This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/SgMOoWz5gJhb0nyT-ZKsGgLzAOg.roa File: SgMOoWz5gJhb0nyT-ZKsGgLzAOg.roa (raw, json) Hash identifier: zgTRF9Sx7egnoTtrUbB6SPfcPU50038KU3DAntDwjks= Subject key identifier: 4A:03:0E:A1:6C:F9:80:98:5B:D2:7C:93:F9:92:AC:1A:02:F3:00:E8 Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a Certificate serial: 019B7C808E28CEAC2A2FD7DF60DEC865F685 Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/SgMOoWz5gJhb0nyT-ZKsGgLzAOg.roa Signing time: Fri 02 Jan 2026 02:19:18 +0000 ROA not before: Fri 02 Jan 2026 02:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202269 IP address blocks: 185.110.188.0/24 maxlen: 24 185.110.189.0/24 maxlen: 24 185.110.190.0/24 maxlen: 24 185.110.191.0/24 maxlen: 24 185.208.172.0/24 maxlen: 24 185.208.173.0/24 maxlen: 24 2a14:7980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8e:28:ce:ac:2a:2f:d7:df:60:de:c8:65:f6:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8536146119b044539082e326cca903200b8d4b1a Validity Not Before: Jan 2 02:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a030ea16cf980985bd27c93f992ac1a02f300e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7b:80:20:10:18:62:60:47:a4:36:dd:4e:4f: fb:32:e1:1f:a1:77:e8:92:8a:b1:07:82:7d:63:aa: 26:8c:f9:f2:ea:c7:ae:33:b8:15:20:11:c8:24:1e: 61:8a:8e:43:7b:f3:cf:76:75:05:4a:ec:6b:f2:a9: 2a:aa:db:24:2f:68:41:e0:a1:ef:3e:16:6e:97:75: d5:69:77:24:7d:d7:58:b7:14:fe:f4:2b:09:f9:72: 57:9f:5f:c2:26:af:86:4e:ac:09:88:c3:9c:5a:0a: 9f:d8:3d:b5:b9:18:26:55:03:76:2e:d4:d0:87:99: fa:2a:af:17:74:04:57:e8:cf:28:99:1e:9f:e9:26: bd:75:cb:ba:0d:5f:d1:ef:c8:02:98:d7:fb:6d:05: f6:4d:5d:47:40:92:73:e9:f8:3b:d2:22:e7:2a:48: 00:d8:cd:04:60:29:53:4c:ca:38:fe:be:11:32:58: bc:d6:fc:41:59:02:17:a6:e0:b1:d1:42:68:63:57: 36:80:df:22:f7:b6:89:14:c5:64:78:2f:9f:d2:10: b7:bc:f6:d6:1b:ac:af:4b:43:f9:d4:b5:a7:36:9b: ad:34:db:52:29:da:74:06:3b:0b:6c:c9:9b:50:40: a9:1b:23:8a:56:47:99:99:92:12:b6:b6:dc:ec:0b: 72:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:03:0E:A1:6C:F9:80:98:5B:D2:7C:93:F9:92:AC:1A:02:F3:00:E8 X509v3 Authority Key Identifier: keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/SgMOoWz5gJhb0nyT-ZKsGgLzAOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.188.0/22 185.208.172.0/23 IPv6: 2a14:7980::/32 Signature Algorithm: sha256WithRSAEncryption 25:9c:08:04:d3:18:b4:56:97:c3:25:d4:d9:26:9e:65:fc:0a: e6:e7:2b:95:8a:6b:57:6b:a2:65:9e:01:c0:85:2f:d4:2e:90: 73:04:37:75:36:ce:ff:ee:98:02:ba:27:23:63:40:8a:6f:0b: 55:bf:3e:f2:c1:b9:d9:93:0c:99:3c:0e:39:be:50:20:01:06: 5f:82:f2:fb:2d:f5:98:1b:2b:0a:b0:25:56:ea:4e:7c:51:a4: 00:ae:dd:89:c0:89:37:0c:ea:63:74:8b:6f:6b:ec:16:d3:00: 33:b1:ae:82:67:ef:d2:f3:9d:01:f8:0a:92:78:8f:6b:fe:9d: 1a:de:18:af:b0:5c:c5:06:c8:ef:e6:c4:fa:c5:0a:f2:9a:a1: d8:93:31:3b:b5:a9:89:72:25:9f:27:85:46:0b:b6:8f:32:96: b8:8c:01:0f:4e:ac:84:97:f7:c9:21:8f:72:32:25:c0:b4:bd: 0a:6b:bd:97:62:68:0e:42:87:d8:82:a1:6b:b6:dc:51:10:f3: 97:e2:90:33:2f:15:2f:70:f9:ce:10:45:bd:7c:16:aa:e9:e1: ae:2b:c2:6e:86:b6:56:37:ca:7b:60:b1:8e:c5:3f:1e:f2:1b: da:ce:a1:a9:73:24:45:93:c4:8a:23:a9:6d:e0:b0:1c:f4:7d: 89:4a:f9:6c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8gI4ozqwqL9ffYN7IZfaFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzYxNDYxMTliMDQ0NTM5MDgyZTMyNmNjYTkwMzIwMGI4 ZDRiMWEwHhcNMjYwMTAyMDIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTAzMGVhMTZjZjk4MDk4NWJkMjdjOTNmOTkyYWMxYTAyZjMwMGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XuAIBAYYmBHpDbdTk/7MuEfoXfo koqxB4J9Y6omjPny6seuM7gVIBHIJB5hio5De/PPdnUFSuxr8qkqqtskL2hB4KHv PhZul3XVaXckfddYtxT+9CsJ+XJXn1/CJq+GTqwJiMOcWgqf2D21uRgmVQN2LtTQ h5n6Kq8XdARX6M8omR6f6Sa9dcu6DV/R78gCmNf7bQX2TV1HQJJz6fg70iLnKkgA 2M0EYClTTMo4/r4RMli81vxBWQIXpuCx0UJoY1c2gN8i97aJFMVkeC+f0hC3vPbW G6yvS0P51LWnNputNNtSKdp0BjsLbMmbUECpGyOKVkeZmZIStrbc7AtyHQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEoDDqFs+YCYW9J8k/mSrBoC8wDoMB8GA1UdIwQY MBaAFIU2FGEZsERTkILjJsypAyALjUsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMt MGM2NzIxN2NjOTZiLzEvU2dNT29XejVnSmhiMG55VC1aS3NHZ0x6QU9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMtMGM2NzIxN2NjOTZi LzEvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuW68AwQB udCsMA0EAgACMAcDBQAqFHmAMA0GCSqGSIb3DQEBCwUAA4IBAQAlnAgE0xi0VpfD JdTZJp5l/Arm5yuVimtXa6JlngHAhS/ULpBzBDd1Ns7/7pgCuicjY0CKbwtVvz7y wbnZkwyZPA45vlAgAQZfgvL7LfWYGysKsCVW6k58UaQArt2JwIk3DOpjdItva+wW 0wAzsa6CZ+/S850B+AqSeI9r/p0a3hivsFzFBsjv5sT6xQrymqHYkzE7tamJciWf J4VGC7aPMpa4jAEPTqyEl/fJIY9yMiXAtL0Ka72XYmgOQofYgqFrttxREPOX4pAz LxUvcPnOEEW9fBaq6eGuK8JuhrZWN8p7YLGOxT8e8hvazqGpcyRFk8SKI6lt4LAc 9H2JSvls -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:45 2026 by rpki-client