This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/sxW8R_4Ye3YJ8nEbC0QDtvwcwqw.roa File: sxW8R_4Ye3YJ8nEbC0QDtvwcwqw.roa (raw, json) Hash identifier: MctEeLmp7XeVb+Zd9o/XmrVstLU9nGImwgV/uiI1ttM= Subject key identifier: B3:15:BC:47:FE:18:7B:76:09:F2:71:1B:0B:44:03:B6:FC:1C:C2:AC Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EABE8EA897960D7AD47DA02525296E Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/sxW8R_4Ye3YJ8nEbC0QDtvwcwqw.roa Signing time: Thu 01 Jan 2026 00:17:34 +0000 ROA not before: Thu 01 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50007 IP address blocks: 2a06:3b00::/48 maxlen: 48 2a09:1140::/48 maxlen: 48 2a09:4040::/48 maxlen: 48 2a09:40c0::/48 maxlen: 48 2a09:6a80::/48 maxlen: 48 2a09:9740::/48 maxlen: 48 2a09:98c0::/48 maxlen: 48 2a09:9940::/48 maxlen: 48 2a09:f180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:be:8e:a8:97:96:0d:7a:d4:7d:a0:25:25:29:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b315bc47fe187b7609f2711b0b4403b6fc1cc2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:50:6d:5e:3c:ce:74:0f:77:83:a9:e4:67:a6: 07:d9:34:3f:38:d8:44:ac:d6:c6:1b:2b:97:c3:56: 34:24:89:1f:2a:96:19:8b:6c:3f:1f:c8:38:62:02: 6b:98:b8:c0:24:db:17:10:d5:8d:19:c9:a3:f8:d4: a1:12:15:85:af:42:00:c9:38:93:09:6e:53:10:57: 2d:6e:4b:dc:5d:cc:62:1d:19:0f:a4:64:b1:d9:11: c8:61:00:ee:e4:96:70:9b:85:7f:11:34:7e:f2:dd: e2:64:8c:bc:6c:e8:d7:2c:fc:8b:c1:0b:4d:30:f4: 13:23:e1:67:60:60:0c:2e:0a:09:c0:b0:22:d3:3f: 4f:75:2d:43:5e:b7:84:b1:d1:88:79:53:1c:87:bf: 31:d1:44:3b:92:c0:51:b9:84:00:12:46:d3:4b:00: 90:b3:f4:23:24:ad:10:bd:19:bc:1c:d0:6c:f9:7f: b3:73:5b:c7:1a:c5:9a:3e:84:93:bd:fa:b1:bd:a3: ca:30:12:f7:0c:c9:68:72:91:29:93:4a:18:b1:f8: e4:02:c4:ed:7f:fe:b6:77:5b:6e:74:2e:42:68:de: 95:9c:f0:0c:e2:a3:e9:74:a2:5b:47:ff:4f:38:62: f1:73:d1:3f:fe:73:95:dc:48:ea:65:d7:9e:14:92: f3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:15:BC:47:FE:18:7B:76:09:F2:71:1B:0B:44:03:B6:FC:1C:C2:AC X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/sxW8R_4Ye3YJ8nEbC0QDtvwcwqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:3b00::/48 2a09:1140::/48 2a09:4040::/48 2a09:40c0::/48 2a09:6a80::/48 2a09:9740::/48 2a09:98c0::/48 2a09:9940::/48 2a09:f180::/48 Signature Algorithm: sha256WithRSAEncryption 2c:74:23:5d:3e:c0:30:65:6d:f9:73:f6:f8:5b:2c:4a:ac:a6: 5b:77:1b:7c:af:c3:45:05:eb:46:5e:14:a6:dc:59:bd:53:49: c4:40:81:26:a9:ba:4d:95:74:6c:1b:03:f4:2d:13:88:db:f7: e7:8b:71:18:d2:7b:68:78:6f:bc:8a:dd:3b:be:05:2b:94:39: 9b:bd:26:f8:8a:9a:78:d5:49:03:04:d3:34:f0:4c:17:8a:f0: 0c:cd:70:53:04:8f:98:3d:1a:46:8f:39:6f:aa:2e:e1:cb:97: 24:e5:79:69:5e:22:4e:ae:99:a7:a2:b9:5c:5f:52:e3:1e:bb: 1a:fe:2b:ba:9d:fe:22:1d:ac:75:74:87:b1:3f:33:c0:b4:96: 83:f1:d0:64:01:7c:b6:44:e6:8c:93:94:31:0f:de:21:5a:d6: bf:a4:4f:17:f9:03:99:bd:cd:cb:d9:17:50:20:d3:43:28:1c: 26:1f:b8:af:0b:b7:cf:e8:f4:5a:54:02:86:69:eb:fe:b2:db: f6:5f:1f:f7:f5:b6:77:f7:a1:a9:4c:29:07:7a:b3:b2:7b:e0: d8:62:55:60:76:bb:bf:d0:06:d5:a0:a8:54:3b:a2:bf:23:45: 9a:b5:0d:c1:06:7d:cd:e8:90:28:92:6b:b0:50:1d:5a:e9:e9: e8:eb:31:0b -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt26r6OqJeWDXrUfaAlJSluMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzE1YmM0N2ZlMTg3Yjc2MDlmMjcxMWIwYjQ0MDNiNmZjMWNjMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lBtXjzOdA93g6nkZ6YH2TQ/ONhE rNbGGyuXw1Y0JIkfKpYZi2w/H8g4YgJrmLjAJNsXENWNGcmj+NShEhWFr0IAyTiT CW5TEFctbkvcXcxiHRkPpGSx2RHIYQDu5JZwm4V/ETR+8t3iZIy8bOjXLPyLwQtN MPQTI+FnYGAMLgoJwLAi0z9PdS1DXreEsdGIeVMch78x0UQ7ksBRuYQAEkbTSwCQ s/QjJK0QvRm8HNBs+X+zc1vHGsWaPoSTvfqxvaPKMBL3DMlocpEpk0oYsfjkAsTt f/62d1tudC5CaN6VnPAM4qPpdKJbR/9POGLxc9E//nOV3EjqZdeeFJLzdwIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFLMVvEf+GHt2CfJxGwtEA7b8HMKsMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvc3hXOFJfNFllM1lKOG5FYkMwUUR0dndjd3F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBXBAIAAjBRAwcAKgY7AAAA AwcAKgkRQAAAAwcAKglAQAAAAwcAKglAwAAAAwcAKglqgAAAAwcAKgmXQAAAAwcA KgmYwAAAAwcAKgmZQAAAAwcAKgnxgAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAsdCNd PsAwZW35c/b4WyxKrKZbdxt8r8NFBetGXhSm3Fm9U0nEQIEmqbpNlXRsGwP0LROI 2/fni3EY0ntoeG+8it07vgUrlDmbvSb4ipp41UkDBNM08EwXivAMzXBTBI+YPRpG jzlvqi7hy5ck5XlpXiJOrpmnorlcX1LjHrsa/iu6nf4iHax1dIexPzPAtJaD8dBk AXy2ROaMk5QxD94hWta/pE8X+QOZvc3L2RdQINNDKBwmH7ivC7fP6PRaVAKGaev+ stv2Xx/39bZ396GpTCkHerOye+DYYlVgdru/0AbVoKhUO6K/I0WatQ3BBn3N6JAo kmuwUB1a6eno6zEL -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:51 2026 by rpki-client