This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/ssy16cutzXdJELzGDxSW16z1Xho.roa File: ssy16cutzXdJELzGDxSW16z1Xho.roa (raw, json) Hash identifier: Rm4blCgHC3TkuBXmfU3+lx6/wdVR0IK9c9fKBZqVzmA= Subject key identifier: B2:CC:B5:E9:CB:AD:CD:77:49:10:BC:C6:0F:14:96:D7:AC:F5:5E:1A Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d Certificate serial: 019B7CED69B0630C135B4298A966EC0CC9CC Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/ssy16cutzXdJELzGDxSW16z1Xho.roa Signing time: Fri 02 Jan 2026 04:18:12 +0000 ROA not before: Fri 02 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12552 IP address blocks: 45.15.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:69:b0:63:0c:13:5b:42:98:a9:66:ec:0c:c9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d Validity Not Before: Jan 2 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2ccb5e9cbadcd774910bcc60f1496d7acf55e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:3a:6f:f5:6d:2b:73:9e:44:97:f2:91:09: 07:2c:ec:46:c1:94:c6:15:b6:b7:41:c2:ec:8e:91: b7:de:3a:41:1a:1e:df:8b:0e:1a:a6:0e:42:6c:43: e5:f9:7f:95:c2:67:4b:61:c1:3d:c3:15:cd:e8:14: 76:e8:66:b3:65:e3:2f:38:50:90:0c:f4:ef:d3:e0: e7:c7:d6:bf:fe:4a:ea:b7:3f:78:5e:c9:3e:d0:3e: f2:af:d6:83:e7:a0:0d:72:2d:b5:f6:d9:54:90:94: ac:c4:39:44:62:e8:6e:8b:2a:5c:37:76:a9:ad:4b: 90:f8:2e:fd:dd:dc:29:ac:b3:68:06:ce:7d:d9:93: 4e:98:dc:bd:38:30:e5:22:fe:89:b0:0f:ff:a6:db: 90:ca:78:9b:49:63:c1:20:ba:7d:70:cc:9d:11:0c: b0:85:b4:40:7d:40:ae:2f:c5:30:9b:bc:5a:a6:64: 79:8a:3a:ed:80:ab:0e:9b:a5:a2:19:0e:b4:84:1c: 1e:46:d2:fb:9b:35:fb:f1:b5:30:89:15:3f:20:5f: 00:92:16:35:56:5c:82:22:3d:f6:ef:fc:36:51:f2: 5f:c1:db:7b:c6:7a:ea:3d:47:ea:59:e3:a1:44:9e: d2:14:03:90:af:1b:20:7d:3f:f3:48:9c:68:62:b9: 74:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CC:B5:E9:CB:AD:CD:77:49:10:BC:C6:0F:14:96:D7:AC:F5:5E:1A X509v3 Authority Key Identifier: keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/ssy16cutzXdJELzGDxSW16z1Xho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.29.0/24 Signature Algorithm: sha256WithRSAEncryption 29:86:ba:7a:54:c5:f7:6e:7d:c8:82:e9:bf:78:5c:00:b6:9e: a0:4b:83:6b:e9:78:95:0c:1a:89:d2:10:55:7e:43:fc:af:7f: 41:b0:5d:c3:bb:ea:f7:22:6d:d2:22:16:8b:e1:63:90:b2:5b: e5:a3:4d:e7:4f:c6:8b:de:b2:33:5e:82:2d:7b:28:bb:bf:47: ac:05:dd:83:9e:2d:72:57:46:f8:bd:7b:d9:8c:25:7a:85:81: c7:13:28:2a:74:af:26:34:2c:a9:7c:44:ce:64:1e:d4:da:ea: d6:f3:19:83:27:81:ec:2b:d9:b1:28:88:25:f8:0b:34:05:34: 4b:92:84:c0:15:11:a0:6d:0c:19:11:31:66:5a:50:13:40:89: d1:59:74:d0:32:ae:00:8f:c8:37:d4:77:8f:be:e1:45:3d:f3: 65:d5:e9:97:7c:35:ba:08:fa:2b:f5:6b:f3:28:f2:5f:f6:37: 1b:f9:6c:81:5f:7d:23:c3:b7:8b:e7:85:87:2a:d6:b6:bc:70: c4:89:ea:f1:9a:31:27:dc:aa:5c:96:b3:7b:7d:6b:ba:1d:ba: 68:6b:4d:10:26:27:55:46:1f:64:1e:5d:5f:ed:3e:af:61:f3: 07:56:a2:e3:fd:1e:9a:34:34:68:a7:56:d5:cb:b7:9b:e5:c7: 98:15:7a:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87WmwYwwTW0KYqWbsDMnMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzM2VlYzAzZWExMjI3MTMyNzhiNDA2NmVjZjJiZmVhYTE1 NjNjMGQwHhcNMjYwMTAyMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmNjYjVlOWNiYWRjZDc3NDkxMGJjYzYwZjE0OTZkN2FjZjU1ZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLM6b/VtK3OeRJfykQkHLOxGwZTG Fba3QcLsjpG33jpBGh7fiw4apg5CbEPl+X+VwmdLYcE9wxXN6BR26GazZeMvOFCQ DPTv0+Dnx9a//krqtz94Xsk+0D7yr9aD56ANci219tlUkJSsxDlEYuhuiypcN3ap rUuQ+C793dwprLNoBs592ZNOmNy9ODDlIv6JsA//ptuQynibSWPBILp9cMydEQyw hbRAfUCuL8Uwm7xapmR5ijrtgKsOm6WiGQ60hBweRtL7mzX78bUwiRU/IF8AkhY1 VlyCIj327/w2UfJfwdt7xnrqPUfqWeOhRJ7SFAOQrxsgfT/zSJxoYrl0CwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLLMtenLrc13SRC8xg8Ultes9V4aMB8GA1UdIwQY MBaAFKM+7APqEicTJ4tAZuzyv+qhVjwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZTNhYzAtYmUzMy00YTM3LWEwZDct NTlhNWVlM2FkOWE4LzEvc3N5MTZjdXR6WGRKRUx6R0R4U1cxNnoxWGhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZTNhYzAtYmUzMy00YTM3LWEwZDctNTlhNWVlM2FkOWE4 LzEvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ8dMA0G CSqGSIb3DQEBCwUAA4IBAQAphrp6VMX3bn3Igum/eFwAtp6gS4Nr6XiVDBqJ0hBV fkP8r39BsF3Du+r3Im3SIhaL4WOQslvlo03nT8aL3rIzXoIteyi7v0esBd2Dni1y V0b4vXvZjCV6hYHHEygqdK8mNCypfETOZB7U2urW8xmDJ4HsK9mxKIgl+As0BTRL koTAFRGgbQwZETFmWlATQInRWXTQMq4Aj8g31HePvuFFPfNl1emXfDW6CPor9Wvz KPJf9jcb+WyBX30jw7eL54WHKta2vHDEierxmjEn3KpclrN7fWu6Hbpoa00QJidV Rh9kHl1f7T6vYfMHVqLj/R6aNDRop1bVy7eb5ceYFXrP -----END CERTIFICATE-----Generated at Sun Jan 25 16:36:22 2026 by rpki-client