This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/SbsNPH1Ntij3qyUVffsCiIKkGeE.roa File: SbsNPH1Ntij3qyUVffsCiIKkGeE.roa (raw, json) Hash identifier: hjAPDCld8Xta1vPhgXAeIRi+/mILiMGsU19jsuHqOac= Subject key identifier: 49:BB:0D:3C:7D:4D:B6:28:F7:AB:25:15:7D:FB:02:88:82:A4:19:E1 Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019B7BA5185F13F8107831B29FC5756AF058 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/SbsNPH1Ntij3qyUVffsCiIKkGeE.roa Signing time: Thu 01 Jan 2026 22:19:35 +0000 ROA not before: Thu 01 Jan 2026 22:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197968 IP address blocks: 45.135.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:18:5f:13:f8:10:78:31:b2:9f:c5:75:6a:f0:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49bb0d3c7d4db628f7ab25157dfb028882a419e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:12:e1:a4:98:92:3e:3e:84:fd:77:2a:fe:65: eb:a6:8d:33:74:cb:37:e5:70:b9:66:65:1f:a6:7f: aa:e9:ef:f5:5b:50:91:b7:69:36:6b:fd:30:f2:2b: ec:ab:ef:17:8c:cd:49:be:11:13:1d:ff:a8:8c:c9: df:eb:0b:80:8f:2c:7f:4b:84:c4:48:a4:57:1b:08: 92:80:b7:42:14:7e:71:07:bd:6b:53:70:7c:2c:7f: 33:04:9f:df:7f:5e:89:93:29:9d:e0:cc:a7:e3:63: cd:f6:42:ea:c7:9b:cf:64:a7:be:1c:3c:32:47:de: ba:a6:f8:52:e5:f6:76:f5:53:34:a2:47:bb:30:77: 03:eb:fb:e5:8a:2f:d6:29:be:82:d5:9e:19:81:96: f8:73:68:65:e3:53:86:f4:69:58:48:67:56:de:b5: 05:0e:6a:db:9f:79:46:70:e4:73:98:b6:27:88:96: c1:b6:ac:e0:ce:92:94:98:d3:2d:fc:7b:65:0d:9f: c4:c2:e1:78:7f:58:3b:65:30:1b:15:57:18:d6:6c: 54:ac:94:6b:9f:fa:84:16:85:9b:1e:a3:0d:0a:2e: 52:57:47:8c:53:fb:0f:22:b3:b0:e4:d8:eb:04:a0: 64:3b:8d:88:a0:27:2e:7a:91:5e:4e:1c:4f:8f:61: 05:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BB:0D:3C:7D:4D:B6:28:F7:AB:25:15:7D:FB:02:88:82:A4:19:E1 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/SbsNPH1Ntij3qyUVffsCiIKkGeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.215.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:0c:da:a6:96:c7:8c:94:98:e9:31:c9:08:4e:fb:9d:dc:f0: 81:77:b9:85:ba:af:a6:e3:d0:af:e5:98:74:4a:b4:98:ea:e5: 5c:2d:b5:9f:f2:a7:b5:2c:ea:ca:b0:9c:d2:b5:2a:52:66:b2: de:d0:3f:83:d8:b9:55:a1:ff:69:e1:3c:e0:ab:96:d7:21:0c: 3a:e3:d7:45:31:86:38:32:80:3a:cf:b5:b0:01:eb:8a:37:3f: 58:2d:8f:98:64:db:ab:3a:42:2f:bd:f1:50:a3:f5:ee:54:59: 4b:3a:04:1e:c8:bc:df:ed:1a:d7:7b:27:90:b7:08:1c:a3:4b: 6d:ec:79:85:39:fa:6a:cb:58:f2:35:90:3e:82:31:65:66:ea: 73:d6:04:eb:f9:32:bb:e3:94:8f:dd:cc:db:fd:b8:be:f5:0b: 1e:b6:8f:13:fa:1a:dd:77:8a:0b:5a:69:fc:bd:c6:71:08:88: 50:96:25:92:0b:3c:b3:cc:85:65:4d:bc:84:64:5c:70:2d:8b: d3:3c:a5:56:ce:71:90:53:07:d4:6c:6f:af:f5:87:a7:7d:85: 33:17:6e:c9:a1:8d:6a:6c:c0:7c:cf:84:4e:5f:86:17:3f:0f: 08:12:ed:c4:ba:9c:0d:99:5d:ad:68:30:9b:bd:e7:64:a4:1e: c2:62:88:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pRhfE/gQeDGyn8V1avBYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWJiMGQzYzdkNGRiNjI4ZjdhYjI1MTU3ZGZiMDI4ODgyYTQxOWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxLhpJiSPj6E/Xcq/mXrpo0zdMs3 5XC5ZmUfpn+q6e/1W1CRt2k2a/0w8ivsq+8XjM1JvhETHf+ojMnf6wuAjyx/S4TE SKRXGwiSgLdCFH5xB71rU3B8LH8zBJ/ff16Jkymd4Myn42PN9kLqx5vPZKe+HDwy R966pvhS5fZ29VM0oke7MHcD6/vlii/WKb6C1Z4ZgZb4c2hl41OG9GlYSGdW3rUF Dmrbn3lGcORzmLYniJbBtqzgzpKUmNMt/HtlDZ/EwuF4f1g7ZTAbFVcY1mxUrJRr n/qEFoWbHqMNCi5SV0eMU/sPIrOw5NjrBKBkO42IoCcuepFeThxPj2EFzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEm7DTx9TbYo96slFX37AoiCpBnhMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvU2JzTlBIMU50aWozcXlVVmZmc0NpSUtrR2VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYfXMA0G CSqGSIb3DQEBCwUAA4IBAQAMDNqmlseMlJjpMckITvud3PCBd7mFuq+m49Cv5Zh0 SrSY6uVcLbWf8qe1LOrKsJzStSpSZrLe0D+D2LlVof9p4Tzgq5bXIQw649dFMYY4 MoA6z7WwAeuKNz9YLY+YZNurOkIvvfFQo/XuVFlLOgQeyLzf7RrXeyeQtwgco0tt 7HmFOfpqy1jyNZA+gjFlZupz1gTr+TK745SP3czb/bi+9Qseto8T+hrdd4oLWmn8 vcZxCIhQliWSCzyzzIVlTbyEZFxwLYvTPKVWznGQUwfUbG+v9YenfYUzF27JoY1q bMB8z4ROX4YXPw8IEu3EupwNmV2taDCbvedkpB7CYogE -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:56 2026 by rpki-client