This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/SheiKMejj2UlfePnEJK4YM6UYGQ.roa File: SheiKMejj2UlfePnEJK4YM6UYGQ.roa (raw, json) Hash identifier: Ll9jhdHvmhGlynW15LRcU3rlqzasSbGuWZW11z3vQs0= Subject key identifier: 4A:17:A2:28:C7:A3:8F:65:25:7D:E3:E7:10:92:B8:60:CE:94:60:64 Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2 Certificate serial: 019B7CEE67D632E473CCB945AB701FC0FDE5 Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/SheiKMejj2UlfePnEJK4YM6UYGQ.roa Signing time: Fri 02 Jan 2026 04:19:17 +0000 ROA not before: Fri 02 Jan 2026 04:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208033 IP address blocks: 45.158.206.0/23 maxlen: 23 2a0c:dc80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:67:d6:32:e4:73:cc:b9:45:ab:70:1f:c0:fd:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a17a228c7a38f65257de3e71092b860ce946064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:46:74:db:9b:12:ef:e5:b7:54:5b:d8:94: 60:6a:56:b6:ae:2c:d8:82:b8:d9:63:41:b0:e4:6d: 18:14:d3:22:4d:9a:0e:53:88:a9:38:d8:5c:9b:14: db:57:9e:f8:c6:62:ed:af:bd:c1:57:61:c1:02:d5: 2f:9f:7c:cf:47:b6:7c:a8:a4:c0:90:8e:41:02:13: b8:1c:f0:67:bd:df:45:a4:c9:ef:39:d8:bb:a8:6f: 8f:ae:e0:9b:0d:2e:e8:27:ae:ce:5a:54:d3:d0:2e: 76:28:de:fe:7f:00:82:98:e4:9e:2d:0f:59:0e:ef: 29:aa:e8:4e:5e:b8:4c:c2:fa:69:fc:c6:28:cd:05: 39:38:aa:17:86:1d:db:0a:93:7c:01:4f:84:aa:b4: 5e:40:76:78:38:7b:49:e7:0a:3f:93:56:71:3b:f8: f8:d6:cc:ed:32:f3:25:35:a8:b2:41:6b:33:8b:5a: 25:be:53:14:2c:67:e5:07:68:4a:2d:8c:8a:b6:89: c1:16:e6:c0:f1:49:87:76:a5:2b:a1:28:29:01:90: 1a:0a:41:95:df:7a:a7:5d:e2:0c:77:b6:26:8a:e6: 56:c3:7f:57:a8:66:b8:9a:54:94:13:fb:9b:63:7f: f8:ee:6c:56:fc:9d:f5:be:6d:53:83:90:15:17:67: 29:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:17:A2:28:C7:A3:8F:65:25:7D:E3:E7:10:92:B8:60:CE:94:60:64 X509v3 Authority Key Identifier: keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/SheiKMejj2UlfePnEJK4YM6UYGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.206.0/23 IPv6: 2a0c:dc80::/32 Signature Algorithm: sha256WithRSAEncryption 5d:73:ac:59:60:45:fd:ec:0e:da:e1:af:ea:e1:cc:da:56:a9: fb:04:df:b1:bd:84:c1:96:21:a5:b7:d1:08:fc:3c:7c:7e:a0: b0:b2:3c:6c:36:fd:b0:b3:68:02:e1:be:62:6f:47:08:3f:6e: b1:f4:c0:c8:0f:7e:dd:3a:0b:c8:da:c0:83:91:cd:18:76:9b: 2e:92:6e:a8:24:fc:03:5b:72:b2:d7:f6:70:d9:6a:3f:fa:84: 24:e5:56:5e:f1:47:2a:7d:4f:7a:f9:d9:d6:15:dc:71:13:c9: 2d:b7:c0:e4:51:5d:f9:59:ae:02:c9:d4:5b:ba:69:f1:0f:5a: 04:8b:51:de:b5:7d:39:c2:9b:84:56:51:a4:ad:5a:06:1f:0b: a0:ae:e4:be:fc:cc:a1:b1:69:8c:ec:fb:95:cd:dd:18:6a:63: f4:22:da:d9:a3:2b:63:b9:43:18:5b:c6:de:c2:7d:6c:f0:fb: 9f:95:4e:17:c2:46:f5:4b:a8:c9:61:f2:fc:06:9a:5b:20:ff: 1a:cd:0c:a8:76:52:59:cf:ee:cb:42:d4:2f:d1:62:9b:4f:29: f3:b1:99:fb:3a:aa:05:0f:8f:e8:7e:3d:71:ba:3c:54:56:02: ce:0e:9b:19:36:45:40:cf:38:df:20:fa:48:a9:92:96:cb:8f: eb:ad:cb:4a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87mfWMuRzzLlFq3AfwP3lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMTY2MThiNzFmZmM4MGUxYzNmNDFlZDBkZmM4OWFiNWU5 NjNmZDIwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTE3YTIyOGM3YTM4ZjY1MjU3ZGUzZTcxMDkyYjg2MGNlOTQ2MDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKVGdNubEu/lt1Rb2JRgala2rizY grjZY0Gw5G0YFNMiTZoOU4ipONhcmxTbV574xmLtr73BV2HBAtUvn3zPR7Z8qKTA kI5BAhO4HPBnvd9FpMnvOdi7qG+PruCbDS7oJ67OWlTT0C52KN7+fwCCmOSeLQ9Z Du8pquhOXrhMwvpp/MYozQU5OKoXhh3bCpN8AU+EqrReQHZ4OHtJ5wo/k1ZxO/j4 1sztMvMlNaiyQWszi1olvlMULGflB2hKLYyKtonBFubA8UmHdqUroSgpAZAaCkGV 33qnXeIMd7YmiuZWw39XqGa4mlSUE/ubY3/47mxW/J31vm1Tg5AVF2cp8wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEoXoijHo49lJX3j5xCSuGDOlGBkMB8GA1UdIwQY MBaAFIoWYYtx/8gOHD9B7Q38iatelj/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUt MjkxYWFlZGQ1OGNjLzEvU2hlaUtNZWpqMlVsZmVQbkVKSzRZTTZVWUdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUtMjkxYWFlZGQ1OGNj LzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLZ7OMA0E AgACMAcDBQAqDNyAMA0GCSqGSIb3DQEBCwUAA4IBAQBdc6xZYEX97A7a4a/q4cza Vqn7BN+xvYTBliGlt9EI/Dx8fqCwsjxsNv2ws2gC4b5ib0cIP26x9MDID37dOgvI 2sCDkc0Ydpsukm6oJPwDW3Ky1/Zw2Wo/+oQk5VZe8UcqfU96+dnWFdxxE8ktt8Dk UV35Wa4CydRbumnxD1oEi1HetX05wpuEVlGkrVoGHwugruS+/MyhsWmM7PuVzd0Y amP0ItrZoytjuUMYW8bewn1s8PuflU4Xwkb1S6jJYfL8BppbIP8azQyodlJZz+7L QtQv0WKbTynzsZn7OqoFD4/ofj1xujxUVgLODpsZNkVAzzjfIPpIqZKWy4/rrctK -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:48 2026 by rpki-client