This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/sV-mYML_TKE38eTlgadihi7XoEg.roa File: sV-mYML_TKE38eTlgadihi7XoEg.roa (raw, json) Hash identifier: DlzC9cilbThgBPbjJV0pjmCFEg1K/ZCcTUpF4AIBnD4= Subject key identifier: B1:5F:A6:60:C2:FF:4C:A1:37:F1:E4:E5:81:A7:62:86:2E:D7:A0:48 Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76 Certificate serial: 019B7BA5086245C83C508D9411B87823F4DA Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/sV-mYML_TKE38eTlgadihi7XoEg.roa Signing time: Thu 01 Jan 2026 22:19:31 +0000 ROA not before: Thu 01 Jan 2026 22:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6878 IP address blocks: 46.29.96.0/24 maxlen: 24 93.188.242.0/24 maxlen: 24 160.44.192.0/21 maxlen: 21 160.44.200.0/21 maxlen: 21 2a00:da8:fffb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:08:62:45:c8:3c:50:8d:94:11:b8:78:23:f4:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76 Validity Not Before: Jan 1 22:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b15fa660c2ff4ca137f1e4e581a762862ed7a048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:86:eb:b2:c7:d0:ca:59:bb:f3:9d:1b:68:fd: ab:30:f0:d2:ca:fc:da:07:ee:ba:4a:74:33:e3:72: 83:44:3b:1f:02:38:5e:74:84:74:2a:77:ad:43:d6: a2:6c:85:ec:d4:c0:93:65:fb:d6:9f:3b:e3:dc:d4: 4a:30:5b:57:ae:51:99:b1:7e:ec:9d:4b:12:b2:05: d6:3b:1d:91:65:fa:4a:d1:41:9a:84:2b:73:e5:6e: 47:fb:a7:68:28:ad:c3:b1:c9:c7:bd:29:1b:b5:3a: 20:d1:96:53:f1:02:80:6e:eb:d8:e2:f4:41:59:3a: 07:8f:be:aa:3f:72:1e:89:a9:8f:7a:7d:59:22:9a: 2f:84:79:a3:ea:b8:80:fa:cb:61:31:44:a4:3c:4d: a8:6d:2a:36:49:8d:d3:83:f3:b2:20:ad:0a:bc:b7: b3:53:b6:60:d5:ea:15:23:cf:a8:10:9a:b1:56:d2: 75:07:db:15:21:8e:73:ad:21:d0:6e:cc:b4:ca:56: 7d:92:9d:21:8e:5b:aa:e1:25:d6:22:df:14:21:b5: b4:b5:49:a6:b1:9f:54:ef:db:46:ed:08:c7:a3:12: 63:06:30:8c:a5:c6:e5:67:b5:af:fb:6f:96:8e:32: 13:a2:fa:0a:61:f7:0f:c2:dc:17:14:ab:db:19:7f: d9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5F:A6:60:C2:FF:4C:A1:37:F1:E4:E5:81:A7:62:86:2E:D7:A0:48 X509v3 Authority Key Identifier: keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/sV-mYML_TKE38eTlgadihi7XoEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.96.0/24 93.188.242.0/24 160.44.192.0/20 IPv6: 2a00:da8:fffb::/48 Signature Algorithm: sha256WithRSAEncryption 85:5b:5f:95:f7:8f:fd:97:9e:21:ac:a3:f5:bd:60:2a:f7:61: 04:68:fb:f9:08:01:ee:54:26:2f:16:cd:8d:08:2b:e5:c4:0e: 39:36:26:d2:29:c2:e0:66:5b:72:21:a4:15:5e:75:5d:7c:da: 42:da:85:00:2e:fb:a2:fe:03:02:bb:a3:bc:e6:c7:09:3e:b5: 20:f8:dd:a2:db:d9:53:d8:69:83:c3:cb:35:65:eb:d4:41:e9: 1b:24:59:1c:44:af:4f:9a:3e:de:c9:d1:66:3e:eb:a1:25:6c: 92:97:0f:5f:99:bb:bd:fb:12:d9:bd:f0:5c:73:14:9d:34:eb: 10:0e:8d:b0:7e:0a:9e:8e:36:3a:91:19:ee:04:49:2d:f2:df: f8:bd:97:4c:af:ad:28:d7:5f:a6:17:71:b8:72:e0:e3:17:6f: 4c:07:0c:e4:c2:93:16:5e:a1:88:4f:e9:d9:30:74:36:c2:fe: 7f:b7:09:73:54:6c:7e:e1:7a:c4:36:40:ff:75:3e:16:cf:84: 5d:3a:a0:be:b9:ec:eb:43:1e:b0:2b:9e:29:26:a7:07:80:5c: 42:63:94:36:77:13:75:f8:45:a6:4f:b1:fd:0b:56:52:f5:4d: c4:a9:4e:5e:44:ea:94:e4:9a:62:08:16:52:4d:20:13:1b:00: 98:a3:6c:00 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt7pQhiRcg8UI2UEbh4I/TaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NjI4MmU3NTEyODZmYmJlY2M3NWVhNmVkY2MyNTQxOTJj NTVjNzYwHhcNMjYwMTAxMjIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTVmYTY2MGMyZmY0Y2ExMzdmMWU0ZTU4MWE3NjI4NjJlZDdhMDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4brssfQylm7850baP2rMPDSyvza B+66SnQz43KDRDsfAjhedIR0KnetQ9aibIXs1MCTZfvWnzvj3NRKMFtXrlGZsX7s nUsSsgXWOx2RZfpK0UGahCtz5W5H+6doKK3DscnHvSkbtTog0ZZT8QKAbuvY4vRB WToHj76qP3IeiamPen1ZIpovhHmj6riA+sthMUSkPE2obSo2SY3Tg/OyIK0KvLez U7Zg1eoVI8+oEJqxVtJ1B9sVIY5zrSHQbsy0ylZ9kp0hjluq4SXWIt8UIbW0tUmm sZ9U79tG7QjHoxJjBjCMpcblZ7Wv+2+WjjITovoKYfcPwtwXFKvbGX/Z7wIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFLFfpmDC/0yhN/Hk5YGnYoYu16BIMB8GA1UdIwQY MBaAFAhigudRKG+77Mdepu3MJUGSxVx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZDg1OTgtZTllMi00NzA5LWI1MzUt NmIwNGFhZGVlZjEwLzEvc1YtbVlNTF9US0UzOGVUbGdhZGloaTdYb0VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS85ZDg1OTgtZTllMi00NzA5LWI1MzUtNmIwNGFhZGVlZjEw LzEvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQALh1gAwQA XbzyAwQEoCzAMA8EAgACMAkDBwAqAA2o//swDQYJKoZIhvcNAQELBQADggEBAIVb X5X3j/2XniGso/W9YCr3YQRo+/kIAe5UJi8WzY0IK+XEDjk2JtIpwuBmW3IhpBVe dV182kLahQAu+6L+AwK7o7zmxwk+tSD43aLb2VPYaYPDyzVl69RB6RskWRxEr0+a Pt7J0WY+66ElbJKXD1+Zu737Etm98FxzFJ006xAOjbB+Cp6ONjqRGe4ESS3y3/i9 l0yvrSjXX6YXcbhy4OMXb0wHDOTCkxZeoYhP6dkwdDbC/n+3CXNUbH7hesQ2QP91 PhbPhF06oL657OtDHrArnikmpweAXEJjlDZ3E3X4RaZPsf0LVlL1TcSpTl5E6pTk mmIIFlJNIBMbAJijbAA= -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:59 2026 by rpki-client