This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/sa0irmG5fTuP-s-e7ehVBplCJx4.roa File: sa0irmG5fTuP-s-e7ehVBplCJx4.roa (raw, json) Hash identifier: 7SZESPqbjMHr+1YpDP1XwHSl42AkB6k/wkqvHyEDf5U= Subject key identifier: B1:AD:22:AE:61:B9:7D:3B:8F:FA:CF:9E:ED:E8:55:06:99:42:27:1E Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019B7DCB4D9775D187557495D3D36361C1DD Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/sa0irmG5fTuP-s-e7ehVBplCJx4.roa Signing time: Fri 02 Jan 2026 08:20:34 +0000 ROA not before: Fri 02 Jan 2026 08:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213220 IP address blocks: 212.22.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4d:97:75:d1:87:55:74:95:d3:d3:63:61:c1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1ad22ae61b97d3b8ffacf9eede855069942271e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f0:fa:2e:d2:98:af:4a:b8:15:05:73:1f:0d: 0b:ef:96:17:0a:39:7a:88:01:70:ed:22:32:94:40: a1:55:47:5b:73:7d:27:a8:d9:66:a3:df:db:ee:5e: c2:b1:34:b1:9c:83:97:cd:ba:a9:1a:4a:d5:fd:69: b6:56:7d:5a:47:4f:30:8f:18:9d:7d:88:2b:08:6d: b6:43:ca:ad:24:70:b4:24:62:ff:bd:d1:f5:b3:c8: 06:2b:98:cd:e7:63:05:d8:c8:a5:bd:ba:d7:8c:02: a4:a6:4e:42:24:1f:95:25:29:a3:ba:db:3e:6a:ac: 15:0d:a2:2d:4d:dc:86:40:3f:19:3f:19:95:2a:70: d2:b6:64:25:26:50:fa:05:b6:71:29:73:35:41:a0: ab:3b:bd:3d:19:fd:4c:00:62:e2:46:73:51:57:51: 27:ae:17:8e:69:63:1d:b9:86:ac:70:85:88:47:45: 11:1f:71:04:3f:ed:f5:e3:8e:0f:cd:9d:80:c4:56: 65:ad:b1:e4:58:22:1e:28:aa:3c:75:de:65:0f:3c: d7:12:0c:60:cf:2e:52:15:13:b7:d5:84:2e:a9:3d: 6a:1d:39:5c:ca:1c:91:0e:13:a1:c8:05:c3:9c:88: fe:1c:47:3d:68:bd:1a:07:96:60:50:d8:cd:d2:96: 3a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AD:22:AE:61:B9:7D:3B:8F:FA:CF:9E:ED:E8:55:06:99:42:27:1E X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/sa0irmG5fTuP-s-e7ehVBplCJx4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.22.82.0/24 Signature Algorithm: sha256WithRSAEncryption b3:61:70:25:2c:d1:c3:94:27:ef:23:af:fa:83:89:77:b1:58: 10:f7:74:5c:5e:46:35:63:5b:2d:67:ae:0e:ad:55:77:2c:2f: d2:a1:4a:d1:a8:5f:5e:42:8b:90:ba:8d:0a:3d:d0:2a:5f:0e: 3f:c9:5f:5d:17:75:c0:9e:d8:f3:90:41:8b:68:64:35:65:35: 20:00:29:21:f2:14:d5:b0:0a:e4:57:c4:80:ce:2d:d1:47:41: ab:f5:3a:14:ff:8d:9d:0a:2e:6c:7e:1d:10:51:bf:79:cb:67: 67:a9:e6:6d:8c:06:be:c6:0a:86:31:66:da:4c:7d:a8:b4:ab: dd:29:b3:72:5a:a7:0a:04:e5:23:fb:43:ba:2d:73:b4:70:47: 56:df:a9:de:f1:48:cb:4e:78:a0:42:ce:e6:96:d8:77:f5:d9: ed:20:44:4b:6d:6b:af:11:54:04:1e:bd:9b:a7:82:28:ad:5c: 3a:14:cb:46:45:de:5e:54:c3:66:f5:c9:6f:be:ac:8e:ca:cc: 81:86:d1:84:75:6e:0c:79:f5:d6:68:55:ff:05:93:7f:3d:be: 84:21:b3:1b:d7:4d:89:29:65:c4:60:58:4a:88:39:df:de:ed: db:16:74:df:b9:bf:c7:65:76:48:3b:84:30:4a:ba:7f:e6:64: 7a:e7:2d:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y02XddGHVXSV09NjYcHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWFkMjJhZTYxYjk3ZDNiOGZmYWNmOWVlZGU4NTUwNjk5NDIyNzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPD6LtKYr0q4FQVzHw0L75YXCjl6 iAFw7SIylEChVUdbc30nqNlmo9/b7l7CsTSxnIOXzbqpGkrV/Wm2Vn1aR08wjxid fYgrCG22Q8qtJHC0JGL/vdH1s8gGK5jN52MF2MilvbrXjAKkpk5CJB+VJSmjuts+ aqwVDaItTdyGQD8ZPxmVKnDStmQlJlD6BbZxKXM1QaCrO709Gf1MAGLiRnNRV1En rheOaWMduYascIWIR0URH3EEP+31444PzZ2AxFZlrbHkWCIeKKo8dd5lDzzXEgxg zy5SFRO31YQuqT1qHTlcyhyRDhOhyAXDnIj+HEc9aL0aB5ZgUNjN0pY6jQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLGtIq5huX07j/rPnu3oVQaZQiceMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvc2EwaXJtRzVmVHVQLXMtZTdlaFZCcGxDSng0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BZSMA0G CSqGSIb3DQEBCwUAA4IBAQCzYXAlLNHDlCfvI6/6g4l3sVgQ93RcXkY1Y1stZ64O rVV3LC/SoUrRqF9eQouQuo0KPdAqXw4/yV9dF3XAntjzkEGLaGQ1ZTUgACkh8hTV sArkV8SAzi3RR0Gr9ToU/42dCi5sfh0QUb95y2dnqeZtjAa+xgqGMWbaTH2otKvd KbNyWqcKBOUj+0O6LXO0cEdW36ne8UjLTnigQs7mlth39dntIERLbWuvEVQEHr2b p4IorVw6FMtGRd5eVMNm9clvvqyOysyBhtGEdW4MefXWaFX/BZN/Pb6EIbMb102J KWXEYFhKiDnf3u3bFnTfub/HZXZIO4QwSrp/5mR65y3h -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:05 2026 by rpki-client