This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/sb-HAVMafNmHL9QenVGesGVke-Q.roa File: sb-HAVMafNmHL9QenVGesGVke-Q.roa (raw, json) Hash identifier: nHrOUnqGNx4wf54/RmOPoYz+21S/NMpXYL06TIB1PUU= Subject key identifier: B1:BF:87:01:53:1A:7C:D9:87:2F:D4:1E:9D:51:9E:B0:65:64:7B:E4 Certificate issuer: /CN=462bcb1b528da9944bd9544bc7b388cee1a01390 Certificate serial: 019AB597CBC39AF36E214F23E8B6727C543F Authority key identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/sb-HAVMafNmHL9QenVGesGVke-Q.roa Signing time: Mon 24 Nov 2025 11:20:15 +0000 ROA not before: Mon 24 Nov 2025 11:20:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3352 IP address blocks: 185.132.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:97:cb:c3:9a:f3:6e:21:4f:23:e8:b6:72:7c:54:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=462bcb1b528da9944bd9544bc7b388cee1a01390 Validity Not Before: Nov 24 11:20:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b1bf8701531a7cd9872fd41e9d519eb065647be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e5:1b:67:6c:23:9c:4f:74:ff:05:27:15:68: e3:75:03:3a:f1:8f:4f:e1:bf:bc:5f:a5:97:6b:08: d4:3c:1f:b1:c5:98:0d:3f:4f:fb:0b:2e:7d:0e:49: 72:3b:f1:4f:eb:2b:7d:f6:b2:f3:d0:e8:bd:a4:e6: a5:bc:f5:ef:3c:5c:01:e5:9c:86:77:b1:ce:85:d3: 86:09:67:0f:f5:d9:1d:c4:f9:9a:c3:68:55:da:2c: ea:ed:3a:2f:6f:f2:60:09:3c:c4:80:b7:97:54:5d: ec:29:5d:39:6a:3b:70:86:1c:9c:7e:1c:cb:62:fe: e0:48:b5:ed:8a:64:cc:59:82:9b:e9:96:2c:e0:f5: 29:61:1e:73:70:25:84:ea:d6:eb:bf:15:77:65:5d: 4c:ec:fa:a4:f5:9b:73:59:b7:82:fb:51:2c:ab:f6: bc:34:e7:dd:42:12:96:13:f6:75:a3:d6:c6:81:02: 76:83:88:e0:41:c3:f4:4d:5e:0d:60:a3:4a:2f:de: 4c:7a:09:07:50:d6:76:1e:e1:58:34:6b:b6:ea:14: 1f:e5:df:b3:30:2f:ed:f4:91:a4:ea:86:fb:15:4d: ea:16:02:91:66:e6:de:cf:0c:df:06:a1:3b:39:09: c9:c2:38:c5:71:ce:fb:d0:a6:cc:80:83:63:23:d9: 30:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BF:87:01:53:1A:7C:D9:87:2F:D4:1E:9D:51:9E:B0:65:64:7B:E4 X509v3 Authority Key Identifier: keyid:46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/sb-HAVMafNmHL9QenVGesGVke-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.190.0/24 Signature Algorithm: sha256WithRSAEncryption 39:ae:cb:2c:00:51:73:44:a3:e5:bf:6a:3d:31:8d:28:c5:69: 06:c0:71:4a:86:42:82:16:fd:92:7b:00:91:78:6c:4b:ef:d5: 30:3b:af:17:0f:5f:4d:c9:49:a3:7a:ba:e7:e7:a5:7c:a7:33: 80:2c:05:71:31:e3:e3:06:f4:d2:e8:5f:cb:4b:e3:d9:92:95: 1d:18:e7:e9:bb:2a:27:16:9f:5b:0a:94:b0:20:66:f9:4e:92: 65:06:d5:9d:9d:14:87:5c:87:18:37:92:4d:b8:19:07:5e:5d: 55:27:fc:a1:05:44:07:e9:32:71:0a:b3:68:d6:7d:93:4b:f8: 11:1f:54:a5:0f:8d:62:b4:93:6d:45:e3:52:fb:27:22:0e:a4: 41:5a:78:07:11:41:ca:0f:11:26:7e:5d:55:e7:01:bf:b9:98: 12:8b:71:e0:9d:73:c1:0f:ba:72:a0:d4:ed:02:1a:41:bc:2b: 47:7c:9d:13:42:f9:01:75:df:99:0d:2c:d3:7d:f7:67:ac:de: 65:c3:8b:b4:8e:18:5d:bb:cb:76:12:37:5b:2a:b5:5b:45:a2: b0:62:be:04:93:aa:ae:8e:d7:fe:12:aa:63:4f:fe:4d:91:fe: 27:5f:5b:3e:e1:f8:41:a6:c8:81:f8:19:b2:6f:a4:80:5f:3e: fe:b8:5d:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq1l8vDmvNuIU8j6LZyfFQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MmJjYjFiNTI4ZGE5OTQ0YmQ5NTQ0YmM3YjM4OGNlZTFh MDEzOTAwHhcNMjUxMTI0MTEyMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWJmODcwMTUzMWE3Y2Q5ODcyZmQ0MWU5ZDUxOWViMDY1NjQ3YmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuUbZ2wjnE90/wUnFWjjdQM68Y9P 4b+8X6WXawjUPB+xxZgNP0/7Cy59DklyO/FP6yt99rLz0Oi9pOalvPXvPFwB5ZyG d7HOhdOGCWcP9dkdxPmaw2hV2izq7Tovb/JgCTzEgLeXVF3sKV05ajtwhhycfhzL Yv7gSLXtimTMWYKb6ZYs4PUpYR5zcCWE6tbrvxV3ZV1M7Pqk9ZtzWbeC+1Esq/a8 NOfdQhKWE/Z1o9bGgQJ2g4jgQcP0TV4NYKNKL95MegkHUNZ2HuFYNGu26hQf5d+z MC/t9JGk6ob7FU3qFgKRZubezwzfBqE7OQnJwjjFcc770KbMgINjI9kwLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLG/hwFTGnzZhy/UHp1RnrBlZHvkMB8GA1UdIwQY MBaAFEYryxtSjamUS9lUS8eziM7hoBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC83ZWMxZDgtYmU3Ni00MWVkLTk3YzUt YWFmZThhOGMxNjVlLzEvc2ItSEFWTWFmTm1ITDlRZW5WR2VzR1ZrZS1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC83ZWMxZDgtYmU3Ni00MWVkLTk3YzUtYWFmZThhOGMxNjVl LzEvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYS+MA0G CSqGSIb3DQEBCwUAA4IBAQA5rsssAFFzRKPlv2o9MY0oxWkGwHFKhkKCFv2SewCR eGxL79UwO68XD19NyUmjerrn56V8pzOALAVxMePjBvTS6F/LS+PZkpUdGOfpuyon Fp9bCpSwIGb5TpJlBtWdnRSHXIcYN5JNuBkHXl1VJ/yhBUQH6TJxCrNo1n2TS/gR H1SlD41itJNtReNS+yciDqRBWngHEUHKDxEmfl1V5wG/uZgSi3HgnXPBD7pyoNTt AhpBvCtHfJ0TQvkBdd+ZDSzTffdnrN5lw4u0jhhdu8t2EjdbKrVbRaKwYr4Ek6qu jtf+EqpjT/5Nkf4nX1s+4fhBpsiB+Bmyb6SAXz7+uF26 -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:08 2025 by rpki-client