This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/0sxkLDFdb4QelHCb0OZcMbO1jDM.roa File: 0sxkLDFdb4QelHCb0OZcMbO1jDM.roa (raw, json) Hash identifier: 1xnWSoVsnQK8dLyDSxHxSRJdCC9QJVhSYDLS7qz0b0o= Subject key identifier: D2:CC:64:2C:31:5D:6F:84:1E:94:70:9B:D0:E6:5C:31:B3:B5:8C:33 Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Certificate serial: 019B79EBCB688DD456B328597A7FAFB729F1 Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/0sxkLDFdb4QelHCb0OZcMbO1jDM.roa Signing time: Thu 01 Jan 2026 14:17:34 +0000 ROA not before: Thu 01 Jan 2026 14:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44752 IP address blocks: 2a04:a684::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:cb:68:8d:d4:56:b3:28:59:7a:7f:af:b7:29:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Validity Not Before: Jan 1 14:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2cc642c315d6f841e94709bd0e65c31b3b58c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e8:52:0c:5f:14:dd:a4:87:d9:f1:71:18:2f: 10:ac:87:a3:72:b0:89:56:f9:d6:11:4a:84:f0:eb: 26:65:e0:6a:1f:f1:1b:94:5e:1d:d6:55:a9:6b:76: 51:57:5f:e5:a9:e5:1e:70:b3:28:ff:6b:3c:26:ab: 6b:0f:06:2d:26:59:aa:e9:bd:ee:21:01:7f:1a:84: 35:1b:22:0a:32:07:1d:61:1c:56:29:32:cd:89:50: 58:a7:34:ad:08:54:87:d7:de:72:c7:08:c8:cd:8b: a5:51:9c:a0:b5:88:87:55:62:39:19:7f:8d:e1:42: ee:74:2f:8b:14:5d:22:e8:71:8c:8b:e8:e2:87:7d: 3d:8a:b9:8b:34:d6:99:c0:03:88:02:e3:40:97:d9: e9:b6:54:84:3d:d3:f9:86:f1:63:8b:c3:78:d7:eb: df:7a:da:5c:58:9c:39:15:c4:80:0b:a7:a6:c3:96: 9d:55:3c:42:fa:33:e2:20:68:b3:25:e0:16:1d:1f: a3:20:3b:c0:eb:6a:40:f3:11:b9:f9:3c:c9:40:40: 25:ef:e1:60:16:b8:81:db:19:52:86:2f:8a:69:d9: d0:a4:aa:73:c0:c8:56:eb:17:91:4d:e0:c4:2a:06: bf:63:bb:4a:70:69:6b:9f:3d:79:70:be:9a:bf:d9: d0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CC:64:2C:31:5D:6F:84:1E:94:70:9B:D0:E6:5C:31:B3:B5:8C:33 X509v3 Authority Key Identifier: keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/0sxkLDFdb4QelHCb0OZcMbO1jDM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:a684::/30 Signature Algorithm: sha256WithRSAEncryption bb:14:b2:64:bd:b6:e1:40:54:ca:3c:66:f7:e4:34:8c:01:88: f5:5a:54:0a:7f:95:cc:30:5d:3a:ed:c5:80:5e:ff:12:a9:ad: 25:f1:0c:17:cc:ab:87:b9:cb:e2:40:0c:c4:b8:94:a2:52:75: c3:7f:b7:10:36:f7:69:60:21:cd:39:19:77:54:13:4c:82:47: 65:d0:72:7a:a7:f8:80:29:64:9c:5c:f8:bf:d6:04:24:60:d3: 61:2c:c3:e4:a0:70:41:a0:4a:6f:85:d0:4a:80:73:22:d5:6f: 1e:de:f1:c8:bd:f5:97:a3:d1:8d:22:7d:44:d8:f2:dc:2a:3d: 86:98:fd:8c:3d:19:8c:bf:26:c7:23:12:ae:b4:cf:25:44:7a: f2:dd:b4:8b:5a:5e:90:0e:9c:c4:ea:67:a1:d9:57:67:23:41: a4:c7:0b:ce:3a:14:f9:cb:c5:f2:94:cd:00:79:b1:f8:cd:91: 28:40:e2:d7:bb:83:4a:e5:c5:57:72:f0:b3:2c:38:e5:a1:a3: 6f:10:36:b7:c0:db:8b:05:67:11:68:78:03:f7:69:fd:99:89: 18:82:f0:09:e0:42:19:83:cd:d0:08:2e:56:88:a4:f9:e2:32: 5e:4e:11:9f:fa:5d:76:59:e9:8a:a2:02:3f:01:07:4d:29:b7: 71:a0:85:92 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt568tojdRWsyhZen+vtynxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NDE3MzhiYWFiOTg4YjFkNjg2OTNiYjA1ZTI5YmZiYjRm MGY2NzEwHhcNMjYwMTAxMTQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmNjNjQyYzMxNWQ2Zjg0MWU5NDcwOWJkMGU2NWMzMWIzYjU4YzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkehSDF8U3aSH2fFxGC8QrIejcrCJ VvnWEUqE8OsmZeBqH/EblF4d1lWpa3ZRV1/lqeUecLMo/2s8JqtrDwYtJlmq6b3u IQF/GoQ1GyIKMgcdYRxWKTLNiVBYpzStCFSH195yxwjIzYulUZygtYiHVWI5GX+N 4ULudC+LFF0i6HGMi+jih309irmLNNaZwAOIAuNAl9nptlSEPdP5hvFji8N41+vf etpcWJw5FcSAC6emw5adVTxC+jPiIGizJeAWHR+jIDvA62pA8xG5+TzJQEAl7+Fg FriB2xlShi+KadnQpKpzwMhW6xeRTeDEKga/Y7tKcGlrnz15cL6av9nQ5QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNLMZCwxXW+EHpRwm9DmXDGztYwzMB8GA1UdIwQY MBaAFMRBc4uquYix1oaTuwXim/u08PZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUt NGM5OGQ5YTUxNDA1LzEvMHN4a0xERmRiNFFlbEhDYjBPWmNNYk8xakRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUtNGM5OGQ5YTUxNDA1 LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKgSmhDAN BgkqhkiG9w0BAQsFAAOCAQEAuxSyZL224UBUyjxm9+Q0jAGI9VpUCn+VzDBdOu3F gF7/EqmtJfEMF8yrh7nL4kAMxLiUolJ1w3+3EDb3aWAhzTkZd1QTTIJHZdByeqf4 gClknFz4v9YEJGDTYSzD5KBwQaBKb4XQSoBzItVvHt7xyL31l6PRjSJ9RNjy3Co9 hpj9jD0ZjL8mxyMSrrTPJUR68t20i1pekA6cxOpnodlXZyNBpMcLzjoU+cvF8pTN AHmx+M2RKEDi17uDSuXFV3Lwsyw45aGjbxA2t8DbiwVnEWh4A/dp/ZmJGILwCeBC GYPN0AguVoik+eIyXk4Rn/pddlnpiqICPwEHTSm3caCFkg== -----END CERTIFICATE-----Generated at Mon Jan 26 08:57:45 2026 by rpki-client