This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/SBRDFZic25roQ81mZEDjAjCB4bc.roa File: SBRDFZic25roQ81mZEDjAjCB4bc.roa (raw, json) Hash identifier: jm40+6/CGX7BLaLhAqBs+E2y7gUcW8aW5d0PjhtMnYY= Subject key identifier: 48:14:43:15:98:9C:DB:9A:E8:43:CD:66:64:40:E3:02:30:81:E1:B7 Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e Certificate serial: 019B7C80D1E509CC11A769804619F0CCA6D9 Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/SBRDFZic25roQ81mZEDjAjCB4bc.roa Signing time: Fri 02 Jan 2026 02:19:35 +0000 ROA not before: Fri 02 Jan 2026 02:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8751 IP address blocks: 37.156.71.0/24 maxlen: 32 85.204.224.0/21 maxlen: 32 85.204.232.0/24 maxlen: 32 85.204.234.0/23 maxlen: 32 85.204.236.0/22 maxlen: 32 85.204.236.0/24 maxlen: 32 86.105.164.0/22 maxlen: 32 86.105.164.0/23 maxlen: 32 86.105.166.0/23 maxlen: 32 86.107.224.0/20 maxlen: 32 86.107.246.0/23 maxlen: 32 93.113.0.0/20 maxlen: 32 93.113.11.0/24 maxlen: 32 93.113.13.0/24 maxlen: 32 185.85.200.0/22 maxlen: 32 188.215.112.0/21 maxlen: 32 188.215.112.0/23 maxlen: 32 188.215.112.0/24 maxlen: 32 188.215.114.0/24 maxlen: 32 188.215.115.0/24 maxlen: 24 188.215.118.0/24 maxlen: 32 2001:67c:2580::/48 maxlen: 48 2a03:7420::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d1:e5:09:cc:11:a7:69:80:46:19:f0:cc:a6:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e Validity Not Before: Jan 2 02:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48144315989cdb9ae843cd666440e3023081e1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:83:f2:9f:59:7c:d3:5b:ea:70:ff:59:1d:61: 32:90:eb:8b:5e:d6:64:9f:6d:53:10:13:c2:1a:6d: 94:cb:03:d1:f8:d1:85:e7:29:38:62:f4:c8:80:33: da:05:44:ab:0a:be:af:dd:18:a8:a0:c7:64:e6:99: 91:65:9c:5e:ce:07:36:fa:23:c3:49:03:db:cb:0d: 8f:22:0a:f1:0c:78:09:8c:f4:06:1d:30:26:55:9e: 20:b3:13:05:76:dd:9a:d9:0c:4d:a5:0e:c7:5b:5f: 28:92:18:65:44:c3:1c:4f:80:7a:6f:d4:6a:69:29: e7:c7:73:85:b5:7f:1f:75:37:fb:48:79:32:de:f6: 28:c9:51:17:d3:a5:97:99:48:4e:8b:e6:ed:26:8b: 05:ed:2a:1b:db:10:29:5d:33:ad:c6:95:ed:18:64: 20:8c:c9:27:e0:2e:47:65:71:fd:29:7c:df:48:4c: 44:e6:e8:00:83:fb:5e:f9:19:a7:c5:45:96:5e:0e: 33:ff:a7:10:25:f0:8f:82:5a:01:42:20:36:a0:f1: 59:c7:f3:eb:d2:61:1e:65:c9:cd:3f:32:13:a4:96: b7:48:ee:aa:b5:2e:0a:97:f0:fe:87:e7:17:12:b3: c8:88:ef:27:3f:e0:23:dd:73:83:b7:73:54:67:d9: 56:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:14:43:15:98:9C:DB:9A:E8:43:CD:66:64:40:E3:02:30:81:E1:B7 X509v3 Authority Key Identifier: keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/SBRDFZic25roQ81mZEDjAjCB4bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.71.0/24 85.204.224.0-85.204.232.255 85.204.234.0-85.204.239.255 86.105.164.0/22 86.107.224.0/20 86.107.246.0/23 93.113.0.0/20 185.85.200.0/22 188.215.112.0/21 IPv6: 2001:67c:2580::/48 2a03:7420::/48 Signature Algorithm: sha256WithRSAEncryption 32:3b:75:64:e4:92:cf:e7:bc:20:59:44:ae:b5:ed:be:d2:cf: 97:83:57:32:58:c9:75:fc:f8:c5:4e:bd:0f:34:ba:69:99:6e: fd:83:fa:dc:ce:64:15:82:28:a7:af:5e:a0:f0:68:4c:c7:32: 70:b3:f0:45:41:54:b1:a6:09:65:ba:14:0c:87:8d:44:05:51: 9b:4b:d4:58:6b:7a:27:22:00:bc:b0:78:d8:3c:00:f9:73:e4: 1f:3e:93:5d:21:f1:f1:6d:54:2c:c9:82:b0:4b:49:4a:1b:0a: 50:76:7a:f4:16:27:1e:f1:d8:16:32:c6:b4:6e:65:0f:da:14: 71:60:15:0d:fb:40:92:75:2d:8d:45:fd:f4:95:9b:bd:ab:d7: 47:42:dd:c4:1c:92:ef:07:f1:f2:c1:26:92:0d:a1:84:08:46: 2e:4f:9e:7d:72:fc:a1:ab:fb:ca:b3:26:49:93:00:37:a8:42: bf:ea:71:27:0f:4c:90:c8:65:98:23:54:c9:f0:54:d5:f5:3e: 12:5c:e6:36:ce:d5:b6:6f:38:f3:55:ce:bc:4a:e4:36:4f:16: 69:e5:ea:df:df:38:27:3b:ef:e6:02:e9:f2:ae:32:bc:bc:dd: d7:70:64:45:85:43:0c:81:a5:29:81:6e:36:da:bb:77:3a:df: 65:66:1d:d0 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZt8gNHlCcwRp2mARhnwzKbZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNzBhZjFhOTk4ODZjOTEwMWQxMzVmNTRiZDJiZGVmMzU4 YjI2NmUwHhcNMjYwMTAyMDIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODE0NDMxNTk4OWNkYjlhZTg0M2NkNjY2NDQwZTMwMjMwODFlMWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoPyn1l801vqcP9ZHWEykOuLXtZk n21TEBPCGm2UywPR+NGF5yk4YvTIgDPaBUSrCr6v3RiooMdk5pmRZZxezgc2+iPD SQPbyw2PIgrxDHgJjPQGHTAmVZ4gsxMFdt2a2QxNpQ7HW18okhhlRMMcT4B6b9Rq aSnnx3OFtX8fdTf7SHky3vYoyVEX06WXmUhOi+btJosF7Sob2xApXTOtxpXtGGQg jMkn4C5HZXH9KXzfSExE5ugAg/te+RmnxUWWXg4z/6cQJfCPgloBQiA2oPFZx/Pr 0mEeZcnNPzITpJa3SO6qtS4Kl/D+h+cXErPIiO8nP+Aj3XODt3NUZ9lWnQIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFEgUQxWYnNua6EPNZmRA4wIwgeG3MB8GA1UdIwQY MBaAFE1wrxqZiGyRAdE19UvSve81iyZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEt NDYxYWIwZWNlZTAxLzEvU0JSREZaaWMyNXJvUTgxbVpFRGpBakNCNGJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEtNDYxYWIwZWNlZTAx LzEvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBMBAIAATBGAwQAJZxHMAwD BAVVzOADBABVzOgwDAMEAVXM6gMEBFXM4AMEAlZppAMEBFZr4AMEAVZr9gMEBF1x AAMEArlVyAMEA7zXcDAYBAIAAjASAwcAIAEGfCWAAwcAKgN0IAAAMA0GCSqGSIb3 DQEBCwUAA4IBAQAyO3Vk5JLP57wgWUSute2+0s+Xg1cyWMl1/PjFTr0PNLppmW79 g/rczmQVgiinr16g8GhMxzJws/BFQVSxpglluhQMh41EBVGbS9RYa3onIgC8sHjY PAD5c+QfPpNdIfHxbVQsyYKwS0lKGwpQdnr0Fice8dgWMsa0bmUP2hRxYBUN+0CS dS2NRf30lZu9q9dHQt3EHJLvB/HywSaSDaGECEYuT559cvyhq/vKsyZJkwA3qEK/ 6nEnD0yQyGWYI1TJ8FTV9T4SXOY2ztW2bzjzVc68SuQ2TxZp5erf3zgnO+/mAuny rjK8vN3XcGRFhUMMgaUpgW422rt3Ot9lZh3Q -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:04 2026 by rpki-client