This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/S2Wkhkw9phzNQaRw-wCUFUlveyk.roa File: S2Wkhkw9phzNQaRw-wCUFUlveyk.roa (raw, json) Hash identifier: AbDku5gvFqIibLX9hoTuqDLW+74l1bM0t1WcrCt9V/E= Subject key identifier: 4B:65:A4:86:4C:3D:A6:1C:CD:41:A4:70:FB:00:94:15:49:6F:7B:29 Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81 Certificate serial: 019B7C809459A639336E8F318AFD17D92976 Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/S2Wkhkw9phzNQaRw-wCUFUlveyk.roa Signing time: Fri 02 Jan 2026 02:19:19 +0000 ROA not before: Fri 02 Jan 2026 02:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206507 IP address blocks: 2001:30c0:fffd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:94:59:a6:39:33:6e:8f:31:8a:fd:17:d9:29:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81 Validity Not Before: Jan 2 02:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b65a4864c3da61ccd41a470fb009415496f7b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:73:e4:be:de:18:a4:0e:f2:37:6b:53:23:80: 7a:02:21:11:37:82:71:d3:c4:9b:03:1d:4f:44:5b: ae:03:17:82:73:af:4a:0b:90:b0:7d:81:30:15:1d: 2a:2d:a3:bf:f7:6c:ac:4f:e1:52:5f:42:9c:25:81: 2e:04:f9:b0:59:66:5f:93:5c:9a:48:fa:c4:5b:1b: 0a:84:a6:76:37:75:62:2f:e1:80:05:7d:16:f7:31: f7:a6:02:ac:05:62:80:ec:c4:44:b4:60:b9:8c:15: 3d:d1:45:da:c7:19:af:17:da:c8:71:dd:c6:ae:6e: 23:bd:b5:8b:3b:3c:2e:bc:3a:4d:c2:8c:c9:c3:54: 78:25:6c:0d:ec:af:6c:c9:34:60:75:88:56:a2:6c: 76:6d:8f:45:f7:10:1a:d5:d0:09:1c:3f:bc:21:91: 73:c3:49:65:38:33:63:fd:d5:3a:2e:14:83:59:83: e1:4e:6a:4a:38:72:19:68:a1:4c:e7:d4:6b:c6:fc: 25:9f:d9:cd:a5:45:20:8f:79:14:7c:4d:e7:7a:82: 69:87:1c:f2:5d:95:3c:d0:be:04:db:9a:39:52:54: 8e:d6:34:8a:88:e8:cd:3c:ad:47:c3:5f:10:ca:98: f5:8f:6b:90:ae:ad:be:1f:03:5e:84:38:50:86:4b: c5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:65:A4:86:4C:3D:A6:1C:CD:41:A4:70:FB:00:94:15:49:6F:7B:29 X509v3 Authority Key Identifier: keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/S2Wkhkw9phzNQaRw-wCUFUlveyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:30c0:fffd::/48 Signature Algorithm: sha256WithRSAEncryption 5d:f1:d8:5d:1a:bf:74:fb:18:0a:53:e5:36:24:2f:86:c1:10: 79:e1:aa:92:3c:61:bb:36:fc:37:6d:d1:41:8b:bf:18:7b:02: c8:93:95:ba:e4:24:50:0d:53:20:91:81:13:5c:a9:7c:92:0e: 30:5d:fc:db:5c:fe:a9:7e:82:71:d8:81:33:0f:ea:c5:f0:c5: 76:d7:aa:6d:87:56:4a:64:21:40:2a:bd:41:0a:15:8a:b9:6b: d3:dd:02:27:b6:54:2e:e6:95:12:51:88:5a:bc:df:e1:95:3c: 3e:99:c0:21:10:25:17:12:57:3e:06:e7:05:75:14:45:be:c3: 65:c8:b8:fd:37:e7:be:13:a0:ad:34:ab:37:60:53:b9:dd:f2: fc:55:84:bb:42:59:ae:04:99:cb:58:58:0e:13:d2:ad:b9:f2: c3:2e:f0:a3:0f:f4:a7:9d:b7:73:a5:5d:11:ba:07:1a:e9:52: 77:2a:7b:b1:de:78:a6:52:4c:23:d5:bc:a2:cb:c3:36:ec:3f: 1a:75:74:78:10:66:a3:f8:94:a2:9c:82:c0:3e:65:42:99:ab: 24:7d:53:e9:f5:5d:c2:37:35:4e:38:c7:88:ea:86:ff:97:9e: de:c1:a4:8b:9d:28:79:59:04:fd:26:83:4f:62:87:7a:40:bb: 54:b9:49:5b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gJRZpjkzbo8xiv0X2Sl2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYWY0OGIwMmI5N2RjMmQzMTIyNTBhYTIzNDA4M2I4YzFi YjllODEwHhcNMjYwMTAyMDIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjY1YTQ4NjRjM2RhNjFjY2Q0MWE0NzBmYjAwOTQxNTQ5NmY3YjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Pkvt4YpA7yN2tTI4B6AiERN4Jx 08SbAx1PRFuuAxeCc69KC5CwfYEwFR0qLaO/92ysT+FSX0KcJYEuBPmwWWZfk1ya SPrEWxsKhKZ2N3ViL+GABX0W9zH3pgKsBWKA7MREtGC5jBU90UXaxxmvF9rIcd3G rm4jvbWLOzwuvDpNwozJw1R4JWwN7K9syTRgdYhWomx2bY9F9xAa1dAJHD+8IZFz w0llODNj/dU6LhSDWYPhTmpKOHIZaKFM59Rrxvwln9nNpUUgj3kUfE3neoJphxzy XZU80L4E25o5UlSO1jSKiOjNPK1Hw18Qypj1j2uQrq2+HwNehDhQhkvFLwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEtlpIZMPaYczUGkcPsAlBVJb3spMB8GA1UdIwQY MBaAFG+vSLArl9wtMSJQqiNAg7jBu56BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODct YjM0ZDY0OWNmYjdiLzEvUzJXa2hrdzlwaHpOUWFSdy13Q1VGVWx2ZXlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODctYjM0ZDY0OWNmYjdi LzEvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEwwP/9 MA0GCSqGSIb3DQEBCwUAA4IBAQBd8dhdGr90+xgKU+U2JC+GwRB54aqSPGG7Nvw3 bdFBi78YewLIk5W65CRQDVMgkYETXKl8kg4wXfzbXP6pfoJx2IEzD+rF8MV216pt h1ZKZCFAKr1BChWKuWvT3QIntlQu5pUSUYhavN/hlTw+mcAhECUXElc+BucFdRRF vsNlyLj9N+e+E6CtNKs3YFO53fL8VYS7QlmuBJnLWFgOE9KtufLDLvCjD/Snnbdz pV0Rugca6VJ3Knux3nimUkwj1byiy8M27D8adXR4EGaj+JSinILAPmVCmaskfVPp 9V3CNzVOOMeI6ob/l57ewaSLnSh5WQT9JoNPYod6QLtUuUlb -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:20 2026 by rpki-client