This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa File: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (raw, json) Hash identifier: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM= Subject key identifier: B1:70:73:DF:D3:4E:3D:27:A3:27:0D:C5:AB:E9:06:57:F8:21:57:24 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019B7C13373976A124F8167C3EE8F2E872B1 Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa Signing time: Fri 02 Jan 2026 00:19:52 +0000 ROA not before: Fri 02 Jan 2026 00:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206150 IP address blocks: 185.151.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:37:39:76:a1:24:f8:16:7c:3e:e8:f2:e8:72:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Jan 2 00:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b17073dfd34e3d27a3270dc5abe90657f8215724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a0:7e:cf:ca:b8:37:92:ad:48:b2:6e:85:b9: 31:59:ef:56:8b:a9:46:b3:2a:eb:4b:48:a8:cb:a8: dd:80:3b:4b:46:c1:23:7b:dd:0b:0a:29:9d:cd:61: ab:d6:b0:05:c8:1e:70:9a:11:89:7f:ac:2c:40:9a: 47:6f:19:39:95:39:ae:d1:2e:83:82:e6:84:96:16: 92:5a:79:df:8e:6f:62:ab:2b:34:f8:78:54:77:f7: cf:5c:f8:c1:bf:d7:21:67:77:57:d0:61:e4:38:78: 04:fc:6c:6d:6c:e0:20:0e:9e:73:a9:5e:90:7e:04: bf:35:cb:b7:e4:c9:ac:c0:b8:e6:68:39:a1:1d:bb: 95:a5:79:e8:9f:c0:fa:cb:90:91:8c:11:7c:3c:f4: 5b:e2:d3:29:5c:ca:99:58:22:6e:ee:75:7e:f7:b8: 6a:13:82:53:9c:6a:35:b6:ac:1a:75:b3:56:a3:5b: f0:ee:3e:36:48:0a:58:bd:cb:54:37:5b:0b:f2:ec: 57:2f:4f:03:14:ac:30:8c:df:08:b6:6b:f0:83:ae: dc:65:c0:e3:28:a0:76:30:09:ce:65:d7:8c:35:c4: 40:c5:04:63:9d:dd:57:0b:e3:85:9f:8f:db:49:ed: b7:30:11:70:83:85:71:66:41:e9:d5:16:1e:c9:6a: 53:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:70:73:DF:D3:4E:3D:27:A3:27:0D:C5:AB:E9:06:57:F8:21:57:24 X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.144.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:66:26:a8:e4:f5:bf:20:8c:3d:fb:54:7f:23:ca:c6:6f:53: 21:88:80:21:40:ec:ac:76:8b:4a:00:af:ba:81:54:a5:1c:06: 54:b0:69:4e:60:bd:bd:59:85:35:80:cc:b5:4d:5e:60:fd:91: df:cd:a1:19:77:fa:98:76:72:5e:bd:d2:ac:2f:a8:4a:9c:65: 7c:c1:eb:ff:08:cb:5b:31:d1:df:ad:d6:ba:c2:b3:ee:1b:5e: b2:80:63:97:b5:eb:69:3e:62:c5:fe:7b:5c:f7:99:08:44:de: 3e:8b:60:8d:ab:86:1d:12:74:ef:8e:23:3e:ec:fa:01:6a:7e: 34:8d:71:13:b9:7d:b3:9a:66:ef:ee:60:23:c4:6c:89:c8:50: 1b:dd:f8:45:6b:2a:ed:6c:05:f8:26:1c:44:38:5b:95:cc:aa: f5:f1:f0:83:d9:38:50:63:a4:56:38:03:ae:80:bb:04:87:d9: 14:01:77:7a:e1:f9:42:81:20:91:8b:42:ce:36:ba:8c:db:d3: 07:5a:d6:34:ee:68:1c:58:16:5c:a7:cd:1f:32:39:1c:29:0a: ed:9f:11:c3:34:30:3d:e3:4e:cc:6a:d2:71:46:47:44:3b:6e: 74:90:93:3e:d6:d2:6b:c3:e7:6c:54:dc:6f:a5:ee:82:66:dc: f2:d8:29:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ezc5dqEk+BZ8Pujy6HKxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYwMTAyMDAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTcwNzNkZmQzNGUzZDI3YTMyNzBkYzVhYmU5MDY1N2Y4MjE1NzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aB+z8q4N5KtSLJuhbkxWe9Wi6lG syrrS0ioy6jdgDtLRsEje90LCimdzWGr1rAFyB5wmhGJf6wsQJpHbxk5lTmu0S6D guaElhaSWnnfjm9iqys0+HhUd/fPXPjBv9chZ3dX0GHkOHgE/GxtbOAgDp5zqV6Q fgS/Ncu35MmswLjmaDmhHbuVpXnon8D6y5CRjBF8PPRb4tMpXMqZWCJu7nV+97hq E4JTnGo1tqwadbNWo1vw7j42SApYvctUN1sL8uxXL08DFKwwjN8Itmvwg67cZcDj KKB2MAnOZdeMNcRAxQRjnd1XC+OFn4/bSe23MBFwg4VxZkHp1RYeyWpTdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLFwc9/TTj0noycNxavpBlf4IVckMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvc1hCejM5Tk9QU2VqSnczRnEta0dWX2doVnlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZeQMA0G CSqGSIb3DQEBCwUAA4IBAQAdZiao5PW/IIw9+1R/I8rGb1MhiIAhQOysdotKAK+6 gVSlHAZUsGlOYL29WYU1gMy1TV5g/ZHfzaEZd/qYdnJevdKsL6hKnGV8wev/CMtb MdHfrda6wrPuG16ygGOXtetpPmLF/ntc95kIRN4+i2CNq4YdEnTvjiM+7PoBan40 jXETuX2zmmbv7mAjxGyJyFAb3fhFayrtbAX4JhxEOFuVzKr18fCD2ThQY6RWOAOu gLsEh9kUAXd64flCgSCRi0LONrqM29MHWtY07mgcWBZcp80fMjkcKQrtnxHDNDA9 407MatJxRkdEO250kJM+1tJrw+dsVNxvpe6CZtzy2CnE -----END CERTIFICATE-----Generated at Sun Jan 25 13:04:49 2026 by rpki-client