This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/B_D8ZFryNPK-1TWxYn_l-cBvlKU.roa File: B_D8ZFryNPK-1TWxYn_l-cBvlKU.roa (raw, json) Hash identifier: QR7lUVGLbSB9aV99mt2S7hiJAUzAPbv2ggY4HyUzvSA= Subject key identifier: 07:F0:FC:64:5A:F2:34:F2:BE:D5:35:B1:62:7F:E5:F9:C0:6F:94:A5 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758E1528F8E59FEBCCEA177B39A6271 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/B_D8ZFryNPK-1TWxYn_l-cBvlKU.roa Signing time: Thu 01 Jan 2026 02:17:52 +0000 ROA not before: Thu 01 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139589 IP address blocks: 2a0f:5707:ac00::/44 maxlen: 48 2a0f:5707:ac00::/48 maxlen: 48 2a0f:5707:ac01::/48 maxlen: 48 2a0f:5707:ac02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e1:52:8f:8e:59:fe:bc:ce:a1:77:b3:9a:62:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07f0fc645af234f2bed535b1627fe5f9c06f94a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d5:d6:3c:d3:1a:ec:61:1b:9f:05:5d:3a:3f: f9:2d:a9:3b:a1:4d:8a:6d:4c:89:62:72:0f:de:cc: 9f:03:98:48:9f:1e:00:ec:65:24:ca:df:6c:8f:d3: 86:14:bb:15:a6:88:4f:82:72:e4:1c:b2:17:49:3e: 8e:7f:93:89:2f:30:17:4e:02:d3:d8:4c:2f:8f:97: ee:8b:73:79:35:4f:1b:03:12:dd:16:91:d8:de:db: a5:06:eb:62:f7:3b:4c:fb:5b:cd:6c:97:cb:33:88: ea:a8:65:05:8b:84:76:68:1e:0a:05:4c:cc:f0:32: ab:24:44:0f:f5:16:9a:2e:c8:db:9e:99:04:fc:20: 37:7a:cb:f8:b2:b5:ce:c8:aa:bd:59:f6:4f:f5:cc: ed:f1:d7:ad:6a:98:b4:3c:39:90:a5:a5:2b:a0:9c: b5:7d:4a:e7:af:2a:14:1d:c7:1f:be:bb:1e:89:26: 7a:b9:d9:71:77:f9:0c:73:de:a0:f5:4f:35:b4:82: 03:99:28:31:b7:aa:cd:5e:f6:fa:a6:29:5f:40:5e: 45:31:79:ee:0a:fb:7d:0a:8a:b5:2a:6b:30:4c:75: 10:12:ae:55:3e:e2:d8:ba:bc:55:3d:d7:b4:b3:7a: 86:f2:83:08:af:14:f1:7e:9e:7e:44:10:78:f6:8c: bb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F0:FC:64:5A:F2:34:F2:BE:D5:35:B1:62:7F:E5:F9:C0:6F:94:A5 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/B_D8ZFryNPK-1TWxYn_l-cBvlKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:ac00::/44 Signature Algorithm: sha256WithRSAEncryption 06:fd:0d:e2:0d:78:8a:78:55:40:26:db:1e:2a:fe:37:f6:ed: 6e:41:bd:1e:8d:3e:b8:68:4b:08:ac:19:25:4b:c0:53:96:a2: fa:47:af:b3:08:b4:7c:7d:ba:55:6c:97:0e:d3:97:0f:23:ea: 36:5c:52:ae:e5:28:36:b4:ba:40:bc:c0:ae:cf:f5:1e:24:91: 25:ac:a6:59:2a:e4:c8:88:4f:ad:e0:c2:d1:9d:75:c9:e7:97: 7f:a9:a7:0d:22:52:e2:1f:11:02:83:3c:5f:47:1f:e8:03:d9: ad:77:c6:74:e7:2b:e3:b6:03:2d:e2:81:e4:bb:82:47:eb:e4: d1:9e:27:4e:b6:c2:b0:0a:80:be:48:29:35:5d:89:1d:9a:0d: a9:87:76:02:df:ea:d2:f7:2a:76:f8:e2:19:c8:55:96:81:b5: 0c:c0:6b:96:d2:e9:3d:a9:ba:07:01:df:04:d6:b4:b6:cd:7a: 46:1a:7e:72:1e:38:14:ac:73:6d:58:38:c8:62:54:89:fa:eb: 70:ba:9f:d2:ec:9e:ea:83:a7:4f:fb:4d:af:b1:72:86:b0:32: 8e:92:91:aa:40:f1:f1:68:fb:5d:65:d8:4f:c3:11:84:04:a2: 22:69:b6:47:6c:f3:72:bc:e3:de:a6:78:8e:7d:7f:4d:0f:7a: 0e:b3:a3:5a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WOFSj45Z/rzOoXezmmJxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2YwZmM2NDVhZjIzNGYyYmVkNTM1YjE2MjdmZTVmOWMwNmY5NGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNXWPNMa7GEbnwVdOj/5Lak7oU2K bUyJYnIP3syfA5hInx4A7GUkyt9sj9OGFLsVpohPgnLkHLIXST6Of5OJLzAXTgLT 2Ewvj5fui3N5NU8bAxLdFpHY3tulButi9ztM+1vNbJfLM4jqqGUFi4R2aB4KBUzM 8DKrJEQP9RaaLsjbnpkE/CA3esv4srXOyKq9WfZP9czt8detapi0PDmQpaUroJy1 fUrnryoUHccfvrseiSZ6udlxd/kMc96g9U81tIIDmSgxt6rNXvb6pilfQF5FMXnu Cvt9Coq1KmswTHUQEq5VPuLYurxVPde0s3qG8oMIrxTxfp5+RBB49oy7YwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAfw/GRa8jTyvtU1sWJ/5fnAb5SlMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvQl9EOFpGcnlOUEstMVRXeFluX2wtY0J2bEtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6wA MA0GCSqGSIb3DQEBCwUAA4IBAQAG/Q3iDXiKeFVAJtseKv439u1uQb0ejT64aEsI rBklS8BTlqL6R6+zCLR8fbpVbJcO05cPI+o2XFKu5Sg2tLpAvMCuz/UeJJElrKZZ KuTIiE+t4MLRnXXJ55d/qacNIlLiHxECgzxfRx/oA9mtd8Z05yvjtgMt4oHku4JH 6+TRnidOtsKwCoC+SCk1XYkdmg2ph3YC3+rS9yp2+OIZyFWWgbUMwGuW0uk9qboH Ad8E1rS2zXpGGn5yHjgUrHNtWDjIYlSJ+utwup/S7J7qg6dP+02vsXKGsDKOkpGq QPHxaPtdZdhPwxGEBKIiabZHbPNyvOPepniOfX9ND3oOs6Na -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:56 2026 by rpki-client