This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/s1suhFRxtQqXFfjNjSFyRNz1-dY.roa File: s1suhFRxtQqXFfjNjSFyRNz1-dY.roa (raw, json) Hash identifier: B73+BcivVDYXNoW7reCUol9H0cBeuwXyj3jXoDEGt/E= Subject key identifier: B3:5B:2E:84:54:71:B5:0A:97:15:F8:CD:8D:21:72:44:DC:F5:F9:D6 Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933 Certificate serial: 019B797EB4437F50649DE14FCC18D057FBA6 Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/s1suhFRxtQqXFfjNjSFyRNz1-dY.roa Signing time: Thu 01 Jan 2026 12:18:25 +0000 ROA not before: Thu 01 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31083 IP address blocks: 2.56.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b4:43:7f:50:64:9d:e1:4f:cc:18:d0:57:fb:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933 Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b35b2e845471b50a9715f8cd8d217244dcf5f9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e6:8a:6c:59:30:52:9c:34:f7:1b:d6:f4:b9: 55:f1:69:ba:7a:e3:a2:ca:92:c4:3d:0d:86:56:fb: fa:fa:ef:72:1d:05:1a:54:36:47:a0:95:a0:ab:17: 9c:b6:35:4c:12:d9:91:c3:06:e5:5c:35:5b:fc:94: c4:3e:92:a9:e1:92:fd:51:7f:1f:20:60:a4:11:ed: 49:4b:2e:59:e6:61:c7:d6:3a:35:11:ae:db:64:a4: 58:d9:28:e8:2f:eb:07:87:2c:20:8a:6c:26:50:c4: 73:2f:bd:dc:fc:4e:e6:51:2e:63:d9:ba:96:fc:b2: b8:9b:a6:3f:88:e6:0f:a6:71:c1:d4:42:db:81:8d: ef:fe:ea:40:19:32:93:47:4e:91:22:24:19:6c:00: c3:db:3d:6c:32:42:11:64:62:61:73:5d:59:d4:76: 03:37:86:b5:db:ef:6c:bf:a7:6b:6f:c6:4f:ef:fc: e0:7b:99:2d:d9:0f:c5:39:b4:04:e2:2d:90:ea:4f: 34:f8:21:6d:7e:b1:81:b8:e4:8d:ed:de:5f:d2:40: f7:95:e0:e5:12:92:b5:15:e4:c0:19:0c:94:28:90: e9:db:98:06:8f:49:6a:bb:ee:a2:79:a3:49:19:37: 6c:92:22:85:a3:f1:6e:66:0a:24:a2:0c:99:70:28: 77:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5B:2E:84:54:71:B5:0A:97:15:F8:CD:8D:21:72:44:DC:F5:F9:D6 X509v3 Authority Key Identifier: keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/s1suhFRxtQqXFfjNjSFyRNz1-dY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.15.0/24 Signature Algorithm: sha256WithRSAEncryption d1:09:6b:44:1b:26:f6:5a:a8:0b:24:e2:00:12:d0:88:08:77: 5c:f8:15:8c:89:fe:1e:76:fa:24:45:7d:e7:20:fc:34:15:d3: 6f:8b:b3:03:ef:bf:01:28:6e:e5:1a:75:97:09:f8:2e:78:27: 9b:1c:a6:9a:8c:05:1c:a4:ba:74:f4:38:c3:a3:5c:8c:4e:18: f4:83:e5:ee:c3:99:03:03:09:6e:be:cf:e6:a3:95:84:03:5a: 8c:2f:0a:e3:64:09:b5:93:91:1c:07:bb:66:ca:11:c5:22:cf: 7a:73:ae:86:2c:bc:78:3f:30:5a:73:9b:b9:02:c5:48:d3:d2: 6e:55:f8:d8:63:f1:42:90:ac:54:b1:3d:c7:85:d5:0e:5f:54: 88:bc:64:1b:88:6a:c8:0f:93:14:68:87:3e:41:7b:84:50:8e: 04:b1:bd:d2:a3:bc:fc:90:f2:29:7e:82:d1:26:a2:d9:5b:08: 11:4e:bc:33:5c:02:2b:1a:d8:dd:89:9d:55:b8:65:1e:89:e8: bf:28:91:66:5a:44:5b:af:98:5f:b8:7b:39:60:a7:d5:77:01: 3b:f2:c8:5c:ec:df:bf:21:fa:73:cc:45:68:10:1d:95:5b:d4: 0a:ef:f6:c5:2c:03:50:9c:d1:d1:d5:6d:c9:cf:3d:65:94:a2: de:5f:76:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5frRDf1BkneFPzBjQV/umMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NjRlMGFmMjhiNzU1YzRlYzg4MDEwZDk0Mjk4Njk3ZDE4 ODM5MzMwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzViMmU4NDU0NzFiNTBhOTcxNWY4Y2Q4ZDIxNzI0NGRjZjVmOWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOaKbFkwUpw09xvW9LlV8Wm6euOi ypLEPQ2GVvv6+u9yHQUaVDZHoJWgqxectjVMEtmRwwblXDVb/JTEPpKp4ZL9UX8f IGCkEe1JSy5Z5mHH1jo1Ea7bZKRY2SjoL+sHhywgimwmUMRzL73c/E7mUS5j2bqW /LK4m6Y/iOYPpnHB1ELbgY3v/upAGTKTR06RIiQZbADD2z1sMkIRZGJhc11Z1HYD N4a12+9sv6drb8ZP7/zge5kt2Q/FObQE4i2Q6k80+CFtfrGBuOSN7d5f0kD3leDl EpK1FeTAGQyUKJDp25gGj0lqu+6ieaNJGTdskiKFo/FuZgokogyZcCh3RQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLNbLoRUcbUKlxX4zY0hckTc9fnWMB8GA1UdIwQY MBaAFLRk4K8ot1XE7IgBDZQphpfRiDkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wY2FhNmQtMTA5ZS00NWYzLWE5MzIt NDc1YzVjOTFmNDc0LzEvczFzdWhGUnh0UXFYRmZqTmpTRnlSTnoxLWRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8wY2FhNmQtMTA5ZS00NWYzLWE5MzItNDc1YzVjOTFmNDc0 LzEvdEdUZ3J5aTNWY1RzaUFFTmxDbUdsOUdJT1RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjgPMA0G CSqGSIb3DQEBCwUAA4IBAQDRCWtEGyb2WqgLJOIAEtCICHdc+BWMif4edvokRX3n IPw0FdNvi7MD778BKG7lGnWXCfgueCebHKaajAUcpLp09DjDo1yMThj0g+Xuw5kD Awluvs/mo5WEA1qMLwrjZAm1k5EcB7tmyhHFIs96c66GLLx4PzBac5u5AsVI09Ju VfjYY/FCkKxUsT3HhdUOX1SIvGQbiGrID5MUaIc+QXuEUI4Esb3So7z8kPIpfoLR JqLZWwgRTrwzXAIrGtjdiZ1VuGUeiei/KJFmWkRbr5hfuHs5YKfVdwE78shc7N+/ IfpzzEVoEB2VW9QK7/bFLANQnNHR1W3Jzz1llKLeX3Zz -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:15 2026 by rpki-client