This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SYrgRH6oH4VbpYiaZahRNsJo8eI.roa File: SYrgRH6oH4VbpYiaZahRNsJo8eI.roa (raw, json) Hash identifier: gC1lDV7bRV2Ftwp+kXsTtbRerIayek6YJ2qxdJm8q+4= Subject key identifier: 49:8A:E0:44:7E:A8:1F:85:5B:A5:88:9A:65:A8:51:36:C2:68:F1:E2 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F848C8E35B97A9E74D58020C6BEC2FB Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SYrgRH6oH4VbpYiaZahRNsJo8eI.roa Signing time: Fri 02 Jan 2026 16:22:31 +0000 ROA not before: Fri 02 Jan 2026 16:22:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3279 IP address blocks: 95.46.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:8c:8e:35:b9:7a:9e:74:d5:80:20:c6:be:c2:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=498ae0447ea81f855ba5889a65a85136c268f1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:a8:e2:56:ea:69:e1:5c:ac:5e:4f:75:b1: 51:ef:6b:e3:ff:7d:76:f0:42:fa:04:8f:86:6b:2f: 1c:13:0a:a9:0b:c7:51:1f:9b:3d:62:03:02:29:c4: ad:98:f6:67:c0:e1:a0:ef:16:41:a4:fc:29:15:e0: 42:e5:01:9a:78:5d:d0:c4:30:7c:d7:f2:be:b5:1a: 93:ee:02:3e:90:2b:62:e0:f8:ab:16:6e:55:c1:a7: 30:99:26:6c:32:6c:2a:8f:25:30:c5:c2:43:0a:ee: 82:15:9f:b5:c2:38:ed:91:d2:0e:2f:a0:d2:00:21: 3d:0d:c0:eb:39:bd:86:a7:91:08:32:ef:23:fc:e6: 45:26:6f:a8:39:59:d0:28:48:29:e7:28:88:df:35: 10:f6:8f:de:b0:97:df:dd:d0:29:75:7a:27:06:5e: 88:06:4e:a2:62:07:a9:3c:8b:11:8e:87:94:98:ed: be:d2:1d:49:eb:8f:5a:95:b3:d4:e8:04:82:c6:8e: d5:7d:6f:7e:d9:fa:d9:e3:21:a0:2e:01:ea:7c:6e: 38:0c:aa:af:d9:db:53:e2:0e:fb:48:d6:b1:6c:02: d7:df:b3:04:2a:66:93:61:83:46:43:33:c7:d6:3a: fd:e3:f5:ac:98:49:38:31:3e:14:e1:0c:30:06:6a: 01:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8A:E0:44:7E:A8:1F:85:5B:A5:88:9A:65:A8:51:36:C2:68:F1:E2 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SYrgRH6oH4VbpYiaZahRNsJo8eI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.46.6.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:a7:53:79:06:f8:b2:af:a2:4c:42:ac:10:fd:0c:a9:24:c2: f5:ff:56:b6:24:5e:fc:90:3e:3f:ee:52:c5:1e:1b:f0:85:c4: 9f:c6:df:45:57:11:08:bb:4d:91:09:ae:80:66:61:f4:07:31: 13:a3:67:96:62:0f:1d:8f:7d:60:27:f8:f0:d4:b9:f2:0c:dc: 4a:e8:da:f9:5f:ed:65:1a:b4:ec:bd:0e:0d:81:3b:95:05:1e: bf:57:b4:43:1b:61:77:f8:75:96:47:b3:d7:5f:ce:a6:47:4c: 0e:0f:ea:7a:f9:29:80:ee:23:5f:d1:14:6e:32:30:47:42:7e: 90:39:b3:12:c0:42:51:33:53:d4:f9:7c:ae:95:be:7c:93:3c: d0:e7:89:47:0f:c2:41:74:8f:bf:eb:00:26:60:c5:86:aa:92: a5:01:54:74:4a:f5:64:52:e6:92:21:2f:ba:87:4c:4b:10:7a: 6a:38:ed:56:08:74:72:7c:21:c0:4d:ca:b0:4d:f2:43:53:70: b3:61:5d:a0:53:9a:cb:4c:98:0c:79:44:a0:80:55:2c:2f:56: 07:58:e1:7e:97:93:27:fe:5d:26:e3:7a:ce:ad:4c:85:34:ed: d7:10:48:44:c2:60:c3:cf:f3:ff:60:f4:db:d1:b9:54:7f:10: 8b:39:0f:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hIyONbl6nnTVgCDGvsL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OThhZTA0NDdlYTgxZjg1NWJhNTg4OWE2NWE4NTEzNmMyNjhmMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5Ko4lbqaeFcrF5PdbFR72vj/312 8EL6BI+Gay8cEwqpC8dRH5s9YgMCKcStmPZnwOGg7xZBpPwpFeBC5QGaeF3QxDB8 1/K+tRqT7gI+kCti4PirFm5VwacwmSZsMmwqjyUwxcJDCu6CFZ+1wjjtkdIOL6DS ACE9DcDrOb2Gp5EIMu8j/OZFJm+oOVnQKEgp5yiI3zUQ9o/esJff3dApdXonBl6I Bk6iYgepPIsRjoeUmO2+0h1J649albPU6ASCxo7VfW9+2frZ4yGgLgHqfG44DKqv 2dtT4g77SNaxbALX37MEKmaTYYNGQzPH1jr94/WsmEk4MT4U4QwwBmoBCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEmK4ER+qB+FW6WImmWoUTbCaPHiMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvU1lyZ1JINm9INFZicFlpYVphaFJOc0pvOGVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy4GMA0G CSqGSIb3DQEBCwUAA4IBAQAqp1N5Bviyr6JMQqwQ/QypJML1/1a2JF78kD4/7lLF HhvwhcSfxt9FVxEIu02RCa6AZmH0BzETo2eWYg8dj31gJ/jw1LnyDNxK6Nr5X+1l GrTsvQ4NgTuVBR6/V7RDG2F3+HWWR7PXX86mR0wOD+p6+SmA7iNf0RRuMjBHQn6Q ObMSwEJRM1PU+Xyulb58kzzQ54lHD8JBdI+/6wAmYMWGqpKlAVR0SvVkUuaSIS+6 h0xLEHpqOO1WCHRyfCHATcqwTfJDU3CzYV2gU5rLTJgMeUSggFUsL1YHWOF+l5Mn /l0m43rOrUyFNO3XEEhEwmDDz/P/YPTb0blUfxCLOQ+C -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:04 2026 by rpki-client