This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/SDv1pmvtKKy8j5zdxmiuQfAHvKA.roa File: SDv1pmvtKKy8j5zdxmiuQfAHvKA.roa (raw, json) Hash identifier: la1FbIJeldqJDtutGbiRvWT587OJLuf+NXuNKZUoghY= Subject key identifier: 48:3B:F5:A6:6B:ED:28:AC:BC:8F:9C:DD:C6:68:AE:41:F0:07:BC:A0 Certificate issuer: /CN=6982f05132a9989507ebf6ee989518753ba2cdb5 Certificate serial: 019B79ECB8FDAD41E6E6DDC62167DD461539 Authority key identifier: 69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/SDv1pmvtKKy8j5zdxmiuQfAHvKA.roa Signing time: Thu 01 Jan 2026 14:18:35 +0000 ROA not before: Thu 01 Jan 2026 14:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208689 IP address blocks: 185.198.232.0/24 maxlen: 24 2a13:6600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b8:fd:ad:41:e6:e6:dd:c6:21:67:dd:46:15:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6982f05132a9989507ebf6ee989518753ba2cdb5 Validity Not Before: Jan 1 14:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=483bf5a66bed28acbc8f9cddc668ae41f007bca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0c:1b:90:9f:6e:87:38:d4:8a:f1:7c:49:64: d9:cc:12:81:1e:2d:b1:b8:a6:1a:cd:bb:ca:0c:9b: ba:7d:91:e3:7f:bf:4a:71:4b:77:15:7b:b9:d1:32: c0:0f:2b:2b:f0:c9:d2:5c:45:54:31:d4:c8:42:43: fe:ba:63:5f:4c:4b:fd:6c:4d:f2:bf:8c:d4:42:83: 71:f5:36:a2:d1:83:23:ad:e7:1f:37:8e:d7:2e:b6: 92:bd:1d:16:e6:99:d4:f0:d6:2a:1f:ec:86:a6:66: 68:ea:27:7b:2f:e3:e8:26:a8:07:eb:a2:84:e1:8c: 82:f2:2e:90:fb:35:5d:cc:60:4c:f6:88:18:ae:ce: 00:7e:e2:92:b7:c5:ef:b1:35:81:eb:d9:1f:48:27: de:10:18:1c:82:24:7b:fd:04:35:70:fa:ec:00:e8: 7c:bb:6d:14:b4:7c:55:b9:c6:71:0e:6b:04:f1:a5: 46:60:7b:05:f1:17:c3:ec:4d:41:17:16:da:6b:9d: dd:01:c0:d0:5f:d1:3a:11:39:52:01:5c:b4:3f:14: c7:a8:09:1f:65:49:84:0e:21:f0:e9:33:8b:b2:5a: d4:72:55:28:bd:19:d4:ac:d9:a1:cf:eb:d1:17:d4: da:ad:9a:43:93:a3:20:7d:06:f0:48:c6:3a:fc:53: 85:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3B:F5:A6:6B:ED:28:AC:BC:8F:9C:DD:C6:68:AE:41:F0:07:BC:A0 X509v3 Authority Key Identifier: keyid:69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/SDv1pmvtKKy8j5zdxmiuQfAHvKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.232.0/24 IPv6: 2a13:6600::/29 Signature Algorithm: sha256WithRSAEncryption 1f:8c:d7:14:81:27:d1:b5:28:0a:9e:8f:43:c8:84:eb:a3:98: dd:09:4c:b4:79:d4:2e:b0:2f:8e:d8:b6:43:bc:0d:ff:3b:93: 0d:93:79:06:a6:54:ec:01:de:a5:ca:fd:30:62:7a:60:fa:63: cc:4e:49:07:9c:87:06:e3:61:09:01:43:b5:4b:c4:f5:0b:67: f0:d7:0d:af:9c:e9:f1:03:fe:2f:ed:f2:73:0c:34:70:e6:69: e6:72:54:4d:c6:93:bd:f0:c8:73:29:7d:24:57:7a:04:7a:fe: f7:15:d1:3e:22:49:33:aa:db:d8:7b:8a:08:84:6c:41:08:9f: 24:3a:f6:a6:e7:09:ab:be:2c:b6:b4:3e:ce:c5:3e:66:87:c6: 46:01:1e:9a:c9:8a:29:7e:ca:82:8d:15:10:fd:29:fb:d9:1c: ec:d1:93:1c:44:2c:2e:f3:88:0b:c1:55:57:dc:89:b7:2b:3b: bb:69:54:41:ca:17:d1:1d:8d:06:e7:6d:33:c9:a1:e2:4a:17: 3d:1b:40:46:dd:21:7f:59:07:ce:54:3a:43:c4:a2:79:86:bd: 36:0d:21:53:6d:62:b1:8e:47:45:02:fb:f5:91:6a:e1:60:b9: 70:28:38:42:6e:c3:9b:63:03:3e:c8:bb:26:40:6a:18:35:46: 68:e4:8b:72 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57Lj9rUHm5t3GIWfdRhU5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ODJmMDUxMzJhOTk4OTUwN2ViZjZlZTk4OTUxODc1M2Jh MmNkYjUwHhcNMjYwMTAxMTQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODNiZjVhNjZiZWQyOGFjYmM4ZjljZGRjNjY4YWU0MWYwMDdiY2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowwbkJ9uhzjUivF8SWTZzBKBHi2x uKYazbvKDJu6fZHjf79KcUt3FXu50TLADysr8MnSXEVUMdTIQkP+umNfTEv9bE3y v4zUQoNx9Tai0YMjrecfN47XLraSvR0W5pnU8NYqH+yGpmZo6id7L+PoJqgH66KE 4YyC8i6Q+zVdzGBM9ogYrs4AfuKSt8XvsTWB69kfSCfeEBgcgiR7/QQ1cPrsAOh8 u20UtHxVucZxDmsE8aVGYHsF8RfD7E1BFxbaa53dAcDQX9E6ETlSAVy0PxTHqAkf ZUmEDiHw6TOLslrUclUovRnUrNmhz+vRF9TarZpDk6MgfQbwSMY6/FOFnQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEg79aZr7SisvI+c3cZorkHwB7ygMB8GA1UdIwQY MBaAFGmC8FEyqZiVB+v27piVGHU7os21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVlMd1VUS3BtSlVINl9idW1KVVlkVHVpemJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82OTA0MDktMDE5ZC00ODEyLTkzMGMt ZjkyNmZhYmY3YWZhLzEvU0R2MXBtdnRLS3k4ajV6ZHhtaXVRZkFIdktBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi82OTA0MDktMDE5ZC00ODEyLTkzMGMtZjkyNmZhYmY3YWZh LzEvYVlMd1VUS3BtSlVINl9idW1KVVlkVHVpemJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAucboMA0E AgACMAcDBQMqE2YAMA0GCSqGSIb3DQEBCwUAA4IBAQAfjNcUgSfRtSgKno9DyITr o5jdCUy0edQusC+O2LZDvA3/O5MNk3kGplTsAd6lyv0wYnpg+mPMTkkHnIcG42EJ AUO1S8T1C2fw1w2vnOnxA/4v7fJzDDRw5mnmclRNxpO98MhzKX0kV3oEev73FdE+ IkkzqtvYe4oIhGxBCJ8kOvam5wmrviy2tD7OxT5mh8ZGAR6ayYopfsqCjRUQ/Sn7 2Rzs0ZMcRCwu84gLwVVX3Im3Kzu7aVRByhfRHY0G520zyaHiShc9G0BG3SF/WQfO VDpDxKJ5hr02DSFTbWKxjkdFAvv1kWrhYLlwKDhCbsObYwM+yLsmQGoYNUZo5Ity -----END CERTIFICATE-----Generated at Tue Jan 27 03:54:27 2026 by rpki-client