This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/SBw2sRcEYdon7evLEvCs5xc_C6k.roa File: SBw2sRcEYdon7evLEvCs5xc_C6k.roa (raw, json) Hash identifier: dtCak8ginb330vCiqf3v6jkCU08KZGlvjwjODQ4sXx4= Subject key identifier: 48:1C:36:B1:17:04:61:DA:27:ED:EB:CB:12:F0:AC:E7:17:3F:0B:A9 Certificate issuer: /CN=6735a8295a30d7dfcac2a570b8decb25c4652140 Certificate serial: 019B7F1475C37203E9F1DB48AABD6FB96C1A Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/SBw2sRcEYdon7evLEvCs5xc_C6k.roa Signing time: Fri 02 Jan 2026 14:20:05 +0000 ROA not before: Fri 02 Jan 2026 14:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 185.233.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:75:c3:72:03:e9:f1:db:48:aa:bd:6f:b9:6c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140 Validity Not Before: Jan 2 14:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=481c36b1170461da27edebcb12f0ace7173f0ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:c4:a5:a6:0d:4c:fd:1f:9a:27:bf:80:e6: be:0c:8e:11:e5:10:64:53:66:37:dc:73:ae:d1:20: bb:0d:45:10:0b:01:e5:44:6b:7d:b5:4f:4a:0e:f8: dc:8f:d8:66:03:68:e0:fd:2d:23:d0:4f:07:1c:70: 47:75:65:be:19:45:8b:43:4e:b1:1d:a3:45:5c:cb: 91:02:b1:b7:12:37:23:64:57:09:f2:4c:33:af:4f: 22:e0:1e:e7:66:ad:b6:f1:e1:64:6d:19:07:a3:2d: 70:b4:4d:df:75:12:d4:6c:19:c7:a2:75:d8:31:3d: cf:e3:00:88:7d:1a:c5:9e:f5:a8:22:f2:84:a1:04: 83:e5:a4:1d:ef:a7:5f:45:e2:2a:dc:10:80:5a:83: 99:b6:f8:54:29:01:d6:31:2a:57:e1:a5:65:b7:65: 09:4d:f2:6f:a6:d0:17:c9:8b:8e:44:43:f6:f4:ad: 36:e2:2a:57:64:f8:71:d6:24:f7:0d:78:c6:3f:8f: f8:6f:60:31:f4:c1:e4:e6:a2:f2:27:18:5b:33:1d: 59:56:59:20:0e:76:74:35:9d:fd:c3:83:74:88:fb: 27:cb:d2:86:fd:0a:a8:7a:03:e6:de:e3:e8:68:cf: b2:66:06:91:38:43:05:cd:d3:98:85:cd:a9:26:57: 19:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1C:36:B1:17:04:61:DA:27:ED:EB:CB:12:F0:AC:E7:17:3F:0B:A9 X509v3 Authority Key Identifier: keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/SBw2sRcEYdon7evLEvCs5xc_C6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.235.0/24 Signature Algorithm: sha256WithRSAEncryption 32:fe:f6:72:74:a1:90:23:4a:e0:4e:14:16:04:a4:41:f2:55: 40:3d:16:19:a5:4b:5b:85:05:ee:4e:9f:e6:19:18:46:73:76: e2:56:b2:3f:b1:09:49:49:d6:d1:6f:d7:3b:26:a8:43:2a:df: 7a:9b:7e:7b:cd:f8:31:8c:4d:ec:0b:24:c9:a7:4d:22:9d:af: e9:b3:fb:95:c7:f3:d6:ea:3d:33:f4:c6:f2:cb:fa:49:a3:28: fa:88:4b:c4:58:b5:e0:72:a4:4b:e3:14:b6:d0:6a:e7:b9:d2: de:ec:25:b0:ba:c2:1e:52:9d:ab:d6:b3:8e:43:41:6f:b4:63: 96:01:68:7f:4f:35:c7:b2:20:df:38:48:3b:5b:50:d5:9f:46: 90:1f:78:57:98:f0:7c:66:71:95:5c:a4:9b:29:37:1f:65:2a: ad:44:02:88:85:fc:29:5a:ad:f7:62:65:72:c0:aa:b3:c8:4b: d1:5f:e8:5c:a5:54:55:51:a9:35:4f:c3:72:16:06:76:03:f0: b9:7f:05:e3:72:6c:9c:bb:3b:e9:7e:46:00:8f:a8:4b:2c:55: e3:d4:ad:d0:2c:93:50:75:f6:95:64:53:d2:0e:85:f0:72:d7: 7f:fe:a4:d1:6a:0b:b8:75:49:1b:3b:e2:3a:a2:1f:8a:38:c4: d8:68:a4:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FHXDcgPp8dtIqr1vuWwaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MzVhODI5NWEzMGQ3ZGZjYWMyYTU3MGI4ZGVjYjI1YzQ2 NTIxNDAwHhcNMjYwMTAyMTQyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODFjMzZiMTE3MDQ2MWRhMjdlZGViY2IxMmYwYWNlNzE3M2YwYmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9LEpaYNTP0fmie/gOa+DI4R5RBk U2Y33HOu0SC7DUUQCwHlRGt9tU9KDvjcj9hmA2jg/S0j0E8HHHBHdWW+GUWLQ06x HaNFXMuRArG3EjcjZFcJ8kwzr08i4B7nZq228eFkbRkHoy1wtE3fdRLUbBnHonXY MT3P4wCIfRrFnvWoIvKEoQSD5aQd76dfReIq3BCAWoOZtvhUKQHWMSpX4aVlt2UJ TfJvptAXyYuOREP29K024ipXZPhx1iT3DXjGP4/4b2Ax9MHk5qLyJxhbMx1ZVlkg DnZ0NZ39w4N0iPsny9KG/QqoegPm3uPoaM+yZgaROEMFzdOYhc2pJlcZ2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEgcNrEXBGHaJ+3ryxLwrOcXPwupMB8GA1UdIwQY MBaAFGc1qClaMNffysKlcLjeyyXEZSFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnpXb0tWb3cxOV9Ld3FWd3VON0xKY1JsSVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMGIwZWMtNzA1NS00ZWJjLTk2ZmMt MThlMThkNjU5ZDhmLzEvU0J3MnNSY0VZZG9uN2V2TEV2Q3M1eGNfQzZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xMGIwZWMtNzA1NS00ZWJjLTk2ZmMtMThlMThkNjU5ZDhm LzEvWnpXb0tWb3cxOV9Ld3FWd3VON0xKY1JsSVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuenrMA0G CSqGSIb3DQEBCwUAA4IBAQAy/vZydKGQI0rgThQWBKRB8lVAPRYZpUtbhQXuTp/m GRhGc3biVrI/sQlJSdbRb9c7JqhDKt96m357zfgxjE3sCyTJp00ina/ps/uVx/PW 6j0z9Mbyy/pJoyj6iEvEWLXgcqRL4xS20GrnudLe7CWwusIeUp2r1rOOQ0FvtGOW AWh/TzXHsiDfOEg7W1DVn0aQH3hXmPB8ZnGVXKSbKTcfZSqtRAKIhfwpWq33YmVy wKqzyEvRX+hcpVRVUak1T8NyFgZ2A/C5fwXjcmycuzvpfkYAj6hLLFXj1K3QLJNQ dfaVZFPSDoXwctd//qTRagu4dUkbO+I6oh+KOMTYaKRw -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:40 2026 by rpki-client