This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/SdRMQSisA3A52kvZfTcOqIZi7WM.roa File: SdRMQSisA3A52kvZfTcOqIZi7WM.roa (raw, json) Hash identifier: FjVPIrI7M5sGkygChCHAIE+8f/f2VPSzrAXNL/N59yU= Subject key identifier: 49:D4:4C:41:28:AC:03:70:39:DA:4B:D9:7D:37:0E:A8:86:62:ED:63 Certificate issuer: /CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe Certificate serial: 019B797EEFE38A5D8E18B054BCB963CB617D Authority key identifier: A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/SdRMQSisA3A52kvZfTcOqIZi7WM.roa Signing time: Thu 01 Jan 2026 12:18:40 +0000 ROA not before: Thu 01 Jan 2026 12:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24806 IP address blocks: 81.2.192.0/18 maxlen: 32 185.28.100.0/22 maxlen: 32 185.129.136.0/22 maxlen: 32 195.181.208.0/20 maxlen: 32 2001:15e8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ef:e3:8a:5d:8e:18:b0:54:bc:b9:63:cb:61:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe Validity Not Before: Jan 1 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49d44c4128ac037039da4bd97d370ea88662ed63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4b:b4:e9:19:be:fb:03:c1:5c:2d:94:a4:e4: d8:14:08:bb:e4:ac:b1:2f:f9:32:25:17:92:1b:34: 84:4c:5b:bc:df:c1:1c:62:ac:8e:74:d2:77:f9:28: d9:50:f9:e5:46:fa:6d:2b:7f:ca:1b:8c:99:24:39: 09:bf:48:ff:62:41:3c:e5:d2:71:dc:33:b5:77:3b: 6a:22:ed:53:56:89:7a:68:fe:e2:a8:f1:9a:0a:08: 55:dc:2f:39:f3:db:bd:12:a5:72:34:00:d2:a3:29: 11:d6:ca:de:c6:59:7b:de:51:cd:9f:90:7c:d4:f6: 57:20:64:1c:92:23:ed:7b:d1:58:43:04:a2:cc:3b: 4e:12:ea:17:83:e5:17:24:7e:a7:59:8c:da:d5:8f: 77:e8:a3:0b:fc:ac:92:97:de:02:07:27:ca:83:56: de:f6:58:a4:4e:7d:57:fb:76:c6:97:2f:9b:f5:68: d0:be:d6:0a:c1:af:d0:7c:2b:d8:10:22:95:2d:bb: 81:f3:99:0e:c4:66:a9:02:7f:b5:63:d3:b1:6a:b3: 8c:d5:80:76:30:60:b1:b7:5b:3b:7c:63:09:4a:63: b6:65:90:23:ef:1e:cf:62:39:20:46:98:f2:92:24: 67:85:77:e1:0f:4b:76:56:94:ee:ca:e0:b4:17:11: 38:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D4:4C:41:28:AC:03:70:39:DA:4B:D9:7D:37:0E:A8:86:62:ED:63 X509v3 Authority Key Identifier: keyid:A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/SdRMQSisA3A52kvZfTcOqIZi7WM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.2.192.0/18 185.28.100.0/22 185.129.136.0/22 195.181.208.0/20 IPv6: 2001:15e8::/32 Signature Algorithm: sha256WithRSAEncryption 49:4c:ca:13:ff:8a:b8:20:7b:77:40:19:d3:3c:b1:c8:24:1f: 15:39:06:82:fb:d0:57:a8:ac:7a:08:32:0f:39:24:d9:93:f8: ab:c4:12:a6:d0:87:ed:a0:3e:4b:b9:a2:77:fa:15:d4:08:2e: 77:50:d3:cd:5a:19:5b:ac:d7:bb:a3:30:b0:a9:d9:44:3a:53: f9:f9:9d:46:2e:8f:dc:4e:2d:36:4f:c0:53:19:4d:50:17:48: ae:96:62:54:61:ef:27:db:4c:b5:e8:65:f0:11:1f:03:7c:06: d9:5d:5d:76:a0:dd:86:27:5c:7f:8b:ae:f5:69:77:a0:11:3b: 11:1e:37:dd:0d:09:9c:eb:70:aa:5a:74:14:a4:54:18:43:a2: 0d:f2:66:0b:3a:b4:7f:3f:32:80:80:ae:76:14:82:fd:db:56: b9:8b:3d:7a:6e:a2:05:f4:2f:b7:df:15:3e:05:e6:a4:0b:d6: 55:0c:99:cd:89:71:60:6b:65:c6:73:c8:dc:8b:fd:3c:00:b0: 08:59:8d:f7:39:85:e5:ce:4c:43:8a:e5:b6:25:ad:db:56:5e: df:5a:95:53:61:d4:87:e3:0f:0a:31:15:90:87:6c:db:30:ae: ab:1c:22:b1:7a:31:11:4e:1f:5e:28:32:28:86:1a:90:af:12: 2f:f2:12:75 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt5fu/jil2OGLBUvLljy2F9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NTdmODdmODZlOTNiMjVlZjRjMDQzMzY2NGJiZTcyZGE5 OGZiZmUwHhcNMjYwMTAxMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWQ0NGM0MTI4YWMwMzcwMzlkYTRiZDk3ZDM3MGVhODg2NjJlZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Eu06Rm++wPBXC2UpOTYFAi75Kyx L/kyJReSGzSETFu838EcYqyOdNJ3+SjZUPnlRvptK3/KG4yZJDkJv0j/YkE85dJx 3DO1dztqIu1TVol6aP7iqPGaCghV3C8589u9EqVyNADSoykR1srexll73lHNn5B8 1PZXIGQckiPte9FYQwSizDtOEuoXg+UXJH6nWYza1Y936KML/KySl94CByfKg1be 9likTn1X+3bGly+b9WjQvtYKwa/QfCvYECKVLbuB85kOxGapAn+1Y9OxarOM1YB2 MGCxt1s7fGMJSmO2ZZAj7x7PYjkgRpjykiRnhXfhD0t2VpTuyuC0FxE4owIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFEnUTEEorANwOdpL2X03DqiGYu1jMB8GA1UdIwQY MBaAFKdX+H+G6Tsl70wEM2ZLvnLamPv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84NmU0MGMtMTU2My00MGVhLThmNGUt YTE3ODMzMjUzM2UwLzEvU2RSTVFTaXNBM0E1Mmt2WmZUY09xSVppN1dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy84NmU0MGMtMTU2My00MGVhLThmNGUtYTE3ODMzMjUzM2Uw LzEvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGUQLAAwQC uRxkAwQCuYGIAwQEw7XQMA0EAgACMAcDBQAgARXoMA0GCSqGSIb3DQEBCwUAA4IB AQBJTMoT/4q4IHt3QBnTPLHIJB8VOQaC+9BXqKx6CDIPOSTZk/irxBKm0IftoD5L uaJ3+hXUCC53UNPNWhlbrNe7ozCwqdlEOlP5+Z1GLo/cTi02T8BTGU1QF0iulmJU Ye8n20y16GXwER8DfAbZXV12oN2GJ1x/i671aXegETsRHjfdDQmc63CqWnQUpFQY Q6IN8mYLOrR/PzKAgK52FIL921a5iz16bqIF9C+33xU+BeakC9ZVDJnNiXFga2XG c8jci/08ALAIWY33OYXlzkxDiuW2Ja3bVl7fWpVTYdSH4w8KMRWQh2zbMK6rHCKx ejERTh9eKDIohhqQrxIv8hJ1 -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:06 2026 by rpki-client