This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/sjgUHUj_TSMku2aB-f61amSIyCM.roa File: sjgUHUj_TSMku2aB-f61amSIyCM.roa (raw, json) Hash identifier: /+JjugGAK765zafXtIVOVPtipqmOZ3WaKKGK25tgoO4= Subject key identifier: B2:38:14:1D:48:FF:4D:23:24:BB:66:81:F9:FE:B5:6A:64:88:C8:23 Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947 Certificate serial: 019B7F15FE5FB2898F1165E8738748B6B898 Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/sjgUHUj_TSMku2aB-f61amSIyCM.roa Signing time: Fri 02 Jan 2026 14:21:46 +0000 ROA not before: Fri 02 Jan 2026 14:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29551 IP address blocks: 46.253.112.0/20 maxlen: 24 80.66.204.0/22 maxlen: 24 82.149.224.0/19 maxlen: 24 83.141.0.0/18 maxlen: 24 109.71.24.0/21 maxlen: 24 178.19.64.0/20 maxlen: 24 185.37.16.0/22 maxlen: 24 195.225.196.0/22 maxlen: 24 2a00:f520::/32 maxlen: 48 2a01:440::/29 maxlen: 48 2a01:440:1509::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:fe:5f:b2:89:8f:11:65:e8:73:87:48:b6:b8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947 Validity Not Before: Jan 2 14:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b238141d48ff4d2324bb6681f9feb56a6488c823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:63:a9:20:cd:6e:82:72:f1:ac:e9:bd:97:c3: 15:38:2a:7f:d9:7d:38:c5:40:0a:5f:fb:9e:c5:ec: 81:e9:cf:5f:97:8f:0a:ae:38:83:21:68:6b:91:42: 64:41:27:1f:2b:61:02:51:da:66:fb:3f:1f:66:40: ee:fc:d2:9d:6b:67:b5:e1:a5:8b:3f:10:cf:04:c6: 0a:5c:73:d4:89:8e:7c:2b:19:86:2d:10:aa:1b:6e: 93:ef:f7:27:17:0b:cd:2b:9d:73:6b:af:75:12:0a: 0a:4c:7c:2f:68:3f:6d:c6:3b:b8:db:7e:d3:37:91: 1c:32:a5:cc:12:5c:66:77:98:90:16:3e:8d:01:d1: 31:f6:92:15:5b:b0:0f:e8:aa:24:d0:f1:cc:84:6c: 89:93:4f:ba:c2:4a:5b:4e:2d:55:d9:54:1f:96:8a: 43:58:8a:85:e5:38:2b:a3:d2:fa:92:59:0b:fe:98: f3:05:46:6f:be:ae:a7:db:d9:0c:52:8b:6a:b3:1d: 5f:ad:45:3f:ed:e4:a3:5c:9e:29:e5:25:59:df:c4: 26:6b:c8:bb:82:e4:23:9f:b0:a8:7f:f7:8a:b3:90: 9f:59:05:85:31:a9:b2:2f:8a:c4:32:03:32:69:a9: 93:3a:c1:cd:b3:bf:47:c8:df:f6:c3:e6:63:cc:da: d5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:38:14:1D:48:FF:4D:23:24:BB:66:81:F9:FE:B5:6A:64:88:C8:23 X509v3 Authority Key Identifier: keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/sjgUHUj_TSMku2aB-f61amSIyCM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.112.0/20 80.66.204.0/22 82.149.224.0/19 83.141.0.0/18 109.71.24.0/21 178.19.64.0/20 185.37.16.0/22 195.225.196.0/22 IPv6: 2a00:f520::/32 2a01:440::/29 Signature Algorithm: sha256WithRSAEncryption 5c:c7:01:ee:54:7e:59:17:47:04:ff:4e:dc:b9:48:50:46:4d: e6:68:8f:04:41:b9:79:5f:75:47:76:56:4f:8a:bd:d2:0e:45: de:0f:77:2b:10:ab:e1:aa:36:ec:f3:1c:d7:bb:b4:5b:15:c4: d7:6b:7f:75:65:4c:8e:87:da:43:0c:44:e7:b9:7f:dc:3b:83: b6:80:b1:33:b0:81:02:d9:06:cb:ff:95:f6:0b:60:e0:f7:76: 18:f1:32:31:ad:af:30:71:03:ee:69:6c:af:59:09:eb:21:02: 75:ef:4e:b2:bf:ae:99:be:27:a7:ed:6d:d2:0a:6c:b5:ec:36: 07:ee:f1:b8:7b:36:7c:0a:f0:9e:fb:e7:26:9c:15:57:8c:01: d0:67:ed:6a:65:ba:18:06:8d:7e:46:9b:82:99:86:92:29:24: c5:e1:da:a4:f4:34:8c:66:c3:12:81:f3:b5:af:df:c3:4f:66: c9:86:21:27:c6:6c:69:3d:d1:a5:f9:ad:a4:d5:24:25:37:2e: 4f:d2:50:95:13:9b:e7:f5:b5:f1:3f:9d:b1:67:59:10:53:43: f1:5b:0a:28:11:ac:cb:82:bd:aa:6e:e4:cb:22:f0:77:31:df: fa:63:42:be:fb:66:ca:d7:26:4f:f0:e6:a7:19:9b:1d:d8:97: 62:3a:72:47 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt/Ff5fsomPEWXoc4dItriYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhODJkYmM3ZDdlMjgxOGY5NjY4MGI2NmVmY2VkYjEw ODc5NDcwHhcNMjYwMTAyMTQyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjM4MTQxZDQ4ZmY0ZDIzMjRiYjY2ODFmOWZlYjU2YTY0ODhjODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmOpIM1ugnLxrOm9l8MVOCp/2X04 xUAKX/uexeyB6c9fl48KrjiDIWhrkUJkQScfK2ECUdpm+z8fZkDu/NKda2e14aWL PxDPBMYKXHPUiY58KxmGLRCqG26T7/cnFwvNK51za691EgoKTHwvaD9txju4237T N5EcMqXMElxmd5iQFj6NAdEx9pIVW7AP6Kok0PHMhGyJk0+6wkpbTi1V2VQflopD WIqF5Tgro9L6klkL/pjzBUZvvq6n29kMUotqsx1frUU/7eSjXJ4p5SVZ38Qma8i7 guQjn7Cof/eKs5CfWQWFMamyL4rEMgMyaamTOsHNs79HyN/2w+ZjzNrVjwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFLI4FB1I/00jJLtmgfn+tWpkiMgjMB8GA1UdIwQY MBaAFO1tqC28fX4oGPlmgLZu/O2xCHlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAt NTk5NTc3ODdiMDE1LzEvc2pnVUhVal9UU01rdTJhQi1mNjFhbVNJeUNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAtNTk5NTc3ODdiMDE1 LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQELv1wAwQC UELMAwQFUpXgAwQGU40AAwQDbUcYAwQEshNAAwQCuSUQAwQCw+HEMBQEAgACMA4D BQAqAPUgAwUDKgEEQDANBgkqhkiG9w0BAQsFAAOCAQEAXMcB7lR+WRdHBP9O3LlI UEZN5miPBEG5eV91R3ZWT4q90g5F3g93KxCr4ao27PMc17u0WxXE12t/dWVMjofa QwxE57l/3DuDtoCxM7CBAtkGy/+V9gtg4Pd2GPEyMa2vMHED7mlsr1kJ6yECde9O sr+umb4np+1t0gpstew2B+7xuHs2fArwnvvnJpwVV4wB0GftamW6GAaNfkabgpmG kikkxeHapPQ0jGbDEoHzta/fw09myYYhJ8ZsaT3RpfmtpNUkJTcuT9JQlROb5/W1 8T+dsWdZEFND8VsKKBGsy4K9qm7kyyLwdzHf+mNCvvtmytcmT/DmpxmbHdiXYjpy Rw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:32 2026 by rpki-client