This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/sX8X8t5bLx5e9NlwtAhqgtdPNk8.roa File: sX8X8t5bLx5e9NlwtAhqgtdPNk8.roa (raw, json) Hash identifier: aA8zSHT5VSnqP+d0FtT5slL3SDhnzQhEgfOiya9p+Rw= Subject key identifier: B1:7F:17:F2:DE:5B:2F:1E:5E:F4:D9:70:B4:08:6A:82:D7:4F:36:4F Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C123AA07806FC2B38F8B5BDB2B088BD Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/sX8X8t5bLx5e9NlwtAhqgtdPNk8.roa Signing time: Fri 02 Jan 2026 00:18:48 +0000 ROA not before: Fri 02 Jan 2026 00:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210690 IP address blocks: 193.255.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:3a:a0:78:06:fc:2b:38:f8:b5:bd:b2:b0:88:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b17f17f2de5b2f1e5ef4d970b4086a82d74f364f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8a:09:9f:13:f6:25:b2:cf:98:5f:71:3f:10: e6:71:e9:80:68:6a:7e:eb:81:52:75:98:9a:2f:99: c1:4b:9b:5b:37:45:12:c1:d6:d9:4c:22:06:e7:25: 73:fc:08:dc:87:1f:76:5b:b2:1f:20:af:b3:58:ef: df:37:3f:82:a2:1d:f2:8a:6b:be:1e:ac:8e:a2:d6: 41:c8:04:e6:15:87:e6:b2:10:c5:71:46:ec:d4:1b: 13:32:7a:4c:63:4a:b0:95:66:d1:bd:32:e7:88:3f: 73:4d:b1:f2:18:4d:38:33:31:7d:1d:35:7d:c9:99: 55:23:d4:d2:40:1c:cf:9c:51:98:28:29:c8:6b:4f: 45:1d:c6:32:9e:24:be:d0:d6:48:e0:29:20:1c:64: 12:f4:b4:54:7d:91:8c:32:1c:f6:21:d2:d8:11:0a: a4:ce:1d:8b:00:d2:75:e4:ab:3e:8a:61:8e:72:30: ea:36:49:91:1d:5d:b8:a1:ca:dc:47:dc:50:e2:b6: 69:5a:ba:74:75:85:ab:8f:3a:86:d8:f5:51:ec:00: ba:08:51:8e:3f:19:99:6e:f2:6d:fc:25:84:b5:f8: 3c:79:ea:59:df:f6:9d:12:21:3e:37:e5:87:bb:5e: ab:5b:5a:19:56:13:6f:25:21:23:05:80:a8:3f:73: e2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7F:17:F2:DE:5B:2F:1E:5E:F4:D9:70:B4:08:6A:82:D7:4F:36:4F X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/sX8X8t5bLx5e9NlwtAhqgtdPNk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.255.56.0/23 Signature Algorithm: sha256WithRSAEncryption a7:4a:27:05:86:43:5a:39:7a:1b:1d:9c:1b:3a:db:39:eb:34: 8f:29:b0:a0:c1:86:1d:1b:84:b5:fd:f8:ac:f0:e0:41:de:ac: 8f:42:a6:ee:c7:eb:db:24:7f:a1:2e:3e:06:5a:fe:01:8a:b7: ee:ee:20:14:d4:83:ce:19:97:3f:59:6c:bf:82:34:80:84:c3: 83:86:f7:cb:2c:f0:b2:5e:2d:45:71:ca:15:a1:ab:2e:54:08: 8e:b3:ac:f5:dd:1a:30:c3:81:8e:9d:eb:e6:20:65:69:1b:7d: 87:db:76:ec:8b:88:03:bb:29:1f:ab:50:65:f6:b6:84:71:12: fb:5c:28:31:a9:f2:ea:95:0e:83:1c:6d:ca:eb:15:8f:b6:68: 69:11:79:72:6e:16:46:4e:bc:98:00:ed:fc:be:82:6e:b6:bb: d1:23:f9:91:d6:2a:98:6a:38:b7:01:0e:59:20:d1:90:2f:3e: d3:17:4f:47:ca:5f:1b:0a:bd:ed:d3:9f:67:07:c1:50:a4:51: bc:75:ea:fd:bf:7e:18:c4:d9:c0:83:eb:1c:7f:52:0d:3e:e3: cb:30:2f:d3:e7:31:f4:ea:a4:29:9b:e3:ab:83:a7:f4:a4:d0: 40:63:55:53:b5:21:2a:f0:97:15:82:05:1c:f6:58:ee:82:3f: 39:53:ec:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EjqgeAb8Kzj4tb2ysIi9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTdmMTdmMmRlNWIyZjFlNWVmNGQ5NzBiNDA4NmE4MmQ3NGYzNjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvooJnxP2JbLPmF9xPxDmcemAaGp+ 64FSdZiaL5nBS5tbN0USwdbZTCIG5yVz/Ajchx92W7IfIK+zWO/fNz+Coh3yimu+ HqyOotZByATmFYfmshDFcUbs1BsTMnpMY0qwlWbRvTLniD9zTbHyGE04MzF9HTV9 yZlVI9TSQBzPnFGYKCnIa09FHcYyniS+0NZI4CkgHGQS9LRUfZGMMhz2IdLYEQqk zh2LANJ15Ks+imGOcjDqNkmRHV24ocrcR9xQ4rZpWrp0dYWrjzqG2PVR7AC6CFGO PxmZbvJt/CWEtfg8eepZ3/adEiE+N+WHu16rW1oZVhNvJSEjBYCoP3PiZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLF/F/LeWy8eXvTZcLQIaoLXTzZPMB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvc1g4WDh0NWJMeDVlOU5sd3RBaHFndGRQTms4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwf84MA0G CSqGSIb3DQEBCwUAA4IBAQCnSicFhkNaOXobHZwbOts56zSPKbCgwYYdG4S1/fis 8OBB3qyPQqbux+vbJH+hLj4GWv4Birfu7iAU1IPOGZc/WWy/gjSAhMODhvfLLPCy Xi1FccoVoasuVAiOs6z13Roww4GOnevmIGVpG32H23bsi4gDuykfq1Bl9raEcRL7 XCgxqfLqlQ6DHG3K6xWPtmhpEXlybhZGTryYAO38voJutrvRI/mR1iqYaji3AQ5Z INGQLz7TF09Hyl8bCr3t059nB8FQpFG8der9v34YxNnAg+scf1INPuPLMC/T5zH0 6qQpm+Org6f0pNBAY1VTtSEq8JcVggUc9ljugj85U+w3 -----END CERTIFICATE-----Generated at Mon Jan 26 11:05:59 2026 by rpki-client