This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/SFGE70vQYmz_oKTtZMgB-YKUyZc.roa File: SFGE70vQYmz_oKTtZMgB-YKUyZc.roa (raw, json) Hash identifier: lZ0OnAmHAxbwpz0Bf+bKQq6tPOf7KpsPHIF+YP1ggzc= Subject key identifier: 48:51:84:EF:4B:D0:62:6C:FF:A0:A4:ED:64:C8:01:F9:82:94:C9:97 Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069 Certificate serial: 019B7A5B9CAD8270407A91C1420CE82296AA Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/SFGE70vQYmz_oKTtZMgB-YKUyZc.roa Signing time: Thu 01 Jan 2026 16:19:42 +0000 ROA not before: Thu 01 Jan 2026 16:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3240 IP address blocks: 194.182.108.0/24 maxlen: 24 195.231.128.0/20 maxlen: 20 195.231.144.0/20 maxlen: 20 195.231.160.0/19 maxlen: 19 195.231.224.0/19 maxlen: 19 2a10:cf80:1000::/48 maxlen: 48 2a10:cf80:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9c:ad:82:70:40:7a:91:c1:42:0c:e8:22:96:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069 Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=485184ef4bd0626cffa0a4ed64c801f98294c997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:36:07:a4:08:f2:55:f1:7e:72:a8:29:44:d1: 13:85:ee:51:ea:56:95:cf:a5:a9:f8:11:a9:77:23: 4f:57:27:c4:7f:92:f7:50:2d:e0:46:29:74:b9:7c: 7e:30:44:00:5c:eb:10:5d:6a:40:3e:48:b0:72:04: 49:ac:c5:0e:f2:2b:1c:27:34:44:39:fe:b0:cd:b2: 3c:f4:06:8e:6a:ea:b7:52:cb:77:15:6b:5b:e3:d6: b6:82:46:76:6e:49:c8:78:ce:a0:12:16:ca:14:61: 07:f6:d2:1e:35:d6:65:6f:9e:d6:52:1f:5a:3a:d8: 46:a9:e7:32:4f:c3:58:f9:c6:57:ee:e8:78:02:02: 5b:90:7b:3f:0e:95:ff:50:ae:d4:2b:25:2c:fb:05: 5d:15:6d:6d:f6:3a:62:1d:1e:79:58:75:8b:14:60: dd:b6:e3:2b:1d:aa:33:86:2e:32:ba:aa:f7:97:6b: 3a:e5:73:cf:10:4f:e8:29:04:4f:55:e0:cb:df:e1: 76:89:6b:51:29:8d:e7:9d:8f:ec:a8:81:2e:a0:d9: 47:1b:26:11:13:64:11:2c:5c:ca:26:11:b1:24:e7: 49:dc:54:2c:67:58:32:b4:67:4d:03:48:0a:1b:a3: 33:68:8d:3d:cf:58:14:f2:de:9f:4e:59:14:2d:11: 04:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:51:84:EF:4B:D0:62:6C:FF:A0:A4:ED:64:C8:01:F9:82:94:C9:97 X509v3 Authority Key Identifier: keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/SFGE70vQYmz_oKTtZMgB-YKUyZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.182.108.0/24 195.231.128.0/18 195.231.224.0/19 IPv6: 2a10:cf80:1000::/48 2a10:cf80:2000::/48 Signature Algorithm: sha256WithRSAEncryption 28:3e:ef:2a:37:c7:f2:bd:1d:ff:ad:ce:66:c2:eb:4b:eb:7f: 14:55:15:48:d0:6e:c8:35:9b:4b:0f:b8:b5:98:f6:69:db:f3: e6:8d:6f:72:6d:57:9f:46:35:c2:bc:1c:c5:5a:bd:08:4c:d2: 9a:09:d0:e3:af:ce:4c:7b:89:d9:e6:2d:ac:d3:84:ee:e5:a4: 40:2d:84:87:da:97:82:06:5b:ef:60:06:1d:a9:90:22:62:8c: 5d:a9:e9:e4:5a:7c:e9:01:20:24:bc:92:a3:2d:07:e1:b5:22: cf:69:16:92:ea:e1:11:97:7b:6c:65:c3:19:82:71:b7:7a:98: 37:2a:27:98:e8:26:59:72:6d:54:02:6a:bf:2a:59:14:62:4f: dd:79:40:3c:5a:0e:a4:11:95:4c:fd:a8:35:7e:1d:e2:76:72: b0:04:8f:ef:7b:5e:38:76:98:f0:b4:05:69:90:d1:ca:55:b8: dc:c5:69:92:07:8c:6d:a2:78:7b:d3:24:6d:b6:fe:45:e1:ee: cb:1b:dc:d3:00:9b:6b:79:54:88:d3:64:58:9e:ca:58:fc:c5: 22:b3:3c:d3:a1:1b:5d:64:1d:2f:81:d6:ce:08:b9:05:d4:67: 6e:aa:24:44:c7:c7:6d:d5:7b:97:65:f0:fb:00:f2:b6:c2:00: 32:2a:91:d9 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt6W5ytgnBAepHBQgzoIpaqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNmI2MzcxYjk0NWEzNWU5ZGYzMDhmZjQzODAzZTI2MTc4 NTEwNjkwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODUxODRlZjRiZDA2MjZjZmZhMGE0ZWQ2NGM4MDFmOTgyOTRjOTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDYHpAjyVfF+cqgpRNEThe5R6laV z6Wp+BGpdyNPVyfEf5L3UC3gRil0uXx+MEQAXOsQXWpAPkiwcgRJrMUO8iscJzRE Of6wzbI89AaOauq3Ust3FWtb49a2gkZ2bknIeM6gEhbKFGEH9tIeNdZlb57WUh9a OthGqecyT8NY+cZX7uh4AgJbkHs/DpX/UK7UKyUs+wVdFW1t9jpiHR55WHWLFGDd tuMrHaozhi4yuqr3l2s65XPPEE/oKQRPVeDL3+F2iWtRKY3nnY/sqIEuoNlHGyYR E2QRLFzKJhGxJOdJ3FQsZ1gytGdNA0gKG6MzaI09z1gU8t6fTlkULREEKwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFEhRhO9L0GJs/6Ck7WTIAfmClMmXMB8GA1UdIwQY MBaAFExrY3G5RaNenfMI/0OAPiYXhRBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3Mjct ZDk2MzkzYWYyZjIwLzEvU0ZHRTcwdlFZbXpfb0tUdFpNZ0ItWUtVeVpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3MjctZDk2MzkzYWYyZjIw LzEvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQAwrZsAwQG w+eAAwQFw+fgMBgEAgACMBIDBwAqEM+AEAADBwAqEM+AIAAwDQYJKoZIhvcNAQEL BQADggEBACg+7yo3x/K9Hf+tzmbC60vrfxRVFUjQbsg1m0sPuLWY9mnb8+aNb3Jt V59GNcK8HMVavQhM0poJ0OOvzkx7idnmLazThO7lpEAthIfal4IGW+9gBh2pkCJi jF2p6eRafOkBICS8kqMtB+G1Is9pFpLq4RGXe2xlwxmCcbd6mDcqJ5joJllybVQC ar8qWRRiT915QDxaDqQRlUz9qDV+HeJ2crAEj+97Xjh2mPC0BWmQ0cpVuNzFaZIH jG2ieHvTJG22/kXh7ssb3NMAm2t5VIjTZFieylj8xSKzPNOhG11kHS+B1s4IuQXU Z26qJETHx23Ve5dl8PsA8rbCADIqkdk= -----END CERTIFICATE-----Generated at Mon Jan 26 06:21:26 2026 by rpki-client