This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/SYjQZbGVQoKr5gse_h4R5tWxq7w.roa File: SYjQZbGVQoKr5gse_h4R5tWxq7w.roa (raw, json) Hash identifier: if4CN3dOxV/FIngqB+Dv1YZLDBD/T3UL+wnylNmUz5A= Subject key identifier: 49:88:D0:65:B1:95:42:82:AB:E6:0B:1E:FE:1E:11:E6:D5:B1:AB:BC Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B0DFB40488DC5A82BEE5FF8D4FB0A8470 Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/SYjQZbGVQoKr5gse_h4R5tWxq7w.roa Signing time: Thu 11 Dec 2025 15:15:28 +0000 ROA not before: Thu 11 Dec 2025 15:15:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202986 IP address blocks: 2a14:c380:d10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 03:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:fb:40:48:8d:c5:a8:2b:ee:5f:f8:d4:fb:0a:84:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Dec 11 15:15:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4988d065b1954282abe60b1efe1e11e6d5b1abbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4d:1e:b2:bc:04:92:40:5f:92:e8:99:d4:11: 48:d2:7d:17:4a:88:ea:1d:ec:4f:7a:a1:78:1b:fe: 39:98:43:c6:ef:79:49:2d:30:65:f6:76:14:c0:a3: df:3c:2d:57:11:07:70:61:8e:fb:7b:c3:22:0e:e2: af:21:6e:a1:2d:9e:aa:e7:ca:1a:f7:e9:b2:52:4e: ee:18:eb:22:b5:eb:01:3e:89:64:c1:1a:09:2c:b6: 44:a5:dd:48:b7:a6:5e:49:24:5a:f3:13:5e:c1:a9: 68:92:a0:ad:0d:89:88:e6:e7:c6:33:f7:2e:60:30: 0f:36:34:71:7e:ec:29:5c:2b:67:d7:8a:2f:aa:fa: 3a:e5:71:60:7b:5a:e2:09:a3:38:ce:5e:2d:5a:73: f7:3d:c1:09:82:c6:8c:ca:90:03:28:5b:9d:34:f6: 73:6e:f4:4a:14:d0:4e:44:5e:21:eb:96:95:a4:a2: b8:e8:cb:5e:7c:cd:f5:7f:f1:54:b4:c3:a4:3c:8e: dc:6a:4b:8b:28:fa:56:e8:7d:90:54:0b:c5:1a:b9: b4:f8:31:54:11:1d:f4:7d:60:15:8f:2f:04:50:92: 99:22:31:16:a8:52:37:2f:9d:9f:6d:7e:39:fd:dd: b5:c8:2b:95:6c:ef:a9:62:80:74:74:1f:37:6b:f7: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:88:D0:65:B1:95:42:82:AB:E6:0B:1E:FE:1E:11:E6:D5:B1:AB:BC X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/SYjQZbGVQoKr5gse_h4R5tWxq7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:d10::/44 Signature Algorithm: sha256WithRSAEncryption 3a:04:2b:10:54:7f:b9:f9:8b:b8:e3:45:b7:70:c4:29:87:f6: 63:d7:28:e8:aa:05:52:33:9b:a2:1b:91:06:9b:24:8e:fe:10: c4:46:70:7e:ea:38:21:a5:18:75:4b:6d:79:00:0c:34:51:4f: f3:e1:0a:4e:50:ab:a8:22:35:ef:e7:84:9d:65:32:af:0c:8d: 18:2a:0e:d0:d0:de:85:64:be:8c:d4:eb:20:a6:33:6f:d6:e4: ab:0d:f9:71:0b:69:4b:9a:3a:a7:36:e7:77:84:5d:b6:d8:04: a9:b1:a1:ca:79:90:33:4c:23:4b:e1:49:56:d4:f3:ef:a8:6d: c9:29:75:b3:ee:b1:af:c9:98:04:84:ad:d4:9e:ff:48:7e:3e: a3:58:dd:a2:7c:05:1e:38:59:fb:be:ed:fa:42:ed:5b:ae:37: 5d:d2:19:a3:cb:da:ea:65:87:13:8f:4e:0e:6e:91:58:90:53: 0f:90:40:35:07:b1:80:cc:9e:c3:75:e5:52:f0:b9:4f:94:6b: cc:29:97:95:7b:4e:b6:dc:a9:c5:b2:ae:3d:e5:7a:65:42:cf: 24:df:10:68:b8:4a:0b:a9:03:ad:ee:d9:c6:45:b9:5b:85:4d: d6:d8:a5:be:36:f3:44:95:1a:f1:e0:86:40:91:42:2e:85:2d: 16:32:9f:42 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsN+0BIjcWoK+5f+NT7CoRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjUxMjExMTUxNTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTg4ZDA2NWIxOTU0MjgyYWJlNjBiMWVmZTFlMTFlNmQ1YjFhYmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU0esrwEkkBfkuiZ1BFI0n0XSojq HexPeqF4G/45mEPG73lJLTBl9nYUwKPfPC1XEQdwYY77e8MiDuKvIW6hLZ6q58oa 9+myUk7uGOsitesBPolkwRoJLLZEpd1It6ZeSSRa8xNewalokqCtDYmI5ufGM/cu YDAPNjRxfuwpXCtn14ovqvo65XFge1riCaM4zl4tWnP3PcEJgsaMypADKFudNPZz bvRKFNBORF4h65aVpKK46MtefM31f/FUtMOkPI7cakuLKPpW6H2QVAvFGrm0+DFU ER30fWAVjy8EUJKZIjEWqFI3L52fbX45/d21yCuVbO+pYoB0dB83a/dNZQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEmI0GWxlUKCq+YLHv4eEebVsau8MB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvU1lqUVpiR1ZRb0tyNWdzZV9oNFI1dFd4cTd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhTDgA0Q MA0GCSqGSIb3DQEBCwUAA4IBAQA6BCsQVH+5+Yu440W3cMQph/Zj1yjoqgVSM5ui G5EGmySO/hDERnB+6jghpRh1S215AAw0UU/z4QpOUKuoIjXv54SdZTKvDI0YKg7Q 0N6FZL6M1OsgpjNv1uSrDflxC2lLmjqnNud3hF222ASpsaHKeZAzTCNL4UlW1PPv qG3JKXWz7rGvyZgEhK3Unv9Ifj6jWN2ifAUeOFn7vu36Qu1brjdd0hmjy9rqZYcT j04ObpFYkFMPkEA1B7GAzJ7DdeVS8LlPlGvMKZeVe0623KnFsq495XplQs8k3xBo uEoLqQOt7tnGRblbhU3W2KW+NvNElRrx4IZAkUIuhS0WMp9C -----END CERTIFICATE-----Generated at Tue Dec 16 12:06:41 2025 by rpki-client