This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SbXM0qLg3mCKQ2WxaKwwFkdjDE4.roa File: SbXM0qLg3mCKQ2WxaKwwFkdjDE4.roa (raw, json) Hash identifier: g89muY0boKRgtVq9bXiiXIkNgM+2MXHjzlw+I+xJBDE= Subject key identifier: 49:B5:CC:D2:A2:E0:DE:60:8A:43:65:B1:68:AC:30:16:47:63:0C:4E Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B22BD0075FCDFF54FC06A6554272F5520 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SbXM0qLg3mCKQ2WxaKwwFkdjDE4.roa Signing time: Mon 15 Dec 2025 15:59:30 +0000 ROA not before: Mon 15 Dec 2025 15:59:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214630 IP address blocks: 2a12:bec4:1c40::/44 maxlen: 48 2a12:bec4:1d50::/44 maxlen: 48 2a12:bec4:1dc0::/44 maxlen: 48 2a12:bec4:1ec0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:bd:00:75:fc:df:f5:4f:c0:6a:65:54:27:2f:55:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Dec 15 15:59:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=49b5ccd2a2e0de608a4365b168ac301647630c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:0b:04:90:1b:b9:b4:ad:69:e6:5f:1f:ad: 6c:f6:9b:aa:34:a4:a1:44:98:f0:31:76:48:51:61: c9:53:d9:a5:a3:5e:e1:06:60:a9:22:81:57:85:d5: be:7d:9f:b0:36:6b:15:1c:91:7c:f9:64:fa:31:2f: 6a:d9:45:d0:b3:b6:41:95:fc:94:45:e1:9d:b7:f6: c6:c9:50:a2:3e:87:f2:dd:6b:37:5d:58:44:88:3d: 52:65:ae:06:af:ee:f3:df:48:45:68:25:2d:fd:c5: e1:3a:5f:f5:1c:53:42:4e:5e:9d:2c:82:bb:c9:b8: ad:35:bb:f6:4b:83:e8:6b:e5:62:ac:cc:95:98:db: 5a:16:3b:37:3e:16:db:aa:fc:1a:6a:33:1c:85:8a: 54:38:33:51:f3:be:be:b9:b3:18:34:46:d1:bd:2a: f3:4b:c1:34:ad:8b:95:aa:c5:03:f1:2d:c5:fc:ec: b9:13:74:e3:55:4e:13:17:6d:10:6e:78:46:3b:bf: 9b:fd:15:9c:7e:88:36:11:5e:de:9a:dd:14:ef:b9: ce:e8:5b:1f:13:0b:5c:30:6e:6e:3e:b2:a0:4f:af: 25:49:9c:9b:1a:8c:65:ce:60:0b:2e:0e:7b:35:6b: 67:ac:d6:5a:50:fa:55:02:f0:55:aa:de:4d:80:36: 5c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B5:CC:D2:A2:E0:DE:60:8A:43:65:B1:68:AC:30:16:47:63:0C:4E X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SbXM0qLg3mCKQ2WxaKwwFkdjDE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1c40::/44 2a12:bec4:1d50::/44 2a12:bec4:1dc0::/44 2a12:bec4:1ec0::/44 Signature Algorithm: sha256WithRSAEncryption 7b:87:8d:e4:f8:83:d5:5c:5c:0d:9e:c1:a4:ca:30:37:12:ce: ef:8d:3a:d7:47:10:bc:43:a4:3f:96:9b:c7:9c:69:3b:21:92: 8e:da:fe:29:cd:2d:ee:c2:a5:42:09:79:76:80:9e:61:34:7b: 2c:2b:5b:b4:9d:5d:b6:dd:77:27:e5:c4:d9:55:0b:87:4d:d3: 9a:b8:48:cc:3b:bd:65:ac:ea:f4:92:75:6f:a4:34:63:49:6c: 79:60:9d:93:b9:a0:4e:36:2d:71:e3:ad:f0:b4:3b:6e:c7:b4: 5d:50:dd:6c:d0:1b:e8:04:b0:4b:79:93:a4:d5:ef:6e:18:58: 06:dc:f0:87:8c:29:fd:3c:fa:b3:9c:01:12:aa:f8:da:10:ca: e0:71:f0:09:0e:c1:5b:e1:82:7f:13:0b:00:d9:98:a2:b1:6e: 93:12:70:64:37:97:04:66:7d:5d:91:b5:b8:f9:8a:90:e2:84: 50:7d:f1:c3:22:bf:49:be:a3:e9:07:f3:f3:6f:62:24:87:cf: 6d:62:b2:67:fa:40:01:b1:2e:3a:44:42:43:8c:2e:b4:73:67: 07:0c:a3:17:dc:03:5a:db:cd:53:41:19:a5:95:0e:32:70:9e: ff:d6:a8:48:2c:20:ee:30:93:0b:cc:d5:e7:b6:cf:13:53:7b: 6d:5e:70:8c -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZsivQB1/N/1T8BqZVQnL1UgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjUxMjE1MTU1OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWI1Y2NkMmEyZTBkZTYwOGE0MzY1YjE2OGFjMzAxNjQ3NjMwYzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/MLBJAbubStaeZfH61s9puqNKSh RJjwMXZIUWHJU9mlo17hBmCpIoFXhdW+fZ+wNmsVHJF8+WT6MS9q2UXQs7ZBlfyU ReGdt/bGyVCiPofy3Ws3XVhEiD1SZa4Gr+7z30hFaCUt/cXhOl/1HFNCTl6dLIK7 ybitNbv2S4Poa+VirMyVmNtaFjs3PhbbqvwaajMchYpUODNR876+ubMYNEbRvSrz S8E0rYuVqsUD8S3F/Oy5E3TjVU4TF20QbnhGO7+b/RWcfog2EV7emt0U77nO6Fsf EwtcMG5uPrKgT68lSZybGoxlzmALLg57NWtnrNZaUPpVAvBVqt5NgDZcpwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFEm1zNKi4N5gikNlsWisMBZHYwxOMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvU2JYTTBxTGczbUNLUTJXeGFLd3dGa2RqREU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcEKhK+xBxA AwcEKhK+xB1QAwcEKhK+xB3AAwcEKhK+xB7AMA0GCSqGSIb3DQEBCwUAA4IBAQB7 h43k+IPVXFwNnsGkyjA3Es7vjTrXRxC8Q6Q/lpvHnGk7IZKO2v4pzS3uwqVCCXl2 gJ5hNHssK1u0nV223Xcn5cTZVQuHTdOauEjMO71lrOr0knVvpDRjSWx5YJ2TuaBO Ni1x463wtDtux7RdUN1s0BvoBLBLeZOk1e9uGFgG3PCHjCn9PPqznAESqvjaEMrg cfAJDsFb4YJ/EwsA2ZiisW6TEnBkN5cEZn1dkbW4+YqQ4oRQffHDIr9JvqPpB/Pz b2Ikh89tYrJn+kABsS46REJDjC60c2cHDKMX3ANa281TQRmllQ4ycJ7/1qhILCDu MJMLzNXnts8TU3ttXnCM -----END CERTIFICATE-----Generated at Sun Dec 21 08:55:06 2025 by rpki-client