This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/0txS1fUoGStin-5kWIpxdO_DLG4.roa File: 0txS1fUoGStin-5kWIpxdO_DLG4.roa (raw, json) Hash identifier: jxJRcZuvlWGNkQ7eLPqDj/YGcwz0innxDkPuWe/JNW8= Subject key identifier: D2:DC:52:D5:F5:28:19:2B:62:9F:EE:64:58:8A:71:74:EF:C3:2C:6E Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758E2D1A1FB71E765122EDFA4B91061 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/0txS1fUoGStin-5kWIpxdO_DLG4.roa Signing time: Thu 01 Jan 2026 02:17:52 +0000 ROA not before: Thu 01 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197477 IP address blocks: 2a0f:5707:ab30::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e2:d1:a1:fb:71:e7:65:12:2e:df:a4:b9:10:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2dc52d5f528192b629fee64588a7174efc32c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:9a:85:df:ac:e7:3b:10:b4:17:e6:4e:ad: 47:a4:fd:57:5f:8a:fd:64:eb:c9:14:35:f8:3d:e2: 61:85:a6:d4:23:a3:46:d0:de:14:c9:e1:8d:ca:8f: 1e:6f:2a:fd:b0:77:c8:b0:63:5f:6e:2a:23:2c:04: dd:66:8f:c4:c6:1a:96:15:5e:6a:50:37:d8:0d:54: c9:1d:87:9a:af:4d:64:4c:c6:c6:34:54:fd:5b:de: b5:f7:73:06:31:22:50:20:16:27:82:42:0d:7a:91: 4e:9d:4f:af:ab:02:13:fd:4e:8f:4d:ab:7d:28:a8: eb:33:6b:12:02:de:db:46:18:d7:a8:11:a9:c8:61: b8:0f:cd:9c:85:be:28:04:ea:46:22:0b:1b:39:86: 73:17:0e:52:31:a1:4f:b4:fd:c0:f5:e7:de:a8:15: 56:6e:84:38:a2:35:89:1c:cb:14:66:18:a3:8d:bb: 4e:66:aa:12:3b:13:31:67:5e:1a:91:93:d2:db:8e: 95:a3:8e:c7:5d:16:4d:e0:8b:eb:87:95:0d:6d:5a: e3:32:4d:6e:e4:3a:bb:5c:59:a1:66:0e:93:b6:6f: 11:3e:58:de:30:3e:57:03:bf:ca:e9:b7:b5:d7:84: a6:ff:70:97:72:d1:8a:b8:e1:cf:65:5e:6a:47:7e: f5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DC:52:D5:F5:28:19:2B:62:9F:EE:64:58:8A:71:74:EF:C3:2C:6E X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/0txS1fUoGStin-5kWIpxdO_DLG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:ab30::/44 Signature Algorithm: sha256WithRSAEncryption b3:e8:96:91:a2:a3:41:e2:18:2d:00:53:3b:27:bd:3c:9e:8f: 89:a1:4f:9c:43:4b:80:48:20:0b:b5:a0:22:96:17:51:e2:e4: 5c:c1:0f:24:49:6d:f4:c1:0e:56:e4:58:ce:c8:b4:ea:75:b1: bd:56:6d:6e:52:dd:e4:2c:67:91:f4:ee:e7:cd:e8:ae:f2:e9: 3b:49:0e:d0:5a:c5:c3:ca:7c:6e:5b:e4:74:1a:e1:92:a3:fd: 04:b8:70:9a:ea:47:2d:b6:4c:48:3c:33:d3:be:71:8b:18:a1: 78:3d:7e:14:4e:b1:ac:2b:e6:f8:f7:a8:f6:51:95:fd:d5:bf: ac:53:b7:94:c1:56:48:b4:1a:0d:81:52:06:8c:3e:66:bf:44: 5e:dc:fb:d5:fc:4a:f8:8b:19:8a:80:39:6d:fc:a5:27:12:d7: d2:ae:ea:87:7f:ab:47:e9:df:4e:32:99:76:f4:3e:96:6d:72: e5:d6:26:a2:99:70:5a:41:9b:a6:fa:7b:7b:f8:56:2e:1a:bb: 6a:e4:67:da:47:be:c3:c4:e0:bc:9c:21:d8:ca:17:ca:f6:14: 26:37:9d:39:19:19:b0:6f:d7:c4:32:c8:a9:b6:90:aa:07:b0: 2f:54:a2:5b:b3:fe:26:6f:29:ee:68:d8:69:ad:fa:34:48:d1: 67:34:44:0d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WOLRoftx52USLt+kuRBhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmRjNTJkNWY1MjgxOTJiNjI5ZmVlNjQ1ODhhNzE3NGVmYzMyYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO+ahd+s5zsQtBfmTq1HpP1XX4r9 ZOvJFDX4PeJhhabUI6NG0N4UyeGNyo8ebyr9sHfIsGNfbiojLATdZo/ExhqWFV5q UDfYDVTJHYear01kTMbGNFT9W96193MGMSJQIBYngkINepFOnU+vqwIT/U6PTat9 KKjrM2sSAt7bRhjXqBGpyGG4D82chb4oBOpGIgsbOYZzFw5SMaFPtP3A9efeqBVW boQ4ojWJHMsUZhijjbtOZqoSOxMxZ14akZPS246Vo47HXRZN4Ivrh5UNbVrjMk1u 5Dq7XFmhZg6Ttm8RPljeMD5XA7/K6be114Sm/3CXctGKuOHPZV5qR371AQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNLcUtX1KBkrYp/uZFiKcXTvwyxuMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvMHR4UzFmVW9HU3Rpbi01a1dJcHhkT19ETEc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6sw MA0GCSqGSIb3DQEBCwUAA4IBAQCz6JaRoqNB4hgtAFM7J708no+JoU+cQ0uASCAL taAilhdR4uRcwQ8kSW30wQ5W5FjOyLTqdbG9Vm1uUt3kLGeR9O7nzeiu8uk7SQ7Q WsXDynxuW+R0GuGSo/0EuHCa6kcttkxIPDPTvnGLGKF4PX4UTrGsK+b496j2UZX9 1b+sU7eUwVZItBoNgVIGjD5mv0Re3PvV/Er4ixmKgDlt/KUnEtfSruqHf6tH6d9O Mpl29D6WbXLl1iaimXBaQZum+nt7+FYuGrtq5GfaR77DxOC8nCHYyhfK9hQmN505 GRmwb9fEMsiptpCqB7AvVKJbs/4mbynuaNhprfo0SNFnNEQN -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:21 2026 by rpki-client