This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/scj5x70Gpie_2m_MbNpS0yxW0PA.roa File: scj5x70Gpie_2m_MbNpS0yxW0PA.roa (raw, json) Hash identifier: xdd0ky7p83pGagQ2KCc7J8UUk4/z8bH4jI5qOSExDH8= Subject key identifier: B1:C8:F9:C7:BD:06:A6:27:BF:DA:6F:CC:6C:DA:52:D3:2C:56:D0:F0 Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6 Certificate serial: 019B7AC88E6F3A092D2983246215EAA4F1A6 Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/scj5x70Gpie_2m_MbNpS0yxW0PA.roa Signing time: Thu 01 Jan 2026 18:18:42 +0000 ROA not before: Thu 01 Jan 2026 18:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199236 IP address blocks: 45.128.173.0/24 maxlen: 24 91.211.240.0/24 maxlen: 24 91.211.241.0/24 maxlen: 24 91.211.242.0/24 maxlen: 24 91.211.243.0/24 maxlen: 24 185.4.120.0/24 maxlen: 24 185.4.121.0/24 maxlen: 24 185.4.122.0/24 maxlen: 24 185.4.123.0/24 maxlen: 24 194.113.24.0/24 maxlen: 24 195.54.172.0/24 maxlen: 24 195.54.173.0/24 maxlen: 24 2a02:7040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8e:6f:3a:09:2d:29:83:24:62:15:ea:a4:f1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6 Validity Not Before: Jan 1 18:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1c8f9c7bd06a627bfda6fcc6cda52d32c56d0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d6:d0:b4:40:61:49:74:74:55:74:9f:91:ab: 84:67:0b:78:2c:4c:cd:b3:ab:56:73:7c:81:ef:e7: d5:d3:95:b0:4a:0f:fa:f2:e8:f9:80:67:36:f4:09: f6:10:fb:ff:bd:cb:50:28:99:20:02:f7:c7:87:c7: 44:b6:4f:16:d6:88:91:40:91:c1:d5:54:4f:cc:31: 8a:7a:4b:62:25:98:4d:ce:f8:94:e5:1a:fc:ea:fc: 93:34:18:2e:af:1d:76:d9:fe:38:ac:66:62:7b:46: f8:b4:55:90:08:81:2d:76:86:02:8c:dd:ac:43:26: 5a:f3:c1:83:8e:df:4d:c1:9b:30:f0:9d:e6:21:63: 9f:d4:5b:1a:76:c5:69:1d:23:89:9b:ca:72:fb:83: a0:34:aa:11:fb:21:f4:d6:8f:ca:f8:a2:f1:18:a3: e0:c0:fd:91:71:be:93:a2:aa:2b:a7:6c:c8:c3:a8: 12:2c:a6:e1:94:92:67:73:b0:f4:86:f6:d6:9a:ce: 1c:fb:59:db:be:12:5e:72:9a:c4:fa:87:d3:57:b3: cc:44:54:78:64:40:dc:9e:91:14:54:07:c1:fc:c9: e9:f1:ec:36:38:0e:ff:0a:fd:4f:90:4f:5b:1a:f9: a8:bd:de:73:34:b2:c4:75:d0:ac:40:8d:9b:5e:f3: f6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C8:F9:C7:BD:06:A6:27:BF:DA:6F:CC:6C:DA:52:D3:2C:56:D0:F0 X509v3 Authority Key Identifier: keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/scj5x70Gpie_2m_MbNpS0yxW0PA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.173.0/24 91.211.240.0/22 185.4.120.0/22 194.113.24.0/24 195.54.172.0/23 IPv6: 2a02:7040::/32 Signature Algorithm: sha256WithRSAEncryption 65:65:75:38:cd:3f:f0:b9:c1:29:ab:c2:f0:18:cd:1c:c7:7e: 0a:ec:7b:d2:c5:95:05:85:b4:dc:20:34:37:da:8a:1a:c9:8b: 5e:c2:b6:6c:c8:98:f9:2a:44:d8:a7:a2:1a:e7:27:8e:99:10: 69:c5:89:da:c6:9a:3f:7b:56:f3:c3:1a:58:4f:05:81:5b:fc: 07:9a:74:28:59:8f:d0:3a:96:83:c2:85:e9:22:26:f0:63:f9: 6f:3d:cc:92:30:f4:a4:19:9d:41:e9:b3:a4:ce:79:3b:2c:c3: dd:38:bc:b8:33:97:ee:88:9e:9b:4d:7d:64:c6:a8:2a:f0:70: c7:4f:23:2d:7a:c1:a6:5e:e2:13:9c:7c:62:16:60:9d:ad:56: 00:0c:8d:a9:1f:47:88:65:50:65:fe:a3:1a:15:34:78:11:b2: d7:bf:c4:c4:64:e5:61:e3:fd:82:14:cf:89:ee:37:33:04:c8: ef:b1:48:e2:df:da:3a:22:69:a1:c6:15:38:85:9c:b4:e8:0d: 34:b1:93:fa:c6:70:73:ad:aa:08:65:59:62:05:05:a0:0d:1c: 3e:34:d8:24:3a:31:d3:03:4c:98:2e:3e:b1:b4:0b:10:19:12: d9:70:0e:ad:fc:c9:f6:1c:82:0e:10:a9:b8:fd:d5:2e:be:37: 82:12:b3:2a -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt6yI5vOgktKYMkYhXqpPGmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiN2Y4MWE2ZTc4MmUyMTExODljNGYzNGU0NTliNDIyNmM3 NWY0YTYwHhcNMjYwMTAxMTgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWM4ZjljN2JkMDZhNjI3YmZkYTZmY2M2Y2RhNTJkMzJjNTZkMGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdbQtEBhSXR0VXSfkauEZwt4LEzN s6tWc3yB7+fV05WwSg/68uj5gGc29An2EPv/vctQKJkgAvfHh8dEtk8W1oiRQJHB 1VRPzDGKektiJZhNzviU5Rr86vyTNBgurx122f44rGZie0b4tFWQCIEtdoYCjN2s QyZa88GDjt9NwZsw8J3mIWOf1FsadsVpHSOJm8py+4OgNKoR+yH01o/K+KLxGKPg wP2Rcb6Toqorp2zIw6gSLKbhlJJnc7D0hvbWms4c+1nbvhJecprE+ofTV7PMRFR4 ZEDcnpEUVAfB/Mnp8ew2OA7/Cv1PkE9bGvmovd5zNLLEddCsQI2bXvP2gQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFLHI+ce9BqYnv9pvzGzaUtMsVtDwMB8GA1UdIwQY MBaAFIt/gabnguIRGJxPNORZtCJsdfSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUt ZjJmNDI2ZWZlMDM5LzEvc2NqNXg3MEdwaWVfMm1fTWJOcFMweXhXMFBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUtZjJmNDI2ZWZlMDM5 LzEvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQALYCtAwQC W9PwAwQCuQR4AwQAwnEYAwQBwzasMA0EAgACMAcDBQAqAnBAMA0GCSqGSIb3DQEB CwUAA4IBAQBlZXU4zT/wucEpq8LwGM0cx34K7HvSxZUFhbTcIDQ32ooayYtewrZs yJj5KkTYp6Ia5yeOmRBpxYnaxpo/e1bzwxpYTwWBW/wHmnQoWY/QOpaDwoXpIibw Y/lvPcySMPSkGZ1B6bOkznk7LMPdOLy4M5fuiJ6bTX1kxqgq8HDHTyMtesGmXuIT nHxiFmCdrVYADI2pH0eIZVBl/qMaFTR4EbLXv8TEZOVh4/2CFM+J7jczBMjvsUji 39o6ImmhxhU4hZy06A00sZP6xnBzraoIZVliBQWgDRw+NNgkOjHTA0yYLj6xtAsQ GRLZcA6t/Mn2HIIOEKm4/dUuvjeCErMq -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:33 2026 by rpki-client