This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/sFBfSSEwiyS0ygmkCruy8_1YRIE.roa File: sFBfSSEwiyS0ygmkCruy8_1YRIE.roa (raw, json) Hash identifier: 4EunHb1+zsKxtS/WLEJozWmgDLf80+fe8Qd3r1EEC+8= Subject key identifier: B0:50:5F:49:21:30:8B:24:B4:CA:09:A4:0A:BB:B2:F3:FD:58:44:81 Certificate issuer: /CN=573cec9063a88741841908b0c5297fcdbb439530 Certificate serial: 019B76EB0EBA8E700A2631A99FED568E5165 Authority key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/sFBfSSEwiyS0ygmkCruy8_1YRIE.roa Signing time: Thu 01 Jan 2026 00:17:54 +0000 ROA not before: Thu 01 Jan 2026 00:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198584 IP address blocks: 194.117.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0e:ba:8e:70:0a:26:31:a9:9f:ed:56:8e:51:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573cec9063a88741841908b0c5297fcdbb439530 Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0505f4921308b24b4ca09a40abbb2f3fd584481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:13:f0:c2:95:82:d5:3f:d4:9d:26:87:64: 46:2b:11:a1:a5:ca:8d:63:05:9a:96:8d:bd:fd:d2: 13:94:79:28:17:b7:b4:19:94:78:a9:73:e6:7b:ea: d9:ea:6a:c2:32:ef:42:5b:b6:5b:a0:cc:1e:d0:15: 0c:bd:62:a6:b0:6c:64:4b:55:01:e2:f5:d6:13:e9: 54:21:87:61:60:d6:50:76:7e:ac:13:48:90:3a:6c: 0f:c5:61:63:ef:14:5e:d4:5c:83:a1:99:64:59:3d: a9:a2:c9:09:4f:35:93:a3:cc:e0:cc:9e:df:b9:c5: c7:55:7b:08:1c:04:03:08:c5:88:fb:63:1a:67:a0: dd:79:62:29:1a:49:93:60:94:30:c9:ad:19:3b:65: 51:e8:3a:9e:37:0e:57:51:2d:a4:ef:c4:63:96:77: 32:25:13:92:de:a1:62:5d:76:69:db:87:d6:3a:89: 09:46:f2:c3:b3:e4:34:79:9b:e4:e5:73:f2:71:93: 7f:aa:df:06:b5:da:04:78:39:cf:45:44:0f:42:f9: 02:1f:f7:70:ab:04:2a:4a:02:4e:49:76:78:3e:a2: 13:c1:5e:f4:c2:b6:f0:5e:80:ab:dc:a4:b6:71:1b: 4b:da:22:7e:52:df:08:1a:b0:8d:da:3c:3c:ef:ef: 05:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:50:5F:49:21:30:8B:24:B4:CA:09:A4:0A:BB:B2:F3:FD:58:44:81 X509v3 Authority Key Identifier: keyid:57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/sFBfSSEwiyS0ygmkCruy8_1YRIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.117.64.0/24 Signature Algorithm: sha256WithRSAEncryption 40:7e:10:63:8f:65:71:36:bd:ca:7c:8d:75:5f:d0:11:ea:24: 21:83:22:bb:a2:2e:99:4a:24:cc:3b:4c:3b:bb:fb:f2:cc:d2: f1:51:70:ab:c6:dd:5d:56:bd:96:72:e2:8f:71:ae:05:e1:7e: b6:28:97:94:ed:16:40:f2:7a:66:e6:61:54:f6:d3:fd:37:5c: 55:44:6a:8d:55:e2:11:99:8b:97:84:f8:37:6f:e7:b5:d6:a9: 3c:a6:44:fb:82:7f:4c:06:8f:dc:49:3c:c5:7c:59:2f:11:a6: d0:d9:22:79:e3:ba:f1:67:24:ea:42:0d:e3:06:b4:d2:56:47: 8e:44:4d:dc:c9:64:ca:12:7a:8f:7d:6d:f7:57:2d:f3:20:a9: ba:9f:cc:7c:81:e1:d2:b2:26:2d:f4:47:f5:68:67:71:a0:8d: 93:9f:91:ef:9b:01:8a:c8:45:3f:72:67:c4:5e:bf:4c:bb:c0: 72:7b:30:12:d7:3a:b6:1b:6e:6f:58:ac:64:a4:d9:fd:21:f1: 02:8e:fa:36:72:97:08:54:2d:41:bb:2f:cb:46:fb:68:48:3f: a2:d5:5a:34:d4:cf:7f:05:2e:c6:90:23:0c:22:82:d7:9a:dc: 7c:95:a6:6a:1a:d6:ba:08:90:a6:2f:6e:b5:af:cb:73:47:bc: f9:f8:8e:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26w66jnAKJjGpn+1WjlFlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3M2NlYzkwNjNhODg3NDE4NDE5MDhiMGM1Mjk3ZmNkYmI0 Mzk1MzAwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDUwNWY0OTIxMzA4YjI0YjRjYTA5YTQwYWJiYjJmM2ZkNTg0NDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAMT8MKVgtU/1J0mh2RGKxGhpcqN YwWalo29/dITlHkoF7e0GZR4qXPme+rZ6mrCMu9CW7ZboMwe0BUMvWKmsGxkS1UB 4vXWE+lUIYdhYNZQdn6sE0iQOmwPxWFj7xRe1FyDoZlkWT2poskJTzWTo8zgzJ7f ucXHVXsIHAQDCMWI+2MaZ6DdeWIpGkmTYJQwya0ZO2VR6DqeNw5XUS2k78Rjlncy JROS3qFiXXZp24fWOokJRvLDs+Q0eZvk5XPycZN/qt8GtdoEeDnPRUQPQvkCH/dw qwQqSgJOSXZ4PqITwV70wrbwXoCr3KS2cRtL2iJ+Ut8IGrCN2jw87+8FdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLBQX0khMIsktMoJpAq7svP9WESBMB8GA1UdIwQY MBaAFFc87JBjqIdBhBkIsMUpf827Q5UwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wN2RkNTgtMmQyZS00MjZlLTllMWEt NTQ1NGU1YTE2ZjQyLzEvc0ZCZlNTRXdpeVMweWdta0NydXk4XzFZUklFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wN2RkNTgtMmQyZS00MjZlLTllMWEtNTQ1NGU1YTE2ZjQy LzEvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnVAMA0G CSqGSIb3DQEBCwUAA4IBAQBAfhBjj2VxNr3KfI11X9AR6iQhgyK7oi6ZSiTMO0w7 u/vyzNLxUXCrxt1dVr2WcuKPca4F4X62KJeU7RZA8npm5mFU9tP9N1xVRGqNVeIR mYuXhPg3b+e11qk8pkT7gn9MBo/cSTzFfFkvEabQ2SJ547rxZyTqQg3jBrTSVkeO RE3cyWTKEnqPfW33Vy3zIKm6n8x8geHSsiYt9Ef1aGdxoI2Tn5HvmwGKyEU/cmfE Xr9Mu8ByezAS1zq2G25vWKxkpNn9IfECjvo2cpcIVC1Buy/LRvtoSD+i1Vo01M9/ BS7GkCMMIoLXmtx8laZqGta6CJCmL261r8tzR7z5+I4a -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:14 2026 by rpki-client