This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/_SAMOxgv34T8ZP2BEt3dVFweldA.roa File: _SAMOxgv34T8ZP2BEt3dVFweldA.roa (raw, json) Hash identifier: bU6RDLC/fFMgRKk4b1P2ryi1ytEL97qHkSA7liSJFY0= Subject key identifier: FD:20:0C:3B:18:2F:DF:84:FC:64:FD:81:12:DD:DD:54:5C:1E:95:D0 Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca Certificate serial: 019B76EBA2C9F5A18F94AE0B9A737616A593 Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/_SAMOxgv34T8ZP2BEt3dVFweldA.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 217.197.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a2:c9:f5:a1:8f:94:ae:0b:9a:73:76:16:a5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd200c3b182fdf84fc64fd8112dddd545c1e95d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5c:ae:ae:17:b2:2a:a3:77:ba:9e:8d:e0:bb: 32:14:01:c4:2e:73:e7:f9:f3:e8:36:e7:a0:5d:c9: 60:48:d5:7e:19:5d:b6:33:35:f0:62:93:c1:42:a1: b2:28:33:76:bd:50:2e:79:fd:00:c6:77:1c:48:1f: 97:d6:4e:10:d5:4e:f8:e8:95:bc:6c:87:dc:5b:53: a2:32:61:7d:58:59:1a:34:8a:26:c6:48:11:3b:c6: aa:07:32:93:29:40:07:93:90:b5:20:3e:a9:ec:e3: 5a:1f:06:a3:2c:48:da:17:02:b9:b3:3d:8c:3f:4b: 13:67:80:98:35:37:bf:bc:3d:a3:d1:b1:81:bd:c5: df:17:f2:fb:af:28:37:54:12:ca:4e:9b:a7:dd:be: c0:4b:88:6e:87:96:b6:43:d4:9e:0c:23:02:23:ce: d1:e0:bb:a2:08:6f:c2:8d:bd:58:5a:b4:75:01:3c: 4c:40:14:4b:89:6c:79:b5:8e:99:da:53:ae:18:d4: b2:e2:fe:f3:2e:f5:b9:f1:f9:de:9d:3f:09:8d:90: d5:5e:5c:c6:73:18:75:08:3e:b7:b8:3e:db:b0:26: 6a:58:4e:51:f3:e3:56:f3:f9:d3:0f:4e:3a:42:32: 99:52:fb:93:b4:05:fc:f7:bf:2e:68:b9:1f:10:a3: 80:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:20:0C:3B:18:2F:DF:84:FC:64:FD:81:12:DD:DD:54:5C:1E:95:D0 X509v3 Authority Key Identifier: keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/_SAMOxgv34T8ZP2BEt3dVFweldA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.197.111.0/24 Signature Algorithm: sha256WithRSAEncryption a2:83:3b:ca:55:11:5d:a4:b6:ca:3d:d9:ed:ec:14:19:8b:91: b1:2c:da:4d:6a:79:4e:7c:e8:47:46:54:ec:b1:2b:06:e1:ce: 11:5e:47:8d:47:7b:e4:d2:0e:dd:04:42:9b:72:b8:dd:4c:6c: b2:2f:af:3e:aa:b1:7f:25:c6:07:af:c6:6c:d2:ef:ce:d0:2b: d6:98:b1:16:26:78:24:22:d5:a3:ca:09:29:fb:34:13:ec:bb: 2d:93:dc:8a:3f:f5:a2:2c:35:f5:b1:de:91:a1:26:b2:ae:1b: 17:48:07:83:21:53:77:4c:7b:e3:f1:2b:1e:d5:83:b1:84:ac: 80:f1:0b:49:7c:c4:3e:c2:5a:91:1a:6f:84:25:f9:83:ad:56: a6:93:b3:3c:1b:f1:40:76:dd:3d:c6:95:ee:e8:61:d0:4d:f5: 76:5d:c0:9d:29:09:3c:35:ff:65:51:63:a3:56:a6:54:7d:9d: b2:88:a8:6d:15:a3:6f:b8:ab:f0:e7:d0:1e:e7:8e:0f:1d:0f: 38:e9:19:16:47:56:5b:6d:55:7b:ec:ee:9a:67:b5:7d:ef:8f: f5:53:31:95:dd:d1:6c:b2:b3:3e:f3:c8:f1:cf:5d:07:44:ec: a3:9d:b0:51:d5:3a:47:28:d3:42:35:78:3f:34:43:50:c2:db: 2b:74:f6:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266LJ9aGPlK4LmnN2FqWTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMzg4NDA5MjZhYzczZWFkNWI2MTg3OTE5ZTg4ZjEwMDMy Mjk5Y2EwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDIwMGMzYjE4MmZkZjg0ZmM2NGZkODExMmRkZGQ1NDVjMWU5NWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lyurheyKqN3up6N4LsyFAHELnPn +fPoNuegXclgSNV+GV22MzXwYpPBQqGyKDN2vVAuef0AxnccSB+X1k4Q1U746JW8 bIfcW1OiMmF9WFkaNIomxkgRO8aqBzKTKUAHk5C1ID6p7ONaHwajLEjaFwK5sz2M P0sTZ4CYNTe/vD2j0bGBvcXfF/L7ryg3VBLKTpun3b7AS4huh5a2Q9SeDCMCI87R 4LuiCG/Cjb1YWrR1ATxMQBRLiWx5tY6Z2lOuGNSy4v7zLvW58fnenT8JjZDVXlzG cxh1CD63uD7bsCZqWE5R8+NW8/nTD046QjKZUvuTtAX8978uaLkfEKOAdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP0gDDsYL9+E/GT9gRLd3VRcHpXQMB8GA1UdIwQY MBaAFJM4hAkmrHPq1bYYeRnojxADIpnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUt ZWE3YWU3MmJkMzJkLzEvX1NBTU94Z3YzNFQ4WlAyQkV0M2RWRndlbGRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUtZWE3YWU3MmJkMzJk LzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2cVvMA0G CSqGSIb3DQEBCwUAA4IBAQCigzvKVRFdpLbKPdnt7BQZi5GxLNpNanlOfOhHRlTs sSsG4c4RXkeNR3vk0g7dBEKbcrjdTGyyL68+qrF/JcYHr8Zs0u/O0CvWmLEWJngk ItWjygkp+zQT7Lstk9yKP/WiLDX1sd6RoSayrhsXSAeDIVN3THvj8Sse1YOxhKyA 8QtJfMQ+wlqRGm+EJfmDrVamk7M8G/FAdt09xpXu6GHQTfV2XcCdKQk8Nf9lUWOj VqZUfZ2yiKhtFaNvuKvw59Ae544PHQ846RkWR1ZbbVV77O6aZ7V974/1UzGV3dFs srM+88jxz10HROyjnbBR1TpHKNNCNXg/NENQwtsrdPbU -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:43 2026 by rpki-client