This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa File: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (raw, json) Hash identifier: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI= Subject key identifier: 4A:07:3F:1A:76:A3:F0:30:49:1C:00:D4:03:07:80:B2:00:BE:F4:7B Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255 Certificate serial: 019B797DE085916924F53A2E5BFFCAF204EC Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa Signing time: Thu 01 Jan 2026 12:17:31 +0000 ROA not before: Thu 01 Jan 2026 12:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 46.29.234.0/24 maxlen: 24 46.29.235.0/24 maxlen: 24 46.29.238.0/24 maxlen: 24 85.159.228.0/24 maxlen: 24 85.159.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e0:85:91:69:24:f5:3a:2e:5b:ff:ca:f2:04:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255 Validity Not Before: Jan 1 12:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a073f1a76a3f030491c00d4030780b200bef47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6e:01:f7:17:10:aa:b5:fe:63:1a:d3:58:8a: 70:1b:d5:06:38:d7:d1:65:69:97:4b:b3:54:60:ee: 29:f0:07:86:be:fe:a2:8f:89:02:b2:c7:bf:4d:43: da:a7:e0:40:37:df:9c:e7:77:6c:c5:c6:0a:94:51: 9c:76:14:b4:00:4b:cc:05:32:23:b6:7e:67:20:f2: 8f:d6:0f:f6:ca:5d:69:c9:8f:6d:31:4b:53:ac:0e: 12:27:72:30:0b:17:74:d2:86:08:99:9f:6e:5a:00: cc:9d:fe:a1:b5:56:3c:dd:ec:63:1b:c6:58:68:d0: a5:3c:4c:c5:4f:9e:dc:a1:54:4f:78:37:35:ae:5f: 77:76:86:cc:b4:b3:18:53:60:19:e3:61:58:c3:10: 82:f8:e3:bb:e0:bb:0e:f2:23:2a:52:95:2c:97:97: 09:53:12:d3:fd:17:1b:f5:da:14:bc:23:18:07:0f: f9:a4:3c:79:1d:18:3e:25:7c:27:73:96:bd:3e:40: 5a:3d:57:90:ff:01:2f:b1:1d:d3:44:37:07:ca:6a: 7f:1d:b7:86:d9:c5:26:28:e0:1a:aa:1a:f2:f0:e9: 8f:36:30:e7:09:6f:26:af:7d:1a:66:74:80:e0:05: d9:33:a7:ea:72:e2:ce:58:cd:12:4b:a1:cd:1e:88: 14:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:07:3F:1A:76:A3:F0:30:49:1C:00:D4:03:07:80:B2:00:BE:F4:7B X509v3 Authority Key Identifier: keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.234.0/23 46.29.238.0/24 85.159.228.0/23 Signature Algorithm: sha256WithRSAEncryption 77:7b:f0:c0:1e:84:e4:27:ca:9f:24:24:bd:06:07:2f:aa:3a: 0b:ca:a4:1f:e2:63:00:26:4e:b3:1d:bc:85:bf:d9:71:47:a4: b5:1f:bd:1e:cd:f9:ca:3c:cf:ec:18:07:ca:20:a5:f7:21:84: 3a:ea:99:8c:0d:97:ad:32:48:d1:39:ae:67:4d:02:65:10:c3: f3:c6:a5:0a:c6:3e:1a:4c:79:b0:88:a5:33:c3:fb:3f:fb:de: f3:72:c0:c3:24:a8:01:63:53:9b:16:53:42:97:78:ef:80:0d: 22:ce:37:4c:54:4f:d9:da:b3:c0:d9:7b:44:0a:d7:0e:24:f7: 0f:19:6f:f7:c1:84:cc:7d:0c:ae:72:ed:2f:bf:29:a9:a7:e2: df:1e:fe:76:5c:f3:ea:0b:c8:d2:f9:b2:a4:81:c5:75:cd:cd: ea:78:ac:a0:b6:9b:8b:4e:aa:e4:9d:05:b0:da:ab:5a:97:17: 2e:db:54:a3:4c:83:04:38:e0:42:9a:9e:43:65:40:f4:7f:92: aa:3d:97:ba:9b:61:ed:4c:60:90:34:1e:82:05:73:1a:60:6c: 97:bf:73:6c:f3:cd:25:76:c3:0c:69:59:fb:39:7e:cb:f0:44: c2:6d:53:e9:62:8d:33:4f:3e:dc:9f:33:1a:37:38:01:a7:d1: da:40:54:5e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5feCFkWkk9TouW//K8gTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1 NDEyNTUwHhcNMjYwMTAxMTIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTA3M2YxYTc2YTNmMDMwNDkxYzAwZDQwMzA3ODBiMjAwYmVmNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp24B9xcQqrX+YxrTWIpwG9UGONfR ZWmXS7NUYO4p8AeGvv6ij4kCsse/TUPap+BAN9+c53dsxcYKlFGcdhS0AEvMBTIj tn5nIPKP1g/2yl1pyY9tMUtTrA4SJ3IwCxd00oYImZ9uWgDMnf6htVY83exjG8ZY aNClPEzFT57coVRPeDc1rl93dobMtLMYU2AZ42FYwxCC+OO74LsO8iMqUpUsl5cJ UxLT/Rcb9doUvCMYBw/5pDx5HRg+JXwnc5a9PkBaPVeQ/wEvsR3TRDcHymp/HbeG 2cUmKOAaqhry8OmPNjDnCW8mr30aZnSA4AXZM6fqcuLOWM0SS6HNHogUKQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEoHPxp2o/AwSRwA1AMHgLIAvvR7MB8GA1UdIwQY MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt ZGY3OTNhOTQwYmFiLzEvU2djX0duYWo4REJKSEFEVUF3ZUFzZ0MtOUhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLh3qAwQA Lh3uAwQBVZ/kMA0GCSqGSIb3DQEBCwUAA4IBAQB3e/DAHoTkJ8qfJCS9BgcvqjoL yqQf4mMAJk6zHbyFv9lxR6S1H70ezfnKPM/sGAfKIKX3IYQ66pmMDZetMkjROa5n TQJlEMPzxqUKxj4aTHmwiKUzw/s/+97zcsDDJKgBY1ObFlNCl3jvgA0izjdMVE/Z 2rPA2XtECtcOJPcPGW/3wYTMfQyucu0vvympp+LfHv52XPPqC8jS+bKkgcV1zc3q eKygtpuLTqrknQWw2qtalxcu21SjTIMEOOBCmp5DZUD0f5KqPZe6m2HtTGCQNB6C BXMaYGyXv3Ns880ldsMMaVn7OX7L8ETCbVPpYo0zTz7cnzMaNzgBp9HaQFRe -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:29 2026 by rpki-client