This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/SiLSIEYAwNCN6yfvfGLloC6RIXg.roa File: SiLSIEYAwNCN6yfvfGLloC6RIXg.roa (raw, json) Hash identifier: f37/jtR+gmt7ksn8/WXr+fSg16YuTdrSXAgeLfyiBrs= Subject key identifier: 4A:22:D2:20:46:00:C0:D0:8D:EB:27:EF:7C:62:E5:A0:2E:91:21:78 Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060 Certificate serial: 019B7DCA9B83F81A3EBA810937E22277410B Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/SiLSIEYAwNCN6yfvfGLloC6RIXg.roa Signing time: Fri 02 Jan 2026 08:19:48 +0000 ROA not before: Fri 02 Jan 2026 08:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211675 IP address blocks: 104.219.72.0/23 maxlen: 23 2a0d:da06::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:9b:83:f8:1a:3e:ba:81:09:37:e2:22:77:41:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66e92c341e769443fde1d27566044b4b65159060 Validity Not Before: Jan 2 08:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a22d2204600c0d08deb27ef7c62e5a02e912178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:37:21:7b:f9:43:14:d8:5d:74:f1:20:e7:9e: 29:ac:b1:fa:0f:a9:f2:db:1b:17:c9:76:1b:71:e5: 86:f7:f4:e0:b7:01:6c:39:85:44:0a:a0:d4:c4:f9: 46:85:e3:cb:42:32:97:cf:17:c7:d1:29:b6:51:95: 5f:15:fc:3b:e8:92:14:ee:25:c5:1d:46:ef:0c:1e: 58:8a:47:10:b0:ad:37:b3:b8:68:56:d8:00:04:29: c9:1d:d9:93:48:aa:20:1b:02:97:02:0d:72:ea:3d: 34:23:be:a1:70:8c:00:98:d2:a9:97:34:c8:04:8a: f7:0b:fe:e6:b0:9d:d0:7d:9a:d7:ce:25:07:73:33: 0d:5f:60:44:cd:bb:77:4a:2d:5d:fe:bb:f2:6f:b5: 71:91:29:83:fb:5a:f9:eb:f2:46:1d:8f:5d:bc:82: 36:e9:7c:c7:7b:8e:e0:96:bf:6d:2f:62:fb:a5:94: d0:bd:de:d3:b0:00:e8:68:56:1b:51:1d:07:a7:99: 58:1c:14:7c:f0:5d:0c:ae:5f:3b:b1:cf:ae:d8:30: 97:9b:8a:99:af:a4:73:bb:d5:ac:00:36:43:2c:30: ce:03:c8:c2:a8:07:e4:ed:99:09:b3:5e:8f:f3:32: 99:46:b3:0c:2e:63:83:8d:fe:b6:a4:99:6f:ff:c1: 5a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:22:D2:20:46:00:C0:D0:8D:EB:27:EF:7C:62:E5:A0:2E:91:21:78 X509v3 Authority Key Identifier: keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/SiLSIEYAwNCN6yfvfGLloC6RIXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.219.72.0/23 IPv6: 2a0d:da06::/32 Signature Algorithm: sha256WithRSAEncryption 4a:6f:9d:16:bf:b2:9e:8c:c5:0c:d3:24:80:b7:6c:d3:b6:1d: 42:61:99:46:31:09:b4:12:25:11:4a:a6:1e:33:f5:c2:75:23: 44:4b:ba:53:ff:dc:d0:3f:d9:96:2a:5f:28:99:04:b6:be:64: e1:80:83:7b:7e:b0:16:64:39:e9:ed:85:b2:72:c0:e4:17:bd: 9a:72:6b:de:c5:50:80:c7:54:bd:88:7b:3c:7d:90:c2:b0:a2: 40:c7:8b:7d:8d:21:38:f0:f3:23:2b:0f:4d:15:dc:1d:3c:6a: d5:39:8d:79:aa:53:44:ea:86:cd:d2:15:d3:f8:2f:de:68:81: cf:c1:85:22:6f:3c:6e:12:77:47:01:6a:f2:d1:8c:c4:7a:a0: b4:bc:79:c9:c2:39:f4:a5:ca:c5:44:6e:a9:dc:81:e1:27:18: 06:c8:25:81:38:99:33:46:84:c4:65:d3:60:56:1a:d6:57:cb: 4f:22:25:48:ac:71:60:f6:19:bb:b5:2a:1f:ba:44:dd:02:32: 9b:58:92:0b:9e:13:59:f5:92:66:5b:74:26:b7:2a:8c:16:e8: 05:15:bc:8d:e1:9b:4c:6f:36:c8:1d:c3:1f:a0:6b:55:4f:b9: 6a:4a:ae:7a:1b:87:f1:63:d2:79:d7:a3:c5:44:59:b3:0e:b2: 32:bb:6a:44 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9ypuD+Bo+uoEJN+Iid0ELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZTkyYzM0MWU3Njk0NDNmZGUxZDI3NTY2MDQ0YjRiNjUx NTkwNjAwHhcNMjYwMTAyMDgxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTIyZDIyMDQ2MDBjMGQwOGRlYjI3ZWY3YzYyZTVhMDJlOTEyMTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTche/lDFNhddPEg554prLH6D6ny 2xsXyXYbceWG9/TgtwFsOYVECqDUxPlGhePLQjKXzxfH0Sm2UZVfFfw76JIU7iXF HUbvDB5YikcQsK03s7hoVtgABCnJHdmTSKogGwKXAg1y6j00I76hcIwAmNKplzTI BIr3C/7msJ3QfZrXziUHczMNX2BEzbt3Si1d/rvyb7VxkSmD+1r56/JGHY9dvII2 6XzHe47glr9tL2L7pZTQvd7TsADoaFYbUR0Hp5lYHBR88F0Mrl87sc+u2DCXm4qZ r6Rzu9WsADZDLDDOA8jCqAfk7ZkJs16P8zKZRrMMLmODjf62pJlv/8FaOQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEoi0iBGAMDQjesn73xi5aAukSF4MB8GA1UdIwQY MBaAFGbpLDQedpRD/eHSdWYES0tlFZBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYt YzFkMjk2ZjhmZDA3LzEvU2lMU0lFWUF3TkNONnlmdmZHTGxvQzZSSVhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYtYzFkMjk2ZjhmZDA3 LzEvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBaNtIMA0E AgACMAcDBQAqDdoGMA0GCSqGSIb3DQEBCwUAA4IBAQBKb50Wv7KejMUM0ySAt2zT th1CYZlGMQm0EiURSqYeM/XCdSNES7pT/9zQP9mWKl8omQS2vmThgIN7frAWZDnp 7YWycsDkF72acmvexVCAx1S9iHs8fZDCsKJAx4t9jSE48PMjKw9NFdwdPGrVOY15 qlNE6obN0hXT+C/eaIHPwYUibzxuEndHAWry0YzEeqC0vHnJwjn0pcrFRG6p3IHh JxgGyCWBOJkzRoTEZdNgVhrWV8tPIiVIrHFg9hm7tSofukTdAjKbWJILnhNZ9ZJm W3QmtyqMFugFFbyN4ZtMbzbIHcMfoGtVT7lqSq56G4fxY9J516PFRFmzDrIyu2pE -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:39 2026 by rpki-client