This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/SqHxe2uwvaoACopO4_oazg_nels.roa File: SqHxe2uwvaoACopO4_oazg_nels.roa (raw, json) Hash identifier: 9zPi+ENkqVQXBQ+5cr5nLO5x0488pkDK6RTbeEiOUlc= Subject key identifier: 4A:A1:F1:7B:6B:B0:BD:AA:00:0A:8A:4E:E3:FA:1A:CE:0F:E7:7A:5B Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6 Certificate serial: 019B7BA51A50EBE339DE209B472EF3BE5550 Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/SqHxe2uwvaoACopO4_oazg_nels.roa Signing time: Thu 01 Jan 2026 22:19:36 +0000 ROA not before: Thu 01 Jan 2026 22:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212128 IP address blocks: 2a10:cbc0::/29 maxlen: 32 2a10:cbc0::/32 maxlen: 32 2a10:cbc1::/32 maxlen: 32 2a10:cbc2::/32 maxlen: 32 2a10:cbc3::/32 maxlen: 32 2a10:cbc4::/32 maxlen: 32 2a10:cbc5::/32 maxlen: 32 2a10:cbc6::/32 maxlen: 32 2a10:cbc7::/32 maxlen: 32 2a11:e380::/29 maxlen: 32 2a11:e380::/32 maxlen: 32 2a11:e381::/32 maxlen: 32 2a11:e382::/32 maxlen: 32 2a11:e383::/32 maxlen: 32 2a11:e384::/32 maxlen: 32 2a11:e385::/32 maxlen: 32 2a11:e386::/32 maxlen: 32 2a11:e387::/32 maxlen: 32 2a12:70c0::/29 maxlen: 32 2a12:70c0::/32 maxlen: 32 2a12:70c1::/32 maxlen: 32 2a12:70c2::/32 maxlen: 32 2a12:70c3::/32 maxlen: 32 2a12:70c4::/32 maxlen: 32 2a12:70c5::/32 maxlen: 32 2a12:70c6::/32 maxlen: 32 2a12:70c7::/32 maxlen: 32 2a13:7e00::/32 maxlen: 32 2a13:7e01::/32 maxlen: 32 2a13:7e02::/32 maxlen: 32 2a13:7e03::/32 maxlen: 32 2a13:7e04::/32 maxlen: 32 2a13:7e05::/32 maxlen: 32 2a13:7e06::/32 maxlen: 32 2a13:7e07::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1a:50:eb:e3:39:de:20:9b:47:2e:f3:be:55:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6 Validity Not Before: Jan 1 22:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4aa1f17b6bb0bdaa000a8a4ee3fa1ace0fe77a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:33:fa:bd:8d:d0:a4:1e:21:28:de:ef:bf:ea: 53:04:41:30:50:40:db:29:75:0c:a5:3f:33:99:57: 9e:09:0e:36:83:7c:67:10:2e:0e:16:e9:a4:26:60: 1a:a4:f9:93:b2:b2:29:12:67:fb:3c:2a:08:61:09: 36:17:c6:c5:26:bc:81:f2:f6:8e:1e:f9:62:65:17: 92:95:32:38:b3:bf:c6:94:04:56:1c:72:5b:6a:fb: 98:3a:7f:da:41:a5:38:41:74:4e:64:ae:aa:2d:34: a7:de:52:2f:5c:5e:3f:f1:55:41:59:4a:25:6f:aa: 18:cb:45:be:9f:eb:4d:41:b2:f3:76:f9:14:42:bf: 3e:05:9d:dd:51:86:3f:8d:4d:ea:14:bd:23:0a:ff: 95:6b:ba:a9:4e:50:51:61:71:53:e6:79:ea:a3:ec: 69:5d:ff:03:a5:15:c6:f1:d7:db:cd:a5:94:2d:25: 84:34:5d:f9:cb:de:b0:26:d5:9e:ed:d8:c7:94:c6: 8e:72:63:cb:e3:5a:64:1b:ac:2a:f2:85:3c:ae:df: 79:b8:de:cc:4c:56:4a:8f:a4:d8:5e:36:73:5b:9b: a8:79:16:7e:4f:dc:99:20:de:d6:e1:e5:35:12:bc: 2a:ba:8e:97:04:70:2f:b2:b5:a3:34:fe:c5:ed:43: 80:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A1:F1:7B:6B:B0:BD:AA:00:0A:8A:4E:E3:FA:1A:CE:0F:E7:7A:5B X509v3 Authority Key Identifier: keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/SqHxe2uwvaoACopO4_oazg_nels.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:cbc0::/29 2a11:e380::/29 2a12:70c0::/29 2a13:7e00::/29 Signature Algorithm: sha256WithRSAEncryption 40:2d:ef:fa:4b:f0:0f:6f:1a:ab:65:35:ed:ad:42:dd:32:b2: b1:98:06:00:bf:de:37:a9:bf:84:b7:09:80:d9:ca:41:30:2e: a8:83:b3:c1:77:cc:9d:1d:56:60:aa:4c:5f:44:dc:60:47:98: 8e:b4:9b:35:6e:59:bb:f1:da:47:ec:72:81:37:8e:82:ed:e2: 25:c0:e4:45:17:35:f7:95:22:f6:0b:4d:ec:ee:f8:88:ef:00: da:65:9a:46:31:14:7b:3f:56:83:a6:fd:e5:ee:17:2f:73:98: 4a:c0:61:d5:f7:67:47:e9:99:4b:3c:7c:2d:d2:4a:99:20:12: ea:ee:b5:05:6c:4e:7e:2f:3b:10:e1:d5:e7:7b:9e:93:dc:2e: 1f:cd:81:0f:15:12:04:9d:19:61:df:95:14:b2:4d:ae:e8:cf: ec:4f:fd:5c:77:50:23:40:a0:a3:fc:e9:fc:35:24:f1:3f:40: b1:45:f7:fa:91:ee:b7:3e:bc:30:86:9d:e9:e7:6f:ed:72:50: fb:8e:32:ba:85:59:79:38:f5:6d:7f:88:8b:7a:7f:33:2d:24: 49:45:ef:48:06:73:7b:15:9b:25:6b:e1:12:e9:6b:2d:14:61: 8e:56:f1:db:f9:5a:ba:3c:ba:81:1e:68:8c:44:f3:17:7c:ed: 73:76:18:bd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt7pRpQ6+M53iCbRy7zvlVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxN2I3YWIwNjJiYzgyOGIzNDhkMDUzMDZlNjUzNTQ3NDhi OWQ2ZDYwHhcNMjYwMTAxMjIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWExZjE3YjZiYjBiZGFhMDAwYThhNGVlM2ZhMWFjZTBmZTc3YTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jP6vY3QpB4hKN7vv+pTBEEwUEDb KXUMpT8zmVeeCQ42g3xnEC4OFumkJmAapPmTsrIpEmf7PCoIYQk2F8bFJryB8vaO HvliZReSlTI4s7/GlARWHHJbavuYOn/aQaU4QXROZK6qLTSn3lIvXF4/8VVBWUol b6oYy0W+n+tNQbLzdvkUQr8+BZ3dUYY/jU3qFL0jCv+Va7qpTlBRYXFT5nnqo+xp Xf8DpRXG8dfbzaWULSWENF35y96wJtWe7djHlMaOcmPL41pkG6wq8oU8rt95uN7M TFZKj6TYXjZzW5uoeRZ+T9yZIN7W4eU1Erwquo6XBHAvsrWjNP7F7UOABQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFEqh8XtrsL2qAAqKTuP6Gs4P53pbMB8GA1UdIwQY MBaAFCF7erBivIKLNI0FMG5lNUdIudbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYt NTViNjU5Y2Q4MmJiLzEvU3FIeGUydXd2YW9BQ29wTzRfb2F6Z19uZWxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYtNTViNjU5Y2Q4MmJi LzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKhDLwAMF AyoR44ADBQMqEnDAAwUDKhN+ADANBgkqhkiG9w0BAQsFAAOCAQEAQC3v+kvwD28a q2U17a1C3TKysZgGAL/eN6m/hLcJgNnKQTAuqIOzwXfMnR1WYKpMX0TcYEeYjrSb NW5Zu/HaR+xygTeOgu3iJcDkRRc195Ui9gtN7O74iO8A2mWaRjEUez9Wg6b95e4X L3OYSsBh1fdnR+mZSzx8LdJKmSAS6u61BWxOfi87EOHV53uek9wuH82BDxUSBJ0Z Yd+VFLJNrujP7E/9XHdQI0Cgo/zp/DUk8T9AsUX3+pHutz68MIad6edv7XJQ+44y uoVZeTj1bX+Ii3p/My0kSUXvSAZzexWbJWvhEulrLRRhjlbx2/laujy6gR5ojETz F3ztc3YYvQ== -----END CERTIFICATE-----Generated at Sat Jan 3 03:52:45 2026 by rpki-client