This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/0Sfi1GQLepJdH6-nAUQ0Hu0ZdhY.roa File: 0Sfi1GQLepJdH6-nAUQ0Hu0ZdhY.roa (raw, json) Hash identifier: +q6McyBv6XD45sefW820BUSULPS6zrmqGUIvxYOPOus= Subject key identifier: D1:27:E2:D4:64:0B:7A:92:5D:1F:AF:A7:01:44:34:1E:ED:19:76:16 Certificate issuer: /CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0 Certificate serial: 019B7A5B5F5A4EF48E975E0FBB338598EC1A Authority key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/0Sfi1GQLepJdH6-nAUQ0Hu0ZdhY.roa Signing time: Thu 01 Jan 2026 16:19:26 +0000 ROA not before: Thu 01 Jan 2026 16:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12703 IP address blocks: 185.196.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5f:5a:4e:f4:8e:97:5e:0f:bb:33:85:98:ec:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0 Validity Not Before: Jan 1 16:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d127e2d4640b7a925d1fafa70144341eed197616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:64:c0:f5:d0:0e:7b:e9:40:e6:29:ba:5c:73: b2:71:20:8b:42:ea:b5:9e:ea:c9:b2:01:71:45:68: f8:84:0e:29:15:70:b1:9d:94:0a:09:d0:93:64:56: b3:e0:f7:b1:50:73:e9:ef:5a:4a:6e:e5:87:71:0b: a2:e9:1b:eb:d8:87:67:32:e5:31:56:53:24:4d:af: 70:e7:94:cb:74:85:40:52:36:db:4f:28:b7:ff:73: 56:7a:7e:1b:9f:03:ae:c8:e4:5f:d4:91:53:22:70: 8d:a9:77:9f:9c:fb:78:11:a8:61:78:0a:7f:aa:94: 36:9b:33:68:62:22:1c:f0:e8:2c:db:82:e0:8e:1c: fa:d0:4e:07:fb:37:b6:52:bf:5c:a4:73:25:8d:09: 9a:1b:88:58:36:c8:18:6c:13:89:a8:83:84:88:f0: ce:8b:35:ca:d1:b9:2e:aa:20:af:96:c1:0c:b5:50: 9e:25:41:5c:a2:00:4f:5a:44:0a:0f:81:d9:85:ae: f4:6f:20:40:01:54:bd:47:5d:51:12:b7:40:82:c5: 90:d8:50:f3:c4:e9:46:a9:c2:34:b1:15:9f:ad:c7: 84:8e:c1:d0:28:07:96:ff:b6:d8:1a:ab:54:9f:8f: 81:3f:ad:28:1e:2f:54:86:00:e8:bc:cb:7b:7c:30: c1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:27:E2:D4:64:0B:7A:92:5D:1F:AF:A7:01:44:34:1E:ED:19:76:16 X509v3 Authority Key Identifier: keyid:5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/0Sfi1GQLepJdH6-nAUQ0Hu0ZdhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.100.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:bd:d1:75:c3:c9:5d:6f:5a:d1:0e:62:91:23:6a:d7:fa:4b: af:bb:72:06:71:93:01:d1:71:b9:95:bd:6b:d8:2a:6b:55:b0: 01:17:30:54:f7:35:ca:34:6f:c7:99:1e:64:78:e2:f8:a7:38: 9b:23:d0:4f:d5:e2:01:51:a6:8f:04:2c:67:b3:c8:83:f8:65: a6:42:57:d8:eb:b5:e6:ac:aa:b3:77:47:ae:27:a0:c2:a3:14: aa:70:7e:69:af:cc:fe:11:4a:bb:66:6e:7b:71:d7:41:34:43: 49:37:d8:4d:e7:9e:c4:de:15:d9:8c:f6:ea:2d:a1:ed:91:1d: 7c:4f:de:c3:8b:be:ed:6c:4c:36:62:ae:bf:55:86:dd:5e:b9: b8:d6:09:03:66:48:46:f6:f5:39:be:50:55:da:e6:c9:25:a1: a8:ae:05:2a:b9:ee:e4:a4:d4:34:10:37:c8:3d:4a:f1:21:aa: 65:c3:c0:43:32:ad:fc:16:63:63:87:61:d3:9c:55:ef:9a:3c: b6:f6:4c:59:b0:a2:f5:06:4f:8b:aa:b8:3c:ec:d2:49:a9:3a: e9:e6:ba:86:37:84:12:29:8d:74:47:54:2e:44:d0:19:7a:a2: 30:7c:83:fe:74:aa:0a:1f:46:b4:c5:d9:83:44:59:5e:11:5f: 98:c9:7b:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W19aTvSOl14PuzOFmOwaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZTFhYWUwYzkzYWQwNGI3Mjk4MDgyYjY4YmY2YTU0ZmE2 OGJjZjAwHhcNMjYwMTAxMTYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTI3ZTJkNDY0MGI3YTkyNWQxZmFmYTcwMTQ0MzQxZWVkMTk3NjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmTA9dAOe+lA5im6XHOycSCLQuq1 nurJsgFxRWj4hA4pFXCxnZQKCdCTZFaz4PexUHPp71pKbuWHcQui6Rvr2IdnMuUx VlMkTa9w55TLdIVAUjbbTyi3/3NWen4bnwOuyORf1JFTInCNqXefnPt4EahheAp/ qpQ2mzNoYiIc8Ogs24Lgjhz60E4H+ze2Ur9cpHMljQmaG4hYNsgYbBOJqIOEiPDO izXK0bkuqiCvlsEMtVCeJUFcogBPWkQKD4HZha70byBAAVS9R11RErdAgsWQ2FDz xOlGqcI0sRWfrceEjsHQKAeW/7bYGqtUn4+BP60oHi9UhgDovMt7fDDBzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNEn4tRkC3qSXR+vpwFENB7tGXYWMB8GA1UdIwQY MBaAFFzhquDJOtBLcpgIK2i/alT6aLzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE9HcTRNazYwRXR5bUFncmFMOXFWUHBvdlBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mZjM2MTgtNzAzMi00MTQzLTkzNzQt YmExNDE4ZDIyMDg3LzEvMFNmaTFHUUxlcEpkSDYtbkFVUTBIdTBaZGhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9mZjM2MTgtNzAzMi00MTQzLTkzNzQtYmExNDE4ZDIyMDg3 LzEvWE9HcTRNazYwRXR5bUFncmFMOXFWUHBvdlBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucRkMA0G CSqGSIb3DQEBCwUAA4IBAQBKvdF1w8ldb1rRDmKRI2rX+kuvu3IGcZMB0XG5lb1r 2CprVbABFzBU9zXKNG/HmR5keOL4pzibI9BP1eIBUaaPBCxns8iD+GWmQlfY67Xm rKqzd0euJ6DCoxSqcH5pr8z+EUq7Zm57cddBNENJN9hN557E3hXZjPbqLaHtkR18 T97Di77tbEw2Yq6/VYbdXrm41gkDZkhG9vU5vlBV2ubJJaGorgUque7kpNQ0EDfI PUrxIaplw8BDMq38FmNjh2HTnFXvmjy29kxZsKL1Bk+Lqrg87NJJqTrp5rqGN4QS KY10R1QuRNAZeqIwfIP+dKoKH0a0xdmDRFleEV+YyXv7 -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:19 2026 by rpki-client