This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/i_sg361hESOO6WvkWK2Qx1qnr_o.roa File: i_sg361hESOO6WvkWK2Qx1qnr_o.roa (raw, json) Hash identifier: grkv5sxl6QC67Xl6GRfRbX76QTIOE0y5InqEToBe4KU= Subject key identifier: 8B:FB:20:DF:AD:61:11:23:8E:E9:6B:E4:58:AD:90:C7:5A:A7:AF:FA Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019B7EA746C18D1BB2C1651E02A449FAE848 Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/i_sg361hESOO6WvkWK2Qx1qnr_o.roa Signing time: Fri 02 Jan 2026 12:20:50 +0000 ROA not before: Fri 02 Jan 2026 12:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50316 IP address blocks: 92.245.184.0/24 maxlen: 24 92.245.185.0/24 maxlen: 24 92.245.186.0/24 maxlen: 24 92.245.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:46:c1:8d:1b:b2:c1:65:1e:02:a4:49:fa:e8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Jan 2 12:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bfb20dfad6111238ee96be458ad90c75aa7affa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:4e:45:f3:8a:51:f5:40:cb:3a:40:8a:dd: a2:54:b1:d7:bb:0a:4b:21:fc:0b:d2:2d:13:49:0c: d5:6a:8f:c3:b4:0d:d6:47:83:e4:5c:c5:de:d9:9d: 98:70:96:af:7c:58:9a:c3:0d:eb:83:a1:84:a6:e2: fd:9e:fe:fa:b0:b8:45:68:03:e4:a4:cc:33:b5:b5: bd:08:83:66:27:cc:58:cc:8a:96:f0:57:e9:aa:e3: 87:c5:df:d2:33:b3:cf:fb:aa:1a:6c:46:12:7a:62: c4:db:c4:d2:6a:94:df:99:1e:54:0c:de:92:ba:05: 1e:df:b1:e8:b0:62:8b:96:32:ae:4d:45:b5:16:4e: 37:4b:03:be:09:2e:7d:41:eb:51:b1:24:9e:ed:47: 83:d7:d1:c3:b8:62:1f:11:fd:3c:72:42:3b:77:df: 8a:78:41:6b:8c:fe:c8:f3:ab:21:9e:0b:62:36:f9: 84:63:d0:59:77:7b:34:fa:04:dd:20:43:8c:e4:4f: e9:64:3c:f1:39:10:e5:12:5f:5e:77:5a:cd:96:49: 82:ae:68:fe:48:e0:bf:b7:f4:55:23:cf:69:92:0f: ee:36:b5:41:93:c8:d1:56:9d:7a:16:e1:a9:2a:cf: ef:36:bc:64:2b:07:f6:92:bf:dd:c3:85:93:bd:21: e3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FB:20:DF:AD:61:11:23:8E:E9:6B:E4:58:AD:90:C7:5A:A7:AF:FA X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/i_sg361hESOO6WvkWK2Qx1qnr_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.245.184.0/22 Signature Algorithm: sha256WithRSAEncryption 92:94:b8:f1:a5:76:cb:3e:dd:ab:f2:cd:3b:ce:13:8a:81:34: e4:f4:8b:c2:f0:03:c4:cc:99:45:97:6c:e8:a0:43:0f:dd:a2: 3a:b1:6a:25:a4:5d:67:6c:91:0d:c1:dc:42:dc:70:af:c2:df: a9:4f:b1:e3:f1:b1:fa:83:6d:fb:3a:55:5a:ab:e8:57:8d:40: 8b:df:6d:b3:c0:64:c4:8b:55:ef:56:dc:c5:9d:55:1c:ee:24: e4:07:0a:6b:79:60:07:d4:a7:74:c1:4a:4b:a4:82:e2:82:4f: 88:5a:9e:dc:12:74:cb:31:79:a5:36:99:c3:04:c7:9f:31:db: b0:23:fb:74:80:a1:08:0d:39:52:df:3d:23:81:9f:89:04:1b: d7:ad:72:fd:be:dc:8d:22:dd:bf:a0:1e:ee:a6:40:33:e0:c9: 57:0a:d3:c1:2b:a6:39:f4:77:ed:53:f9:04:5f:4c:b9:52:9c: 10:bb:4f:47:51:3a:fd:82:84:1f:f9:14:64:75:85:02:d1:3a: af:5b:ed:96:d4:e8:d9:62:dc:95:5b:ec:e2:a6:11:e8:20:1e: e1:dc:49:6a:a6:27:8e:97:10:03:ad:ba:85:84:3d:1a:f1:c7: 9a:e8:81:5b:2f:11:fc:9f:24:06:2a:66:b5:67:bb:0b:f5:21: 51:d5:75:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p0bBjRuywWUeAqRJ+uhIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjYwMTAyMTIyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmZiMjBkZmFkNjExMTIzOGVlOTZiZTQ1OGFkOTBjNzVhYTdhZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm1ORfOKUfVAyzpAit2iVLHXuwpL IfwL0i0TSQzVao/DtA3WR4PkXMXe2Z2YcJavfFiaww3rg6GEpuL9nv76sLhFaAPk pMwztbW9CINmJ8xYzIqW8FfpquOHxd/SM7PP+6oabEYSemLE28TSapTfmR5UDN6S ugUe37HosGKLljKuTUW1Fk43SwO+CS59QetRsSSe7UeD19HDuGIfEf08ckI7d9+K eEFrjP7I86shngtiNvmEY9BZd3s0+gTdIEOM5E/pZDzxORDlEl9ed1rNlkmCrmj+ SOC/t/RVI89pkg/uNrVBk8jRVp16FuGpKs/vNrxkKwf2kr/dw4WTvSHjOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIv7IN+tYREjjulr5FitkMdap6/6MB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvaV9zZzM2MWhFU09PNld2a1dLMlF4MXFucl9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXPW4MA0G CSqGSIb3DQEBCwUAA4IBAQCSlLjxpXbLPt2r8s07zhOKgTTk9IvC8APEzJlFl2zo oEMP3aI6sWolpF1nbJENwdxC3HCvwt+pT7Hj8bH6g237OlVaq+hXjUCL322zwGTE i1XvVtzFnVUc7iTkBwpreWAH1Kd0wUpLpILigk+IWp7cEnTLMXmlNpnDBMefMduw I/t0gKEIDTlS3z0jgZ+JBBvXrXL9vtyNIt2/oB7upkAz4MlXCtPBK6Y59HftU/kE X0y5UpwQu09HUTr9goQf+RRkdYUC0TqvW+2W1OjZYtyVW+ziphHoIB7h3ElqpieO lxADrbqFhD0a8cea6IFbLxH8nyQGKma1Z7sL9SFR1XWI -----END CERTIFICATE-----Generated at Mon Jan 26 11:44:40 2026 by rpki-client