This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/SHeQcX4koxBQRv_Fnf7btNJU99g.roa File: SHeQcX4koxBQRv_Fnf7btNJU99g.roa (raw, json) Hash identifier: 8unaGmLOmfi1pzpYrPstmZfA+HzBWFpq+VVnPVsq10I= Subject key identifier: 48:77:90:71:7E:24:A3:10:50:46:FF:C5:9D:FE:DB:B4:D2:54:F7:D8 Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94 Certificate serial: 019B79109DBAC216326BD586CFE159F5D5A3 Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/SHeQcX4koxBQRv_Fnf7btNJU99g.roa Signing time: Thu 01 Jan 2026 10:18:10 +0000 ROA not before: Thu 01 Jan 2026 10:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2119 IP address blocks: 185.136.128.0/22 maxlen: 24 2a03:a4e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:9d:ba:c2:16:32:6b:d5:86:cf:e1:59:f5:d5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94 Validity Not Before: Jan 1 10:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=487790717e24a3105046ffc59dfedbb4d254f7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7c:4e:63:62:cf:e1:79:2c:e4:41:39:2e:0a: fc:81:a2:83:2e:f3:cd:94:5d:24:20:72:06:86:ae: 8d:cd:54:6e:d0:53:c7:a9:07:02:97:81:ec:59:e8: c5:73:92:5f:28:b6:79:25:22:39:d6:d0:32:65:5a: 46:4e:80:6f:69:6d:bc:21:be:aa:e0:f3:86:7d:6e: 66:18:10:cb:f8:3d:61:af:4e:05:45:c5:fe:1c:83: 01:c1:8e:ba:a5:d8:2c:31:bd:aa:19:b3:86:b0:1e: 7c:62:6a:5b:ad:2f:1a:76:55:d2:ee:94:f8:84:a0: 7f:a9:83:f0:30:e9:0c:16:58:4c:cc:51:e2:2d:ef: 59:3b:ed:51:3e:6b:5f:d9:54:10:db:43:09:67:52: 2d:e5:e1:54:02:e8:ad:00:5e:07:bb:3d:7d:23:23: 08:07:45:a4:56:8a:34:a9:88:5f:18:e9:73:07:49: 5a:87:2b:af:79:f8:64:58:b9:e9:f5:b5:ba:de:61: ea:bd:ec:fe:d2:62:c6:e8:2b:80:88:e6:d2:63:ba: 41:52:ce:4d:0f:8f:86:e5:89:5e:84:5a:24:52:f2: 5e:15:f7:ac:b6:4d:f4:ac:60:6a:f0:83:ca:97:49: 83:b1:8e:87:a1:4c:6d:a8:66:82:53:e0:5a:b6:c0: 7f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:77:90:71:7E:24:A3:10:50:46:FF:C5:9D:FE:DB:B4:D2:54:F7:D8 X509v3 Authority Key Identifier: keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/SHeQcX4koxBQRv_Fnf7btNJU99g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.128.0/22 IPv6: 2a03:a4e0::/32 Signature Algorithm: sha256WithRSAEncryption a5:2e:0f:bc:4b:06:3e:81:d1:7f:a3:ac:02:98:ed:5b:cf:8d: 2d:c6:04:6b:3f:16:4b:ed:84:28:f5:2b:06:e8:13:d6:96:6b: cb:a5:14:a8:31:82:f1:ff:ad:89:80:40:c4:1a:72:22:db:c7: 7c:a3:31:c3:3c:18:90:9f:4a:d0:3f:c5:c2:64:df:2d:e9:55: 6e:0f:e7:53:46:fc:0c:f4:55:da:51:94:6d:74:74:cd:d0:ad: 6e:b1:f8:b3:3a:a9:bc:3f:77:8f:a6:d1:d7:0b:90:06:d5:14: a2:26:d0:22:6e:5b:b4:78:b4:82:72:37:03:3e:e9:48:b8:35: d2:66:a9:08:f6:c2:34:7f:1b:ad:ce:08:7a:3c:c4:43:eb:98: 77:7e:3c:f5:36:83:db:7d:be:f4:1e:9f:00:c1:12:8e:86:e2: 2a:6d:e5:2c:b2:24:62:b0:13:f7:20:1e:98:79:89:e8:8d:1c: 51:c2:59:cd:a3:c7:3a:0f:9e:d5:88:74:25:d6:d0:e5:29:54: 46:0d:17:71:e7:6d:ee:c7:3c:f5:50:10:f8:c9:04:d8:14:40: 62:55:e4:92:86:24:0c:34:6b:85:4d:7d:ce:7c:f4:2c:49:d4: 47:e8:ef:c0:33:a0:19:70:a3:75:24:1f:1e:d3:68:0f:4a:56: 78:e7:d2:a4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EJ26whYya9WGz+FZ9dWjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NTBkN2IxOTc1YTM3MDNhZTI3YjMxYWQyZjkzMmFlNDZh NGNjOTQwHhcNMjYwMTAxMTAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODc3OTA3MTdlMjRhMzEwNTA0NmZmYzU5ZGZlZGJiNGQyNTRmN2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XxOY2LP4Xks5EE5Lgr8gaKDLvPN lF0kIHIGhq6NzVRu0FPHqQcCl4HsWejFc5JfKLZ5JSI51tAyZVpGToBvaW28Ib6q 4POGfW5mGBDL+D1hr04FRcX+HIMBwY66pdgsMb2qGbOGsB58YmpbrS8adlXS7pT4 hKB/qYPwMOkMFlhMzFHiLe9ZO+1RPmtf2VQQ20MJZ1It5eFUAuitAF4Huz19IyMI B0WkVoo0qYhfGOlzB0lahyuvefhkWLnp9bW63mHqvez+0mLG6CuAiObSY7pBUs5N D4+G5YlehFokUvJeFfestk30rGBq8IPKl0mDsY6HoUxtqGaCU+BatsB//wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEh3kHF+JKMQUEb/xZ3+27TSVPfYMB8GA1UdIwQY MBaAFMlQ17GXWjcDriezGtL5Mq5GpMyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUt YzZhODgyMWFkZWE5LzEvU0hlUWNYNGtveEJRUnZfRm5mN2J0TkpVOTlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUtYzZhODgyMWFkZWE5 LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYiAMA0E AgACMAcDBQAqA6TgMA0GCSqGSIb3DQEBCwUAA4IBAQClLg+8SwY+gdF/o6wCmO1b z40txgRrPxZL7YQo9SsG6BPWlmvLpRSoMYLx/62JgEDEGnIi28d8ozHDPBiQn0rQ P8XCZN8t6VVuD+dTRvwM9FXaUZRtdHTN0K1usfizOqm8P3ePptHXC5AG1RSiJtAi blu0eLSCcjcDPulIuDXSZqkI9sI0fxutzgh6PMRD65h3fjz1NoPbfb70Hp8AwRKO huIqbeUssiRisBP3IB6YeYnojRxRwlnNo8c6D57ViHQl1tDlKVRGDRdx523uxzz1 UBD4yQTYFEBiVeSShiQMNGuFTX3OfPQsSdRH6O/AM6AZcKN1JB8e02gPSlZ459Kk -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:57 2026 by rpki-client