This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/pSXCDiBSJhGXaOXef7Y4YTCUUZ4.roa File: pSXCDiBSJhGXaOXef7Y4YTCUUZ4.roa (raw, json) Hash identifier: Q877kwTSoXnFjxRbDVpx+FXDEeiawiNVCD8IEmWvnEU= Subject key identifier: A5:25:C2:0E:20:52:26:11:97:68:E5:DE:7F:B6:38:61:30:94:51:9E Certificate issuer: /CN=58a681c71beb464e01d5b68e19ca566da9930e23 Certificate serial: 019BDCC25533C123C0E60B7D2EB3C818FFB6 Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/pSXCDiBSJhGXaOXef7Y4YTCUUZ4.roa Signing time: Tue 20 Jan 2026 18:54:41 +0000 ROA not before: Tue 20 Jan 2026 18:54:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397373 IP address blocks: 2a14:dc81:3000::/36 maxlen: 36 2a14:dc81:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:c2:55:33:c1:23:c0:e6:0b:7d:2e:b3:c8:18:ff:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23 Validity Not Before: Jan 20 18:54:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a525c20e205226119768e5de7fb638613094519e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:14:fa:5c:70:91:5d:1f:5b:16:f4:6e:1a:1c: 55:e2:97:d6:e8:cf:64:01:bf:39:6b:66:60:47:64: dd:2b:91:33:00:05:e5:f5:b1:b8:6a:04:12:d4:af: 22:0f:e0:da:90:e3:f5:d7:88:2c:2c:e3:98:94:fa: f6:ef:8c:f2:27:19:19:c5:8f:8c:0a:13:44:cc:83: cf:04:4b:33:ef:40:de:76:ae:c9:17:a2:c1:a7:16: 14:50:cf:04:a8:a3:ef:47:27:9c:85:b4:6a:0b:11: 82:67:07:e4:08:f3:e1:49:ce:94:9d:83:4b:b4:31: bf:17:22:6d:0f:4f:76:4c:dc:6a:c4:9a:8b:58:81: f9:fe:89:4d:20:2b:b1:e0:b2:ff:30:16:bd:2d:c8: fd:14:bd:bf:0c:a7:d4:09:5e:b2:70:aa:90:1e:9f: f6:da:ad:e3:ab:1b:25:c6:99:47:bd:45:73:dd:ff: fb:8c:55:b3:32:31:b0:9d:e7:c2:e5:7c:1e:c9:ee: d4:c7:1b:13:32:79:c7:73:75:0d:8b:cb:0c:ba:57: ab:ee:1f:a0:60:5e:20:0a:ba:92:d6:4d:5e:a1:4f: f7:ab:44:cd:77:92:81:02:82:49:ed:a4:69:de:9e: 2a:bf:30:0c:e4:a1:f1:78:01:27:79:ed:d7:e8:d2: ca:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:25:C2:0E:20:52:26:11:97:68:E5:DE:7F:B6:38:61:30:94:51:9E X509v3 Authority Key Identifier: keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/pSXCDiBSJhGXaOXef7Y4YTCUUZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:dc81:3000::-2a14:dc81:4fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 47:d0:54:12:38:8d:c7:b1:6b:80:32:73:a7:58:73:8d:5d:05: 04:22:98:23:a7:40:a8:1f:cf:49:82:2b:53:f2:87:ef:a7:47: 2d:2a:f0:8f:f1:1d:aa:33:ce:8d:7f:a8:34:8c:0d:7d:87:78: f8:c3:c5:d9:5a:c1:61:c2:ce:8b:e9:1b:eb:c5:e5:e8:ff:9c: ee:cf:a2:3c:33:45:88:c7:bd:e4:fb:8f:5d:1c:a2:48:0e:61: 14:4f:94:77:99:92:d8:62:e5:19:12:e2:0d:1f:64:4a:e3:90: df:82:5f:b5:ab:06:51:fd:c8:03:9f:6f:ed:13:73:fc:f9:e1: 74:1d:fb:9d:2a:91:97:8a:12:24:d3:ee:b0:0d:af:9f:8b:2c: 6b:a1:03:05:44:49:bd:87:50:d7:34:a2:a8:ac:28:a3:6d:15: 44:ec:cb:b0:9e:12:01:7e:2e:7b:49:5b:08:cd:0f:43:a6:a6: 82:18:d8:9c:f3:bc:f9:27:87:39:37:08:e5:80:d2:3a:c7:c0: fb:7f:7f:cb:0f:60:07:2d:03:04:87:9c:ed:0b:af:9b:44:77: 6d:25:e6:fa:8b:87:bf:a0:d5:d0:d1:32:20:9e:62:90:0c:3b: 69:e5:16:f9:f3:bd:69:6e:6e:df:ba:74:9b:40:14:b6:3d:c6: 06:55:12:b1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvcwlUzwSPA5gt9LrPIGP+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTY4MWM3MWJlYjQ2NGUwMWQ1YjY4ZTE5Y2E1NjZkYTk5 MzBlMjMwHhcNMjYwMTIwMTg1NDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTI1YzIwZTIwNTIyNjExOTc2OGU1ZGU3ZmI2Mzg2MTMwOTQ1MTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBT6XHCRXR9bFvRuGhxV4pfW6M9k Ab85a2ZgR2TdK5EzAAXl9bG4agQS1K8iD+DakOP114gsLOOYlPr274zyJxkZxY+M ChNEzIPPBEsz70Dedq7JF6LBpxYUUM8EqKPvRyechbRqCxGCZwfkCPPhSc6UnYNL tDG/FyJtD092TNxqxJqLWIH5/olNICux4LL/MBa9Lcj9FL2/DKfUCV6ycKqQHp/2 2q3jqxslxplHvUVz3f/7jFWzMjGwnefC5Xweye7UxxsTMnnHc3UNi8sMuler7h+g YF4gCrqS1k1eoU/3q0TNd5KBAoJJ7aRp3p4qvzAM5KHxeAEnee3X6NLK1wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKUlwg4gUiYRl2jl3n+2OGEwlFGeMB8GA1UdIwQY MBaAFFimgccb60ZOAdW2jhnKVm2pkw4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0thQnh4dnJSazRCMWJhT0djcFdiYW1URGlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mNTFkMmUtZDE3NC00ZWY1LTgwYzEt OTdmOTFiYzk3YTQyLzEvcFNYQ0RpQlNKaEdYYU9YZWY3WTRZVENVVVo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mNTFkMmUtZDE3NC00ZWY1LTgwYzEtOTdmOTFiYzk3YTQy LzEvV0thQnh4dnJSazRCMWJhT0djcFdiYW1URGlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBgQqFNyB MAMGBCoU3IFAMA0GCSqGSIb3DQEBCwUAA4IBAQBH0FQSOI3HsWuAMnOnWHONXQUE Ipgjp0CoH89JgitT8ofvp0ctKvCP8R2qM86Nf6g0jA19h3j4w8XZWsFhws6L6Rvr xeXo/5zuz6I8M0WIx73k+49dHKJIDmEUT5R3mZLYYuUZEuINH2RK45Dfgl+1qwZR /cgDn2/tE3P8+eF0HfudKpGXihIk0+6wDa+fiyxroQMFREm9h1DXNKKorCijbRVE 7MuwnhIBfi57SVsIzQ9DpqaCGNic87z5J4c5NwjlgNI6x8D7f3/LD2AHLQMEh5zt C6+bRHdtJeb6i4e/oNXQ0TIgnmKQDDtp5Rb5871pbm7funSbQBS2PcYGVRKx -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:52 2026 by rpki-client