This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/Sij9IlfqNvLqsGMh1vte9HHCsJE.roa File: Sij9IlfqNvLqsGMh1vte9HHCsJE.roa (raw, json) Hash identifier: ++kaPggqzwnpUTH7+GWX7uPn6wV3SaYRJ1kpXxDIl20= Subject key identifier: 4A:28:FD:22:57:EA:36:F2:EA:B0:63:21:D6:FB:5E:F4:71:C2:B0:91 Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6 Certificate serial: 019B7BA44049464FCB96EC5BAA7A164F91AD Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/Sij9IlfqNvLqsGMh1vte9HHCsJE.roa Signing time: Thu 01 Jan 2026 22:18:40 +0000 ROA not before: Thu 01 Jan 2026 22:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199978 IP address blocks: 193.8.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:40:49:46:4f:cb:96:ec:5b:aa:7a:16:4f:91:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6 Validity Not Before: Jan 1 22:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a28fd2257ea36f2eab06321d6fb5ef471c2b091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fb:b4:79:99:20:b7:e3:84:45:85:40:7a:1f: 07:1c:bf:07:cb:40:51:c6:d3:f3:02:55:f6:67:3c: 6d:95:0b:7c:36:e5:ea:e4:75:b2:2e:42:a8:6e:1f: ba:20:7d:b9:69:b5:3d:a4:c3:eb:f1:aa:a8:93:94: 53:96:93:04:2a:f2:a7:5b:1a:7b:56:b0:77:b6:07: b6:5c:96:b4:bb:aa:47:49:4c:cb:2c:e5:9e:b4:50: f8:a2:d6:09:df:35:a8:8c:8a:83:ff:e2:ae:95:e2: f6:7e:25:1e:75:50:06:c6:e3:4d:fc:dd:fa:b8:11: 42:54:29:ed:59:6b:45:2f:f9:cf:7b:b7:35:0b:5d: 3c:16:23:c9:b2:df:7c:f0:60:f3:c7:13:53:33:a0: a4:bd:4d:8e:32:c9:b8:3b:e4:64:05:6c:2f:f9:3e: b4:30:03:81:0b:b5:80:14:1e:ec:06:2b:3d:8e:08: f1:8a:6d:9c:5b:b5:95:a7:3a:4d:7b:00:e7:76:e4: 15:2e:91:27:de:71:40:f0:26:dc:50:f9:f6:11:36: ed:9c:1a:15:80:9f:32:eb:68:bf:cb:6d:75:d8:18: 1e:b4:e2:c6:06:82:91:26:87:7f:54:aa:c5:2d:ee: 93:cc:1f:1d:6d:02:33:a0:21:db:eb:6f:99:1a:bc: 01:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:28:FD:22:57:EA:36:F2:EA:B0:63:21:D6:FB:5E:F4:71:C2:B0:91 X509v3 Authority Key Identifier: keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/Sij9IlfqNvLqsGMh1vte9HHCsJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.54.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:f8:d7:5a:58:39:18:d2:75:be:e1:a8:6b:bf:4b:c6:b2:db: 63:12:c4:68:58:ff:f2:cf:77:f0:ad:35:a8:8f:0d:f7:25:fc: 26:51:39:8e:13:35:4a:cd:cc:68:5e:5e:01:c1:ad:82:11:bf: 13:d7:0a:94:73:15:fb:bb:15:f5:f2:99:7f:e5:8b:8c:68:7b: 24:97:a2:b2:fe:96:b0:a9:16:a1:4c:c1:32:3e:6c:41:af:ed: bf:84:d0:ad:4c:32:cf:c0:39:6b:d5:b3:b5:ad:56:3b:b4:42: c4:8a:4e:7b:d6:87:87:bc:4d:6a:c2:6b:19:a7:d8:01:f7:71: 66:49:ad:71:ea:6b:cb:c3:7a:58:ce:a6:71:c4:bd:44:7e:38: db:fc:39:c6:b9:ca:87:03:2a:bf:14:0e:2b:4f:d7:a7:a1:f5: 9d:15:4f:16:58:7a:51:78:bb:bd:4c:d3:1b:5c:36:6d:7a:66: bf:2e:59:b1:c0:bb:25:5f:b8:fd:26:51:90:ff:d4:57:e6:9d: 07:2e:7c:c9:27:77:ff:f1:5f:97:c9:0c:b2:ee:a1:1b:3c:54: 20:e8:f0:cf:f9:47:8b:f4:f1:35:a0:6d:a9:b4:a5:75:63:53: de:4a:b6:90:83:90:6d:93:59:e9:c4:9a:f3:f4:88:3e:20:87: 49:1e:76:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pEBJRk/LluxbqnoWT5GtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNWI2MjlhNDY5ODU4ODhmZjE0YmZhOWQ3ZGNiMWViNTI2 NjAwYTYwHhcNMjYwMTAxMjIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTI4ZmQyMjU3ZWEzNmYyZWFiMDYzMjFkNmZiNWVmNDcxYzJiMDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/u0eZkgt+OERYVAeh8HHL8Hy0BR xtPzAlX2ZzxtlQt8NuXq5HWyLkKobh+6IH25abU9pMPr8aqok5RTlpMEKvKnWxp7 VrB3tge2XJa0u6pHSUzLLOWetFD4otYJ3zWojIqD/+KuleL2fiUedVAGxuNN/N36 uBFCVCntWWtFL/nPe7c1C108FiPJst988GDzxxNTM6CkvU2OMsm4O+RkBWwv+T60 MAOBC7WAFB7sBis9jgjxim2cW7WVpzpNewDnduQVLpEn3nFA8CbcUPn2ETbtnBoV gJ8y62i/y2112BgetOLGBoKRJod/VKrFLe6TzB8dbQIzoCHb62+ZGrwBNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEoo/SJX6jby6rBjIdb7XvRxwrCRMB8GA1UdIwQY MBaAFIpbYppGmFiI/xS/qdfcsetSZgCmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85NWY5NjUtMjcwYS00YzcwLWE2OTAt MmQ3YmFmODgyNjc0LzEvU2lqOUlsZnFOdkxxc0dNaDF2dGU5SEhDc0pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85NWY5NjUtMjcwYS00YzcwLWE2OTAtMmQ3YmFmODgyNjc0 LzEvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwQg2MA0G CSqGSIb3DQEBCwUAA4IBAQAs+NdaWDkY0nW+4ahrv0vGsttjEsRoWP/yz3fwrTWo jw33JfwmUTmOEzVKzcxoXl4Bwa2CEb8T1wqUcxX7uxX18pl/5YuMaHskl6Ky/paw qRahTMEyPmxBr+2/hNCtTDLPwDlr1bO1rVY7tELEik571oeHvE1qwmsZp9gB93Fm Sa1x6mvLw3pYzqZxxL1Efjjb/DnGucqHAyq/FA4rT9enofWdFU8WWHpReLu9TNMb XDZtema/LlmxwLslX7j9JlGQ/9RX5p0HLnzJJ3f/8V+XyQyy7qEbPFQg6PDP+UeL 9PE1oG2ptKV1Y1PeSraQg5Btk1npxJrz9Ig+IIdJHnZZ -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:33 2026 by rpki-client