This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/sXRIKDkocbyTzm_GTL7N5qzTlQA.roa File: sXRIKDkocbyTzm_GTL7N5qzTlQA.roa (raw, json) Hash identifier: Zqly+CyY2Doez5dPu8qN77QPc5JqqNkgXWgjtCg+Bfw= Subject key identifier: B1:74:48:28:39:28:71:BC:93:CE:6F:C6:4C:BE:CD:E6:AC:D3:95:00 Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972 Certificate serial: 019B7CEE2B13F299EDEF34CF0FBF921A55EB Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/sXRIKDkocbyTzm_GTL7N5qzTlQA.roa Signing time: Fri 02 Jan 2026 04:19:01 +0000 ROA not before: Fri 02 Jan 2026 04:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203702 IP address blocks: 194.124.201.0/24 maxlen: 24 194.124.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2b:13:f2:99:ed:ef:34:cf:0f:bf:92:1a:55:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972 Validity Not Before: Jan 2 04:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1744828392871bc93ce6fc64cbecde6acd39500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:5b:e8:9d:99:1a:2d:ae:01:7d:15:42:d3: f7:ea:d8:de:58:01:eb:78:74:c6:e5:fa:27:53:a8: 79:31:cf:6e:16:14:6c:28:a2:c1:01:db:e4:b9:1a: 8f:7d:56:ce:75:b6:d1:c4:43:5b:53:57:3b:61:cf: 6a:6b:68:93:8f:5b:44:70:21:b6:16:a0:e5:db:ff: c7:2e:41:8b:98:c7:a7:bf:b3:06:1a:b2:69:cd:f6: 51:4f:76:62:52:24:32:67:dc:8a:6d:32:41:fa:c7: 3e:aa:0c:dc:e9:fd:b6:f2:a7:e7:38:cc:43:b8:e6: 01:71:54:12:8c:63:d6:bf:67:d1:a6:83:f7:3a:8e: bd:f2:12:cc:74:96:49:a6:01:59:f9:4b:5f:58:eb: 8e:35:fc:aa:98:a0:6b:f7:c0:13:2d:f1:50:ec:51: b3:d9:2a:8d:b2:4b:d5:ee:09:f9:e0:b4:e8:b5:72: ff:76:52:88:83:60:f9:b8:8a:a5:ea:dc:76:c4:d8: 45:19:f6:a3:d4:d2:14:a3:2d:a8:cc:fb:fb:98:7b: 16:fb:7e:e6:1f:9b:64:cc:07:20:72:a3:6f:58:ae: a7:88:0a:04:2f:1e:a8:43:96:4d:3f:f8:9d:7a:df: ff:5e:a9:6e:df:86:b4:98:36:76:79:46:ab:85:15: 69:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:74:48:28:39:28:71:BC:93:CE:6F:C6:4C:BE:CD:E6:AC:D3:95:00 X509v3 Authority Key Identifier: keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/sXRIKDkocbyTzm_GTL7N5qzTlQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.124.201.0-194.124.203.255 Signature Algorithm: sha256WithRSAEncryption 2d:4f:61:63:a6:83:00:02:95:56:fc:31:87:28:d6:50:53:f3: 63:1e:88:f4:93:ef:de:6c:bb:35:25:b3:11:f3:6e:57:61:b3: 19:f3:26:05:8f:e8:29:96:35:75:88:36:7a:60:88:91:fb:f6: 6b:ed:b2:f1:e0:d0:32:43:6e:f1:8d:af:5e:6b:d9:a8:2e:d8: 28:f6:3a:76:7f:96:af:13:47:d9:18:76:1c:df:b5:01:7a:b1: f2:ac:80:ba:5e:ea:21:fb:a6:dd:a6:3f:95:7f:31:92:80:03: 81:37:44:23:46:e3:0b:a6:2b:6b:1d:e7:47:53:fe:44:76:5b: 16:cc:e4:28:a2:f1:59:7c:96:11:a2:4e:33:81:9f:a1:aa:8a: 44:14:32:80:7b:c0:87:68:dd:b9:65:13:4a:7e:fc:b3:f0:31: 1c:58:be:c4:ab:64:dd:58:c1:3f:78:ed:11:a2:e3:c6:41:92: 37:20:1d:39:48:ca:ac:1d:68:f9:44:d9:8a:29:79:21:90:4c: dd:74:b2:34:ee:bd:3f:c5:ed:c5:71:2a:99:6d:de:ed:7a:9c: 20:58:6c:24:c8:08:35:c5:36:cf:f1:ab:3d:ae:21:50:bf:d9: 34:ee:e8:e1:bc:6f:c4:de:4b:69:e6:bb:00:87:36:d5:20:a7: 5f:b7:32:91 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87isT8pnt7zTPD7+SGlXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZjNhYTAxNDBiNzk4MzUwMGVhODI5ZjNjMzZiYmZiNjVh Zjk5NzIwHhcNMjYwMTAyMDQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTc0NDgyODM5Mjg3MWJjOTNjZTZmYzY0Y2JlY2RlNmFjZDM5NTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7db6J2ZGi2uAX0VQtP36tjeWAHr eHTG5fonU6h5Mc9uFhRsKKLBAdvkuRqPfVbOdbbRxENbU1c7Yc9qa2iTj1tEcCG2 FqDl2//HLkGLmMenv7MGGrJpzfZRT3ZiUiQyZ9yKbTJB+sc+qgzc6f228qfnOMxD uOYBcVQSjGPWv2fRpoP3Oo698hLMdJZJpgFZ+UtfWOuONfyqmKBr98ATLfFQ7FGz 2SqNskvV7gn54LTotXL/dlKIg2D5uIql6tx2xNhFGfaj1NIUoy2ozPv7mHsW+37m H5tkzAcgcqNvWK6niAoELx6oQ5ZNP/idet//Xqlu34a0mDZ2eUarhRVpYQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLF0SCg5KHG8k85vxky+zeas05UAMB8GA1UdIwQY MBaAFGrzqgFAt5g1AOqCnzw2u/tlr5lyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXZPcUFVQzNtRFVBNm9LZlBEYTctMld2bVhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zMmIxYWMtNDE4OS00OWZkLWE5OTkt YjhmM2I3NzllNTRiLzEvc1hSSUtEa29jYnlUem1fR1RMN041cXpUbFFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zMmIxYWMtNDE4OS00OWZkLWE5OTktYjhmM2I3NzllNTRi LzEvYXZPcUFVQzNtRFVBNm9LZlBEYTctMld2bVhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCfMkD BALCfMgwDQYJKoZIhvcNAQELBQADggEBAC1PYWOmgwAClVb8MYco1lBT82MeiPST 795suzUlsxHzbldhsxnzJgWP6CmWNXWINnpgiJH79mvtsvHg0DJDbvGNr15r2agu 2Cj2OnZ/lq8TR9kYdhzftQF6sfKsgLpe6iH7pt2mP5V/MZKAA4E3RCNG4wumK2sd 50dT/kR2WxbM5Cii8Vl8lhGiTjOBn6GqikQUMoB7wIdo3bllE0p+/LPwMRxYvsSr ZN1YwT947RGi48ZBkjcgHTlIyqwdaPlE2YopeSGQTN10sjTuvT/F7cVxKplt3u16 nCBYbCTICDXFNs/xqz2uIVC/2TTu6OG8b8TeS2nmuwCHNtUgp1+3MpE= -----END CERTIFICATE-----Generated at Mon Jan 26 02:13:12 2026 by rpki-client