This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/SrRwCgzFOC1drONrVTaISNVrqgA.roa File: SrRwCgzFOC1drONrVTaISNVrqgA.roa (raw, json) Hash identifier: HK/1AO6XtRFFu0tl8QX3gVgCZfrsH1GVM2AzeVHcMns= Subject key identifier: 4A:B4:70:0A:0C:C5:38:2D:5D:AC:E3:6B:55:36:88:48:D5:6B:AA:00 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 019B7C801277A6ED4B0936CA3CE6B5BA4D95 Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/SrRwCgzFOC1drONrVTaISNVrqgA.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207344 IP address blocks: 2a13:2200:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:12:77:a6:ed:4b:09:36:ca:3c:e6:b5:ba:4d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ab4700a0cc5382d5dace36b55368848d56baa00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:52:f5:f8:ad:60:8b:df:72:38:c5:fb:60:a2: 3c:69:cc:cb:0d:81:9a:8d:37:1a:ae:9d:08:08:3f: ec:06:a1:c0:9f:28:e0:fb:38:2b:81:4d:3d:d8:7b: cd:a9:d6:95:df:a5:af:3d:8b:1f:dd:ef:86:a3:9f: 4b:94:b7:e2:47:c4:b2:08:78:f0:42:87:f3:97:d9: 60:79:6b:b3:0d:c3:09:63:d4:19:b1:ee:8e:01:ec: 57:56:c6:df:c6:e1:d6:0a:15:b1:05:2d:df:92:67: d7:69:29:16:40:76:14:01:2b:78:80:a3:1b:42:4b: c0:0a:a3:1e:3b:87:3c:06:e2:18:82:ce:35:68:51: d3:fe:01:3b:d4:ab:a0:e7:14:11:29:6d:df:3f:b7: 70:30:f1:e5:c7:5f:1e:03:74:59:71:75:b6:d9:bb: 74:ac:82:a4:29:6f:ea:77:1b:d3:02:36:6e:d3:21: 0a:6e:bb:3c:a7:2a:bf:c1:7f:dd:12:92:9f:98:9c: 97:b8:20:23:c2:bb:ea:ba:7f:e1:c1:36:6e:2c:70: b3:72:4a:08:e7:2d:f7:e9:90:d8:92:c7:b1:b4:bb: 79:41:95:24:13:ea:f0:b8:d3:a4:12:ee:09:74:26: 3e:10:73:1e:29:e2:30:eb:1b:f1:85:c6:a6:d8:61: fb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B4:70:0A:0C:C5:38:2D:5D:AC:E3:6B:55:36:88:48:D5:6B:AA:00 X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/SrRwCgzFOC1drONrVTaISNVrqgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:2200:10::/48 Signature Algorithm: sha256WithRSAEncryption 38:5c:e9:84:34:5a:0c:5a:a1:7e:a1:51:b9:13:95:6c:79:4e: 99:3d:f2:ec:9b:07:98:6c:45:89:8b:82:3a:3b:a7:77:d9:3f: 1e:ba:f4:73:0e:73:f8:78:74:67:e9:f9:3b:5f:fb:00:87:7b: bb:10:ae:55:93:d8:3a:88:a7:ea:99:2a:59:cb:88:93:81:a5: 7b:86:4d:9d:d2:96:5b:e9:9f:d8:67:d1:84:43:e9:b4:37:ed: e1:e0:00:11:7d:21:89:00:f0:da:ae:33:5b:37:3f:89:b2:c8: 81:79:52:31:92:1e:3f:29:6b:bd:07:c9:7e:65:f0:1e:3c:53: 06:d0:9b:a8:0e:1e:b6:6e:da:66:10:8b:1c:da:52:fe:34:48: eb:83:42:5d:14:60:46:1d:c9:6e:9e:15:1b:2b:48:da:29:3c: 2b:fd:15:05:80:11:63:d1:5f:93:7e:3d:54:23:b1:2e:d1:ea: 2a:e2:c3:b7:42:d6:b1:34:54:a5:11:de:79:a6:5d:b3:f8:e9: 0c:c6:6a:91:3c:e1:de:c6:69:8f:2e:1c:30:85:5b:c6:fb:0c: 3c:82:67:ce:d0:ec:89:c1:ae:cd:55:5a:8d:66:31:50:c5:7d: 24:19:70:4d:b1:71:d8:15:df:de:07:84:1a:35:7d:9b:d5:93: 8c:fc:fd:13 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gBJ3pu1LCTbKPOa1uk2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWI0NzAwYTBjYzUzODJkNWRhY2UzNmI1NTM2ODg0OGQ1NmJhYTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVL1+K1gi99yOMX7YKI8aczLDYGa jTcarp0ICD/sBqHAnyjg+zgrgU092HvNqdaV36WvPYsf3e+Go59LlLfiR8SyCHjw Qofzl9lgeWuzDcMJY9QZse6OAexXVsbfxuHWChWxBS3fkmfXaSkWQHYUASt4gKMb QkvACqMeO4c8BuIYgs41aFHT/gE71Kug5xQRKW3fP7dwMPHlx18eA3RZcXW22bt0 rIKkKW/qdxvTAjZu0yEKbrs8pyq/wX/dEpKfmJyXuCAjwrvqun/hwTZuLHCzckoI 5y336ZDYksextLt5QZUkE+rwuNOkEu4JdCY+EHMeKeIw6xvxhcam2GH7oQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEq0cAoMxTgtXazja1U2iEjVa6oAMB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvU3JSd0NnekZPQzFkck9OclZUYUlTTlZycWdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhMiAAAQ MA0GCSqGSIb3DQEBCwUAA4IBAQA4XOmENFoMWqF+oVG5E5VseU6ZPfLsmweYbEWJ i4I6O6d32T8euvRzDnP4eHRn6fk7X/sAh3u7EK5Vk9g6iKfqmSpZy4iTgaV7hk2d 0pZb6Z/YZ9GEQ+m0N+3h4AARfSGJAPDarjNbNz+JssiBeVIxkh4/KWu9B8l+ZfAe PFMG0JuoDh62btpmEIsc2lL+NEjrg0JdFGBGHclunhUbK0jaKTwr/RUFgBFj0V+T fj1UI7Eu0eoq4sO3QtaxNFSlEd55pl2z+OkMxmqRPOHexmmPLhwwhVvG+ww8gmfO 0OyJwa7NVVqNZjFQxX0kGXBNsXHYFd/eB4QaNX2b1ZOM/P0T -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:41 2026 by rpki-client