This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/STaAwjJw5o5YD77UFMiE3P3OF-8.roa File: STaAwjJw5o5YD77UFMiE3P3OF-8.roa (raw, json) Hash identifier: ZyDnnvOoabqOZyAYi7oZ+XdKWhqE0mG6Qq6YUwDEsw0= Subject key identifier: 49:36:80:C2:32:70:E6:8E:58:0F:BE:D4:14:C8:84:DC:FD:CE:17:EF Certificate issuer: /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f Certificate serial: 019B77C76A0B101816771B6A50953FA6E069 Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/STaAwjJw5o5YD77UFMiE3P3OF-8.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43751 IP address blocks: 93.191.216.0/21 maxlen: 24 2a02:4b0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6a:0b:10:18:16:77:1b:6a:50:95:3f:a6:e0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=493680c23270e68e580fbed414c884dcfdce17ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:57:a5:c7:3f:bc:79:43:2d:f3:aa:92:d9:2f: 49:87:c5:fe:2e:72:a9:30:16:5e:20:ff:2c:a4:00: 0d:43:d4:92:66:cf:ff:d4:5c:48:85:ad:29:26:c3: fd:7b:4d:d6:4f:84:a0:db:7d:3b:6a:0d:78:d9:3a: 94:38:6c:60:c3:e0:83:94:1e:ab:83:46:eb:70:e5: 8b:58:14:f4:dc:cc:2e:4a:85:44:dd:7d:4d:89:cd: ad:c1:16:91:ed:3d:29:10:9d:ec:2f:ea:d7:2e:7a: 71:94:71:dd:01:ca:5f:43:ef:75:e8:b7:11:b4:7d: e5:2f:78:e3:d4:eb:fc:4c:a1:bd:bf:6e:7f:7e:8f: af:c0:7e:0d:e8:26:95:05:35:13:15:0b:bd:d9:0e: 78:ae:f5:e3:e1:42:2b:a1:70:22:0c:f8:eb:2f:d5: b8:81:f1:a5:af:75:82:17:fa:85:78:53:b0:87:a5: 6c:48:47:51:e3:ed:eb:ba:6e:9f:f3:90:d4:65:37: b9:ce:41:be:91:42:e7:4f:76:ae:fa:bd:de:10:09: 46:9c:50:d5:38:83:b9:1a:21:07:ca:17:1b:c1:7e: 5f:62:04:83:1c:3a:04:b6:68:b3:1a:b7:c8:53:53: 81:d9:ac:ef:50:8d:91:00:43:f3:e8:3f:ea:cf:c9: e3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:36:80:C2:32:70:E6:8E:58:0F:BE:D4:14:C8:84:DC:FD:CE:17:EF X509v3 Authority Key Identifier: keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/STaAwjJw5o5YD77UFMiE3P3OF-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.191.216.0/21 IPv6: 2a02:4b0::/32 Signature Algorithm: sha256WithRSAEncryption 90:1c:b5:e3:8c:25:bf:cc:d8:71:a1:90:ea:93:22:95:b0:c8: 89:fb:28:90:df:2c:20:74:5e:68:f0:d3:db:c0:b5:37:72:5e: 6a:94:6f:87:be:8d:69:78:b3:16:8c:29:87:af:cc:34:4b:80: e1:35:c2:80:28:5d:f5:f7:aa:6e:e3:a2:49:c1:36:fe:8d:ae: 18:3f:40:2c:6d:c0:ea:48:95:de:92:c8:c0:20:c4:0f:eb:bc: 07:f6:6f:74:22:10:8b:d3:ef:a6:5a:46:64:9c:92:9f:7b:a6: 09:01:fd:05:9f:80:58:ae:97:f2:12:45:60:7f:34:1c:87:a2: 08:72:08:bd:95:2e:55:a5:07:07:7b:33:7c:a7:e4:f9:24:57: 08:24:8a:32:20:4b:2a:ad:08:0c:fb:9c:07:27:5a:c7:1e:5d: ea:e8:0b:7a:41:43:75:22:ef:65:f0:c8:e9:a1:88:20:3d:cb: 65:03:03:20:07:e0:0f:12:5f:d3:d9:ea:b5:3a:8c:69:99:2e: 14:24:12:c4:64:95:4d:23:f8:11:bd:cd:a9:1f:be:01:a9:40: 81:c3:fa:b7:b2:0b:cd:3d:0e:8f:db:44:4f:24:34:06:0f:27: 0e:8c:64:7c:3a:76:21:65:bf:e0:03:41:3e:91:5b:f6:41:28: f9:15:54:6e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x2oLEBgWdxtqUJU/puBpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZjJmYjBmYTUyZGUxM2MzMzY2ODljZjNmNDgyOWQ2MzUw Njc1MGYwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTM2ODBjMjMyNzBlNjhlNTgwZmJlZDQxNGM4ODRkY2ZkY2UxN2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1elxz+8eUMt86qS2S9Jh8X+LnKp MBZeIP8spAANQ9SSZs//1FxIha0pJsP9e03WT4Sg2307ag142TqUOGxgw+CDlB6r g0brcOWLWBT03MwuSoVE3X1Nic2twRaR7T0pEJ3sL+rXLnpxlHHdAcpfQ+916LcR tH3lL3jj1Ov8TKG9v25/fo+vwH4N6CaVBTUTFQu92Q54rvXj4UIroXAiDPjrL9W4 gfGlr3WCF/qFeFOwh6VsSEdR4+3rum6f85DUZTe5zkG+kULnT3au+r3eEAlGnFDV OIO5GiEHyhcbwX5fYgSDHDoEtmizGrfIU1OB2azvUI2RAEPz6D/qz8njNwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEk2gMIycOaOWA++1BTIhNz9zhfvMB8GA1UdIwQY MBaAFGzy+w+lLeE8M2aJzz9IKdY1BnUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTkt NmVjOTgyOTUxY2Y3LzEvU1RhQXdqSnc1bzVZRDc3VUZNaUUzUDNPRi04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTktNmVjOTgyOTUxY2Y3 LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXb/YMA0E AgACMAcDBQAqAgSwMA0GCSqGSIb3DQEBCwUAA4IBAQCQHLXjjCW/zNhxoZDqkyKV sMiJ+yiQ3ywgdF5o8NPbwLU3cl5qlG+Hvo1peLMWjCmHr8w0S4DhNcKAKF3196pu 46JJwTb+ja4YP0AsbcDqSJXeksjAIMQP67wH9m90IhCL0++mWkZknJKfe6YJAf0F n4BYrpfyEkVgfzQch6IIcgi9lS5VpQcHezN8p+T5JFcIJIoyIEsqrQgM+5wHJ1rH Hl3q6At6QUN1Iu9l8MjpoYggPctlAwMgB+APEl/T2eq1OoxpmS4UJBLEZJVNI/gR vc2pH74BqUCBw/q3sgvNPQ6P20RPJDQGDycOjGR8OnYhZb/gA0E+kVv2QSj5FVRu -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:12 2026 by rpki-client