This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/SxTqFSaVYKNp7RXjp-9P-WYLFPk.roa File: SxTqFSaVYKNp7RXjp-9P-WYLFPk.roa (raw, json) Hash identifier: ZmAlezL/eOxIgz3wvBspKHt49atyoUhtEGugoI4vkno= Subject key identifier: 4B:14:EA:15:26:95:60:A3:69:ED:15:E3:A7:EF:4F:F9:66:0B:14:F9 Certificate issuer: /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63 Certificate serial: 019B7C7F0A9DDD08125DD876F45151B9DD1B Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/SxTqFSaVYKNp7RXjp-9P-WYLFPk.roa Signing time: Fri 02 Jan 2026 02:17:39 +0000 ROA not before: Fri 02 Jan 2026 02:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44407 IP address blocks: 185.181.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:0a:9d:dd:08:12:5d:d8:76:f4:51:51:b9:dd:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63 Validity Not Before: Jan 2 02:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b14ea15269560a369ed15e3a7ef4ff9660b14f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:65:48:c4:25:40:58:ba:4e:6a:d0:ca:7f:0e: b6:84:39:08:70:b9:b2:bb:14:2f:2c:27:7e:80:a6: 93:b3:e2:ef:cf:ba:55:f5:98:04:cb:40:19:6f:de: 47:52:42:5f:a3:53:e4:29:37:44:0f:1a:e4:fb:42: bb:ee:e4:3f:b0:d9:85:fc:dc:95:c7:01:ab:49:1e: 50:fe:42:ba:52:a7:98:29:29:f7:9e:a8:28:72:b3: 55:4f:6f:23:a5:63:52:8c:7d:3e:b0:96:62:20:be: 01:e0:c5:07:f3:db:84:a5:f4:53:e7:7b:fd:41:bd: 39:31:60:88:a4:cf:ac:8b:b4:3e:63:06:58:76:7a: 70:21:51:79:64:1b:54:c8:d3:40:8b:fe:c8:fa:77: 09:2f:9b:a6:85:8c:1a:38:09:8c:57:f6:a4:21:d7: a9:1f:16:69:07:bc:ac:50:88:ae:8d:eb:33:2a:a6: b4:cb:bf:71:a4:06:0e:be:36:bb:34:79:d0:4e:a6: 74:c1:61:b5:eb:1e:c4:7e:8f:05:99:12:b2:24:d8: f7:3f:1b:43:e2:29:39:d2:a9:81:77:4c:88:df:ba: eb:73:1d:af:39:60:5d:a1:f6:f0:b5:48:94:21:bc: b5:dd:ed:4e:e3:3c:41:44:30:b9:b3:58:72:6b:b1: 75:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:14:EA:15:26:95:60:A3:69:ED:15:E3:A7:EF:4F:F9:66:0B:14:F9 X509v3 Authority Key Identifier: keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/SxTqFSaVYKNp7RXjp-9P-WYLFPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.156.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:21:62:14:16:28:67:b8:89:5a:b0:9f:1c:81:3f:aa:ce:d3: 9e:c7:33:e2:1a:ad:02:9e:0d:f0:91:27:61:32:f8:e7:f9:79: 26:e9:9a:7b:35:17:07:37:4b:88:ee:ef:ed:31:0b:f3:7d:b6: 93:29:58:ea:57:85:3d:fb:cf:ba:57:03:ba:3c:3d:c9:df:3e: 1a:4f:1c:bf:ed:e5:6c:27:b7:d1:ff:59:95:f9:a8:83:b9:c3: 62:67:7a:b0:30:c5:26:35:72:9a:1b:9a:1b:6e:ea:12:d0:00: 60:eb:ec:fa:af:63:ae:73:7f:ab:5f:e5:e3:c3:e3:ef:1b:ed: 5d:84:40:71:8b:fd:d1:ce:78:60:84:d8:78:f0:f0:f4:29:b9: 95:29:13:1f:f4:1b:1b:f7:e6:28:53:eb:13:3d:45:ae:c2:b6: fd:ae:e0:9a:a1:10:ab:de:66:e3:2d:ed:3a:22:06:29:d2:e3: 99:c8:6e:53:46:fc:d7:ee:86:7e:42:73:46:80:20:e2:21:eb: c5:ea:bf:18:47:34:c6:d5:6f:90:c1:77:9b:76:a8:00:13:8e: e2:46:23:05:7a:4a:8b:8e:8e:c7:af:e6:3a:f1:eb:b6:0a:99: 72:7f:a1:33:14:b7:bd:ef:6e:8c:87:41:bf:f7:18:10:42:3b: c2:54:a2:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fwqd3QgSXdh29FFRud0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYmQ0Y2E3ZjMzMWFhMmFkOTEyNDBhNjU4M2ExNzZjMDA1 ZThhNjMwHhcNMjYwMTAyMDIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjE0ZWExNTI2OTU2MGEzNjllZDE1ZTNhN2VmNGZmOTY2MGIxNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWVIxCVAWLpOatDKfw62hDkIcLmy uxQvLCd+gKaTs+Lvz7pV9ZgEy0AZb95HUkJfo1PkKTdEDxrk+0K77uQ/sNmF/NyV xwGrSR5Q/kK6UqeYKSn3nqgocrNVT28jpWNSjH0+sJZiIL4B4MUH89uEpfRT53v9 Qb05MWCIpM+si7Q+YwZYdnpwIVF5ZBtUyNNAi/7I+ncJL5umhYwaOAmMV/akIdep HxZpB7ysUIiujeszKqa0y79xpAYOvja7NHnQTqZ0wWG16x7Efo8FmRKyJNj3PxtD 4ik50qmBd0yI37rrcx2vOWBdofbwtUiUIby13e1O4zxBRDC5s1hya7F1SQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEsU6hUmlWCjae0V46fvT/lmCxT5MB8GA1UdIwQY MBaAFNC9TKfzMaoq2RJAplg6F2wAXopjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEwxTXBfTXhxaXJaRWtDbVdEb1hiQUJlaW1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xZDk0NDAtY2VlOC00MzgzLWIwYTAt ZTBiNWE5MmRmOTQwLzEvU3hUcUZTYVZZS05wN1JYanAtOVAtV1lMRlBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8xZDk0NDAtY2VlOC00MzgzLWIwYTAtZTBiNWE5MmRmOTQw LzEvMEwxTXBfTXhxaXJaRWtDbVdEb1hiQUJlaW1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubWcMA0G CSqGSIb3DQEBCwUAA4IBAQALIWIUFihnuIlasJ8cgT+qztOexzPiGq0Cng3wkSdh Mvjn+Xkm6Zp7NRcHN0uI7u/tMQvzfbaTKVjqV4U9+8+6VwO6PD3J3z4aTxy/7eVs J7fR/1mV+aiDucNiZ3qwMMUmNXKaG5obbuoS0ABg6+z6r2Ouc3+rX+Xjw+PvG+1d hEBxi/3RznhghNh48PD0KbmVKRMf9Bsb9+YoU+sTPUWuwrb9ruCaoRCr3mbjLe06 IgYp0uOZyG5TRvzX7oZ+QnNGgCDiIevF6r8YRzTG1W+QwXebdqgAE47iRiMFekqL jo7Hr+Y68eu2Cplyf6EzFLe9726Mh0G/9xgQQjvCVKIT -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:55 2026 by rpki-client