This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/sPvIT2OpPdfQUjumOhMItUZScLE.roa File: sPvIT2OpPdfQUjumOhMItUZScLE.roa (raw, json) Hash identifier: 3ub5VhGbB2HUNoD3TI7D0yCIQk+I5O7LDn2pAlXC/k4= Subject key identifier: B0:FB:C8:4F:63:A9:3D:D7:D0:52:3B:A6:3A:13:08:B5:46:52:70:B1 Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574 Certificate serial: 019B7A5A7299D0742003A1376CC587197CA9 Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/sPvIT2OpPdfQUjumOhMItUZScLE.roa Signing time: Thu 01 Jan 2026 16:18:26 +0000 ROA not before: Thu 01 Jan 2026 16:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49030 IP address blocks: 45.10.120.0/22 maxlen: 24 2a0e:3d80:beaf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:72:99:d0:74:20:03:a1:37:6c:c5:87:19:7c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574 Validity Not Before: Jan 1 16:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0fbc84f63a93dd7d0523ba63a1308b5465270b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:25:77:f4:38:ce:23:54:74:3a:6b:77:6a:3c: 7d:d5:c1:ce:df:63:d8:5d:16:ad:77:c8:4d:0c:78: 19:8a:ef:9e:55:47:4c:ca:da:5c:44:92:f6:c9:1a: 08:8b:60:ac:cb:81:04:a7:15:81:31:bd:d1:bd:aa: c7:39:f6:6d:85:10:68:cb:16:c6:7f:06:6d:c5:70: 6f:27:37:ad:ee:20:5b:58:ef:c7:11:24:ca:bb:f3: b0:47:0c:27:a2:0a:ad:05:2f:6c:3c:47:13:01:f6: 9e:1b:b6:51:0f:66:93:5c:d3:ec:39:52:20:81:7d: cc:3a:fd:0d:54:18:47:66:0b:f4:80:45:b7:11:00: d6:a8:db:53:af:82:5a:a2:9a:e9:88:46:d8:2a:ca: 7f:41:74:fe:18:76:5f:47:cd:38:f8:fa:ce:2c:ec: 9e:fb:ec:6e:a4:bd:91:4d:6f:15:a9:87:24:f1:c2: ef:00:43:ca:d6:3f:90:4d:76:1c:5d:55:46:e8:96: 64:28:10:50:00:51:c7:db:c7:d4:71:88:42:34:43: 9b:46:bb:bf:aa:10:6b:22:18:49:c6:2e:3c:22:a2: bf:cb:14:4a:98:c7:59:d9:dc:ef:a2:12:4a:60:86: 69:42:b4:d8:53:90:73:64:dc:2f:cc:45:84:28:14: 59:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FB:C8:4F:63:A9:3D:D7:D0:52:3B:A6:3A:13:08:B5:46:52:70:B1 X509v3 Authority Key Identifier: keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/sPvIT2OpPdfQUjumOhMItUZScLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.120.0/22 IPv6: 2a0e:3d80:beaf::/48 Signature Algorithm: sha256WithRSAEncryption 6a:bd:8c:bf:83:b3:6e:16:90:4d:6d:8f:e9:d5:12:ee:c4:41: d1:17:12:0b:57:c2:1a:54:33:48:9c:6a:93:83:80:83:98:bb: 6e:31:8e:0d:d8:e8:ef:90:85:f7:98:09:b6:41:0b:1b:50:27: 8a:da:c6:32:86:70:1c:7e:2f:c8:b2:4a:ba:6e:bc:00:20:d4: 28:aa:dc:de:2a:4a:1e:68:47:21:11:ca:c4:75:e3:e0:33:fb: d1:38:f8:2f:23:c6:bb:e1:d7:28:89:3c:d0:3c:8c:ad:61:43: 6c:e5:e8:6b:71:32:36:e1:81:d2:28:eb:5e:02:ec:99:30:59: 4e:b3:16:76:56:6c:33:89:fe:05:7d:f2:f5:2e:ed:18:89:c9: 97:e2:ff:fd:19:fb:bf:77:ed:bb:47:33:8a:e0:15:3b:69:cf: 6b:25:22:41:6c:50:d8:09:80:b0:5d:7e:0c:5f:87:87:2a:af: 0f:de:62:ce:2d:1e:d0:d0:99:9e:c8:23:b6:4f:c1:e6:5f:cb: da:03:c6:cc:b2:35:0d:6e:9f:6e:14:31:f3:2b:e6:c3:0b:e5: b1:cf:95:0f:18:a2:30:49:f0:fd:0c:fc:da:95:90:0f:22:20: 64:ab:a5:80:63:ce:b3:6b:17:92:2e:6d:3a:5a:8c:c6:d4:32: 3c:41:42:f3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6WnKZ0HQgA6E3bMWHGXypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNjA3N2UwMDRlODhlZmY4ZjEzYjc3NDBkZjI1NGQ5ZTQ4 ZGQ1NzQwHhcNMjYwMTAxMTYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGZiYzg0ZjYzYTkzZGQ3ZDA1MjNiYTYzYTEzMDhiNTQ2NTI3MGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCV39DjOI1R0Omt3ajx91cHO32PY XRatd8hNDHgZiu+eVUdMytpcRJL2yRoIi2Csy4EEpxWBMb3RvarHOfZthRBoyxbG fwZtxXBvJzet7iBbWO/HESTKu/OwRwwnogqtBS9sPEcTAfaeG7ZRD2aTXNPsOVIg gX3MOv0NVBhHZgv0gEW3EQDWqNtTr4JaoprpiEbYKsp/QXT+GHZfR804+PrOLOye ++xupL2RTW8VqYck8cLvAEPK1j+QTXYcXVVG6JZkKBBQAFHH28fUcYhCNEObRru/ qhBrIhhJxi48IqK/yxRKmMdZ2dzvohJKYIZpQrTYU5BzZNwvzEWEKBRZGQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLD7yE9jqT3X0FI7pjoTCLVGUnCxMB8GA1UdIwQY MBaAFMxgd+AE6I7/jxO3dA3yVNnkjdV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEt NDY3MWY0YmFhOWIxLzEvc1B2SVQyT3BQZGZRVWp1bU9oTUl0VVpTY0xFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEtNDY3MWY0YmFhOWIx LzEvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLQp4MA8E AgACMAkDBwAqDj2Avq8wDQYJKoZIhvcNAQELBQADggEBAGq9jL+Ds24WkE1tj+nV Eu7EQdEXEgtXwhpUM0icapODgIOYu24xjg3Y6O+QhfeYCbZBCxtQJ4raxjKGcBx+ L8iySrpuvAAg1Ciq3N4qSh5oRyERysR14+Az+9E4+C8jxrvh1yiJPNA8jK1hQ2zl 6GtxMjbhgdIo614C7JkwWU6zFnZWbDOJ/gV98vUu7RiJyZfi//0Z+7937btHM4rg FTtpz2slIkFsUNgJgLBdfgxfh4cqrw/eYs4tHtDQmZ7II7ZPweZfy9oDxsyyNQ1u n24UMfMr5sML5bHPlQ8YojBJ8P0M/NqVkA8iIGSrpYBjzrNrF5IubTpajMbUMjxB QvM= -----END CERTIFICATE-----Generated at Sun Jan 25 10:28:31 2026 by rpki-client