This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/SA91wBhkikPDWTrAUdLpOxUcx_0.roa File: SA91wBhkikPDWTrAUdLpOxUcx_0.roa (raw, json) Hash identifier: Y6pGr30mVBYxj09imikNObgMk7TKch+XIWYn2BcZKOo= Subject key identifier: 48:0F:75:C0:18:64:8A:43:C3:59:3A:C0:51:D2:E9:3B:15:1C:C7:FD Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf Certificate serial: 019B7C80C733B7F2C02FFA78C6B2FF415657 Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/SA91wBhkikPDWTrAUdLpOxUcx_0.roa Signing time: Fri 02 Jan 2026 02:19:32 +0000 ROA not before: Fri 02 Jan 2026 02:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62350 IP address blocks: 2001:678:f50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c7:33:b7:f2:c0:2f:fa:78:c6:b2:ff:41:56:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf Validity Not Before: Jan 2 02:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=480f75c018648a43c3593ac051d2e93b151cc7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:42:81:9b:91:e2:7d:54:93:be:49:ee:84:e3: e2:b3:11:a2:f8:4d:0f:36:d9:d4:7f:a9:ed:09:6c: 37:3c:ea:62:4c:75:ab:05:59:07:7a:d8:40:f0:57: bc:64:23:af:70:b2:61:82:16:fb:a9:47:1a:dc:22: de:b7:04:f4:46:47:7b:03:48:67:53:e4:2e:9c:e6: 5d:04:b4:9d:8d:df:39:0f:c0:58:34:70:39:c2:24: 59:9b:ed:35:90:b7:3e:14:12:13:85:e4:95:ee:e0: 7a:7f:97:76:db:30:a6:e1:95:32:62:33:fe:bf:70: 37:38:34:6d:0b:f8:07:9b:07:b2:a6:f1:a7:30:84: e9:5e:8f:a2:c0:7d:81:91:65:63:5a:9d:d3:68:32: db:d4:75:7a:86:db:a8:77:1c:5f:56:d9:69:63:42: d7:a2:df:e7:78:f3:f4:b9:f5:f2:31:f1:62:ce:7a: f4:da:30:cb:48:3e:10:dd:67:e8:2f:12:ee:b9:91: 23:26:38:1f:a4:3d:da:47:d8:3d:c6:ac:65:c4:9b: 80:09:0f:16:17:69:3a:d0:49:20:42:53:14:ab:02: a6:1f:eb:2d:4a:bb:59:7a:ce:68:74:8f:25:62:ad: 04:58:8f:6e:35:98:17:cc:be:1f:ca:8c:12:0f:e7: 69:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0F:75:C0:18:64:8A:43:C3:59:3A:C0:51:D2:E9:3B:15:1C:C7:FD X509v3 Authority Key Identifier: keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/SA91wBhkikPDWTrAUdLpOxUcx_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:f50::/48 Signature Algorithm: sha256WithRSAEncryption 1b:c7:14:27:c9:29:b9:5b:1c:f8:aa:3f:05:e6:06:cf:2f:d8: 24:cd:2c:30:87:57:cd:c8:f7:80:81:84:a2:01:6f:9e:49:0c: 4a:f3:3a:19:9f:64:62:a2:45:5f:b5:b6:c5:02:2b:af:52:b6: 71:0b:73:52:ec:c2:d6:53:74:30:da:93:64:25:a0:11:1b:8e: 91:f9:b1:dd:f5:07:ce:b7:16:a2:3e:7a:95:d0:1b:01:9a:af: bf:7b:d8:0f:cc:84:a0:fd:30:0f:77:55:60:6e:f1:e7:29:26: fe:04:33:a6:b6:0d:87:e7:6d:d0:0c:46:4f:01:93:8f:6d:c8: 7a:66:02:90:81:8c:b2:3f:f2:3b:91:92:4a:c3:0f:d6:5e:0f: b7:38:5d:e1:f4:86:83:18:cf:6a:2e:dc:a8:f5:b8:4a:4a:2b: 2e:d1:f0:a5:c5:39:58:3d:76:94:64:22:20:e8:08:bf:d9:81: 3d:50:8c:9f:ff:d3:5e:91:3f:c7:2c:f0:9f:3d:2c:8a:ee:00: 84:04:1e:50:67:68:20:0b:b2:42:81:99:01:79:e5:1c:1d:d8: 27:70:3e:2e:8d:48:38:ba:5d:e5:dd:94:06:77:03:ce:79:3b: 7d:e6:41:74:31:d5:68:6e:39:ba:91:7b:98:f8:91:67:82:cb: 90:58:97:f8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gMczt/LAL/p4xrL/QVZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjlkMTMxYmU1MjgxMGU0N2M5Y2JiZjgzYTNmZmJkNGY3 Y2JkYmYwHhcNMjYwMTAyMDIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODBmNzVjMDE4NjQ4YTQzYzM1OTNhYzA1MWQyZTkzYjE1MWNjN2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+UKBm5HifVSTvknuhOPisxGi+E0P NtnUf6ntCWw3POpiTHWrBVkHethA8Fe8ZCOvcLJhghb7qUca3CLetwT0Rkd7A0hn U+QunOZdBLSdjd85D8BYNHA5wiRZm+01kLc+FBITheSV7uB6f5d22zCm4ZUyYjP+ v3A3ODRtC/gHmweypvGnMITpXo+iwH2BkWVjWp3TaDLb1HV6htuodxxfVtlpY0LX ot/nePP0ufXyMfFiznr02jDLSD4Q3WfoLxLuuZEjJjgfpD3aR9g9xqxlxJuACQ8W F2k60EkgQlMUqwKmH+stSrtZes5odI8lYq0EWI9uNZgXzL4fyowSD+dp5wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEgPdcAYZIpDw1k6wFHS6TsVHMf9MB8GA1UdIwQY MBaAFDgp0TG+UoEOR8nLv4Oj/71PfL2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYt YjAzOGRiODk4YjdlLzEvU0E5MXdCaGtpa1BEV1RyQVVkTHBPeFVjeF8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYtYjAzOGRiODk4Yjdl LzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA9Q MA0GCSqGSIb3DQEBCwUAA4IBAQAbxxQnySm5Wxz4qj8F5gbPL9gkzSwwh1fNyPeA gYSiAW+eSQxK8zoZn2RiokVftbbFAiuvUrZxC3NS7MLWU3Qw2pNkJaARG46R+bHd 9QfOtxaiPnqV0BsBmq+/e9gPzISg/TAPd1VgbvHnKSb+BDOmtg2H523QDEZPAZOP bch6ZgKQgYyyP/I7kZJKww/WXg+3OF3h9IaDGM9qLtyo9bhKSisu0fClxTlYPXaU ZCIg6Ai/2YE9UIyf/9NekT/HLPCfPSyK7gCEBB5QZ2ggC7JCgZkBeeUcHdgncD4u jUg4ul3l3ZQGdwPOeTt95kF0MdVobjm6kXuY+JFngsuQWJf4 -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:53 2026 by rpki-client