This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/SdJxhz3Z45rZQ2vRK_J4CkNgTHM.roa File: SdJxhz3Z45rZQ2vRK_J4CkNgTHM.roa (raw, json) Hash identifier: h00bQB9oTUE+4PsAJHu/xyixXuN3G9fmaTv9iiJ4iOw= Subject key identifier: 49:D2:71:87:3D:D9:E3:9A:D9:43:6B:D1:2B:F2:78:0A:43:60:4C:73 Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019B7B36B0FA28E0DC706A6C1C90AD5AFAB6 Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/SdJxhz3Z45rZQ2vRK_J4CkNgTHM.roa Signing time: Thu 01 Jan 2026 20:19:00 +0000 ROA not before: Thu 01 Jan 2026 20:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57503 IP address blocks: 2001:6d0:4005::/48 maxlen: 64 2001:6d0:4009::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b0:fa:28:e0:dc:70:6a:6c:1c:90:ad:5a:fa:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49d271873dd9e39ad9436bd12bf2780a43604c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:21:e7:88:17:5b:5c:00:7c:59:1e:5c:c2:68: 45:31:d5:e2:6d:0f:8c:32:33:eb:2d:12:d6:53:68: 13:fc:48:a1:25:11:25:32:f1:f8:d2:29:15:4d:49: 5b:0d:be:96:5c:e5:11:50:a2:75:58:f3:bd:06:7f: 69:30:71:5c:e5:61:03:00:55:e4:02:df:e8:9d:ec: c8:0c:4a:d3:43:dc:ee:63:a1:8b:57:a7:7e:66:c9: 15:72:87:01:1e:09:45:17:df:b4:b9:72:d7:d5:c9: 9f:a1:8e:83:fc:29:38:4f:3c:f9:07:02:11:b5:83: af:92:05:ed:33:ec:33:91:69:7e:56:1f:00:6e:33: 98:5a:f6:da:90:b6:f0:1d:01:b8:45:17:12:91:a1: 91:18:53:b3:2c:91:e1:b8:7d:86:e3:92:cb:5d:9d: 18:a3:d2:8e:e8:58:cb:76:f4:3e:5e:7e:c6:10:7c: b2:fd:67:97:01:1f:c1:df:2e:7f:82:d8:0f:62:d0: 54:ce:6b:7f:cf:8d:17:2f:c5:ac:9b:66:1b:9b:13: 82:72:45:7d:df:86:94:3d:18:5e:19:e3:ef:61:a0: cf:2a:a2:1c:48:39:9c:9a:a7:bf:ad:50:2d:e1:03: af:b9:9e:10:8d:74:0b:9c:78:1f:f9:9e:de:ef:fd: 80:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D2:71:87:3D:D9:E3:9A:D9:43:6B:D1:2B:F2:78:0A:43:60:4C:73 X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/SdJxhz3Z45rZQ2vRK_J4CkNgTHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:6d0:4005::/48 2001:6d0:4009::/48 Signature Algorithm: sha256WithRSAEncryption 30:21:12:61:9d:80:64:11:fd:7b:03:66:1d:67:70:e3:aa:c6: 3a:8a:c3:38:fd:2a:a0:93:67:0c:41:7c:22:11:21:bb:81:bf: b7:8a:06:53:24:b5:7b:ee:f8:d9:da:03:3d:8f:e8:cc:4f:1a: 88:a3:41:51:db:c0:8b:27:d8:97:3f:ef:02:ba:27:72:6a:86: 8b:db:a3:cb:2a:6f:a6:fe:ca:66:ac:c3:ef:4a:68:1a:dd:1e: 10:c0:79:da:4d:a7:23:74:08:2b:90:39:9e:85:36:44:3b:e3: 8d:88:6f:7d:ce:81:06:33:c5:e9:95:66:78:fb:b7:cc:3f:6a: ca:e1:14:c0:20:2e:a8:fd:5e:e9:e6:ff:2e:ac:d2:73:77:55: ce:62:eb:cf:65:bf:81:10:a0:6c:84:2d:a9:fd:a6:4d:a0:71: 1e:b1:2c:2c:9c:24:a4:b2:85:5a:e4:59:aa:e1:f3:df:22:72: 91:76:28:a9:70:59:43:8b:84:b2:1e:45:f0:fd:45:d5:b4:dd: f6:13:5f:e3:fe:f4:45:ba:7d:3c:40:a8:b5:7d:3a:ea:ad:06: 5a:aa:2e:cd:ef:b0:ae:f6:0e:98:97:59:2e:b2:be:85:f2:6f: bd:f3:b5:f9:80:fd:4f:08:5e:4f:b1:44:92:e2:b4:2d:16:cc: d7:43:e3:55 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NrD6KODccGpsHJCtWvq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWQyNzE4NzNkZDllMzlhZDk0MzZiZDEyYmYyNzgwYTQzNjA0YzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yHniBdbXAB8WR5cwmhFMdXibQ+M MjPrLRLWU2gT/EihJRElMvH40ikVTUlbDb6WXOURUKJ1WPO9Bn9pMHFc5WEDAFXk At/onezIDErTQ9zuY6GLV6d+ZskVcocBHglFF9+0uXLX1cmfoY6D/Ck4Tzz5BwIR tYOvkgXtM+wzkWl+Vh8AbjOYWvbakLbwHQG4RRcSkaGRGFOzLJHhuH2G45LLXZ0Y o9KO6FjLdvQ+Xn7GEHyy/WeXAR/B3y5/gtgPYtBUzmt/z40XL8Wsm2YbmxOCckV9 34aUPRheGePvYaDPKqIcSDmcmqe/rVAt4QOvuZ4QjXQLnHgf+Z7e7/2AqwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEnScYc92eOa2UNr0SvyeApDYExzMB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvU2RKeGh6M1o0NXJaUTJ2UktfSjRDa05nVEhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEG0EAF AwcAIAEG0EAJMA0GCSqGSIb3DQEBCwUAA4IBAQAwIRJhnYBkEf17A2YdZ3DjqsY6 isM4/Sqgk2cMQXwiESG7gb+3igZTJLV77vjZ2gM9j+jMTxqIo0FR28CLJ9iXP+8C uidyaoaL26PLKm+m/spmrMPvSmga3R4QwHnaTacjdAgrkDmehTZEO+ONiG99zoEG M8XplWZ4+7fMP2rK4RTAIC6o/V7p5v8urNJzd1XOYuvPZb+BEKBshC2p/aZNoHEe sSwsnCSksoVa5Fmq4fPfInKRdiipcFlDi4SyHkXw/UXVtN32E1/j/vRFun08QKi1 fTrqrQZaqi7N77Cu9g6Yl1kusr6F8m+987X5gP1PCF5PsUSS4rQtFszXQ+NV -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:12 2026 by rpki-client