This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/sltPVYNXyX3HM6mTIe2E6MEOa4Q.roa File: sltPVYNXyX3HM6mTIe2E6MEOa4Q.roa (raw, json) Hash identifier: myvFYoXQz/pPQaI+zt/UsJxjmt7PUBokhbr3Wq0mEHg= Subject key identifier: B2:5B:4F:55:83:57:C9:7D:C7:33:A9:93:21:ED:84:E8:C1:0E:6B:84 Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39 Certificate serial: 019B7C80C5587849B0235E60610D337DAEDE Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/sltPVYNXyX3HM6mTIe2E6MEOa4Q.roa Signing time: Fri 02 Jan 2026 02:19:32 +0000 ROA not before: Fri 02 Jan 2026 02:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212508 IP address blocks: 176.97.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c5:58:78:49:b0:23:5e:60:61:0d:33:7d:ae:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39 Validity Not Before: Jan 2 02:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b25b4f558357c97dc733a99321ed84e8c10e6b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8c:ca:2a:bc:43:99:60:36:a8:0f:d8:6e:fd: 67:f4:cf:28:18:fb:71:c3:c1:7e:32:48:c4:1c:f3: 4a:0d:e7:82:7d:a3:c2:fe:62:f5:c6:d1:70:32:80: 20:8c:61:2f:19:52:ac:61:57:17:76:1e:4f:2c:68: 44:5e:a9:7c:66:d2:61:c5:14:4d:c2:58:d3:31:11: 06:06:a6:e8:7a:75:d3:99:0f:53:dd:7a:62:65:39: 90:7c:0e:87:66:54:52:93:d2:5f:61:5a:48:aa:32: 50:55:07:60:5f:01:86:9b:f5:c2:39:f5:a4:69:63: a1:ef:17:2a:13:37:80:09:25:7a:3a:9c:4f:13:f8: cd:e0:28:09:8b:23:c7:78:ce:10:04:ac:5e:27:25: be:0f:1d:6e:48:77:b3:f5:96:f9:8b:07:f4:a6:2c: df:3d:fd:8e:b6:45:e0:66:da:1b:ec:91:8b:1d:42: bd:a3:df:c4:e1:4f:90:da:d8:ec:ba:c7:2b:53:93: 73:3c:68:93:7e:c8:03:2e:d6:b9:b2:c0:a7:db:0b: 7d:e4:77:b4:f4:e6:23:91:a4:f0:a2:cb:4c:cc:e4: 33:84:eb:47:5b:db:53:48:55:d6:7c:a8:82:4b:ac: 12:8f:8b:ed:d2:72:f3:76:43:62:d6:8a:21:ed:86: be:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5B:4F:55:83:57:C9:7D:C7:33:A9:93:21:ED:84:E8:C1:0E:6B:84 X509v3 Authority Key Identifier: keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/sltPVYNXyX3HM6mTIe2E6MEOa4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.97.212.0/24 Signature Algorithm: sha256WithRSAEncryption 54:08:52:24:fc:d5:81:27:f6:e8:ac:ab:96:15:09:97:21:cf: 27:eb:5c:66:3f:33:d7:7e:07:35:3a:7e:e6:51:10:2b:e9:ba: 90:06:89:8e:12:45:54:36:bc:41:37:84:15:29:e7:fc:d1:16: d6:fd:cf:f8:ac:17:b7:34:6a:60:7e:c1:32:c0:e4:95:3a:83: db:4c:64:a4:88:74:48:0e:77:f7:59:b7:80:22:d2:8e:81:9b: d4:a9:79:2d:39:35:28:8c:26:cb:45:7f:9e:4d:38:06:54:8b: 0d:83:85:62:43:69:05:bc:c5:47:74:f2:b6:45:0b:11:8c:68: 19:3e:5b:fc:06:26:41:0f:d4:64:db:cd:56:bc:d0:f4:49:a2: 81:9a:7d:fd:ed:e1:ca:21:70:49:61:2b:66:9a:26:47:59:dc: 51:6e:11:a7:9d:c1:ca:c1:72:f0:eb:3b:a9:8a:ea:83:31:42: 37:bc:32:86:ee:32:6d:b2:2a:ca:29:79:e5:b1:cf:3f:5b:19: 7d:43:3a:cc:aa:05:a8:a9:a7:84:0d:7a:1b:e6:d3:3d:a1:da: 93:54:50:e0:46:70:07:fb:39:4c:53:4a:2e:20:56:b3:cc:35: 42:56:9f:d7:0e:88:ea:ef:54:ea:84:d4:ad:09:28:aa:cf:56: 34:72:53:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gMVYeEmwI15gYQ0zfa7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljM2NmY2RlMTNiNjYwYjVjODMxZGFmYmUxYmZiZjY4ZGY5 ZmJlMzkwHhcNMjYwMTAyMDIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjViNGY1NTgzNTdjOTdkYzczM2E5OTMyMWVkODRlOGMxMGU2Yjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14zKKrxDmWA2qA/Ybv1n9M8oGPtx w8F+MkjEHPNKDeeCfaPC/mL1xtFwMoAgjGEvGVKsYVcXdh5PLGhEXql8ZtJhxRRN wljTMREGBqboenXTmQ9T3XpiZTmQfA6HZlRSk9JfYVpIqjJQVQdgXwGGm/XCOfWk aWOh7xcqEzeACSV6OpxPE/jN4CgJiyPHeM4QBKxeJyW+Dx1uSHez9Zb5iwf0pizf Pf2OtkXgZtob7JGLHUK9o9/E4U+Q2tjsuscrU5NzPGiTfsgDLta5ssCn2wt95He0 9OYjkaTwostMzOQzhOtHW9tTSFXWfKiCS6wSj4vt0nLzdkNi1ooh7Ya+TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLJbT1WDV8l9xzOpkyHthOjBDmuEMB8GA1UdIwQY MBaAFJw8/N4TtmC1yDHa++G/v2jfn745MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAt Njg3OWNjMjZkN2I2LzEvc2x0UFZZTlh5WDNITTZtVEllMkU2TUVPYTRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAtNjg3OWNjMjZkN2I2 LzEvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGHUMA0G CSqGSIb3DQEBCwUAA4IBAQBUCFIk/NWBJ/borKuWFQmXIc8n61xmPzPXfgc1On7m URAr6bqQBomOEkVUNrxBN4QVKef80RbW/c/4rBe3NGpgfsEywOSVOoPbTGSkiHRI Dnf3WbeAItKOgZvUqXktOTUojCbLRX+eTTgGVIsNg4ViQ2kFvMVHdPK2RQsRjGgZ Plv8BiZBD9Rk281WvND0SaKBmn397eHKIXBJYStmmiZHWdxRbhGnncHKwXLw6zup iuqDMUI3vDKG7jJtsirKKXnlsc8/Wxl9QzrMqgWoqaeEDXob5tM9odqTVFDgRnAH +zlMU0ouIFazzDVCVp/XDojq71TqhNStCSiqz1Y0clOU -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:08 2026 by rpki-client