This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/SLEbsnJN0TIrYMPUkwo_HtQI_YY.roa File: SLEbsnJN0TIrYMPUkwo_HtQI_YY.roa (raw, json) Hash identifier: sEW6+6ZZRuXcX0E6lls/B3TG4bjdd1ae0xcdGkWi5Nk= Subject key identifier: 48:B1:1B:B2:72:4D:D1:32:2B:60:C3:D4:93:0A:3F:1E:D4:08:FD:86 Certificate issuer: /CN=0325034258f275b7c87e5f4f70706c0cf588efc3 Certificate serial: 019BC933E0EAD7B3F9283E02E936C7D7DF20 Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/SLEbsnJN0TIrYMPUkwo_HtQI_YY.roa Signing time: Fri 16 Jan 2026 23:46:18 +0000 ROA not before: Fri 16 Jan 2026 23:46:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206706 IP address blocks: 185.126.32.0/24 maxlen: 24 2a10:18c0::/31 maxlen: 31 2a10:18c2::/31 maxlen: 31 2a10:18c4::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c9:33:e0:ea:d7:b3:f9:28:3e:02:e9:36:c7:d7:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3 Validity Not Before: Jan 16 23:46:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48b11bb2724dd1322b60c3d4930a3f1ed408fd86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:41:80:0e:c7:a9:91:af:90:2d:7a:da:e2:4f: eb:a2:4b:10:12:f8:ad:d6:f1:e4:d4:53:e6:1c:1c: d7:21:83:06:91:d4:d3:f2:14:29:23:b5:03:c7:e4: 39:4e:29:1f:18:8e:11:36:63:3c:93:8e:ca:f0:21: 17:e2:0b:42:24:94:c1:b1:f5:07:24:38:00:e6:44: be:ee:d9:82:51:87:df:d8:b4:ed:c7:60:db:cf:80: 18:29:90:2e:21:3a:96:4f:66:1c:f3:23:fe:84:10: 35:70:2b:f5:9c:78:93:ea:41:71:e1:76:97:19:01: f5:c5:13:c7:10:c3:43:1d:c7:77:fc:84:b1:08:f3: ff:be:68:83:06:24:55:38:fe:43:64:04:b4:53:aa: dc:23:d6:25:ca:c0:9f:d7:a2:b4:0e:33:9a:3a:04: db:5c:9c:77:4c:b0:2f:76:52:50:9b:a5:15:32:cf: d9:52:95:12:46:9b:2f:20:43:cf:9c:4b:e3:0d:a3: 98:96:83:de:95:24:b3:3e:f4:5f:96:40:5c:ff:83: 50:42:8b:fe:ce:30:d3:31:be:f4:db:09:34:be:71: 09:22:a9:0b:8a:ac:7c:a8:0f:63:87:01:fa:99:1e: fa:a5:f4:e4:c9:4f:c9:16:0f:58:15:7f:05:e4:48: 52:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B1:1B:B2:72:4D:D1:32:2B:60:C3:D4:93:0A:3F:1E:D4:08:FD:86 X509v3 Authority Key Identifier: keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/SLEbsnJN0TIrYMPUkwo_HtQI_YY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.32.0/24 IPv6: 2a10:18c0::-2a10:18c5:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 75:28:f4:74:30:87:d5:ef:8e:be:93:69:75:e6:e9:b2:de:58: 91:b2:3c:5e:a3:25:7d:86:0a:5b:1b:69:99:c2:02:f1:fa:62: f4:1b:51:ee:86:3e:e3:8d:9f:c4:f3:11:20:0a:88:3b:2a:98: e3:2b:02:f8:b6:9f:fc:04:dc:43:84:2c:bc:ed:4a:61:92:72: d6:00:dd:26:c1:a4:29:86:56:3f:6a:b6:3e:c3:bf:b0:b5:f3: 64:eb:91:00:b5:f9:2f:f4:7d:b3:24:f3:49:f8:4a:3a:8e:96: 53:49:3f:e4:4f:a6:86:a2:22:da:3b:2f:60:8e:bf:3c:cc:02: b5:35:d5:09:50:a2:6e:de:da:c2:b9:03:d4:ab:29:05:fd:bf: 22:20:bb:a6:68:da:eb:01:9a:09:fc:a0:bf:44:71:38:17:ca: b7:95:2f:7b:51:53:e1:33:b6:a5:a3:d4:76:11:b1:77:85:3b: 4b:67:f0:80:d9:d3:a0:3b:9d:dc:23:13:a8:47:e4:14:a1:d7: b6:36:cc:78:af:17:bd:ec:43:66:4a:d9:70:36:a3:02:9b:ce: b9:2a:d1:48:30:74:07:23:cf:a1:a4:82:bb:36:1f:e4:23:3c: c8:06:e3:15:cd:12:07:d8:dc:f0:ef:cf:e0:79:03:01:aa:4e: 53:1b:84:7e -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZvJM+Dq17P5KD4C6TbH198gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMjUwMzQyNThmMjc1YjdjODdlNWY0ZjcwNzA2YzBjZjU4 OGVmYzMwHhcNMjYwMTE2MjM0NjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGIxMWJiMjcyNGRkMTMyMmI2MGMzZDQ5MzBhM2YxZWQ0MDhmZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUGADsepka+QLXra4k/roksQEvit 1vHk1FPmHBzXIYMGkdTT8hQpI7UDx+Q5TikfGI4RNmM8k47K8CEX4gtCJJTBsfUH JDgA5kS+7tmCUYff2LTtx2Dbz4AYKZAuITqWT2Yc8yP+hBA1cCv1nHiT6kFx4XaX GQH1xRPHEMNDHcd3/ISxCPP/vmiDBiRVOP5DZAS0U6rcI9YlysCf16K0DjOaOgTb XJx3TLAvdlJQm6UVMs/ZUpUSRpsvIEPPnEvjDaOYloPelSSzPvRflkBc/4NQQov+ zjDTMb702wk0vnEJIqkLiqx8qA9jhwH6mR76pfTkyU/JFg9YFX8F5EhS7QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFEixG7JyTdEyK2DD1JMKPx7UCP2GMB8GA1UdIwQY MBaAFAMlA0JY8nW3yH5fT3BwbAz1iO/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTIt OWEzN2M2MDY5YmMxLzEvU0xFYnNuSk4wVElyWU1QVWt3b19IdFFJX1lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTItOWEzN2M2MDY5YmMx LzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAuX4gMBYE AgACMBAwDgMFBioQGMADBQEqEBjEMA0GCSqGSIb3DQEBCwUAA4IBAQB1KPR0MIfV 746+k2l15umy3liRsjxeoyV9hgpbG2mZwgLx+mL0G1Huhj7jjZ/E8xEgCog7Kpjj KwL4tp/8BNxDhCy87UphknLWAN0mwaQphlY/arY+w7+wtfNk65EAtfkv9H2zJPNJ +Eo6jpZTST/kT6aGoiLaOy9gjr88zAK1NdUJUKJu3trCuQPUqykF/b8iILumaNrr AZoJ/KC/RHE4F8q3lS97UVPhM7alo9R2EbF3hTtLZ/CA2dOgO53cIxOoR+QUode2 Nsx4rxe97ENmStlwNqMCm865KtFIMHQHI8+hpIK7Nh/kIzzIBuMVzRIH2Nzw78/g eQMBqk5TG4R+ -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:52 2026 by rpki-client