: 69:66:31:7c:57:8e:f2:1d:76:dd:25:19:d4:9d:92:a2:e7:97: 2d:62:f5:cf -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZvceuv8ndc9Hydez0xD7PIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYWJkNjdlM2UxMDhjMTlmMzRmYzAwYzc2YzYwMDU5OTMy MzM1MTIwHhcNMjYwMTIwMTczNjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTFmZjQ3ODYwMzhhNDUxNDY0ZWMyN2YyNTFkNDcwMTMxNWVmOTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rRydgsLea8rilEP02EVdYeXH4w/ HFq+EvaReatR104mS3JlZoCUgRZLTDWbbOyyAXM7K8NOb8Ra39eIIwmCO6mN+e/T 7uRklrDQ+VRIBjvc6h2v/0UHv1luiaAGxDKH0FLUoBdK8We3EZi7msQGjwk9remv wm6kx5Fa3u+4F6vMvTeJ+GCHKj2wnonSMvH/G60UoVJadrTyyoj69wNPOh2ZT+aR lY6rA+ZG6eFn4GqzBCX+0brCZcd5jnLzVHSMz0CXLI4VwHrEuCgg2c5LU1n7id7A R5ZnoQlAR31dc6eFk9kb0zPyI58u+oS+0WuHr97wtmq5dwdi91UsjxQyBwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEof9HhgOKRRRk7CfyUdRwExXvk8MB8GA1UdIwQY MBaAFKur1n4+EIwZ80/ADHbGAFmTIzUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTZ2V2ZqNFFqQm56VDhBTWRzWUFXWk1qTlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNWQ1NDAtNGY1Yi00YTViLTg4ZWMt NjI0NTg0ZDFmZDk2LzEvU2hfMGVHQTRwRkZHVHNKX0pSMUhBVEZlLVR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNWQ1NDAtNGY1Yi00YTViLTg4ZWMtNjI0NTg0ZDFmZDk2 LzEvcTZ2V2ZqNFFqQm56VDhBTWRzWUFXWk1qTlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBawZ+MA0E AgACMAcDBQMqBdyAMA0GCSqGSIb3DQEBCwUAA4IBAQCsx7XP2bhLV5m9OfyeDnv/ 2VD9Nl4cxHMcoUNdo+jjvOrlwDSZusuHugNevt7AyY+E0uNGtYTBrK1Lxrc1wJYr t+vEIVVG9rjSDoMi8V1/QNq+eGKTEwvAMSuQYpdthTAyEPb/Sl9fHRO2BH0sWusu 9PfYjfaQ2lgxzsrYOlxk1UmVEXmqrqft6NEzndu3RUnfXOIPjAGCYKwNN2IZL9fl JObJpNz1wWC83dwZlnJqajPoIXw657UKujKzJ6T0/5DgbTYvGXxKOthpYkcmx6l3 YWtnAxKTd/+k8mmm9d5VNJHSoQ7bOmzM8CZpZjF8V47yHXbdJRnUnZKi55ctYvXP -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:27 2026 by rpki-client