This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/sFz5mtE3Mde8lSIcx7T2y7lO-zw.roa File: sFz5mtE3Mde8lSIcx7T2y7lO-zw.roa (raw, json) Hash identifier: NxGgl9GbDugZBPBW0o4P8z6yiV+CD/pDM33YvrxHjSY= Subject key identifier: B0:5C:F9:9A:D1:37:31:D7:BC:95:22:1C:C7:B4:F6:CB:B9:4E:FB:3C Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449 Certificate serial: 019B7DCB4E6B38D5867D62621526565907AD Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/sFz5mtE3Mde8lSIcx7T2y7lO-zw.roa Signing time: Fri 02 Jan 2026 08:20:34 +0000 ROA not before: Fri 02 Jan 2026 08:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46071 IP address blocks: 94.207.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4e:6b:38:d5:86:7d:62:62:15:26:56:59:07:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449 Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b05cf99ad13731d7bc95221cc7b4f6cbb94efb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ed:3a:82:c8:0b:a1:97:81:e2:62:59:5f:26: 76:5a:39:ed:af:35:13:02:a5:96:33:e5:a5:dd:aa: 59:11:a4:1d:40:61:ef:d1:7c:3b:02:2a:ff:47:99: 9f:77:27:36:c8:ae:d6:c1:11:c4:88:6f:74:c1:50: 64:a6:42:98:2e:6c:40:cd:eb:5c:28:c4:a0:e8:68: c6:71:d0:6f:b6:c9:a6:20:23:ba:4a:15:48:70:d4: ad:bd:b4:ff:55:f5:f2:ee:63:8c:da:f4:11:f5:23: 76:6a:8d:8d:46:0f:73:d7:64:5d:4e:bb:1a:3b:7d: 05:7c:92:e4:e7:f7:f2:da:82:fc:7f:f8:eb:c3:4b: 98:5e:11:c1:05:ce:08:a1:67:7d:46:5f:ea:c8:2b: f1:18:e5:b6:35:e5:f5:33:0d:57:0d:af:bf:6f:12: ac:f6:2c:98:87:72:11:15:2a:2d:ff:3e:28:78:b0: 02:e6:bc:e8:97:dc:77:b1:57:f2:44:c4:8c:37:b2: 7c:b8:10:57:f9:b0:e6:a9:9c:9f:39:6a:35:06:5b: 19:e6:e0:02:6e:49:27:dc:6c:6d:07:42:0f:20:bc: 65:6b:0e:c2:09:14:af:39:7f:71:7c:94:cc:cb:63: e8:88:2e:0c:10:ae:53:ea:e9:56:85:3f:2c:90:9b: 8e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5C:F9:9A:D1:37:31:D7:BC:95:22:1C:C7:B4:F6:CB:B9:4E:FB:3C X509v3 Authority Key Identifier: keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/sFz5mtE3Mde8lSIcx7T2y7lO-zw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.207.40.0/24 Signature Algorithm: sha256WithRSAEncryption 18:cf:a1:11:0c:7c:21:bd:83:11:a4:e8:1d:ab:5a:64:30:f8: 34:c0:30:3d:ba:44:85:d7:45:9d:15:01:d6:d2:d4:2a:03:2c: d4:13:47:83:1f:bb:f0:b0:93:14:cf:9c:4f:b1:b4:d1:41:3c: a5:e6:33:2e:2b:09:4b:bb:ee:61:07:8d:66:59:36:c0:68:72: eb:90:39:94:1f:23:f7:d6:1b:85:49:ad:ee:35:0a:c8:59:08: a2:98:c1:cb:aa:fb:62:34:60:b1:91:cb:80:c3:29:26:24:a8: 99:14:4d:b5:5c:aa:1f:57:e6:3b:85:df:55:da:7d:7f:37:7e: f0:25:83:09:44:e6:81:b3:b2:05:78:7d:7e:96:63:d1:0f:49: ca:28:93:23:63:74:19:77:ac:cc:74:1c:c8:1d:df:73:de:53: 09:b5:39:d8:b0:18:9c:7a:ff:d8:12:8c:0e:01:7c:e5:68:1a: 01:87:41:14:f4:5d:d8:21:c6:e3:9f:2a:3b:61:44:58:1c:49: ae:50:57:5a:2c:07:d4:7e:1d:de:73:54:96:5a:dd:cb:00:73: b6:8e:b3:36:64:46:12:6d:d9:35:1e:21:0f:6d:91:94:19:93: 9e:7c:35:99:91:33:52:ba:85:6f:0d:a8:e0:39:79:bd:07:34: 32:39:96:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y05rONWGfWJiFSZWWQetMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZGE2MGYwNDlkZmJhMzRiZTRiNGU4NDE4YjlmZjQ5MjEy NWM0NDkwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDVjZjk5YWQxMzczMWQ3YmM5NTIyMWNjN2I0ZjZjYmI5NGVmYjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu06gsgLoZeB4mJZXyZ2WjntrzUT AqWWM+Wl3apZEaQdQGHv0Xw7Air/R5mfdyc2yK7WwRHEiG90wVBkpkKYLmxAzetc KMSg6GjGcdBvtsmmICO6ShVIcNStvbT/VfXy7mOM2vQR9SN2ao2NRg9z12RdTrsa O30FfJLk5/fy2oL8f/jrw0uYXhHBBc4IoWd9Rl/qyCvxGOW2NeX1Mw1XDa+/bxKs 9iyYh3IRFSot/z4oeLAC5rzol9x3sVfyRMSMN7J8uBBX+bDmqZyfOWo1BlsZ5uAC bkkn3GxtB0IPILxlaw7CCRSvOX9xfJTMy2PoiC4MEK5T6ulWhT8skJuOnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLBc+ZrRNzHXvJUiHMe09su5Tvs8MB8GA1UdIwQY MBaAFInaYPBJ37o0vktOhBi5/0khJcRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUt Njk4OTBjODI5ZTMzLzEvc0Z6NW10RTNNZGU4bFNJY3g3VDJ5N2xPLXp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUtNjk4OTBjODI5ZTMz LzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXs8oMA0G CSqGSIb3DQEBCwUAA4IBAQAYz6ERDHwhvYMRpOgdq1pkMPg0wDA9ukSF10WdFQHW 0tQqAyzUE0eDH7vwsJMUz5xPsbTRQTyl5jMuKwlLu+5hB41mWTbAaHLrkDmUHyP3 1huFSa3uNQrIWQiimMHLqvtiNGCxkcuAwykmJKiZFE21XKofV+Y7hd9V2n1/N37w JYMJROaBs7IFeH1+lmPRD0nKKJMjY3QZd6zMdBzIHd9z3lMJtTnYsBicev/YEowO AXzlaBoBh0EU9F3YIcbjnyo7YURYHEmuUFdaLAfUfh3ec1SWWt3LAHO2jrM2ZEYS bdk1HiEPbZGUGZOefDWZkTNSuoVvDajgOXm9BzQyOZYq -----END CERTIFICATE-----Generated at Sun Jan 25 16:39:19 2026 by rpki-client