This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/sXYVzlN949bYEOpO7zS9qQzV3hI.roa File: sXYVzlN949bYEOpO7zS9qQzV3hI.roa (raw, json) Hash identifier: e9BBGZUNUZ1LbqXnLLn0ySZ711mfMA/MI8l0i6//fJw= Subject key identifier: B1:76:15:CE:53:7D:E3:D6:D8:10:EA:4E:EF:34:BD:A9:0C:D5:DE:12 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 019BD8DE3C721619EA0BCB74A35713986161 Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/sXYVzlN949bYEOpO7zS9qQzV3hI.roa Signing time: Tue 20 Jan 2026 00:46:41 +0000 ROA not before: Tue 20 Jan 2026 00:46:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20879 IP address blocks: 93.113.90.0/23 maxlen: 23 176.223.0.0/18 maxlen: 18 176.223.2.0/24 maxlen: 24 176.223.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:de:3c:72:16:19:ea:0b:cb:74:a3:57:13:98:61:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Jan 20 00:46:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b17615ce537de3d6d810ea4eef34bda90cd5de12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:e9:80:60:8a:b2:bb:94:dc:35:8a:59:0c: a4:08:cf:62:1e:f9:d3:cb:7a:61:09:f7:c4:cf:1f: 1b:40:e7:b3:d6:5b:fc:b8:91:9d:ff:77:70:05:d3: 55:d7:de:93:53:9d:5a:76:03:9b:45:07:62:72:ce: d7:10:5f:de:c8:93:fd:ff:c4:7d:2a:d9:33:5f:57: 86:35:65:d4:4d:df:84:23:41:50:9c:51:dc:a7:6c: 5b:31:a1:f2:cd:3d:37:9a:04:49:d6:e8:cb:cf:ec: ac:5f:3f:e0:88:b0:0d:19:29:6c:1f:11:81:9f:2c: 74:ba:8b:5b:04:58:3c:41:f6:fa:7c:3a:be:85:02: 34:4d:ea:e9:61:83:a4:77:71:33:3b:38:e2:1d:e0: a6:b6:bc:73:22:eb:2c:e4:e3:c8:4a:df:18:57:bc: 9b:0f:d9:80:19:aa:45:f8:dc:6c:88:73:51:e7:03: 79:90:43:10:55:4a:8b:a1:81:92:9d:75:29:90:3e: 38:72:02:ac:68:9b:4c:8b:b2:0e:a9:fe:12:33:cf: f9:e1:f5:8c:1e:4e:7b:f8:65:13:6e:a5:12:ba:9c: f3:8b:85:cc:04:a8:cd:61:8c:da:93:f3:96:63:5c: e2:e6:fe:72:b4:33:f1:58:c9:69:d3:26:a7:ef:b5: 06:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:76:15:CE:53:7D:E3:D6:D8:10:EA:4E:EF:34:BD:A9:0C:D5:DE:12 X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/sXYVzlN949bYEOpO7zS9qQzV3hI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.113.90.0/23 176.223.0.0/18 Signature Algorithm: sha256WithRSAEncryption 6a:31:f9:dc:d8:69:2f:ff:4c:cd:7b:aa:32:95:37:5f:cf:fc: 99:d2:a1:a5:a9:d2:4b:b6:87:0b:c3:e8:85:79:48:2f:85:03: d8:33:3e:a5:ed:02:b2:1b:0d:51:fa:02:2c:d0:d7:c0:7e:50: ed:44:8e:de:b1:c3:56:31:0c:b2:3d:ea:1f:84:e4:7b:98:46: 31:d4:fa:f2:2b:90:db:e9:5f:77:8e:b4:f8:fe:86:53:d2:a5: d4:12:31:36:4e:5d:b8:d0:25:ae:b9:c7:81:04:d7:f4:ae:8c: f9:b9:d1:fe:5d:05:f3:70:6f:cc:d8:d9:f7:49:15:4a:30:45: 96:97:62:26:59:70:ff:42:7b:33:35:99:40:05:ee:76:92:18: 17:b6:60:b3:91:5f:a5:cc:f6:96:7d:28:f1:6d:62:fd:54:e3: a4:8b:ad:d5:d6:87:6d:63:d8:46:a8:52:ca:93:45:b8:af:be: 1d:a2:3d:d0:28:50:af:a7:2f:5b:ca:ac:d1:a3:76:01:43:9b: de:e6:ca:50:44:30:a3:46:d4:a4:b9:66:f6:78:37:ce:33:37: 39:0f:58:59:28:5d:27:d3:8f:43:ed:e1:88:bb:97:6e:f7:4c: a9:d6:f3:14:51:88:37:76:45:d8:90:17:3d:dd:cb:2d:8d:3e: ec:49:e2:14 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvY3jxyFhnqC8t0o1cTmGFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjYwMTIwMDA0NjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTc2MTVjZTUzN2RlM2Q2ZDgxMGVhNGVlZjM0YmRhOTBjZDVkZTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwXpgGCKsruU3DWKWQykCM9iHvnT y3phCffEzx8bQOez1lv8uJGd/3dwBdNV196TU51adgObRQdics7XEF/eyJP9/8R9 KtkzX1eGNWXUTd+EI0FQnFHcp2xbMaHyzT03mgRJ1ujLz+ysXz/giLANGSlsHxGB nyx0uotbBFg8Qfb6fDq+hQI0TerpYYOkd3EzOzjiHeCmtrxzIuss5OPISt8YV7yb D9mAGapF+NxsiHNR5wN5kEMQVUqLoYGSnXUpkD44cgKsaJtMi7IOqf4SM8/54fWM Hk57+GUTbqUSupzzi4XMBKjNYYzak/OWY1zi5v5ytDPxWMlp0yan77UGwwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLF2Fc5TfePW2BDqTu80vakM1d4SMB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvc1hZVnpsTjk0OWJZRU9wTzd6UzlxUXpWM2hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXXFaAwQG sN8AMA0GCSqGSIb3DQEBCwUAA4IBAQBqMfnc2Gkv/0zNe6oylTdfz/yZ0qGlqdJL tocLw+iFeUgvhQPYMz6l7QKyGw1R+gIs0NfAflDtRI7escNWMQyyPeofhOR7mEYx 1PryK5Db6V93jrT4/oZT0qXUEjE2Tl240CWuuceBBNf0roz5udH+XQXzcG/M2Nn3 SRVKMEWWl2ImWXD/QnszNZlABe52khgXtmCzkV+lzPaWfSjxbWL9VOOki63V1odt Y9hGqFLKk0W4r74doj3QKFCvpy9byqzRo3YBQ5ve5spQRDCjRtSkuWb2eDfOMzc5 D1hZKF0n049D7eGIu5du90yp1vMUUYg3dkXYkBc93cstjT7sSeIU -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:27 2026 by rpki-client