This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/sscLEeP0ItNFFLLG-5gvreCdoWE.roa File: sscLEeP0ItNFFLLG-5gvreCdoWE.roa (raw, json) Hash identifier: Ja+SzihPXfZaNmQF5Sydb9JlbsLFGRyUZqIr3rPTkfg= Subject key identifier: B2:C7:0B:11:E3:F4:22:D3:45:14:B2:C6:FB:98:2F:AD:E0:9D:A1:61 Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954 Certificate serial: 019B7758C4952382ABA5E8CE4049288DEF98 Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/sscLEeP0ItNFFLLG-5gvreCdoWE.roa Signing time: Thu 01 Jan 2026 02:17:44 +0000 ROA not before: Thu 01 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44092 IP address blocks: 31.25.32.0/21 maxlen: 24 45.145.200.0/22 maxlen: 22 45.145.200.0/24 maxlen: 24 45.145.201.0/24 maxlen: 24 45.145.202.0/24 maxlen: 24 45.145.203.0/24 maxlen: 24 77.242.128.0/20 maxlen: 24 77.242.128.0/24 maxlen: 24 77.242.129.0/24 maxlen: 24 77.242.130.0/24 maxlen: 24 77.242.131.0/24 maxlen: 24 77.242.132.0/24 maxlen: 24 77.242.133.0/24 maxlen: 24 77.242.134.0/24 maxlen: 24 77.242.135.0/24 maxlen: 24 77.242.136.0/24 maxlen: 24 77.242.137.0/24 maxlen: 24 77.242.138.0/24 maxlen: 24 77.242.139.0/24 maxlen: 24 77.242.140.0/24 maxlen: 24 77.242.141.0/24 maxlen: 24 77.242.142.0/24 maxlen: 24 77.242.143.0/24 maxlen: 24 85.208.200.0/22 maxlen: 22 85.208.200.0/24 maxlen: 24 85.208.201.0/24 maxlen: 24 85.208.202.0/24 maxlen: 24 85.208.203.0/24 maxlen: 24 89.37.70.0/23 maxlen: 24 89.37.70.0/24 maxlen: 24 89.37.71.0/24 maxlen: 24 178.23.8.0/21 maxlen: 24 178.210.232.0/21 maxlen: 24 185.56.156.0/22 maxlen: 24 185.71.244.0/22 maxlen: 24 185.71.244.0/24 maxlen: 24 185.71.246.0/24 maxlen: 24 185.171.232.0/22 maxlen: 22 185.171.232.0/24 maxlen: 24 185.171.233.0/24 maxlen: 24 185.171.234.0/24 maxlen: 24 185.171.235.0/24 maxlen: 24 185.178.252.0/22 maxlen: 24 185.191.104.0/22 maxlen: 22 185.191.104.0/24 maxlen: 24 185.191.105.0/24 maxlen: 24 185.191.106.0/24 maxlen: 24 185.191.107.0/24 maxlen: 24 185.215.144.0/22 maxlen: 22 185.215.144.0/24 maxlen: 24 185.215.145.0/24 maxlen: 24 185.215.146.0/24 maxlen: 24 185.215.147.0/24 maxlen: 24 185.219.116.0/22 maxlen: 22 185.219.116.0/24 maxlen: 24 185.219.117.0/24 maxlen: 24 185.219.118.0/24 maxlen: 24 185.219.119.0/24 maxlen: 24 185.236.48.0/23 maxlen: 23 185.248.227.0/24 maxlen: 24 185.255.29.0/24 maxlen: 24 188.191.56.0/22 maxlen: 24 188.191.56.0/24 maxlen: 24 188.191.57.0/24 maxlen: 24 188.191.58.0/24 maxlen: 24 188.191.59.0/24 maxlen: 24 212.28.168.0/21 maxlen: 21 217.28.64.0/22 maxlen: 22 217.28.64.0/24 maxlen: 24 217.28.65.0/24 maxlen: 24 217.28.66.0/24 maxlen: 24 217.28.67.0/24 maxlen: 24 2a02:53e0::/32 maxlen: 32 2a05:3680::/29 maxlen: 29 2a0b:7b80::/29 maxlen: 29 2a0f:de80::/29 maxlen: 29 2a13:56c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c4:95:23:82:ab:a5:e8:ce:40:49:28:8d:ef:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954 Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2c70b11e3f422d34514b2c6fb982fade09da161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:97:78:cc:50:16:d1:a1:13:aa:fa:02:fb:cf: a7:cc:bf:32:bc:0a:7e:da:6f:76:3c:dd:34:b9:22: f6:64:c0:65:9a:30:d4:12:87:3d:b3:13:78:a5:a2: a1:24:c1:80:8b:a9:08:ce:04:a8:a8:a8:69:27:e6: 1d:e1:f6:bc:e1:74:2d:2a:4e:cd:67:87:28:ed:71: 05:49:c3:6f:04:fc:65:3b:41:36:e4:9e:73:7c:37: 56:c8:ea:ec:40:7a:2e:2e:5a:b4:b5:ae:35:74:3c: fe:1e:e6:3a:64:c5:ae:8d:6b:1e:dc:9a:ff:1a:8c: c2:99:f0:2b:f6:89:73:f2:13:13:3d:59:a5:37:eb: a4:14:ef:14:42:75:a3:a5:c3:22:74:40:56:f5:19: 9b:a4:5d:a7:fe:b4:34:37:70:7f:58:7e:c0:47:01: 21:bf:76:eb:e9:1f:1d:3a:d1:92:f5:7c:81:6b:e7: 2d:fd:bd:08:58:b3:94:5f:ad:ef:bc:05:73:47:7c: cc:bc:77:17:3e:31:dc:fe:c1:67:55:fb:24:77:27: 7a:12:61:51:23:1d:61:aa:eb:03:8c:52:66:89:fc: 63:2a:39:36:af:e8:14:78:ea:81:e8:bb:5a:6c:91: f0:28:29:ba:8a:19:46:c3:d7:df:0b:fe:4a:94:37: 2f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C7:0B:11:E3:F4:22:D3:45:14:B2:C6:FB:98:2F:AD:E0:9D:A1:61 X509v3 Authority Key Identifier: keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/sscLEeP0ItNFFLLG-5gvreCdoWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.32.0/21 45.145.200.0/22 77.242.128.0/20 85.208.200.0/22 89.37.70.0/23 178.23.8.0/21 178.210.232.0/21 185.56.156.0/22 185.71.244.0/22 185.171.232.0/22 185.178.252.0/22 185.191.104.0/22 185.215.144.0/22 185.219.116.0/22 185.236.48.0/23 185.248.227.0/24 185.255.29.0/24 188.191.56.0/22 212.28.168.0/21 217.28.64.0/22 IPv6: 2a02:53e0::/32 2a05:3680::/29 2a0b:7b80::/29 2a0f:de80::/29 2a13:56c0::/29 Signature Algorithm: sha256WithRSAEncryption 92:7c:76:92:09:50:63:b0:c4:36:00:eb:1d:c8:bd:6e:c3:1a: 21:08:5d:42:9e:9d:74:0a:65:72:bb:7a:23:5c:14:52:31:a7: f5:63:52:6d:a9:6f:25:b4:29:9e:af:be:d6:51:63:a3:27:4d: 60:9d:c6:3f:96:2d:ee:06:c8:74:24:d8:6d:e4:cb:28:1e:65: 39:4c:f5:80:b1:08:c1:28:99:51:28:d3:15:0a:c7:e6:e7:bd: 72:bf:08:50:41:03:9b:f6:3f:c5:03:e6:be:61:b4:ba:35:25: e4:d8:48:85:0c:a7:33:3b:1a:78:b0:90:e0:3e:82:64:9d:3d: 89:fa:d6:17:6f:ba:84:2d:bc:2b:7d:37:a4:79:95:8d:fc:00: 81:a4:49:4f:05:1d:f4:65:5e:80:63:ad:6b:6f:e0:92:d8:20: 31:61:43:5f:d0:2e:57:0c:30:a0:a8:d1:d9:9c:b3:28:f3:ea: b8:81:22:b4:3b:fc:ef:1f:ed:7d:8f:02:d0:dd:fd:85:8c:89: 47:be:79:7a:90:00:8b:a1:52:68:15:a7:50:47:cc:54:8e:d3: 49:73:3f:b2:37:cb:fb:76:41:57:31:65:56:c1:de:bd:da:6a: 38:bf:48:f8:ef:f7:16:31:1f:88:9f:bb:18:f5:63:74:00:96: e9:e7:6a:02 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgISAZt3WMSVI4KrpejOQEkoje+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YWFhZGM1NjhmNmM5MjhmZDc2NGQ0MjFkNDJjNzFjZjU3 OTE5NTQwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmM3MGIxMWUzZjQyMmQzNDUxNGIyYzZmYjk4MmZhZGUwOWRhMTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5d4zFAW0aETqvoC+8+nzL8yvAp+ 2m92PN00uSL2ZMBlmjDUEoc9sxN4paKhJMGAi6kIzgSoqKhpJ+Yd4fa84XQtKk7N Z4co7XEFScNvBPxlO0E25J5zfDdWyOrsQHouLlq0ta41dDz+HuY6ZMWujWse3Jr/ GozCmfAr9olz8hMTPVmlN+ukFO8UQnWjpcMidEBW9RmbpF2n/rQ0N3B/WH7ARwEh v3br6R8dOtGS9XyBa+ct/b0IWLOUX63vvAVzR3zMvHcXPjHc/sFnVfskdyd6EmFR Ix1hqusDjFJmifxjKjk2r+gUeOqB6LtabJHwKCm6ihlGw9ffC/5KlDcvkwIDAQAB o4ICqTCCAqUwHQYDVR0OBBYEFLLHCxHj9CLTRRSyxvuYL63gnaFhMB8GA1UdIwQY MBaAFIWqrcVo9sko/XZNQh1Cxxz1eRlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMt NDVlYTM4ZGEyMjE4LzEvc3NjTEVlUDBJdE5GRkxMRy01Z3ZyZUNkb1dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMtNDVlYTM4ZGEyMjE4 LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG+BggrBgEFBQcBBwEB/wSBrjCBqzB+BAIAATB4AwQDHxkg AwQCLZHIAwQETfKAAwQCVdDIAwQBWSVGAwQDshcIAwQDstLoAwQCuTicAwQCuUf0 AwQCuavoAwQCubL8AwQCub9oAwQCudeQAwQCudt0AwQBuewwAwQAufjjAwQAuf8d AwQCvL84AwQD1ByoAwQC2RxAMCkEAgACMCMDBQAqAlPgAwUDKgU2gAMFAyoLe4AD BQMqD96AAwUDKhNWwDANBgkqhkiG9w0BAQsFAAOCAQEAknx2kglQY7DENgDrHci9 bsMaIQhdQp6ddAplcrt6I1wUUjGn9WNSbalvJbQpnq++1lFjoydNYJ3GP5Yt7gbI dCTYbeTLKB5lOUz1gLEIwSiZUSjTFQrH5ue9cr8IUEEDm/Y/xQPmvmG0ujUl5NhI hQynMzsaeLCQ4D6CZJ09ifrWF2+6hC28K303pHmVjfwAgaRJTwUd9GVegGOta2/g ktggMWFDX9AuVwwwoKjR2ZyzKPPquIEitDv87x/tfY8C0N39hYyJR755epAAi6FS aBWnUEfMVI7TSXM/sjfL+3ZBVzFlVsHevdpqOL9I+O/3FjEfiJ+7GPVjdACW6edq Ag== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:54 2026 by rpki-client