This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/FSwkeIpTkviwow4rp67ki1ll7vA.roa File: FSwkeIpTkviwow4rp67ki1ll7vA.roa (raw, json) Hash identifier: BiP8/RjkfCgTWSMXpx0VR4qahxKI7hYQ74iepcYZ9P8= Subject key identifier: 15:2C:24:78:8A:53:92:F8:B0:A3:0E:2B:A7:AE:E4:8B:59:65:EE:F0 Certificate issuer: /CN=b209721f4548c26cf362e944a81b1acee7b24b53 Certificate serial: 019B7B3641D9DF334AFB3B4D049F9EB72D93 Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/FSwkeIpTkviwow4rp67ki1ll7vA.roa Signing time: Thu 01 Jan 2026 20:18:31 +0000 ROA not before: Thu 01 Jan 2026 20:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31391 IP address blocks: 192.115.0.0/21 maxlen: 24 192.115.208.0/22 maxlen: 24 2a01:4280::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:41:d9:df:33:4a:fb:3b:4d:04:9f:9e:b7:2d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53 Validity Not Before: Jan 1 20:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=152c24788a5392f8b0a30e2ba7aee48b5965eef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f5:eb:a6:6f:08:b9:b2:5e:d8:93:10:da:b8: 81:9f:23:29:98:1e:5d:70:3e:f6:42:23:45:1e:9e: 58:f0:03:1d:a6:98:d4:5a:cd:f2:7a:0f:55:70:e8: 55:c1:90:a4:ce:ad:e5:38:6c:8a:3e:f2:b8:8e:bc: a6:78:56:30:3b:6f:54:d9:83:a2:2e:49:b3:cc:41: aa:5f:a4:7e:0a:29:f8:fd:6b:30:72:20:e1:79:ff: b6:ad:30:03:ca:28:65:10:27:cf:ff:d3:e7:8a:68: 6b:72:6b:fd:49:1f:6a:02:43:56:05:5a:56:46:0e: 93:f7:1d:11:90:b1:50:66:31:8b:8c:bd:2e:47:ee: 98:db:65:74:03:ad:ce:e7:74:9c:25:a9:76:6e:6c: a3:ef:b2:c9:08:5a:c9:12:78:69:63:47:07:2f:b3: 62:81:60:65:6d:63:6a:5d:74:00:29:38:fb:7e:14: ec:d8:6d:ae:ef:f4:7f:9c:3a:5d:02:0d:da:ea:91: 95:5f:73:2e:c2:95:75:50:2f:0d:38:8e:1b:70:50: 33:51:a6:56:52:ee:a9:e4:a8:76:5c:12:93:15:55: ca:5a:d7:e1:33:e1:44:46:be:a0:8d:dc:e1:da:f0: 4a:36:ae:c0:1b:f6:ca:27:39:2b:3e:97:f0:04:5a: eb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2C:24:78:8A:53:92:F8:B0:A3:0E:2B:A7:AE:E4:8B:59:65:EE:F0 X509v3 Authority Key Identifier: keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/FSwkeIpTkviwow4rp67ki1ll7vA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.115.0.0/21 192.115.208.0/22 IPv6: 2a01:4280::/32 Signature Algorithm: sha256WithRSAEncryption 54:19:09:27:74:25:1f:c6:a0:05:37:d7:b9:6c:35:4a:22:80: 14:94:7b:09:bf:41:53:33:7d:8c:a1:60:87:00:91:fd:6a:4f: 3f:96:33:64:47:a0:cc:84:40:9e:11:0f:22:30:f5:d0:ad:69: 07:5d:48:95:4e:47:8e:fd:1b:b0:dd:c6:c1:e2:7a:91:08:27: 5b:39:3d:1f:27:43:9d:7a:0c:76:e7:12:ce:98:87:36:54:eb: 26:45:02:24:63:63:da:0f:e6:0e:04:b1:91:e2:28:79:bf:81: 79:5f:ab:9b:c7:04:93:ed:6d:76:d6:70:b5:6e:44:90:60:f2: 21:ab:1d:5c:9f:43:3e:ca:b5:93:72:2c:82:f3:6a:21:a4:49: 3d:b6:f2:0c:ea:4b:7f:a8:3e:2d:b4:82:f1:d2:04:32:6d:a8: 4e:48:1b:09:61:1f:d4:40:9d:1a:ab:b3:a9:da:8b:33:de:63: 41:59:5a:35:26:ac:9a:38:e4:50:88:72:12:a1:44:d5:94:b6: 1c:1f:1d:ec:c0:49:de:be:ec:0a:0f:df:e1:bc:67:26:d2:c2: ac:fd:f3:a1:28:0c:7d:a3:e5:5f:78:3f:b3:01:23:7a:64:ee: 10:c9:65:99:0a:f9:10:d8:a8:19:10:c5:8f:da:60:8f:d1:f3: 10:4c:29:0f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NkHZ3zNK+ztNBJ+ety2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMDk3MjFmNDU0OGMyNmNmMzYyZTk0NGE4MWIxYWNlZTdi MjRiNTMwHhcNMjYwMTAxMjAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTJjMjQ3ODhhNTM5MmY4YjBhMzBlMmJhN2FlZTQ4YjU5NjVlZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vXrpm8IubJe2JMQ2riBnyMpmB5d cD72QiNFHp5Y8AMdppjUWs3yeg9VcOhVwZCkzq3lOGyKPvK4jrymeFYwO29U2YOi LkmzzEGqX6R+Cin4/WswciDhef+2rTADyihlECfP/9Pnimhrcmv9SR9qAkNWBVpW Rg6T9x0RkLFQZjGLjL0uR+6Y22V0A63O53ScJal2bmyj77LJCFrJEnhpY0cHL7Ni gWBlbWNqXXQAKTj7fhTs2G2u7/R/nDpdAg3a6pGVX3MuwpV1UC8NOI4bcFAzUaZW Uu6p5Kh2XBKTFVXKWtfhM+FERr6gjdzh2vBKNq7AG/bKJzkrPpfwBFrrTwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBUsJHiKU5L4sKMOK6eu5ItZZe7wMB8GA1UdIwQY MBaAFLIJch9FSMJs82LpRKgbGs7nsktTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2dseUgwVkl3bXp6WXVsRXFCc2F6dWV5UzFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hNjc0MzItYzA2Ny00Y2RiLWI1YWQt ZGJhNWMxODM0NjAxLzEvRlN3a2VJcFRrdml3b3c0cnA2N2tpMWxsN3ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9hNjc0MzItYzA2Ny00Y2RiLWI1YWQtZGJhNWMxODM0NjAx LzEvc2dseUgwVkl3bXp6WXVsRXFCc2F6dWV5UzFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDwHMAAwQC wHPQMA0EAgACMAcDBQAqAUKAMA0GCSqGSIb3DQEBCwUAA4IBAQBUGQkndCUfxqAF N9e5bDVKIoAUlHsJv0FTM32MoWCHAJH9ak8/ljNkR6DMhECeEQ8iMPXQrWkHXUiV TkeO/Ruw3cbB4nqRCCdbOT0fJ0Odegx25xLOmIc2VOsmRQIkY2PaD+YOBLGR4ih5 v4F5X6ubxwST7W121nC1bkSQYPIhqx1cn0M+yrWTciyC82ohpEk9tvIM6kt/qD4t tILx0gQybahOSBsJYR/UQJ0aq7Op2osz3mNBWVo1JqyaOORQiHISoUTVlLYcHx3s wEnevuwKD9/hvGcm0sKs/fOhKAx9o+VfeD+zASN6ZO4QyWWZCvkQ2KgZEMWP2mCP 0fMQTCkP -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:35 2026 by rpki-client