This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/SaYypv9VAJ84xKAeNkRLodoblMc.roa File: SaYypv9VAJ84xKAeNkRLodoblMc.roa (raw, json) Hash identifier: GtKZWyv3+glT6p+I3huIJVfHLB6xoMQ/NbzSHVIURY4= Subject key identifier: 49:A6:32:A6:FF:55:00:9F:38:C4:A0:1E:36:44:4B:A1:DA:1B:94:C7 Certificate issuer: /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74 Certificate serial: 019B7BA3B958A1D11CB622DD8790DD60245E Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/SaYypv9VAJ84xKAeNkRLodoblMc.roa Signing time: Thu 01 Jan 2026 22:18:05 +0000 ROA not before: Thu 01 Jan 2026 22:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61423 IP address blocks: 194.124.145.0/24 maxlen: 24 194.124.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:b9:58:a1:d1:1c:b6:22:dd:87:90:dd:60:24:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74 Validity Not Before: Jan 1 22:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49a632a6ff55009f38c4a01e36444ba1da1b94c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:11:1d:b6:8d:49:34:33:4c:7d:75:ee:e7:3e: 3a:df:5b:3d:11:83:64:74:56:10:c9:a2:d9:51:d5: e4:b4:99:71:03:03:05:e8:8e:74:ec:4d:11:17:0a: c3:9c:91:86:5c:12:09:27:ce:4f:65:49:d0:c2:8b: 82:77:26:f1:03:40:d4:3a:7e:c4:65:a1:dc:e7:4a: 69:df:9c:3f:a7:4e:81:16:ff:2b:d8:23:89:93:8d: 3e:d5:7c:40:95:df:ce:be:87:c7:f8:e7:65:d8:44: c4:3c:c3:80:34:b6:2c:9e:0d:cb:52:15:f4:9e:17: 39:cb:db:f2:82:35:bf:bc:ce:27:7a:d3:76:f3:39: d6:ab:c7:af:34:b5:5f:dc:0b:42:aa:df:a7:d9:90: 02:6b:f2:2e:78:2b:83:ac:8e:8d:5b:33:d3:ff:e2: 3d:e4:bf:0a:bc:79:53:2f:c0:8f:2f:4e:b5:7a:36: 62:b2:cc:de:09:23:fc:59:98:07:a4:82:86:38:a6: 88:8c:6e:ad:83:bb:b6:de:e3:aa:24:95:e2:27:a5: e2:38:62:78:56:49:c6:43:b9:57:ec:5d:f9:ad:41: 1b:e5:8a:0a:d2:88:dc:63:0a:da:1a:f7:9d:3c:f4: 7b:b9:23:d0:eb:ea:d8:89:87:5b:bf:09:d0:eb:e4: aa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A6:32:A6:FF:55:00:9F:38:C4:A0:1E:36:44:4B:A1:DA:1B:94:C7 X509v3 Authority Key Identifier: keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/SaYypv9VAJ84xKAeNkRLodoblMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.124.145.0-194.124.147.255 Signature Algorithm: sha256WithRSAEncryption a9:5e:b7:44:ba:80:61:32:04:1b:37:a0:89:0b:1a:50:c3:77: 4b:43:bb:b8:48:8d:2c:7c:d3:83:44:bb:61:74:db:36:90:25: 7f:9e:72:42:4c:e9:2b:77:f3:a9:09:20:f9:59:8d:d2:63:70: 55:3f:95:26:18:9e:36:37:b3:25:9b:51:bd:03:df:4f:08:eb: 98:cc:bb:cc:1d:c2:df:24:37:d6:3a:62:38:27:2c:db:61:64: e8:fa:2f:d2:ff:8b:ab:8c:3c:7b:49:73:1a:ab:01:98:e8:82: 58:63:c6:8c:bb:3a:8d:9f:b1:f0:f3:88:8f:3d:ca:d0:3b:e6: d3:9c:d4:0d:7d:c0:f9:1c:0d:1e:2b:6c:0d:93:55:cd:ea:2e: 4c:05:11:65:6e:f9:b2:2c:d6:8c:86:9f:3d:e3:3f:80:ce:5c: e8:8d:aa:f9:0d:56:18:7c:8a:01:7c:f8:50:61:aa:45:64:89: 73:f6:7c:eb:db:bd:f6:73:e2:ea:da:37:0c:7a:1d:30:fa:29: d0:45:56:8b:99:d0:a8:6c:d2:a0:ce:c4:41:4e:1b:ed:f2:00: 9e:b9:58:52:da:02:95:0b:45:99:64:d6:70:9b:0d:df:84:6c: 8c:5e:16:75:82:66:ff:2a:35:db:d9:81:da:c2:08:49:c8:a0: 4a:a1:99:52 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7o7lYodEctiLdh5DdYCReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYTE3ZWQ0MDc0MzJjNDE4YjFjOWVhZjYxZmQxY2ExY2Jm ZjZhNzQwHhcNMjYwMTAxMjIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWE2MzJhNmZmNTUwMDlmMzhjNGEwMWUzNjQ0NGJhMWRhMWI5NGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxEdto1JNDNMfXXu5z4631s9EYNk dFYQyaLZUdXktJlxAwMF6I507E0RFwrDnJGGXBIJJ85PZUnQwouCdybxA0DUOn7E ZaHc50pp35w/p06BFv8r2COJk40+1XxAld/OvofH+Odl2ETEPMOANLYsng3LUhX0 nhc5y9vygjW/vM4netN28znWq8evNLVf3AtCqt+n2ZACa/IueCuDrI6NWzPT/+I9 5L8KvHlTL8CPL061ejZisszeCSP8WZgHpIKGOKaIjG6tg7u23uOqJJXiJ6XiOGJ4 VknGQ7lX7F35rUEb5YoK0ojcYwraGvedPPR7uSPQ6+rYiYdbvwnQ6+SqNQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEmmMqb/VQCfOMSgHjZES6HaG5THMB8GA1UdIwQY MBaAFCqhftQHQyxBixyer2H9HKHL/2p0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81NGQ0MzctYTI3Ny00MWJkLTk4OGYt OTUwZjBhMDEwMWE5LzEvU2FZeXB2OVZBSjg0eEtBZU5rUkxvZG9ibE1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni81NGQ0MzctYTI3Ny00MWJkLTk4OGYtOTUwZjBhMDEwMWE5 LzEvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCfJED BALCfJAwDQYJKoZIhvcNAQELBQADggEBAKlet0S6gGEyBBs3oIkLGlDDd0tDu7hI jSx804NEu2F02zaQJX+eckJM6St386kJIPlZjdJjcFU/lSYYnjY3syWbUb0D308I 65jMu8wdwt8kN9Y6YjgnLNthZOj6L9L/i6uMPHtJcxqrAZjoglhjxoy7Oo2fsfDz iI89ytA75tOc1A19wPkcDR4rbA2TVc3qLkwFEWVu+bIs1oyGnz3jP4DOXOiNqvkN Vhh8igF8+FBhqkVkiXP2fOvbvfZz4uraNwx6HTD6KdBFVouZ0Khs0qDOxEFOG+3y AJ65WFLaApULRZlk1nCbDd+EbIxeFnWCZv8qNdvZgdrCCEnIoEqhmVI= -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:19 2026 by rpki-client