This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/Sgl0Z64OhrO11r88F-vekHDTFUg.roa File: Sgl0Z64OhrO11r88F-vekHDTFUg.roa (raw, json) Hash identifier: wpZ6eRiAcwvnj+jMwp2huDtJevtVDAQPpwMPlgkG8Ek= Subject key identifier: 4A:09:74:67:AE:0E:86:B3:B5:D6:BF:3C:17:EB:DE:90:70:D3:15:48 Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02 Certificate serial: 019B7DC96063771DB268226C76A0ACD5F482 Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/Sgl0Z64OhrO11r88F-vekHDTFUg.roa Signing time: Fri 02 Jan 2026 08:18:28 +0000 ROA not before: Fri 02 Jan 2026 08:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209459 IP address blocks: 185.97.116.0/22 maxlen: 24 185.143.232.0/22 maxlen: 24 193.176.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:60:63:77:1d:b2:68:22:6c:76:a0:ac:d5:f4:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02 Validity Not Before: Jan 2 08:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a097467ae0e86b3b5d6bf3c17ebde9070d31548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:39:c0:e4:5d:59:5f:a6:2c:b1:ef:58:cc: 4e:79:b7:63:65:77:b9:88:a1:e3:c1:05:f7:87:f6: a5:56:b6:da:50:72:7a:66:55:f3:79:35:1b:2c:32: 08:35:38:b2:5c:21:74:0e:ca:b2:93:3e:e0:7b:9f: e0:c2:3c:0e:b6:6e:7e:09:5d:9f:db:9d:bd:94:06: 19:59:32:15:8e:84:7e:df:ed:0a:4b:3b:49:6b:8d: f6:63:c3:16:07:66:b0:42:ac:c8:3f:32:0b:b2:df: 04:a8:92:61:2a:7b:3a:e0:fe:00:a8:ac:08:12:71: b3:40:97:f4:52:70:0b:42:38:fd:c9:a8:2b:d9:a2: 0a:04:3b:ad:7e:cf:d5:4e:04:83:3f:d7:ac:3a:71: 5a:6e:89:0b:f0:ff:fa:7d:08:46:92:6e:f8:95:76: 1e:64:5b:ef:9e:59:95:80:18:2b:8f:3d:59:f3:ed: 34:8c:10:e2:e3:26:c3:97:b7:65:1d:39:69:f3:89: e5:22:f5:52:b6:df:a7:8b:d2:3a:e3:d2:1c:0b:4c: 7e:bf:33:3b:d7:ff:2a:f8:17:9e:14:c7:bf:19:9d: 64:c0:7a:e1:72:7f:78:af:81:c4:6b:88:66:0e:2b: ca:c6:71:5d:38:f8:48:9d:df:53:80:8d:d4:8e:f1: 52:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:09:74:67:AE:0E:86:B3:B5:D6:BF:3C:17:EB:DE:90:70:D3:15:48 X509v3 Authority Key Identifier: keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/Sgl0Z64OhrO11r88F-vekHDTFUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.116.0/22 185.143.232.0/22 193.176.240.0/22 Signature Algorithm: sha256WithRSAEncryption 04:1a:c5:f6:44:16:20:52:42:7a:f4:d0:ba:f5:68:02:1f:9e: 7c:89:24:89:c6:12:37:37:8d:0e:d9:1a:da:c0:16:88:19:ac: 7e:cb:f9:f8:11:a6:8a:0b:eb:e7:60:d0:e0:20:0b:13:7b:55: 13:bf:73:5e:bf:53:86:d8:ff:70:3b:86:de:64:be:8a:98:f5: 28:2f:83:56:bf:65:0e:83:75:8b:ed:98:36:e5:2a:8a:1b:be: d7:a9:73:1a:2f:00:fa:84:75:f0:2a:2d:00:60:00:f1:59:0c: 7f:b1:e3:98:18:37:d3:69:fb:89:1d:e4:bf:8d:8d:a4:bc:2c: e0:1e:6b:37:d2:89:5d:58:04:8d:41:85:5d:4d:f7:e5:8e:a7: a2:1f:d9:47:d9:93:f9:82:f9:65:31:31:2f:53:87:60:dd:c7: 52:da:dc:01:bd:c0:f3:b4:18:12:bf:19:58:87:00:55:f8:14: f6:2a:6e:be:1e:9c:42:ec:bd:e3:bf:9a:49:f5:2c:9a:4e:86: d0:70:4c:3f:6e:43:cd:31:29:a7:9d:28:e3:7f:24:4a:4e:2b: c3:fe:bc:53:0d:da:8b:4d:e1:a7:88:f3:75:07:c0:88:ac:ac: 59:af:ae:93:51:5e:a4:7a:76:6d:cb:b5:11:97:c4:f1:41:aa: ef:37:b1:0f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yWBjdx2yaCJsdqCs1fSCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YzM3MWYzYTM0YWJmMTk1N2QxODk1ZGY4MDYzZjRkNjIw N2VjMDIwHhcNMjYwMTAyMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTA5NzQ2N2FlMGU4NmIzYjVkNmJmM2MxN2ViZGU5MDcwZDMxNTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL85wORdWV+mLLHvWMxOebdjZXe5 iKHjwQX3h/alVrbaUHJ6ZlXzeTUbLDIINTiyXCF0Dsqykz7ge5/gwjwOtm5+CV2f 2529lAYZWTIVjoR+3+0KSztJa432Y8MWB2awQqzIPzILst8EqJJhKns64P4AqKwI EnGzQJf0UnALQjj9yagr2aIKBDutfs/VTgSDP9esOnFabokL8P/6fQhGkm74lXYe ZFvvnlmVgBgrjz1Z8+00jBDi4ybDl7dlHTlp84nlIvVStt+ni9I649IcC0x+vzM7 1/8q+BeeFMe/GZ1kwHrhcn94r4HEa4hmDivKxnFdOPhInd9TgI3UjvFSxQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEoJdGeuDoaztda/PBfr3pBw0xVIMB8GA1UdIwQY MBaAFPXDcfOjSr8ZV9GJXfgGP01iB+wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEt MWJiMTdhOGIyNmZlLzEvU2dsMFo2NE9ock8xMXI4OEYtdmVrSERURlVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEtMWJiMTdhOGIyNmZl LzEvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuWF0AwQC uY/oAwQCwbDwMA0GCSqGSIb3DQEBCwUAA4IBAQAEGsX2RBYgUkJ69NC69WgCH558 iSSJxhI3N40O2RrawBaIGax+y/n4EaaKC+vnYNDgIAsTe1UTv3Nev1OG2P9wO4be ZL6KmPUoL4NWv2UOg3WL7Zg25SqKG77XqXMaLwD6hHXwKi0AYADxWQx/seOYGDfT afuJHeS/jY2kvCzgHms30oldWASNQYVdTffljqeiH9lH2ZP5gvllMTEvU4dg3cdS 2twBvcDztBgSvxlYhwBV+BT2Km6+HpxC7L3jv5pJ9SyaTobQcEw/bkPNMSmnnSjj fyRKTivD/rxTDdqLTeGniPN1B8CIrKxZr66TUV6kenZty7URl8TxQarvN7EP -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:33 2026 by rpki-client