This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/SlhQxm9LCnkQKKSMmd7kdKzcTz4.roa File: SlhQxm9LCnkQKKSMmd7kdKzcTz4.roa (raw, json) Hash identifier: wnSrmmgjgNFni6XtfvP0Umwv0uy50/wQqCglKf7Kmd0= Subject key identifier: 4A:58:50:C6:6F:4B:0A:79:10:28:A4:8C:99:DE:E4:74:AC:DC:4F:3E Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de Certificate serial: 019B7C126F2974A68AFF15D099AB4BF355B3 Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/SlhQxm9LCnkQKKSMmd7kdKzcTz4.roa Signing time: Fri 02 Jan 2026 00:19:01 +0000 ROA not before: Fri 02 Jan 2026 00:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212808 IP address blocks: 185.175.88.0/24 maxlen: 24 2a10:45c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6f:29:74:a6:8a:ff:15:d0:99:ab:4b:f3:55:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de Validity Not Before: Jan 2 00:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a5850c66f4b0a791028a48c99dee474acdc4f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:2d:ce:42:d3:59:71:50:0d:0e:32:00:57: 74:46:2d:9a:db:85:29:ab:19:e5:ea:f8:d3:80:a0: 6d:47:06:47:33:56:59:c4:d5:7e:09:83:d9:48:ec: c4:89:fa:95:df:15:cd:52:f1:38:3e:79:b9:57:0f: 5f:45:47:70:f5:15:6c:a7:1d:4b:a8:4a:f3:4a:b4: 66:4b:f1:72:eb:c6:fc:41:91:f8:5d:83:bf:bf:ad: a0:94:73:c7:a1:c7:e1:b2:42:a9:da:1d:78:98:12: cd:03:ff:4c:91:47:91:a6:f0:13:1f:91:17:50:90: 68:e4:34:f0:1a:bf:8a:24:2d:43:bb:86:0b:d7:95: 84:f2:05:e0:00:ff:3a:bc:e0:f6:08:3b:66:27:63: 36:34:71:86:2e:4d:a8:b9:1e:f8:a2:a8:7d:a9:24: 36:35:e0:56:47:80:9d:6d:ea:1b:4d:d0:0b:6c:58: 3e:4c:13:60:0d:a2:80:5e:8d:2d:32:7e:e7:bb:33: b9:c4:cf:37:63:e4:d8:c6:fd:45:4c:50:98:1a:25: 4f:e5:7d:a4:78:3c:3c:bc:1b:88:34:bb:13:49:0e: 92:df:2b:82:e2:cb:12:a4:1d:37:3c:af:0d:f6:f0: 24:38:43:1e:7b:f8:70:30:07:e3:90:3c:33:c5:b2: da:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:58:50:C6:6F:4B:0A:79:10:28:A4:8C:99:DE:E4:74:AC:DC:4F:3E X509v3 Authority Key Identifier: keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/SlhQxm9LCnkQKKSMmd7kdKzcTz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.175.88.0/24 IPv6: 2a10:45c0::/32 Signature Algorithm: sha256WithRSAEncryption 61:c9:fe:ae:be:5b:d6:a6:ce:2e:36:1b:fd:b1:52:bc:2d:9a: 01:19:62:bb:99:11:53:18:37:3f:ba:da:22:71:b8:66:92:4e: be:dd:44:f1:d0:1d:e9:72:99:4d:33:05:e7:16:da:e4:66:dd: 2e:34:70:27:ac:3d:03:7a:0d:9b:77:2a:52:6d:7e:8a:69:13: e1:e6:88:79:e5:e3:a4:e0:04:ff:30:9d:12:b7:d4:53:29:4d: 75:c9:2e:67:c0:a0:71:5a:4d:34:55:85:1e:81:fd:00:79:52: e9:4b:5d:ba:2d:34:6b:6b:22:46:f7:45:02:6e:bd:6c:00:eb: e5:eb:0b:a5:dd:8f:a6:0e:19:b9:65:db:34:c7:83:76:7e:66: 60:40:c3:ed:6b:0a:b7:e6:20:c8:0b:22:28:1d:92:13:d5:4f: 23:3c:f1:aa:72:90:ff:05:11:5b:a9:20:21:ac:fd:f8:5e:9a: 36:35:ae:55:81:f4:b5:56:a8:be:1d:07:f1:d2:ad:ac:ad:fb: 93:0c:8e:82:fe:c9:99:65:15:42:56:5a:0d:24:21:ee:16:8a: 19:c4:bd:58:3d:c5:45:89:41:41:4b:56:a6:ae:11:4e:69:ca: a7:62:c3:f5:b6:52:32:70:ac:af:07:7e:59:6d:f6:51:e3:fd: 6f:63:c0:06 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8Em8pdKaK/xXQmatL81WzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNzBjMTRiZjI2ZmFmMDE5OGYxZTdiMjQ3MjljZDcxYjMz NTE4ZGUwHhcNMjYwMTAyMDAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTU4NTBjNjZmNGIwYTc5MTAyOGE0OGM5OWRlZTQ3NGFjZGM0ZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYEtzkLTWXFQDQ4yAFd0Ri2a24Up qxnl6vjTgKBtRwZHM1ZZxNV+CYPZSOzEifqV3xXNUvE4Pnm5Vw9fRUdw9RVspx1L qErzSrRmS/Fy68b8QZH4XYO/v62glHPHocfhskKp2h14mBLNA/9MkUeRpvATH5EX UJBo5DTwGr+KJC1Du4YL15WE8gXgAP86vOD2CDtmJ2M2NHGGLk2ouR74oqh9qSQ2 NeBWR4CdbeobTdALbFg+TBNgDaKAXo0tMn7nuzO5xM83Y+TYxv1FTFCYGiVP5X2k eDw8vBuINLsTSQ6S3yuC4ssSpB03PK8N9vAkOEMee/hwMAfjkDwzxbLamQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEpYUMZvSwp5ECikjJne5HSs3E8+MB8GA1UdIwQY MBaAFD5wwUvyb68BmPHnskcpzXGzNRjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG5EQlNfSnZyd0dZOGVleVJ5bk5jYk0xR040LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xZDJkZjktOGY4Mi00NzE2LTg1M2Ut NTM4NTk0OTBkMjZmLzEvU2xoUXhtOUxDbmtRS0tTTW1kN2tkS3pjVHo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8xZDJkZjktOGY4Mi00NzE2LTg1M2UtNTM4NTk0OTBkMjZm LzEvUG5EQlNfSnZyd0dZOGVleVJ5bk5jYk0xR040LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAua9YMA0E AgACMAcDBQAqEEXAMA0GCSqGSIb3DQEBCwUAA4IBAQBhyf6uvlvWps4uNhv9sVK8 LZoBGWK7mRFTGDc/utoicbhmkk6+3UTx0B3pcplNMwXnFtrkZt0uNHAnrD0Deg2b dypSbX6KaRPh5oh55eOk4AT/MJ0St9RTKU11yS5nwKBxWk00VYUegf0AeVLpS126 LTRrayJG90UCbr1sAOvl6wul3Y+mDhm5Zds0x4N2fmZgQMPtawq35iDICyIoHZIT 1U8jPPGqcpD/BRFbqSAhrP34Xpo2Na5VgfS1Vqi+HQfx0q2srfuTDI6C/smZZRVC VloNJCHuFooZxL1YPcVFiUFBS1amrhFOacqnYsP1tlIycKyvB35ZbfZR4/1vY8AG -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:34 2026 by rpki-client