This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/SAtVAePJhWqo0wutfiUY2R4nPhI.roa File: SAtVAePJhWqo0wutfiUY2R4nPhI.roa (raw, json) Hash identifier: 0H4+3p93lCzGpK1JwDK4bkQfPmCv/xN0G8ejzBatka4= Subject key identifier: 48:0B:55:01:E3:C9:85:6A:A8:D3:0B:AD:7E:25:18:D9:1E:27:3E:12 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 019B77C7185ADABD53BD4DF0BB0228EC922A Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/SAtVAePJhWqo0wutfiUY2R4nPhI.roa Signing time: Thu 01 Jan 2026 04:18:15 +0000 ROA not before: Thu 01 Jan 2026 04:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212379 IP address blocks: 2a01:190:1802::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:18:5a:da:bd:53:bd:4d:f0:bb:02:28:ec:92:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Jan 1 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=480b5501e3c9856aa8d30bad7e2518d91e273e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:87:ee:3d:81:26:d5:fc:91:bf:34:07:c2:80: c6:03:28:dc:ed:9b:f0:ea:0f:cd:cb:62:32:25:64: 6e:f4:43:65:57:75:30:6d:8e:23:8e:7b:41:db:fb: dd:85:04:04:53:e0:f7:86:21:82:8f:4f:9f:5c:ea: 2d:59:1a:72:6b:af:7a:44:b5:6f:a9:fe:cc:44:a0: 51:85:e0:73:ff:89:fc:e9:1a:9b:72:6b:0b:44:16: 25:84:2b:c1:a8:cb:9a:11:32:bd:e8:cc:01:fa:06: 03:42:ef:1e:5e:7a:76:f8:e7:8b:29:83:8e:d1:43: 7a:81:95:71:92:d7:07:a2:44:ee:0e:f6:b6:16:1d: ec:08:1b:c7:66:a3:64:7d:80:31:37:01:9c:da:00: d2:03:ef:71:80:c7:04:3c:f8:b1:46:2d:3f:df:bb: 36:e4:8c:1a:2d:e6:39:cd:43:fb:21:b8:5f:fd:2d: 3c:77:7b:ee:73:d5:1d:c4:47:b7:f1:a8:4c:04:38: e5:59:cd:65:37:19:fc:53:63:97:5f:ff:fa:9e:c7: ed:e6:1a:02:e6:f7:90:f8:98:43:42:6d:c6:da:de: fd:dd:b0:e5:b0:61:84:82:b9:54:ae:8d:e7:a4:0f: 8b:d9:83:11:20:1b:46:39:9e:0c:ed:01:0b:2e:13: cc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0B:55:01:E3:C9:85:6A:A8:D3:0B:AD:7E:25:18:D9:1E:27:3E:12 X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/SAtVAePJhWqo0wutfiUY2R4nPhI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:190:1802::/48 Signature Algorithm: sha256WithRSAEncryption 4d:ef:0f:97:eb:0f:c6:76:b3:ff:42:fe:f1:45:d4:78:38:fe: ce:34:21:49:e7:a0:6b:e5:76:d2:36:e5:c7:d4:1d:d0:6d:5d: 94:fa:f6:ba:79:5e:0f:03:08:8c:9d:66:90:88:9e:25:d7:b9: e4:b5:90:09:ff:41:ce:de:36:19:ad:8b:48:40:75:d4:27:0f: 78:ae:07:bf:4d:52:6a:a8:12:5a:bb:77:12:92:4c:07:44:fc: 95:c3:11:09:d7:b2:fd:45:5f:46:57:70:02:36:c4:e0:36:9f: 95:7a:8f:c3:e4:b3:db:99:e5:9f:a3:73:1b:e8:66:8d:31:fd: 7a:ac:bd:29:08:53:cf:bd:11:6d:59:1a:71:f1:23:56:8b:ae: ae:7b:04:0a:f3:5e:cb:6d:46:42:86:b5:03:9f:04:da:94:07: cc:52:50:be:95:5f:21:7a:77:41:26:4e:35:5e:28:1d:bc:e5: 6c:39:ba:e2:a2:b9:4f:56:64:ca:14:66:d4:12:40:1b:7c:40: 27:f1:b7:23:31:55:41:cc:65:b0:bd:c8:ee:59:d3:54:cc:19: 00:b9:06:ed:13:51:52:f2:30:fd:1d:6d:ff:e7:33:df:26:55: 0f:76:87:55:7c:3b:59:6f:11:f9:ea:74:64:a4:f6:8d:52:3f: 6b:d7:b0:32 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xxha2r1TvU3wuwIo7JIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjYwMTAxMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODBiNTUwMWUzYzk4NTZhYThkMzBiYWQ3ZTI1MThkOTFlMjczZTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYfuPYEm1fyRvzQHwoDGAyjc7Zvw 6g/Ny2IyJWRu9ENlV3UwbY4jjntB2/vdhQQEU+D3hiGCj0+fXOotWRpya696RLVv qf7MRKBRheBz/4n86RqbcmsLRBYlhCvBqMuaETK96MwB+gYDQu8eXnp2+OeLKYOO 0UN6gZVxktcHokTuDva2Fh3sCBvHZqNkfYAxNwGc2gDSA+9xgMcEPPixRi0/37s2 5IwaLeY5zUP7Ibhf/S08d3vuc9UdxEe38ahMBDjlWc1lNxn8U2OXX//6nsft5hoC 5veQ+JhDQm3G2t793bDlsGGEgrlUro3npA+L2YMRIBtGOZ4M7QELLhPMBQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEgLVQHjyYVqqNMLrX4lGNkeJz4SMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvU0F0VkFlUEpoV3FvMHd1dGZpVVkyUjRuUGhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEBkBgC MA0GCSqGSIb3DQEBCwUAA4IBAQBN7w+X6w/GdrP/Qv7xRdR4OP7ONCFJ56Br5XbS NuXH1B3QbV2U+va6eV4PAwiMnWaQiJ4l17nktZAJ/0HO3jYZrYtIQHXUJw94rge/ TVJqqBJau3cSkkwHRPyVwxEJ17L9RV9GV3ACNsTgNp+Veo/D5LPbmeWfo3Mb6GaN Mf16rL0pCFPPvRFtWRpx8SNWi66uewQK817LbUZChrUDnwTalAfMUlC+lV8hendB Jk41XigdvOVsObriorlPVmTKFGbUEkAbfEAn8bcjMVVBzGWwvcjuWdNUzBkAuQbt E1FS8jD9HW3/5zPfJlUPdodVfDtZbxH56nRkpPaNUj9r17Ay -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:08 2026 by rpki-client