This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/sRTNLbJ3g2jrnoN7xO2uBbfWguU.roa File: sRTNLbJ3g2jrnoN7xO2uBbfWguU.roa (raw, json) Hash identifier: 97xAwvGhhXW1GC5fGvIVMkcoGK7MfJbMcwrs0H6Prc8= Subject key identifier: B1:14:CD:2D:B2:77:83:68:EB:9E:83:7B:C4:ED:AE:05:B7:D6:82:E5 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019B7A5B8CB4B1F7F62AF34928FE44916B41 Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/sRTNLbJ3g2jrnoN7xO2uBbfWguU.roa Signing time: Thu 01 Jan 2026 16:19:38 +0000 ROA not before: Thu 01 Jan 2026 16:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13046 IP address blocks: 89.164.0.0/16 maxlen: 24 141.136.128.0/17 maxlen: 24 141.138.0.0/18 maxlen: 24 213.191.128.0/19 maxlen: 24 213.202.64.0/18 maxlen: 24 2001:1af0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8c:b4:b1:f7:f6:2a:f3:49:28:fe:44:91:6b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Jan 1 16:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b114cd2db2778368eb9e837bc4edae05b7d682e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:69:c5:16:9d:0d:7b:bd:48:41:49:76:43:bb: 1a:d0:5f:04:e6:16:a2:87:57:ce:dd:ff:99:f5:06: 60:6d:2c:2c:ec:e2:06:09:7d:d1:36:bc:57:26:84: 30:b8:89:3f:2c:d6:81:ee:82:6d:3f:d8:e8:6e:20: d9:7d:f9:4c:0c:bf:a7:b4:a7:bd:24:b0:42:68:d0: a4:9b:28:1c:1a:3e:82:bd:9d:96:35:26:18:63:17: 3c:9c:8c:e6:86:dd:15:d2:ac:0d:76:a9:ee:31:fb: 59:ab:60:07:22:08:dd:8c:df:53:18:f7:ca:1c:02: 04:36:07:23:30:c8:92:d6:87:6f:b6:42:e3:45:54: 81:33:a7:55:d3:61:d1:96:72:47:09:e9:6e:3c:ef: 22:b8:70:a7:9b:a8:06:9c:8e:6d:b4:34:36:5c:93: a2:2f:80:57:43:dd:11:c6:f4:c7:5d:64:a0:bd:91: bd:08:37:29:c3:f8:10:2f:dd:13:9f:7d:22:f2:6d: c0:f4:52:c2:1c:c2:53:47:19:ad:ef:c8:aa:e0:cc: 5a:cb:79:e0:0a:0e:03:96:dc:6c:47:6d:d7:e1:ee: 4e:29:41:b1:fb:05:67:e8:f6:50:d8:93:17:c3:93: 8f:ed:a7:e2:dc:5d:94:7c:e3:e6:65:e5:94:a1:fa: 30:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:14:CD:2D:B2:77:83:68:EB:9E:83:7B:C4:ED:AE:05:B7:D6:82:E5 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/sRTNLbJ3g2jrnoN7xO2uBbfWguU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.164.0.0/16 141.136.128.0/17 141.138.0.0/18 213.191.128.0/19 213.202.64.0/18 IPv6: 2001:1af0::/29 Signature Algorithm: sha256WithRSAEncryption 92:b9:8d:4e:89:f2:50:77:fc:5f:f7:17:ca:fc:35:99:b4:5e: 31:c4:3a:de:c1:2a:92:74:50:fc:e6:5d:03:c4:e7:c4:ec:ef: ec:25:21:ac:26:b0:78:47:33:a5:26:01:da:c4:9f:f2:bd:45: 23:32:c6:03:dc:a2:e6:bc:37:fa:71:75:25:4e:07:98:7b:85: ca:59:63:66:b1:a3:41:ba:85:a6:3a:10:6b:97:ed:6d:eb:51: 15:55:f0:a3:ce:37:8d:5b:87:cb:52:69:96:44:96:72:9f:ec: 0f:3d:f2:40:77:20:90:0a:45:1f:c5:06:a6:55:1d:ed:ef:a3: b4:a9:75:63:ee:52:17:d2:83:f9:08:95:0f:03:2d:b2:27:85: 82:5a:86:0c:46:9f:d8:e8:b3:d4:26:fa:33:5c:2f:d8:0a:73: c6:1b:60:e4:c7:9f:bd:c5:46:39:89:87:8b:bb:75:77:c4:dd: 8a:59:c4:c7:08:a3:ff:61:33:31:f8:48:2b:f1:d1:f5:fd:da: 65:6e:af:f0:95:a3:cb:1b:a6:64:01:3b:b0:80:e6:8b:47:4f: 3e:65:ad:70:9f:f5:9c:f0:73:f7:c6:09:fc:63:bf:90:91:ea: 0d:86:cc:0d:a0:ed:cc:73:db:bc:a5:20:c4:38:d6:7a:1c:6f: bb:5b:f6:22 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt6W4y0sff2KvNJKP5EkWtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjYwMTAxMTYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTE0Y2QyZGIyNzc4MzY4ZWI5ZTgzN2JjNGVkYWUwNWI3ZDY4MmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWnFFp0Ne71IQUl2Q7sa0F8E5hai h1fO3f+Z9QZgbSws7OIGCX3RNrxXJoQwuIk/LNaB7oJtP9jobiDZfflMDL+ntKe9 JLBCaNCkmygcGj6CvZ2WNSYYYxc8nIzmht0V0qwNdqnuMftZq2AHIgjdjN9TGPfK HAIENgcjMMiS1odvtkLjRVSBM6dV02HRlnJHCeluPO8iuHCnm6gGnI5ttDQ2XJOi L4BXQ90RxvTHXWSgvZG9CDcpw/gQL90Tn30i8m3A9FLCHMJTRxmt78iq4Mxay3ng Cg4DltxsR23X4e5OKUGx+wVn6PZQ2JMXw5OP7afi3F2UfOPmZeWUofowawIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFLEUzS2yd4No656De8TtrgW31oLlMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvc1JUTkxiSjNnMmpybm9ON3hPMnVCYmZXZ3VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAjBAIAATAdAwMAWaQDBAeN iIADBAaNigADBAXVv4ADBAbVykAwDQQCAAIwBwMFAyABGvAwDQYJKoZIhvcNAQEL BQADggEBAJK5jU6J8lB3/F/3F8r8NZm0XjHEOt7BKpJ0UPzmXQPE58Ts7+wlIawm sHhHM6UmAdrEn/K9RSMyxgPcoua8N/pxdSVOB5h7hcpZY2axo0G6haY6EGuX7W3r URVV8KPON41bh8tSaZZElnKf7A898kB3IJAKRR/FBqZVHe3vo7SpdWPuUhfSg/kI lQ8DLbInhYJahgxGn9jos9Qm+jNcL9gKc8YbYOTHn73FRjmJh4u7dXfE3YpZxMcI o/9hMzH4SCvx0fX92mVur/CVo8sbpmQBO7CA5otHTz5lrXCf9Zzwc/fGCfxjv5CR 6g2GzA2g7cxz27ylIMQ41nocb7tb9iI= -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:44 2026 by rpki-client