This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/SSbCIFUzoJnAufFAmpn4-eL0evQ.roa File: SSbCIFUzoJnAufFAmpn4-eL0evQ.roa (raw, json) Hash identifier: xLYQWvxW9OI7//jHrJrCiY97JsgcAmDpELt0HCZDcTk= Subject key identifier: 49:26:C2:20:55:33:A0:99:C0:B9:F1:40:9A:99:F8:F9:E2:F4:7A:F4 Certificate issuer: /CN=3d639fa4eddc162df3659e721d247ff338962f68 Certificate serial: 019B7C11767A68AC8A815F93D77DEB304733 Authority key identifier: 3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/SSbCIFUzoJnAufFAmpn4-eL0evQ.roa Signing time: Fri 02 Jan 2026 00:17:57 +0000 ROA not before: Fri 02 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208765 IP address blocks: 2a04:6400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:76:7a:68:ac:8a:81:5f:93:d7:7d:eb:30:47:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d639fa4eddc162df3659e721d247ff338962f68 Validity Not Before: Jan 2 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4926c2205533a099c0b9f1409a99f8f9e2f47af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:71:63:52:b3:41:cb:73:46:e8:17:75:d7:43: f2:92:56:94:21:85:a5:9c:7b:51:31:ea:95:fb:14: c7:ba:30:81:b6:c9:bc:a1:06:51:9d:1b:46:bf:30: b6:d9:c6:65:af:8b:69:0b:6b:cd:93:61:40:72:d2: 64:51:65:c6:14:97:a9:ea:85:da:62:12:2c:78:1f: 29:cc:b8:4d:01:39:b4:b6:30:6b:4f:26:de:d1:64: 14:b7:d1:05:8c:00:1e:28:9d:5f:57:a1:16:73:aa: c6:fd:bd:e2:88:39:c2:a1:7f:2f:50:11:47:cb:21: 94:0b:a9:35:59:9e:64:d5:6b:73:b2:ea:76:0b:37: ca:38:d5:ea:ea:11:0d:ae:e3:1d:83:d2:75:9c:4b: b0:f8:a9:e9:11:7e:e1:1a:32:30:0d:76:df:c3:f1: c5:a6:c1:20:5a:1f:34:89:24:86:20:9a:cc:98:f2: 30:2c:d2:33:5d:93:0c:9d:45:8e:a9:e9:02:08:94: 97:92:0d:a0:d9:77:af:9e:d1:a4:2b:bc:4a:64:bc: d1:16:ed:59:c1:d2:47:61:2a:67:55:fa:e9:06:63: d8:78:dc:da:25:f3:cc:f3:10:ee:7f:4f:f6:18:c5: e0:de:00:82:6b:af:43:7b:8b:5d:a3:33:40:7a:2a: 9e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:26:C2:20:55:33:A0:99:C0:B9:F1:40:9A:99:F8:F9:E2:F4:7A:F4 X509v3 Authority Key Identifier: keyid:3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/SSbCIFUzoJnAufFAmpn4-eL0evQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:6400::/29 Signature Algorithm: sha256WithRSAEncryption 17:03:5c:5d:a0:83:0f:3b:5b:a3:99:7b:9a:cb:e1:e8:0d:b7: a1:1e:85:e7:9e:5b:77:f3:b1:40:91:52:b3:f6:0e:4c:2f:ca: 5b:9c:6a:da:ef:01:4e:0d:6c:0e:dd:8a:c7:d7:11:4e:da:2e: 5d:35:c9:0c:64:4f:46:5e:d2:45:e7:3e:1a:c2:c4:b2:ce:99: 98:a1:d9:7d:2a:ef:c4:c9:c4:88:62:2e:19:47:7f:d8:a6:68: 1f:97:77:64:e9:1c:b7:3f:7c:8a:a1:2d:db:c5:cd:9c:4b:0c: 1e:83:51:d0:b4:87:37:23:95:0d:e6:5f:53:a6:33:a1:2f:df: f3:5c:17:66:77:03:af:4a:df:1c:33:a6:cb:9a:5c:8f:4a:9c: e8:e2:6a:7e:86:5a:80:16:33:41:49:eb:ca:b3:c5:fc:5c:5b: 59:bd:40:c4:bb:d0:19:f8:1a:57:6f:00:05:35:7c:4c:86:66: 54:fe:e2:e0:80:11:c4:c3:41:dd:c6:c0:4f:fb:4c:f8:2b:78: 48:69:29:77:a8:0e:0b:54:b0:ea:90:f3:2c:a2:6c:05:20:cb: f8:4e:55:3b:56:db:1e:52:8c:27:67:cc:43:88:49:b3:ef:2b: 0c:a1:e9:30:0d:e6:df:72:79:fc:47:8c:fe:51:86:d9:24:ab: 2b:cb:29:70 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EXZ6aKyKgV+T133rMEczMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNjM5ZmE0ZWRkYzE2MmRmMzY1OWU3MjFkMjQ3ZmYzMzg5 NjJmNjgwHhcNMjYwMTAyMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTI2YzIyMDU1MzNhMDk5YzBiOWYxNDA5YTk5ZjhmOWUyZjQ3YWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3FjUrNBy3NG6Bd110PyklaUIYWl nHtRMeqV+xTHujCBtsm8oQZRnRtGvzC22cZlr4tpC2vNk2FActJkUWXGFJep6oXa YhIseB8pzLhNATm0tjBrTybe0WQUt9EFjAAeKJ1fV6EWc6rG/b3iiDnCoX8vUBFH yyGUC6k1WZ5k1Wtzsup2CzfKONXq6hENruMdg9J1nEuw+KnpEX7hGjIwDXbfw/HF psEgWh80iSSGIJrMmPIwLNIzXZMMnUWOqekCCJSXkg2g2XevntGkK7xKZLzRFu1Z wdJHYSpnVfrpBmPYeNzaJfPM8xDuf0/2GMXg3gCCa69De4tdozNAeiqeiQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEkmwiBVM6CZwLnxQJqZ+Pni9Hr0MB8GA1UdIwQY MBaAFD1jn6Tt3BYt82Wech0kf/M4li9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNzc5ODMtYmUzYS00OGUzLWI1ZDAt YWQyODRkMjgyNGE0LzEvU1NiQ0lGVXpvSm5BdWZGQW1wbjQtZUwwZXZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jNzc5ODMtYmUzYS00OGUzLWI1ZDAtYWQyODRkMjgyNGE0 LzEvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgRkADAN BgkqhkiG9w0BAQsFAAOCAQEAFwNcXaCDDztbo5l7msvh6A23oR6F555bd/OxQJFS s/YOTC/KW5xq2u8BTg1sDt2Kx9cRTtouXTXJDGRPRl7SRec+GsLEss6ZmKHZfSrv xMnEiGIuGUd/2KZoH5d3ZOkctz98iqEt28XNnEsMHoNR0LSHNyOVDeZfU6YzoS/f 81wXZncDr0rfHDOmy5pcj0qc6OJqfoZagBYzQUnryrPF/FxbWb1AxLvQGfgaV28A BTV8TIZmVP7i4IARxMNB3cbAT/tM+Ct4SGkpd6gOC1Sw6pDzLKJsBSDL+E5VO1bb HlKMJ2fMQ4hJs+8rDKHpMA3m33J5/EeM/lGG2SSrK8spcA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:49 2026 by rpki-client