This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/sdcvoTQBQgoeAFopLsTr-xpMuPs.roa File: sdcvoTQBQgoeAFopLsTr-xpMuPs.roa (raw, json) Hash identifier: WtnlbPaLYL1j+j4AclbHMyJ9VcWAM1c5WBmY3q72Npc= Subject key identifier: B1:D7:2F:A1:34:01:42:0A:1E:00:5A:29:2E:C4:EB:FB:1A:4C:B8:FB Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019B7F8411D5F45A314C64AD34A3987FAB7B Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/sdcvoTQBQgoeAFopLsTr-xpMuPs.roa Signing time: Fri 02 Jan 2026 16:22:00 +0000 ROA not before: Fri 02 Jan 2026 16:22:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31100 IP address blocks: 85.93.64.0/24 maxlen: 24 85.93.69.0/24 maxlen: 24 85.93.72.0/24 maxlen: 24 85.93.77.0/24 maxlen: 24 212.40.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:11:d5:f4:5a:31:4c:64:ad:34:a3:98:7f:ab:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Jan 2 16:22:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1d72fa13401420a1e005a292ec4ebfb1a4cb8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fd:d0:fd:cf:10:23:93:f1:26:d4:51:af:12: 6c:c0:f6:b8:86:22:be:c2:55:70:24:bf:bd:3b:43: be:71:d3:c2:2f:54:79:d5:64:10:63:cd:66:39:40: ec:a2:f4:2b:be:67:d8:a6:65:c0:9a:6f:4b:e2:32: b6:c8:4c:76:b1:9c:d4:c5:3c:c5:ab:77:78:65:96: 80:78:5a:29:98:41:71:db:70:d2:d3:23:c5:4f:77: ac:44:ca:e8:53:3b:b5:a5:df:4c:fe:bb:50:97:a1: 79:93:5c:04:19:21:74:91:3a:9d:6a:a1:3c:48:c8: 52:1b:d9:bd:97:5a:7d:7a:52:ec:c3:f7:89:a2:b7: f1:28:8b:b8:8a:f2:37:2b:8f:a3:2e:00:b4:2f:de: 0e:f1:3a:ce:54:91:5f:50:cc:3e:82:2c:ab:39:c1: 77:4a:c0:32:64:1d:bc:68:98:19:f1:52:26:a3:0c: 26:ef:c1:a0:cf:92:c0:2c:8f:f8:ed:f5:2f:d5:68: 19:b9:9a:83:84:61:00:8f:e1:ac:b0:77:6b:fe:96: bd:59:99:5d:a5:67:ff:03:da:b0:dc:d4:9b:23:6d: 95:c6:81:41:04:52:8e:4a:a3:09:12:3e:92:9e:ff: df:79:c7:3e:2a:a9:95:36:a2:a8:d1:f7:d6:de:b8: ff:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D7:2F:A1:34:01:42:0A:1E:00:5A:29:2E:C4:EB:FB:1A:4C:B8:FB X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/sdcvoTQBQgoeAFopLsTr-xpMuPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.93.64.0/24 85.93.69.0/24 85.93.72.0/24 85.93.77.0/24 212.40.190.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:4f:6d:01:9b:c0:ee:da:5d:36:67:88:16:f1:f8:bf:12:be: 0d:2c:40:2e:97:71:66:72:3b:9d:81:b3:1c:0e:19:8b:cf:98: 7d:4f:da:19:d8:cb:0d:18:5b:0a:23:cc:6f:b8:02:5c:5d:b5: 89:5e:92:56:93:41:3c:79:33:a0:99:32:c4:6d:e3:df:86:f7: 3f:77:9c:ed:78:f0:ae:05:39:27:9e:c9:aa:55:08:46:d2:63: cf:1b:49:fa:02:d5:2f:18:67:bd:d8:98:40:c6:17:5f:91:e7: b6:37:35:86:ae:74:ab:cf:c2:99:f0:ba:7e:04:64:1a:f8:0a: e3:b4:66:ef:dd:2d:16:eb:2b:35:d3:04:e7:0d:28:bd:96:da: fe:47:ac:86:10:a9:80:97:7f:34:db:84:9c:ca:33:56:1e:b0: 4b:e2:ba:2b:7b:d7:5b:4e:bb:4d:45:42:8d:38:24:ab:6b:e8: c1:6e:f8:32:8a:7a:cb:e0:45:5f:9c:4c:cc:5b:4d:fa:c2:fc: 90:3a:e6:e0:50:d2:e2:ae:05:7e:f1:56:be:bc:e3:bc:48:7c: 61:c2:96:68:3d:ee:37:0d:ed:0e:0c:49:55:0b:50:5d:22:f3: 84:7d:b7:61:44:96:d4:8d:ad:59:0f:56:b0:30:be:48:77:b1: 38:d3:cb:52 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/hBHV9FoxTGStNKOYf6t7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwMTAyMTYyMjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWQ3MmZhMTM0MDE0MjBhMWUwMDVhMjkyZWM0ZWJmYjFhNGNiOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/3Q/c8QI5PxJtRRrxJswPa4hiK+ wlVwJL+9O0O+cdPCL1R51WQQY81mOUDsovQrvmfYpmXAmm9L4jK2yEx2sZzUxTzF q3d4ZZaAeFopmEFx23DS0yPFT3esRMroUzu1pd9M/rtQl6F5k1wEGSF0kTqdaqE8 SMhSG9m9l1p9elLsw/eJorfxKIu4ivI3K4+jLgC0L94O8TrOVJFfUMw+giyrOcF3 SsAyZB28aJgZ8VImowwm78Ggz5LALI/47fUv1WgZuZqDhGEAj+GssHdr/pa9WZld pWf/A9qw3NSbI22VxoFBBFKOSqMJEj6Snv/fecc+KqmVNqKo0ffW3rj/VQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLHXL6E0AUIKHgBaKS7E6/saTLj7MB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvc2Rjdm9UUUJRZ29lQUZvcExzVHIteHBNdVBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVV1AAwQA VV1FAwQAVV1IAwQAVV1NAwQA1Ci+MA0GCSqGSIb3DQEBCwUAA4IBAQAvT20Bm8Du 2l02Z4gW8fi/Er4NLEAul3FmcjudgbMcDhmLz5h9T9oZ2MsNGFsKI8xvuAJcXbWJ XpJWk0E8eTOgmTLEbePfhvc/d5ztePCuBTknnsmqVQhG0mPPG0n6AtUvGGe92JhA xhdfkee2NzWGrnSrz8KZ8Lp+BGQa+ArjtGbv3S0W6ys10wTnDSi9ltr+R6yGEKmA l38024ScyjNWHrBL4rore9dbTrtNRUKNOCSra+jBbvgyinrL4EVfnEzMW036wvyQ OubgUNLirgV+8Va+vOO8SHxhwpZoPe43De0ODElVC1BdIvOEfbdhRJbUja1ZD1aw ML5Id7E408tS -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:50 2026 by rpki-client