This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/sgpOXdywPZ1eYuUkL26kNyAn040.roa File: sgpOXdywPZ1eYuUkL26kNyAn040.roa (raw, json) Hash identifier: akHQ8MRNmr0j0FGpi4GkHyhsC5b75QJ1OaEs2lcLoRU= Subject key identifier: B2:0A:4E:5D:DC:B0:3D:9D:5E:62:E5:24:2F:6E:A4:37:20:27:D3:8D Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B7759127C7DCFADFE22DB6EC673ACC14A Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/sgpOXdywPZ1eYuUkL26kNyAn040.roa Signing time: Thu 01 Jan 2026 02:18:04 +0000 ROA not before: Thu 01 Jan 2026 02:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209292 IP address blocks: 85.31.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:12:7c:7d:cf:ad:fe:22:db:6e:c6:73:ac:c1:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b20a4e5ddcb03d9d5e62e5242f6ea4372027d38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ab:25:31:88:2a:39:7d:6b:cd:5d:83:99:05: 61:5f:1b:cc:be:e7:53:9e:72:79:3f:1c:ad:9d:e4: 52:be:3e:c3:a3:d1:bb:1f:ea:68:ae:d1:72:f8:d4: dc:eb:b5:da:8c:0d:d3:83:05:02:51:11:30:b8:ad: b3:19:4e:a9:d8:07:b1:78:da:03:62:13:e7:0b:c6: 2a:e3:65:7b:a9:f0:f7:ec:2b:28:0a:31:28:64:d3: d6:d3:39:28:37:d3:40:86:b3:13:40:d1:77:4d:de: b3:bb:59:32:1d:c1:71:bd:88:d7:26:7b:69:07:85: d4:c3:8a:83:26:97:9c:52:27:27:b4:91:70:89:bb: 9c:0a:ca:bd:b9:4f:81:7c:09:91:69:e9:5a:ba:70: e6:81:b9:8a:71:55:0f:14:98:ae:f2:fe:e9:04:ef: 71:91:d2:76:e9:c4:8f:75:af:15:7f:3f:64:6b:49: 7c:62:70:cc:92:6a:05:c2:32:c0:0d:48:eb:56:94: af:0e:96:01:a8:46:57:05:8e:18:b1:2e:7b:e1:84: 5c:38:e1:6b:ec:e8:95:13:b1:7d:36:c1:a1:1f:14: 0f:05:21:58:49:20:e0:b9:35:d1:69:1e:f6:20:32: 5e:a0:3b:93:d1:22:ff:08:d0:a0:cc:fa:b7:14:c1: cd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0A:4E:5D:DC:B0:3D:9D:5E:62:E5:24:2F:6E:A4:37:20:27:D3:8D X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/sgpOXdywPZ1eYuUkL26kNyAn040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.31.254.0/24 Signature Algorithm: sha256WithRSAEncryption 32:03:c6:fe:bc:9f:d9:2a:94:3c:c2:96:01:05:a2:d1:2d:a9: 9b:e6:1e:b6:76:e2:16:0e:8d:b4:02:4d:d5:92:2a:14:d0:d7: d5:7e:48:ab:94:c3:34:66:c0:d7:bf:05:52:ef:c3:6e:04:90: a4:06:e4:a6:41:3d:5f:4d:ad:a6:1d:e2:8a:d1:c4:fc:e1:f1: a4:67:c6:39:df:44:c1:cb:06:fa:3f:23:34:a6:2c:13:a8:41: be:d9:a6:c2:ba:f9:d4:08:d4:e9:d3:ef:26:d8:21:39:d9:ce: bf:ec:c9:2e:da:dc:26:11:98:ce:0f:8d:7b:57:50:f4:2d:05: 8b:99:1e:5d:55:07:00:04:75:0e:3e:15:ca:27:eb:c1:d3:4b: fd:cd:f4:9a:ce:d1:31:df:7b:64:46:3b:db:fe:81:d0:b5:c5: c1:6a:2f:5a:dd:02:a7:a3:11:b1:87:c7:9c:94:36:a4:b6:75: 36:06:bb:3a:68:5d:38:62:30:3d:66:33:85:8b:4a:2f:b0:c9: 2d:69:9c:49:b9:90:ad:d7:2e:07:b1:00:e5:f4:48:f7:af:6a: 23:9b:0f:37:f9:5e:46:63:ff:41:4b:f1:ef:b7:0c:b6:48:83: b2:6d:6e:30:bf:f8:f4:d3:a5:57:b6:bc:30:db:6a:15:f2:c9: 3c:47:94:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRJ8fc+t/iLbbsZzrMFKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjBhNGU1ZGRjYjAzZDlkNWU2MmU1MjQyZjZlYTQzNzIwMjdkMzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqslMYgqOX1rzV2DmQVhXxvMvudT nnJ5PxytneRSvj7Do9G7H+portFy+NTc67XajA3TgwUCUREwuK2zGU6p2AexeNoD YhPnC8Yq42V7qfD37CsoCjEoZNPW0zkoN9NAhrMTQNF3Td6zu1kyHcFxvYjXJntp B4XUw4qDJpecUicntJFwibucCsq9uU+BfAmRaelaunDmgbmKcVUPFJiu8v7pBO9x kdJ26cSPda8Vfz9ka0l8YnDMkmoFwjLADUjrVpSvDpYBqEZXBY4YsS574YRcOOFr 7OiVE7F9NsGhHxQPBSFYSSDguTXRaR72IDJeoDuT0SL/CNCgzPq3FMHNGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLIKTl3csD2dXmLlJC9upDcgJ9ONMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvc2dwT1hkeXdQWjFlWXVVa0wyNmtOeUFuMDQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVR/+MA0G CSqGSIb3DQEBCwUAA4IBAQAyA8b+vJ/ZKpQ8wpYBBaLRLamb5h62duIWDo20Ak3V kioU0NfVfkirlMM0ZsDXvwVS78NuBJCkBuSmQT1fTa2mHeKK0cT84fGkZ8Y530TB ywb6PyM0piwTqEG+2abCuvnUCNTp0+8m2CE52c6/7Mku2twmEZjOD417V1D0LQWL mR5dVQcABHUOPhXKJ+vB00v9zfSaztEx33tkRjvb/oHQtcXBai9a3QKnoxGxh8ec lDaktnU2Brs6aF04YjA9ZjOFi0ovsMktaZxJuZCt1y4HsQDl9Ej3r2ojmw83+V5G Y/9BS/Hvtwy2SIOybW4wv/j006VXtrww22oV8sk8R5SA -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:38 2026 by rpki-client