This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/SBJXesURbWihSshv3u6VuySN3mw.roa File: SBJXesURbWihSshv3u6VuySN3mw.roa (raw, json) Hash identifier: /Jpt73chQ1hiua7JBiCWzhb079MLWM9eJT7lT8kviMM= Subject key identifier: 48:12:57:7A:C5:11:6D:68:A1:4A:C8:6F:DE:EE:95:BB:24:8D:DE:6C Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b Certificate serial: 019B7C11D40717C73C634CF1C9C66D854213 Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/SBJXesURbWihSshv3u6VuySN3mw.roa Signing time: Fri 02 Jan 2026 00:18:21 +0000 ROA not before: Fri 02 Jan 2026 00:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 193.0.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:d4:07:17:c7:3c:63:4c:f1:c9:c6:6d:85:42:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b Validity Not Before: Jan 2 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4812577ac5116d68a14ac86fdeee95bb248dde6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:52:e4:0f:67:85:e4:33:cb:e8:e9:eb:98:38: ed:3a:7c:c0:65:aa:7f:b8:6a:0e:e6:c4:48:86:79: f9:da:d9:d2:95:5e:9a:a1:19:1f:68:60:9d:d9:3f: cc:eb:2f:5e:ee:d8:b6:63:e6:b6:3e:62:83:58:b5: f5:21:8a:19:3a:fb:ce:ff:e8:80:32:93:04:1f:dd: 70:73:57:2e:ae:70:ed:1a:62:ec:8b:ce:82:31:36: 09:fa:f2:07:17:9d:20:3f:68:45:55:d8:9b:63:4f: 92:df:b1:c0:f5:68:33:31:fc:ec:d0:a3:19:bc:13: 2f:a6:d1:30:70:11:30:8b:d8:59:c3:2d:38:1c:a0: 29:b9:5e:4d:18:e2:38:ff:36:5a:0d:9d:86:a9:dd: 11:68:8a:f6:ad:cb:4c:c2:c2:6b:7d:38:48:48:c2: a4:79:0f:58:6f:b9:8d:c0:d7:22:d9:4c:de:61:33: 5f:9c:3f:1b:c2:bb:ce:ee:5a:7e:d0:33:1e:62:c7: 19:86:00:86:1c:dd:ab:14:90:82:da:0a:05:50:e7: 26:5e:54:20:34:88:94:a3:f7:a1:88:a5:64:d8:b1: 3c:53:dd:5e:ff:5c:d0:bd:1c:a4:63:4f:cf:26:19: a6:e9:a5:28:21:ab:70:0f:02:3c:d7:50:18:60:e1: d1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:12:57:7A:C5:11:6D:68:A1:4A:C8:6F:DE:EE:95:BB:24:8D:DE:6C X509v3 Authority Key Identifier: keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/SBJXesURbWihSshv3u6VuySN3mw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.237.0/24 Signature Algorithm: sha256WithRSAEncryption 08:19:a2:e0:b6:36:30:5c:17:aa:49:35:ad:74:6c:6d:0c:4f: 18:a8:16:2a:92:50:3b:99:13:d3:e1:69:83:92:a0:e3:80:65: d6:7d:50:fc:07:0b:37:f1:d0:c9:f2:2d:4d:22:ea:48:2f:63: 90:d9:68:71:00:8d:b4:bb:95:fa:d5:44:bd:54:e0:a4:45:ac: 36:f7:f8:75:53:4c:90:de:5a:34:e0:ea:ad:04:8f:a6:3a:ec: 8e:83:ec:71:86:14:0d:4c:dc:3d:b2:25:d3:24:bf:23:97:e7: 70:ea:92:36:08:19:8a:d4:31:ac:42:58:79:f0:e1:0f:d4:08: bf:c0:2a:9f:8a:4b:41:b6:ef:b3:21:54:a4:17:4e:01:98:37: 60:db:27:cb:96:45:94:22:96:fe:8a:9b:86:81:10:eb:9f:83: bb:17:f2:05:5c:45:91:dd:fe:c4:ef:6b:9b:c2:34:32:6b:38: e0:d5:3b:2d:1a:02:8e:16:d4:e4:86:4a:b2:1d:6e:9c:27:c4: d0:08:45:22:13:cb:16:62:68:aa:2e:fa:77:df:55:e5:63:88: 5b:04:be:2e:de:b6:d0:ca:0c:54:1f:3f:c1:f3:a2:3a:cb:6f: 28:bf:26:23:4e:7a:81:87:18:39:2c:74:b5:48:04:43:d0:ed: bb:a8:f9:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EdQHF8c8Y0zxycZthUITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NThiNTRiZmVlOTg5NmM0YWRhN2RjMThiM2I3Zjk3MTlk YTA0NmIwHhcNMjYwMTAyMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODEyNTc3YWM1MTE2ZDY4YTE0YWM4NmZkZWVlOTViYjI0OGRkZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVLkD2eF5DPL6OnrmDjtOnzAZap/ uGoO5sRIhnn52tnSlV6aoRkfaGCd2T/M6y9e7ti2Y+a2PmKDWLX1IYoZOvvO/+iA MpMEH91wc1curnDtGmLsi86CMTYJ+vIHF50gP2hFVdibY0+S37HA9WgzMfzs0KMZ vBMvptEwcBEwi9hZwy04HKApuV5NGOI4/zZaDZ2Gqd0RaIr2rctMwsJrfThISMKk eQ9Yb7mNwNci2UzeYTNfnD8bwrvO7lp+0DMeYscZhgCGHN2rFJCC2goFUOcmXlQg NIiUo/ehiKVk2LE8U91e/1zQvRykY0/PJhmm6aUoIatwDwI811AYYOHRZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEgSV3rFEW1ooUrIb97ulbskjd5sMB8GA1UdIwQY MBaAFAlYtUv+6YlsStp9wYs7f5cZ2gRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEt ZmY0YzcxODMwMjRmLzEvU0JKWGVzVVJiV2loU3NodjN1NlZ1eVNOM213LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEtZmY0YzcxODMwMjRm LzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQDtMA0G CSqGSIb3DQEBCwUAA4IBAQAIGaLgtjYwXBeqSTWtdGxtDE8YqBYqklA7mRPT4WmD kqDjgGXWfVD8Bws38dDJ8i1NIupIL2OQ2WhxAI20u5X61US9VOCkRaw29/h1U0yQ 3lo04OqtBI+mOuyOg+xxhhQNTNw9siXTJL8jl+dw6pI2CBmK1DGsQlh58OEP1Ai/ wCqfiktBtu+zIVSkF04BmDdg2yfLlkWUIpb+ipuGgRDrn4O7F/IFXEWR3f7E72ub wjQyazjg1TstGgKOFtTkhkqyHW6cJ8TQCEUiE8sWYmiqLvp331XlY4hbBL4u3rbQ ygxUHz/B86I6y28ovyYjTnqBhxg5LHS1SARD0O27qPlq -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:14 2026 by rpki-client