This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/sBjAqPrKhV1Z1WPs7LsZcM8hAlM.roa File: sBjAqPrKhV1Z1WPs7LsZcM8hAlM.roa (raw, json) Hash identifier: FofTnNrc0AeEr8Tl3KCw6xOYYJYEqXcD/ByXgE3T67E= Subject key identifier: B0:18:C0:A8:FA:CA:85:5D:59:D5:63:EC:EC:BB:19:70:CF:21:02:53 Certificate issuer: /CN=afe662b2e97fd2bda91f32b2cce9e745cba58602 Certificate serial: 019B78A283661D981DB6448C24DA3758D53A Authority key identifier: AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/sBjAqPrKhV1Z1WPs7LsZcM8hAlM.roa Signing time: Thu 01 Jan 2026 08:17:54 +0000 ROA not before: Thu 01 Jan 2026 08:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202561 IP address blocks: 164.138.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:83:66:1d:98:1d:b6:44:8c:24:da:37:58:d5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe662b2e97fd2bda91f32b2cce9e745cba58602 Validity Not Before: Jan 1 08:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b018c0a8faca855d59d563ececbb1970cf210253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:56:67:d1:94:27:fc:bb:2f:b6:1d:24:65:83: 97:f9:49:e2:4b:7a:25:04:62:2e:e1:e4:1d:57:a9: 9e:4b:c7:1b:74:38:c0:3c:e7:9e:14:33:82:b1:f5: db:84:9e:f8:6a:1a:90:32:c8:f8:61:14:ce:2f:d5: 71:0a:af:51:16:60:2e:da:92:59:f4:19:42:72:7f: 63:ad:04:27:9f:72:70:a0:77:1d:d3:3c:f9:91:f5: e3:26:cb:60:b1:f5:d0:99:1a:70:eb:b8:cb:e6:92: 57:46:b8:a3:e0:90:96:e1:ba:3c:a3:aa:c1:2a:f2: 93:40:ca:b0:67:23:38:7d:65:a5:cd:c5:be:20:54: d1:13:7e:41:3e:cf:17:ef:3b:b6:76:e5:06:b2:8d: aa:0c:b5:0d:3c:9e:58:12:5e:1c:65:1a:e3:35:d1: 21:dc:99:ba:42:e7:34:82:04:26:ea:f0:05:ce:ef: 61:6a:2e:e5:9b:d6:1b:90:39:0f:d1:ab:00:40:53: c7:dc:91:86:81:c7:aa:cf:97:3e:e5:07:ba:dd:69: dd:07:77:db:1c:5f:4b:c1:26:17:d2:0c:05:3d:ee: 94:7f:9e:0d:4a:bd:7b:de:74:8c:7d:bf:29:0f:8c: a9:77:fc:6f:ad:5d:3a:d5:c6:b4:9f:98:42:92:db: a0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:18:C0:A8:FA:CA:85:5D:59:D5:63:EC:EC:BB:19:70:CF:21:02:53 X509v3 Authority Key Identifier: keyid:AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/sBjAqPrKhV1Z1WPs7LsZcM8hAlM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.207.0/24 Signature Algorithm: sha256WithRSAEncryption 82:19:97:6a:8e:0d:7b:55:8f:dd:19:57:e4:7a:2e:a0:e2:c7: 7c:e3:84:9a:b9:25:23:c4:21:ae:71:c1:6a:97:dd:46:47:7c: 8e:f3:d3:10:f0:88:29:b0:42:6a:fc:0e:d6:74:09:9e:5f:c4: 87:86:4d:4f:e9:39:14:a5:2d:7b:94:b3:b0:20:b2:91:bc:ed: eb:ff:32:42:71:81:31:1e:86:8f:fc:86:a6:43:14:76:39:35: b2:29:2d:b3:b6:fa:d9:5a:ff:f0:b0:5f:b4:45:42:8d:87:b5: ea:44:89:de:9e:cd:a3:9c:07:9c:95:33:25:94:2d:1f:5c:a7: 43:77:00:27:c8:b8:59:12:cd:76:85:cd:e8:a3:55:32:94:98: ea:05:6c:d9:34:e0:51:54:f5:96:ea:2a:b8:94:6a:10:94:e6: 9b:86:10:90:ef:b8:9b:de:80:9b:7c:9a:64:d6:64:15:e6:0f: 4c:22:e8:4b:e1:ef:c5:8f:bb:1c:a0:72:08:14:1a:2a:7b:2c: 2a:cb:fa:c3:9f:1e:fc:14:ee:35:37:70:02:68:7b:0e:9b:bc: d5:d1:30:a4:d8:16:3a:0a:7c:68:33:92:17:ef:48:7d:bd:ec: 82:fa:f6:d2:c3:83:25:0d:d8:b4:24:eb:60:f4:1c:eb:71:ca: 7f:98:00:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ooNmHZgdtkSMJNo3WNU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTY2MmIyZTk3ZmQyYmRhOTFmMzJiMmNjZTllNzQ1Y2Jh NTg2MDIwHhcNMjYwMTAxMDgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDE4YzBhOGZhY2E4NTVkNTlkNTYzZWNlY2JiMTk3MGNmMjEwMjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplZn0ZQn/Lsvth0kZYOX+UniS3ol BGIu4eQdV6meS8cbdDjAPOeeFDOCsfXbhJ74ahqQMsj4YRTOL9VxCq9RFmAu2pJZ 9BlCcn9jrQQnn3JwoHcd0zz5kfXjJstgsfXQmRpw67jL5pJXRrij4JCW4bo8o6rB KvKTQMqwZyM4fWWlzcW+IFTRE35BPs8X7zu2duUGso2qDLUNPJ5YEl4cZRrjNdEh 3Jm6Quc0ggQm6vAFzu9hai7lm9YbkDkP0asAQFPH3JGGgceqz5c+5Qe63WndB3fb HF9LwSYX0gwFPe6Uf54NSr173nSMfb8pD4ypd/xvrV061ca0n5hCktugYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLAYwKj6yoVdWdVj7Oy7GXDPIQJTMB8GA1UdIwQY MBaAFK/mYrLpf9K9qR8ysszp50XLpYYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jOTA4Y2EtODJjMy00NmMzLThiMjkt MzRkMGMwZTRjMTEzLzEvc0JqQXFQcktoVjFaMVdQczdMc1pjTThoQWxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jOTA4Y2EtODJjMy00NmMzLThiMjktMzRkMGMwZTRjMTEz LzEvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApIrPMA0G CSqGSIb3DQEBCwUAA4IBAQCCGZdqjg17VY/dGVfkei6g4sd844SauSUjxCGuccFq l91GR3yO89MQ8IgpsEJq/A7WdAmeX8SHhk1P6TkUpS17lLOwILKRvO3r/zJCcYEx HoaP/IamQxR2OTWyKS2ztvrZWv/wsF+0RUKNh7XqRInens2jnAeclTMllC0fXKdD dwAnyLhZEs12hc3oo1UylJjqBWzZNOBRVPWW6iq4lGoQlOabhhCQ77ib3oCbfJpk 1mQV5g9MIuhL4e/Fj7scoHIIFBoqeywqy/rDnx78FO41N3ACaHsOm7zV0TCk2BY6 CnxoM5IX70h9veyC+vbSw4MlDdi0JOtg9Bzrccp/mACd -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:03 2026 by rpki-client