This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/SLtYZy0NZC5Jm03EaNoGSaDjGw0.roa File: SLtYZy0NZC5Jm03EaNoGSaDjGw0.roa (raw, json) Hash identifier: 6lMKVtOCG27jeraIxeNONO5lIelgtW0XMAZ4G671Af8= Subject key identifier: 48:BB:58:67:2D:0D:64:2E:49:9B:4D:C4:68:DA:06:49:A0:E3:1B:0D Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F1519CBDEB0433BEB6B0397199F0686 Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/SLtYZy0NZC5Jm03EaNoGSaDjGw0.roa Signing time: Fri 02 Jan 2026 14:20:47 +0000 ROA not before: Fri 02 Jan 2026 14:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215210 IP address blocks: 2a14:c380:250::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:19:cb:de:b0:43:3b:eb:6b:03:97:19:9f:06:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48bb58672d0d642e499b4dc468da0649a0e31b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1d:49:f4:e8:9d:4b:e0:37:9c:ad:2c:12:81: 5e:d6:78:0d:54:ae:cf:d9:73:42:6b:52:33:61:7a: 03:88:20:bf:89:e3:97:f5:ef:fe:32:2e:cf:4b:94: 8c:b7:74:7e:c7:02:ba:3a:e0:5f:02:c2:85:f1:e4: 1f:ce:5d:eb:72:69:d4:90:0d:40:97:a1:a0:2d:3e: 71:7b:1b:11:02:51:25:c0:a7:4e:02:d7:e7:15:ae: 4d:56:0d:b4:de:d0:9b:28:7d:3f:e7:1e:7b:7c:a2: 1f:0e:e7:8a:8d:33:87:ad:ee:49:79:96:f5:48:bb: 7a:eb:21:23:8f:cc:b8:7f:68:2b:3c:7e:8b:3f:32: 6d:f5:29:cf:64:1d:0b:e3:ab:71:e3:40:83:e8:92: b0:57:48:05:f8:21:a9:54:d8:fe:23:54:6d:6c:46: 05:e3:2c:a6:eb:e9:d5:44:ec:73:45:a4:af:3a:d3: 83:2e:e3:57:0d:d6:00:9f:9a:e0:2a:95:42:c4:f6: 3d:fe:3d:65:b0:dc:da:8e:e1:98:fa:be:e3:f9:33: 13:5e:4f:04:49:f1:02:0e:dc:c4:5a:4e:63:58:e2: e7:26:31:f3:30:cc:7c:ce:c5:af:8c:50:69:e2:a9: 3b:0d:79:a5:a0:d6:b2:9e:89:86:55:e5:f6:30:9c: 49:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BB:58:67:2D:0D:64:2E:49:9B:4D:C4:68:DA:06:49:A0:E3:1B:0D X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/SLtYZy0NZC5Jm03EaNoGSaDjGw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:250::/44 Signature Algorithm: sha256WithRSAEncryption 08:18:d8:75:08:31:a5:07:8e:d9:bd:64:51:35:cb:3b:1e:b8: 1a:47:a2:2b:a8:9e:70:69:b6:a9:0f:40:71:a2:a5:eb:86:c6: ac:ef:bc:d3:15:a7:c2:0a:12:31:73:7e:8e:28:6c:28:28:7a: ec:02:d1:6a:ee:2e:f7:50:51:e0:2b:14:be:2d:5c:76:83:b7: 86:22:de:71:73:87:6e:d8:1e:1c:18:b2:08:0e:30:e0:ca:6c: ca:36:47:be:7c:2f:1a:c2:a4:8f:4a:b6:f1:46:cf:58:a5:32: 82:73:60:52:ac:8b:04:18:c7:34:6c:cf:98:0a:f6:55:be:ee: f0:cb:1a:6c:0d:87:5b:e3:50:16:86:5d:0d:71:83:50:27:9d: c4:2c:bb:7e:46:8b:a7:e7:b4:27:35:04:5e:da:53:56:79:4c: f8:73:fa:45:42:78:d0:d6:b0:60:3f:ae:99:a3:89:7e:a7:5e: e3:46:98:47:b5:b6:01:d5:e8:05:65:71:ea:91:3b:ac:99:bc: a7:07:63:0c:5d:aa:c5:1a:df:cd:22:22:ff:f5:ea:46:83:43: 28:8c:23:19:b0:7c:d0:c7:e6:ce:9f:d2:e3:06:aa:6d:f2:11: e4:25:46:a0:62:c1:35:bf:bc:0c:71:5b:17:7b:98:1a:d5:ac: ad:33:f9:36 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FRnL3rBDO+trA5cZnwaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGJiNTg2NzJkMGQ2NDJlNDk5YjRkYzQ2OGRhMDY0OWEwZTMxYjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh1J9OidS+A3nK0sEoFe1ngNVK7P 2XNCa1IzYXoDiCC/ieOX9e/+Mi7PS5SMt3R+xwK6OuBfAsKF8eQfzl3rcmnUkA1A l6GgLT5xexsRAlElwKdOAtfnFa5NVg203tCbKH0/5x57fKIfDueKjTOHre5JeZb1 SLt66yEjj8y4f2grPH6LPzJt9SnPZB0L46tx40CD6JKwV0gF+CGpVNj+I1RtbEYF 4yym6+nVROxzRaSvOtODLuNXDdYAn5rgKpVCxPY9/j1lsNzajuGY+r7j+TMTXk8E SfECDtzEWk5jWOLnJjHzMMx8zsWvjFBp4qk7DXmloNaynomGVeX2MJxJ3wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEi7WGctDWQuSZtNxGjaBkmg4xsNMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvU0x0WVp5ME5aQzVKbTAzRWFOb0dTYURqR3cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhTDgAJQ MA0GCSqGSIb3DQEBCwUAA4IBAQAIGNh1CDGlB47ZvWRRNcs7HrgaR6IrqJ5wabap D0BxoqXrhsas77zTFafCChIxc36OKGwoKHrsAtFq7i73UFHgKxS+LVx2g7eGIt5x c4du2B4cGLIIDjDgymzKNke+fC8awqSPSrbxRs9YpTKCc2BSrIsEGMc0bM+YCvZV vu7wyxpsDYdb41AWhl0NcYNQJ53ELLt+Roun57QnNQRe2lNWeUz4c/pFQnjQ1rBg P66Zo4l+p17jRphHtbYB1egFZXHqkTusmbynB2MMXarFGt/NIiL/9epGg0MojCMZ sHzQx+bOn9LjBqpt8hHkJUagYsE1v7wMcVsXe5ga1aytM/k2 -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:45 2026 by rpki-client