This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/SxktuUZJXPDtuM_CB-syVtmrhIY.roa File: SxktuUZJXPDtuM_CB-syVtmrhIY.roa (raw, json) Hash identifier: hmxDbjf6h2Ib+lvmqo0zICEquCodANKXc9RJMb7+XRA= Subject key identifier: 4B:19:2D:B9:46:49:5C:F0:ED:B8:CF:C2:07:EB:32:56:D9:AB:84:86 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B78344DF2048B1A499B14033034C91359 Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/SxktuUZJXPDtuM_CB-syVtmrhIY.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43357 IP address blocks: 45.82.76.0/24 maxlen: 32 45.82.77.0/24 maxlen: 32 45.130.20.0/22 maxlen: 32 45.131.155.0/24 maxlen: 32 45.147.50.0/24 maxlen: 32 45.147.51.0/24 maxlen: 32 80.66.198.0/24 maxlen: 32 88.218.193.0/24 maxlen: 32 92.60.40.0/24 maxlen: 24 176.113.68.0/24 maxlen: 32 176.113.69.0/24 maxlen: 32 185.184.220.0/24 maxlen: 32 185.184.222.0/24 maxlen: 32 185.194.52.0/22 maxlen: 24 185.248.85.0/24 maxlen: 24 185.254.75.0/24 maxlen: 32 194.36.25.0/24 maxlen: 24 2a03:d9c0:3000::/48 maxlen: 48 2a03:d9c0:3001::/48 maxlen: 128 2a07:fe00:1::/48 maxlen: 48 2a09:7:2007::/48 maxlen: 48 2a0b:89c1:3::/48 maxlen: 48 2a0c:59c0:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4d:f2:04:8b:1a:49:9b:14:03:30:34:c9:13:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b192db946495cf0edb8cfc207eb3256d9ab8486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:81:cc:df:a3:74:96:32:4c:37:9c:a5:1f: c3:36:ff:b2:9c:dd:1b:8a:76:53:6d:4a:0a:5f:ca: 38:0b:a3:69:06:f0:e0:aa:96:9a:ce:46:b9:75:13: 87:6f:dd:94:0e:b4:3d:05:b9:d3:57:72:50:37:ee: 27:69:20:46:f6:ce:64:1b:b5:ee:2c:bd:47:c4:26: a4:d4:4d:79:0f:57:ab:93:91:83:8c:89:c7:a7:e9: 9f:c2:d3:29:b7:1d:69:22:73:45:35:74:75:6c:51: 68:e4:35:b7:a4:d5:af:b2:65:b3:9e:5b:11:53:dc: f7:1e:b3:03:de:0e:54:1e:6b:a6:a5:b9:3b:1f:7f: 02:fd:89:17:b3:fa:5c:cf:5b:4d:32:7f:b2:ca:d0: 3b:d5:78:1b:ab:d7:a1:9c:ef:08:c7:77:2a:bc:ee: d4:8d:c6:d3:07:ee:29:93:8f:d7:39:e0:c7:ac:39: be:49:de:4e:ae:a1:ac:95:2d:02:ee:ee:cc:31:38: 9f:d7:b9:34:6c:8f:d5:be:18:70:40:6a:53:99:a7: 30:85:ff:3e:95:2f:12:c3:81:fb:2f:3e:46:b7:5f: 8a:cf:42:10:19:ed:68:ff:28:f5:34:37:82:73:91: cc:d1:63:4a:ac:85:ed:9d:77:a3:2f:2e:c0:c7:7f: 90:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:19:2D:B9:46:49:5C:F0:ED:B8:CF:C2:07:EB:32:56:D9:AB:84:86 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/SxktuUZJXPDtuM_CB-syVtmrhIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.76.0/23 45.130.20.0/22 45.131.155.0/24 45.147.50.0/23 80.66.198.0/24 88.218.193.0/24 92.60.40.0/24 176.113.68.0/23 185.184.220.0/24 185.184.222.0/24 185.194.52.0/22 185.248.85.0/24 185.254.75.0/24 194.36.25.0/24 IPv6: 2a03:d9c0:3000::/47 2a07:fe00:1::/48 2a09:7:2007::/48 2a0b:89c1:3::/48 2a0c:59c0:18::/48 Signature Algorithm: sha256WithRSAEncryption 51:44:11:37:bf:f2:e9:55:a1:f4:62:7e:91:dc:33:33:b1:b3: d0:b4:4b:69:8f:e9:a0:54:a8:55:55:f8:0c:26:35:9c:e1:83: b4:f7:39:95:b2:4e:0d:0c:4c:8d:d8:7d:52:33:cb:d7:b8:d2: 0e:e6:1e:97:a2:e5:86:40:e9:f4:2e:c2:14:f2:c5:8f:9a:26: 65:85:32:ef:d4:3d:47:a8:5d:0a:d6:b1:00:50:45:19:e5:bb: c6:f6:cc:6f:39:be:e4:49:45:44:a8:e1:d4:a9:d3:e0:32:14: 71:ed:db:96:53:3d:98:83:d6:74:36:c7:5a:68:33:0d:c0:9e: 07:8f:e4:f6:b2:54:58:39:75:11:04:c7:b6:e7:b5:f8:28:0e: 45:6e:f8:95:26:eb:c9:71:db:41:c5:28:22:a7:6c:4f:08:d0: 30:a0:df:5b:e0:f6:6f:a5:99:31:87:a4:2f:9d:62:74:81:aa: 61:fc:b9:4b:68:5f:96:1c:44:8c:05:4c:26:cd:cf:73:66:46: 64:1f:de:a0:37:c2:f7:f9:e9:1b:7f:ed:2e:dd:cd:5c:08:e2: b1:8d:0c:e4:62:48:25:16:1c:b5:ae:f9:c0:15:cc:32:6f:0b: 43:15:32:ae:3d:80:47:0e:56:74:d7:c1:ee:1c:04:14:65:8e: 39:21:0d:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgISAZt4NE3yBIsaSZsUAzA0yRNZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjE5MmRiOTQ2NDk1Y2YwZWRiOGNmYzIwN2ViMzI1NmQ5YWI4NDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfmBzN+jdJYyTDecpR/DNv+ynN0b inZTbUoKX8o4C6NpBvDgqpaazka5dROHb92UDrQ9BbnTV3JQN+4naSBG9s5kG7Xu LL1HxCak1E15D1erk5GDjInHp+mfwtMptx1pInNFNXR1bFFo5DW3pNWvsmWznlsR U9z3HrMD3g5UHmumpbk7H38C/YkXs/pcz1tNMn+yytA71Xgbq9ehnO8Ix3cqvO7U jcbTB+4pk4/XOeDHrDm+Sd5OrqGslS0C7u7MMTif17k0bI/VvhhwQGpTmacwhf8+ lS8Sw4H7Lz5Gt1+Kz0IQGe1o/yj1NDeCc5HM0WNKrIXtnXejLy7Ax3+QkQIDAQAB o4ICjzCCAoswHQYDVR0OBBYEFEsZLblGSVzw7bjPwgfrMlbZq4SGMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvU3hrdHVVWkpYUER0dU1fQ0Itc3lWdG1yaElZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGkBggrBgEFBQcBBwEB/wSBlDCBkTBaBAIAATBUAwQBLVJM AwQCLYIUAwQALYObAwQBLZMyAwQAUELGAwQAWNrBAwQAXDwoAwQBsHFEAwQAubjc AwQAubjeAwQCucI0AwQAufhVAwQAuf5LAwQAwiQZMDMEAgACMC0DBwEqA9nAMAAD BwAqB/4AAAEDBwAqCQAHIAcDBwAqC4nBAAMDBwAqDFnAABgwDQYJKoZIhvcNAQEL BQADggEBAFFEETe/8ulVofRifpHcMzOxs9C0S2mP6aBUqFVV+AwmNZzhg7T3OZWy Tg0MTI3YfVIzy9e40g7mHpei5YZA6fQuwhTyxY+aJmWFMu/UPUeoXQrWsQBQRRnl u8b2zG85vuRJRUSo4dSp0+AyFHHt25ZTPZiD1nQ2x1poMw3AngeP5PayVFg5dREE x7bntfgoDkVu+JUm68lx20HFKCKnbE8I0DCg31vg9m+lmTGHpC+dYnSBqmH8uUto X5YcRIwFTCbNz3NmRmQf3qA3wvf56Rt/7S7dzVwI4rGNDORiSCUWHLWu+cAVzDJv C0MVMq49gEcOVnTXwe4cBBRljjkhDfE= -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:08 2026 by rpki-client