This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/sajSb_i1tx9tltMHBF6uWbYQpL8.roa File: sajSb_i1tx9tltMHBF6uWbYQpL8.roa (raw, json) Hash identifier: EwHPsvt1NTQcBxJBnqTQxodt51gOWP8HXjJ45qFeCrw= Subject key identifier: B1:A8:D2:6F:F8:B5:B7:1F:6D:96:D3:07:04:5E:AE:59:B6:10:A4:BF Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019A6B03BA7322E65C0B282841DE7FC81176 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/sajSb_i1tx9tltMHBF6uWbYQpL8.roa Signing time: Sun 09 Nov 2025 23:46:37 +0000 ROA not before: Sun 09 Nov 2025 23:46:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206810 IP address blocks: 176.124.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6b:03:ba:73:22:e6:5c:0b:28:28:41:de:7f:c8:11:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Nov 9 23:46:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b1a8d26ff8b5b71f6d96d307045eae59b610a4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:ff:b4:fc:00:a3:fd:13:e9:0b:16:7e:97: 20:15:b6:78:b0:29:cc:4e:59:a2:6d:9d:64:06:02: 24:09:06:55:4a:87:d9:e4:3e:b1:1d:d0:a5:e8:f1: 6c:af:9f:17:a2:30:4a:cb:ec:02:d1:9e:52:de:df: 8b:bd:37:cf:60:51:67:53:e8:db:13:83:76:cd:12: 34:bf:c5:09:5d:22:39:e1:ad:d8:5c:5c:d1:22:e0: 3f:6c:94:83:84:74:bf:b9:a6:c5:f0:0f:1c:d9:d0: 84:c3:67:d8:e5:8e:2e:ae:24:5e:77:05:51:b2:db: 26:f7:92:4e:9d:ba:00:d4:95:d0:43:4d:51:f8:6d: bd:2c:74:b3:41:e5:c1:6b:f1:49:52:33:19:be:0e: 8d:16:a1:8e:04:d8:55:a9:46:f9:88:7f:5f:ff:14: b8:36:83:40:79:fb:6d:1b:7a:a1:86:24:9e:fb:9e: 8b:e8:86:be:c3:0c:f7:76:fc:05:99:d1:85:25:4a: bf:41:8f:f8:a8:e8:a2:3b:9f:07:ba:5d:bf:4b:23: ea:df:61:32:27:06:b2:8e:06:cb:e9:7a:b7:c6:ce: 05:e4:4e:99:c8:6a:6b:96:b4:61:45:d3:03:1e:62: 47:1a:64:24:d7:fb:28:a9:a3:87:7a:c2:5a:98:cf: 31:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A8:D2:6F:F8:B5:B7:1F:6D:96:D3:07:04:5E:AE:59:B6:10:A4:BF X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/sajSb_i1tx9tltMHBF6uWbYQpL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.22.0/23 Signature Algorithm: sha256WithRSAEncryption 94:7f:f5:d9:84:23:76:3b:e6:01:6c:7d:65:b3:8d:36:55:27: 2d:f0:18:c0:16:22:fe:f0:fa:14:37:ac:e3:66:47:52:4e:b0: 2f:7f:c1:46:83:62:87:b2:86:e2:b2:68:a4:18:fe:e9:43:6d: 84:2f:59:b0:7c:a4:be:f6:8b:f0:a8:3b:41:09:5b:12:82:75: 5c:1b:03:ce:4b:4d:d1:57:1c:4e:9e:d0:f3:b5:24:cc:bf:07: e0:27:19:15:f7:46:7b:8b:67:da:18:34:db:31:f5:3b:a7:c1: 69:9d:45:56:f9:cc:c7:f5:e8:9a:8a:1c:72:59:fb:29:77:c0: ff:d9:c9:c6:73:27:9c:86:9f:a9:31:2c:7c:d0:14:37:ee:ce: 81:50:c5:2f:bd:e5:23:54:0d:f6:75:42:34:61:f4:2d:0f:25: a7:b5:20:42:02:10:97:fb:55:38:72:e3:a4:b4:ce:d4:f3:47: 74:cb:a3:b1:af:25:8e:5b:25:31:66:21:f0:be:b6:45:04:cd: e1:7e:be:80:a0:46:62:a2:09:7d:d8:f2:1a:87:a0:4e:fc:ec: 84:f0:ee:d1:c5:08:8e:59:e2:8f:f9:df:39:53:42:a2:e3:9a: 6b:9d:4b:f2:80:0e:03:5e:7a:e9:e9:17:18:8e:6e:fe:e2:99: 2b:db:32:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZprA7pzIuZcCygoQd5/yBF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMTA5MjM0NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWE4ZDI2ZmY4YjViNzFmNmQ5NmQzMDcwNDVlYWU1OWI2MTBhNGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNz/tPwAo/0T6QsWfpcgFbZ4sCnM TlmibZ1kBgIkCQZVSofZ5D6xHdCl6PFsr58XojBKy+wC0Z5S3t+LvTfPYFFnU+jb E4N2zRI0v8UJXSI54a3YXFzRIuA/bJSDhHS/uabF8A8c2dCEw2fY5Y4uriRedwVR stsm95JOnboA1JXQQ01R+G29LHSzQeXBa/FJUjMZvg6NFqGOBNhVqUb5iH9f/xS4 NoNAefttG3qhhiSe+56L6Ia+wwz3dvwFmdGFJUq/QY/4qOiiO58Hul2/SyPq32Ey JwayjgbL6Xq3xs4F5E6ZyGprlrRhRdMDHmJHGmQk1/soqaOHesJamM8xswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLGo0m/4tbcfbZbTBwRerlm2EKS/MB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvc2FqU2JfaTF0eDl0bHRNSEJGNnVXYllRcEw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHwWMA0G CSqGSIb3DQEBCwUAA4IBAQCUf/XZhCN2O+YBbH1ls402VSct8BjAFiL+8PoUN6zj ZkdSTrAvf8FGg2KHsobismikGP7pQ22EL1mwfKS+9ovwqDtBCVsSgnVcGwPOS03R VxxOntDztSTMvwfgJxkV90Z7i2faGDTbMfU7p8FpnUVW+czH9eiaihxyWfspd8D/ 2cnGcyechp+pMSx80BQ37s6BUMUvveUjVA32dUI0YfQtDyWntSBCAhCX+1U4cuOk tM7U80d0y6OxryWOWyUxZiHwvrZFBM3hfr6AoEZiogl92PIah6BO/OyE8O7RxQiO WeKP+d85U0Ki45prnUvygA4DXnrp6RcYjm7+4pkr2zIF -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:35 2025 by rpki-client