This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/sdcPQ034WzV8-mwdtcJH6aVjl9c.roa File: sdcPQ034WzV8-mwdtcJH6aVjl9c.roa (raw, json) Hash identifier: zgRjTN+TOMTbzC05YvDtYP4QKYhF7SxR32E0NAVGTrk= Subject key identifier: B1:D7:0F:43:4D:F8:5B:35:7C:FA:6C:1D:B5:C2:47:E9:A5:63:97:D7 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019BEFC603AC00222D6EA089EBFE84E43FE9 Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/sdcPQ034WzV8-mwdtcJH6aVjl9c.roa Signing time: Sat 24 Jan 2026 11:31:30 +0000 ROA not before: Sat 24 Jan 2026 11:31:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214168 IP address blocks: 2a05:f683::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ef:c6:03:ac:00:22:2d:6e:a0:89:eb:fe:84:e4:3f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Jan 24 11:31:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1d70f434df85b357cfa6c1db5c247e9a56397d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d3:80:ea:b1:d1:e3:cc:f8:7c:c5:84:20:bb: 11:95:e4:b0:ff:da:6a:d6:dc:ed:23:88:11:98:74: aa:5e:8c:3a:2e:48:67:ff:52:5a:80:19:fc:c1:45: 68:41:1a:a9:05:94:d4:11:46:7b:95:5e:dc:57:4f: 15:f1:f7:36:39:78:8e:2b:ae:63:75:96:3b:68:d0: f9:14:b6:ce:d6:2c:9c:fc:e2:23:38:31:f7:93:c6: 12:d3:26:a2:92:e3:5d:d0:a0:8c:e9:9a:fd:ed:44: 85:d5:a7:f7:d6:91:ac:7e:c2:a6:e6:e1:da:07:9b: 97:86:1a:a9:25:74:e9:c4:25:e6:dc:12:dc:e4:a0: f6:3a:a1:ca:96:6e:65:1f:c2:da:ce:60:7a:07:c9: d1:de:e8:bb:a0:c5:c2:75:8f:03:12:2a:af:99:ac: 13:31:69:41:32:90:6d:50:2c:48:8f:9a:df:c2:e9: bb:8d:6c:e3:0d:9b:d7:bd:f0:c2:53:86:af:f6:a7: 8b:e8:f8:a8:17:69:2e:9c:36:71:49:f6:20:53:de: cf:13:84:ee:8c:cc:02:ce:62:1f:5a:db:54:7f:1d: 47:21:56:77:ae:b6:55:1b:16:03:f4:f8:4a:61:0c: 25:9b:49:36:68:95:9b:43:b3:61:b9:d6:8e:a2:a5: 4c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D7:0F:43:4D:F8:5B:35:7C:FA:6C:1D:B5:C2:47:E9:A5:63:97:D7 X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/sdcPQ034WzV8-mwdtcJH6aVjl9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:f683::/32 Signature Algorithm: sha256WithRSAEncryption a4:f4:64:18:56:76:83:2e:c9:31:89:25:03:b1:a7:84:8a:91: 5f:6f:c0:c5:f6:fa:be:7f:6a:d3:fa:a3:8e:30:63:94:b3:51: 0f:ac:2d:5d:30:f3:b2:7a:6a:4d:9a:26:f4:4f:62:a8:fa:45: c6:2c:49:90:c5:c1:72:40:4a:86:5a:9d:d7:34:dc:ab:df:2c: 49:51:ad:0f:5c:27:3a:db:da:8c:62:8c:f8:34:8a:3f:a1:f5: f9:57:e6:d3:6a:e1:4d:59:35:80:3d:84:9e:e7:71:47:2d:59: f2:fd:58:b8:4f:1a:0c:7e:13:a8:98:62:ae:ec:17:47:c5:7d: d5:b1:ff:13:4a:65:b6:03:83:ee:49:9b:d1:14:8c:a5:00:1f: dc:30:7d:dc:53:43:1c:b9:68:5e:d2:1a:54:01:15:1f:88:e8: a1:0c:05:c5:28:13:7a:86:54:e5:64:5b:03:33:e2:d4:86:4e: 4d:f5:1c:2a:d6:8b:c2:ff:93:cb:8e:0f:d7:40:9f:27:3d:ec: 30:ed:a3:4b:b5:7e:da:66:cf:dd:8d:ed:78:74:b0:78:58:49: 83:2b:ae:7b:92:f7:c2:6d:6c:bb:76:43:65:ec:18:29:35:05: 47:dc:da:3a:44:a2:87:a6:49:62:a3:be:c6:c2:bd:43:98:fe: 29:6a:31:f8 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZvvxgOsACItbqCJ6/6E5D/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwMTI0MTEzMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWQ3MGY0MzRkZjg1YjM1N2NmYTZjMWRiNWMyNDdlOWE1NjM5N2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dOA6rHR48z4fMWEILsRleSw/9pq 1tztI4gRmHSqXow6Lkhn/1JagBn8wUVoQRqpBZTUEUZ7lV7cV08V8fc2OXiOK65j dZY7aND5FLbO1iyc/OIjODH3k8YS0yaikuNd0KCM6Zr97USF1af31pGsfsKm5uHa B5uXhhqpJXTpxCXm3BLc5KD2OqHKlm5lH8LazmB6B8nR3ui7oMXCdY8DEiqvmawT MWlBMpBtUCxIj5rfwum7jWzjDZvXvfDCU4av9qeL6PioF2kunDZxSfYgU97PE4Tu jMwCzmIfWttUfx1HIVZ3rrZVGxYD9PhKYQwlm0k2aJWbQ7NhudaOoqVMsQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLHXD0NN+Fs1fPpsHbXCR+mlY5fXMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvc2RjUFEwMzRXelY4LW13ZHRjSkg2YVZqbDljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgX2gzAN BgkqhkiG9w0BAQsFAAOCAQEApPRkGFZ2gy7JMYklA7GnhIqRX2/Axfb6vn9q0/qj jjBjlLNRD6wtXTDzsnpqTZom9E9iqPpFxixJkMXBckBKhlqd1zTcq98sSVGtD1wn OtvajGKM+DSKP6H1+Vfm02rhTVk1gD2EnudxRy1Z8v1YuE8aDH4TqJhiruwXR8V9 1bH/E0pltgOD7kmb0RSMpQAf3DB93FNDHLloXtIaVAEVH4jooQwFxSgTeoZU5WRb AzPi1IZOTfUcKtaLwv+Ty44P10CfJz3sMO2jS7V+2mbP3Y3teHSweFhJgyuue5L3 wm1su3ZDZewYKTUFR9zaOkSih6ZJYqO+xsK9Q5j+KWox+A== -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:14 2026 by rpki-client