This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/SSB8nChvF9M5SEjUm0HbeOBN31I.roa File: SSB8nChvF9M5SEjUm0HbeOBN31I.roa (raw, json) Hash identifier: WGAc9tKQkiqsemqW1u4qV4GbNPs9MVItouZPC6JW3X8= Subject key identifier: 49:20:7C:9C:28:6F:17:D3:39:48:48:D4:9B:41:DB:78:E0:4D:DF:52 Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019B7C803ECB3707A552CE2F6E4E808F1CD7 Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/SSB8nChvF9M5SEjUm0HbeOBN31I.roa Signing time: Fri 02 Jan 2026 02:18:58 +0000 ROA not before: Fri 02 Jan 2026 02:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57255 IP address blocks: 213.156.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3e:cb:37:07:a5:52:ce:2f:6e:4e:80:8f:1c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49207c9c286f17d3394848d49b41db78e04ddf52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:34:96:f7:d4:13:23:34:79:34:7e:54:bd: a0:bb:ca:aa:97:99:35:33:e9:a9:0d:83:b9:53:45: 5f:d2:4c:28:43:08:51:e7:57:37:cc:4e:9c:4d:af: 38:2a:40:ee:b7:76:b6:3d:9d:b6:1d:2b:34:1d:50: 41:9e:64:b9:ff:b5:39:bb:f4:31:74:60:d9:75:15: 4c:08:46:57:33:65:1c:8d:11:95:f6:3f:9a:a6:ba: 26:6e:94:80:73:b2:fa:39:7b:48:53:10:b7:e3:43: 26:37:6f:ab:d9:7e:93:f2:dd:cb:19:cc:91:62:ed: e2:63:1b:a2:85:eb:ae:04:a6:b4:07:9a:68:44:ab: cd:d8:74:05:11:e8:bf:82:86:08:25:14:ff:34:bb: 39:24:6c:a6:d8:ac:bb:4e:f0:43:54:02:a6:ff:4d: 8a:af:0b:09:bc:a7:30:97:be:a7:0e:88:a3:e5:64: bb:61:fb:db:10:7f:10:bf:33:48:9c:c6:09:ff:0f: 1f:49:16:5a:81:05:91:2e:ba:2f:4a:8c:62:6d:16: a2:71:26:ac:76:6e:61:36:fc:96:e7:91:92:29:bb: 32:39:00:10:e5:b6:62:9e:81:7e:e1:5f:f5:35:33: 33:17:e3:bc:e1:36:06:f0:43:56:cf:27:40:8a:95: 7c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:20:7C:9C:28:6F:17:D3:39:48:48:D4:9B:41:DB:78:E0:4D:DF:52 X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/SSB8nChvF9M5SEjUm0HbeOBN31I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.156.103.0/24 Signature Algorithm: sha256WithRSAEncryption 07:9f:a2:0d:03:33:55:fc:fa:36:49:80:33:97:55:f0:b5:ae: f6:6c:3b:f3:76:d4:ca:de:1f:6b:11:c2:88:63:9a:fe:7c:4a: 48:ed:94:2f:f6:89:75:63:60:61:96:be:0f:77:ab:bf:e6:b1: da:a7:a8:13:fe:01:6a:82:24:db:23:6f:30:b9:19:4d:fd:24: 02:b5:a5:9f:10:75:c1:6d:28:71:5e:e4:53:00:03:67:55:53: 66:c3:4f:71:ef:83:ce:6a:c4:76:5d:37:92:e7:6c:20:2a:a2: 11:00:1e:24:7b:2b:40:4d:45:02:4f:92:36:af:bb:13:40:7e: a2:bb:c3:fe:2a:72:6a:b1:30:10:55:28:36:8c:f0:2f:41:09: 28:42:ef:38:ff:8c:49:16:0d:91:be:60:0c:37:c7:8c:9d:e3: 0e:d0:c7:08:d1:ae:f0:88:e8:81:a9:ac:c4:42:af:fa:9c:b9: e9:43:b9:34:b1:2f:47:7a:f4:65:d8:cb:89:77:98:5f:92:51: 21:7b:5a:3e:5c:14:17:fb:47:94:84:0f:a0:bc:ad:f6:77:68: f9:2e:09:d3:db:28:c7:b3:2e:73:8e:d1:e7:49:99:5f:85:29: d2:e0:ee:62:d6:dc:37:94:e6:0f:41:3c:7c:2f:74:d0:6b:c0: 1c:6e:fb:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gD7LNwelUs4vbk6AjxzXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTIwN2M5YzI4NmYxN2QzMzk0ODQ4ZDQ5YjQxZGI3OGUwNGRkZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEs0lvfUEyM0eTR+VL2gu8qql5k1 M+mpDYO5U0Vf0kwoQwhR51c3zE6cTa84KkDut3a2PZ22HSs0HVBBnmS5/7U5u/Qx dGDZdRVMCEZXM2UcjRGV9j+aprombpSAc7L6OXtIUxC340MmN2+r2X6T8t3LGcyR Yu3iYxuiheuuBKa0B5poRKvN2HQFEei/goYIJRT/NLs5JGym2Ky7TvBDVAKm/02K rwsJvKcwl76nDoij5WS7YfvbEH8QvzNInMYJ/w8fSRZagQWRLrovSoxibRaicSas dm5hNvyW55GSKbsyOQAQ5bZinoF+4V/1NTMzF+O84TYG8ENWzydAipV8OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEkgfJwobxfTOUhI1JtB23jgTd9SMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvU1NCOG5DaHZGOU01U0VqVW0wSGJlT0JOMzFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZxnMA0G CSqGSIb3DQEBCwUAA4IBAQAHn6INAzNV/Po2SYAzl1Xwta72bDvzdtTK3h9rEcKI Y5r+fEpI7ZQv9ol1Y2Bhlr4Pd6u/5rHap6gT/gFqgiTbI28wuRlN/SQCtaWfEHXB bShxXuRTAANnVVNmw09x74POasR2XTeS52wgKqIRAB4keytATUUCT5I2r7sTQH6i u8P+KnJqsTAQVSg2jPAvQQkoQu84/4xJFg2RvmAMN8eMneMO0McI0a7wiOiBqazE Qq/6nLnpQ7k0sS9HevRl2MuJd5hfklEhe1o+XBQX+0eUhA+gvK32d2j5LgnT2yjH sy5zjtHnSZlfhSnS4O5i1tw3lOYPQTx8L3TQa8Acbvs1 -----END CERTIFICATE-----Generated at Mon Jan 26 14:07:58 2026 by rpki-client