This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/SybLZ24hhMiBkVFRqMhgG4Tt_So.roa File: SybLZ24hhMiBkVFRqMhgG4Tt_So.roa (raw, json) Hash identifier: jdIOIL7oBwjwXGbHbND2Uo+qRIMM4Rdpr2383Sxr5BI= Subject key identifier: 4B:26:CB:67:6E:21:84:C8:81:91:51:51:A8:C8:60:1B:84:ED:FD:2A Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019B7BA3EAC19B4283FACE165206508A684F Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/SybLZ24hhMiBkVFRqMhgG4Tt_So.roa Signing time: Thu 01 Jan 2026 22:18:18 +0000 ROA not before: Thu 01 Jan 2026 22:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203583 IP address blocks: 213.253.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:ea:c1:9b:42:83:fa:ce:16:52:06:50:8a:68:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Jan 1 22:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b26cb676e2184c881915151a8c8601b84edfd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2f:7d:d2:a3:03:8e:51:59:5f:9e:c6:63:ca: 0c:b2:11:a1:16:47:a8:76:04:48:29:91:34:b0:99: ac:67:53:2f:03:6e:68:9f:8f:0f:9b:9c:ac:6c:e1: 4e:9b:f6:79:d2:a7:d0:c8:b0:a6:db:ab:77:d5:ab: 09:7c:b1:4e:3d:8b:db:1c:00:c5:10:4f:c9:38:e6: 9b:34:0e:8b:42:d0:81:a9:56:e4:c8:de:e5:7f:c1: 75:3f:6a:95:94:d4:72:3b:05:f7:07:5f:a8:a7:f7: f1:23:30:11:b8:de:70:35:ec:37:8b:91:29:d4:00: 91:e1:0d:e2:d4:96:fc:6c:c8:40:f6:25:d7:7d:80: bf:42:22:df:5c:e4:4f:93:4b:41:db:39:b7:0e:e3: 5c:99:d1:23:45:31:c0:39:d6:8e:9f:82:43:f8:ba: c9:85:57:db:df:e7:87:1a:b3:87:08:95:7b:04:f5: d4:cd:70:3d:ab:d6:f2:db:9f:15:f8:c6:1b:5d:ee: 8b:ae:f3:84:67:06:43:10:85:d9:56:85:15:4e:d5: 2d:a7:7e:90:99:12:ad:8f:73:25:80:ae:c6:ee:61: 66:f1:c5:6d:c9:0d:d8:6b:b6:66:f4:f5:eb:f1:b9: d7:db:56:25:e6:ba:d8:47:a6:3c:e5:6e:34:2b:f9: 99:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:26:CB:67:6E:21:84:C8:81:91:51:51:A8:C8:60:1B:84:ED:FD:2A X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/SybLZ24hhMiBkVFRqMhgG4Tt_So.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.253.215.0/24 Signature Algorithm: sha256WithRSAEncryption b0:59:7b:2a:2e:0f:31:92:6f:74:68:aa:b3:a9:33:55:3a:de: f1:9d:e6:bb:be:b3:1b:8c:d7:2b:8a:bd:11:f2:d0:a9:08:a6: c9:bf:fe:c4:5c:66:c5:ae:b8:2c:af:c7:fb:fb:6c:32:9a:d7: c0:7b:76:01:b5:2d:57:93:dc:d1:aa:1a:8b:d5:56:76:05:e4: e7:10:f5:e8:bc:da:98:25:69:87:e4:fc:b2:32:47:7c:6b:01: 1b:4e:ec:17:e1:03:65:ae:e4:04:46:ac:23:61:d6:7f:de:9e: e3:0e:4d:de:d1:8c:f9:f6:90:93:3c:80:03:2b:b1:7b:cc:e8: 36:7f:aa:d9:6a:00:bc:45:bb:26:f3:cf:75:d1:c5:21:ac:5d: 15:d2:b7:38:3f:a5:f3:1d:ae:d9:38:7a:ed:1b:02:21:80:6f: fb:4f:13:d4:9a:92:75:8a:0a:ab:83:cc:d3:7d:7e:be:0e:b0: 95:90:d7:4e:5a:1e:b1:1c:b5:54:21:20:c2:2d:87:9a:9a:33: 33:fc:9c:f7:78:a8:b4:c5:f8:70:c3:d1:f4:71:90:7a:a1:3a: ea:81:c0:f7:3f:4c:e0:90:5f:82:59:0d:71:7c:fb:2d:4e:0e: 11:5e:c8:e9:d8:37:53:97:bf:fc:b0:29:20:60:95:41:29:79: 5c:a4:63:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+rBm0KD+s4WUgZQimhPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMTAxMjIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjI2Y2I2NzZlMjE4NGM4ODE5MTUxNTFhOGM4NjAxYjg0ZWRmZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC990qMDjlFZX57GY8oMshGhFkeo dgRIKZE0sJmsZ1MvA25on48Pm5ysbOFOm/Z50qfQyLCm26t31asJfLFOPYvbHADF EE/JOOabNA6LQtCBqVbkyN7lf8F1P2qVlNRyOwX3B1+op/fxIzARuN5wNew3i5Ep 1ACR4Q3i1Jb8bMhA9iXXfYC/QiLfXORPk0tB2zm3DuNcmdEjRTHAOdaOn4JD+LrJ hVfb3+eHGrOHCJV7BPXUzXA9q9by258V+MYbXe6LrvOEZwZDEIXZVoUVTtUtp36Q mRKtj3MlgK7G7mFm8cVtyQ3Ya7Zm9PXr8bnX21Yl5rrYR6Y85W40K/mZbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEsmy2duIYTIgZFRUajIYBuE7f0qMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvU3liTFoyNGhoTWlCa1ZGUnFNaGdHNFR0X1NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1f3XMA0G CSqGSIb3DQEBCwUAA4IBAQCwWXsqLg8xkm90aKqzqTNVOt7xnea7vrMbjNcrir0R 8tCpCKbJv/7EXGbFrrgsr8f7+2wymtfAe3YBtS1Xk9zRqhqL1VZ2BeTnEPXovNqY JWmH5PyyMkd8awEbTuwX4QNlruQERqwjYdZ/3p7jDk3e0Yz59pCTPIADK7F7zOg2 f6rZagC8Rbsm88910cUhrF0V0rc4P6XzHa7ZOHrtGwIhgG/7TxPUmpJ1igqrg8zT fX6+DrCVkNdOWh6xHLVUISDCLYeamjMz/Jz3eKi0xfhww9H0cZB6oTrqgcD3P0zg kF+CWQ1xfPstTg4RXsjp2DdTl7/8sCkgYJVBKXlcpGMH -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:12 2026 by rpki-client