This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/SLDmAijGZOcd5frrWpDur506vuM.roa
File: SLDmAijGZOcd5frrWpDur506vuM.roa (raw, json)
Hash identifier: fXeTnCjaeXZCdY9tyeELwVUATm4Y5QQiz2mZBpqAt/g=
Subject key identifier: 48:B0:E6:02:28:C6:64:E7:1D:E5:FA:EB:5A:90:EE:AF:9D:3A:BE:E3
Certificate issuer: /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Certificate serial: 019B9E4B010CA900064B3DD61C6149A49A82
Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/SLDmAijGZOcd5frrWpDur506vuM.roa
Signing time: Thu 08 Jan 2026 15:47:54 +0000
ROA not before: Thu 08 Jan 2026 15:47:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15576
IP address blocks: 185.253.192.0/23 maxlen: 23
2a04:4c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:9e:4b:01:0c:a9:00:06:4b:3d:d6:1c:61:49:a4:9a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Validity
Not Before: Jan 8 15:47:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48b0e60228c664e71de5faeb5a90eeaf9d3abee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:48:74:3f:1c:4a:99:5b:28:74:6b:aa:86:
53:1f:b0:25:f0:9b:98:51:ef:93:45:e9:ed:fd:8b:
0c:52:95:06:d3:77:e4:f0:ec:d3:b8:46:6d:15:fb:
a0:c2:7b:8a:ee:b2:f6:0a:06:a6:f1:7f:c8:60:80:
fb:40:16:60:3c:72:46:45:9e:9d:6a:d0:19:f1:9f:
30:e9:81:e8:1c:d0:9e:23:3e:06:08:ea:6e:46:be:
7d:fa:4f:16:53:b3:b5:06:b5:66:df:7d:ef:29:21:
0a:0a:80:99:ac:75:a1:91:f3:40:34:20:b7:14:b5:
2b:f8:d8:97:68:e0:6f:8a:95:a6:a5:34:75:64:e2:
a0:2f:01:3d:4e:e5:1d:e2:f6:3b:6e:d7:3f:0f:cd:
98:9c:6c:67:62:a5:04:1b:d3:85:3f:f4:1f:08:21:
67:d8:80:8c:34:73:26:c6:a5:6f:a0:6d:3c:0c:bc:
fb:18:45:a8:82:a1:f5:2a:9d:25:8e:42:b0:52:e6:
75:91:c8:c4:86:b6:37:6d:51:14:73:dc:06:0e:ab:
aa:6a:6f:09:6e:d0:f5:da:e2:67:21:35:ee:ca:4c:
c7:56:a5:50:e7:c1:19:8f:a1:2b:fd:b9:82:b9:e2:
56:75:9b:9e:62:bd:d0:e1:ae:6e:52:16:c2:9f:bb:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B0:E6:02:28:C6:64:E7:1D:E5:FA:EB:5A:90:EE:AF:9D:3A:BE:E3
X509v3 Authority Key Identifier:
keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/SLDmAijGZOcd5frrWpDur506vuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.192.0/23
IPv6:
2a04:4c00::/29
Signature Algorithm: sha256WithRSAEncryption
60:45:54:f7:d0:35:a4:8e:27:e7:44:70:44:f8:f3:78:0b:4b:
69:39:ba:4c:95:28:c0:e2:b7:fd:52:94:0f:b4:a6:2c:b4:19:
47:c6:fe:7b:76:dc:07:31:12:18:7d:b7:80:6c:45:e4:0c:4b:
a1:b8:12:51:67:a2:d9:fa:05:82:f6:41:3b:01:bd:e4:ff:48:
93:a4:25:c8:38:6e:2e:76:3f:4e:97:92:47:2c:0f:bd:4e:a3:
fb:a8:ef:40:f3:fe:ca:d5:c6:3e:84:79:87:bf:79:ac:ae:16:
1c:21:eb:c6:70:e9:4a:fb:90:bd:d9:37:5c:61:df:eb:09:b6:
1c:91:83:31:a1:da:93:06:14:a5:99:f5:06:50:98:99:f9:a3:
c1:ca:71:3d:e5:41:fb:89:0e:86:53:76:11:ea:50:d5:b9:c0:
a3:8e:2d:1a:e5:66:34:00:18:bd:f5:64:dd:4a:b4:15:38:5e:
b7:e9:8c:0c:da:bb:18:27:44:1c:60:8b:89:c9:50:3e:a0:9b:
cd:0d:72:7b:5e:52:6d:8f:5d:3b:70:5b:d0:7b:10:9a:be:97:
91:30:d1:6b:71:a0:3a:6e:4b:c0:74:20:b0:aa:84:ad:0f:64:
5e:76:4f:28:83:a7:1c:10:c0:2b:14:31:19:dd:0b:e7:ef:8e:
bc:21:ed:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:22:48 2026 by rpki-client