This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/sdeXCsBx3LgNa5J8PBQdkC7HXXs.roa File: sdeXCsBx3LgNa5J8PBQdkC7HXXs.roa (raw, json) Hash identifier: t4RzQVpNx3e0qWSUzZE11pmGfDz7weYJ/VveA34JwDE= Subject key identifier: B1:D7:97:0A:C0:71:DC:B8:0D:6B:92:7C:3C:14:1D:90:2E:C7:5D:7B Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B9727610E6FEC79060695DF5705331265 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/sdeXCsBx3LgNa5J8PBQdkC7HXXs.roa Signing time: Wed 07 Jan 2026 06:31:38 +0000 ROA not before: Wed 07 Jan 2026 06:31:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 85.189.72.0/21 maxlen: 24 86.53.152.0/21 maxlen: 24 86.53.160.0/22 maxlen: 24 86.53.180.0/22 maxlen: 24 86.53.184.0/21 maxlen: 24 87.86.48.0/20 maxlen: 24 95.177.63.0/24 maxlen: 24 95.177.67.0/24 maxlen: 24 95.177.74.0/24 maxlen: 24 95.177.85.0/24 maxlen: 24 194.6.104.0/21 maxlen: 24 195.40.22.0/23 maxlen: 23 195.40.24.0/23 maxlen: 23 195.72.176.0/21 maxlen: 24 212.134.20.0/24 maxlen: 24 212.134.27.0/24 maxlen: 24 212.135.6.0/23 maxlen: 23 213.177.226.0/23 maxlen: 24 213.177.230.0/23 maxlen: 24 213.177.234.0/23 maxlen: 24 213.177.238.0/23 maxlen: 24 213.177.242.0/23 maxlen: 24 213.177.246.0/23 maxlen: 24 213.177.250.0/23 maxlen: 24 213.177.252.0/24 maxlen: 24 213.177.253.0/24 maxlen: 24 213.177.254.0/24 maxlen: 24 213.177.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 18:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:27:61:0e:6f:ec:79:06:06:95:df:57:05:33:12:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 7 06:31:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1d7970ac071dcb80d6b927c3c141d902ec75d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:b9:39:f7:90:23:e5:4b:6a:2e:c7:5c:a0: fc:88:3c:51:ba:9e:bd:5a:7e:ab:5b:f8:6e:b2:35: 0b:19:b7:c1:c5:84:95:3b:c1:51:0f:7d:ed:76:da: 07:e0:e9:a2:21:64:18:4c:f3:e4:8d:45:2a:6f:fc: 9e:b8:4d:02:1a:a0:57:d9:62:4d:15:aa:a8:65:7f: 05:c7:a4:3a:bb:79:51:f3:84:90:ef:bd:34:14:85: 4e:30:38:ac:b6:23:b1:ef:70:d2:d6:8f:cc:2b:db: a7:51:da:75:7a:ce:6e:73:2c:56:2f:1f:b8:72:a6: 07:c9:aa:31:ec:58:0d:6e:2a:08:a5:ed:f7:80:47: a2:e6:b4:6a:f8:33:59:39:b3:ae:fb:67:86:5f:5f: c1:4b:f8:73:b2:5e:67:55:50:c8:67:cc:07:4c:47: 3d:2c:6a:e8:2c:e0:a1:43:31:19:35:1d:1f:48:67: a6:c8:be:11:1b:6a:13:fb:05:8d:f7:6c:83:88:c8: 2e:75:26:01:65:31:64:de:fc:6b:8e:87:87:4d:16: e1:4e:1a:55:fd:6d:02:ad:a7:4e:b9:e7:d9:cc:92: 7a:85:04:d2:c0:0c:7a:fd:92:6b:83:75:d0:ed:27: 02:f6:0a:a8:98:84:53:8d:ea:07:8d:b1:f9:16:fd: d6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D7:97:0A:C0:71:DC:B8:0D:6B:92:7C:3C:14:1D:90:2E:C7:5D:7B X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/sdeXCsBx3LgNa5J8PBQdkC7HXXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.189.72.0/21 86.53.152.0-86.53.163.255 86.53.180.0-86.53.191.255 87.86.48.0/20 95.177.63.0/24 95.177.67.0/24 95.177.74.0/24 95.177.85.0/24 194.6.104.0/21 195.40.22.0-195.40.25.255 195.72.176.0/21 212.134.20.0/24 212.134.27.0/24 212.135.6.0/23 213.177.226.0/23 213.177.230.0/23 213.177.234.0/23 213.177.238.0/23 213.177.242.0/23 213.177.246.0/23 213.177.250.0-213.177.255.255 Signature Algorithm: sha256WithRSAEncryption 22:15:09:0d:27:77:e5:d8:89:f0:fa:e1:b1:d9:a2:6a:7b:b7: 80:a5:56:1c:c9:8a:2d:ab:a0:fc:5c:3a:d5:05:5d:37:89:f6: 91:1a:70:87:8d:59:2b:fe:c1:5a:35:a3:be:b4:6a:78:b8:18: ae:88:7b:1e:b0:46:2e:47:26:eb:2a:31:60:06:01:45:ef:7f: e2:87:6e:9e:d1:b7:53:7d:b7:43:d4:3d:c5:d9:a4:d0:ee:b0: c5:e2:4b:01:99:f1:31:ff:bc:67:10:f8:ec:9d:d6:12:a3:9a: 2e:40:f1:e1:48:5a:ae:37:6c:5a:5f:d7:26:b2:41:ac:45:03: e1:2a:a4:2e:f9:48:b0:04:7e:1d:49:c4:f4:4e:f9:41:91:0f: c6:8f:6b:89:df:9c:5b:2e:21:6f:d9:c2:25:ef:bc:be:f2:31: b9:e3:a1:a4:10:c8:ba:ee:d4:9b:cd:bf:23:5f:20:6b:40:72: 31:c8:e4:e3:1b:23:d4:34:8a:59:3c:5f:57:c0:f6:d7:8e:bb: 2b:d6:6c:c5:ed:37:0d:f2:7d:75:af:04:a7:3e:1a:a5:74:82: 7a:ea:a3:c0:51:84:7b:cb:8e:57:7b:0a:c2:06:d0:79:ad:76: 82:b8:c8:3f:ae:49:67:7e:7c:52:0c:9a:a7:db:f1:1b:5c:cc: 3b:68:8e:06 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZuXJ2EOb+x5BgaV31cFMxJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTA3MDYzMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWQ3OTcwYWMwNzFkY2I4MGQ2YjkyN2MzYzE0MWQ5MDJlYzc1ZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS+5OfeQI+VLai7HXKD8iDxRup69 Wn6rW/husjULGbfBxYSVO8FRD33tdtoH4OmiIWQYTPPkjUUqb/yeuE0CGqBX2WJN FaqoZX8Fx6Q6u3lR84SQ7700FIVOMDistiOx73DS1o/MK9unUdp1es5ucyxWLx+4 cqYHyaox7FgNbioIpe33gEei5rRq+DNZObOu+2eGX1/BS/hzsl5nVVDIZ8wHTEc9 LGroLOChQzEZNR0fSGemyL4RG2oT+wWN92yDiMgudSYBZTFk3vxrjoeHTRbhThpV /W0CradOuefZzJJ6hQTSwAx6/ZJrg3XQ7ScC9gqomIRTjeoHjbH5Fv3WgwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFLHXlwrAcdy4DWuSfDwUHZAux117MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvc2RlWENzQngzTGdOYTVKOFBCUWRrQzdIWFhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG6BggrBgEFBQcBBwEB/wSBqjCBpzCBpAQCAAEwgZ0DBANV vUgwDAMEA1Y1mAMEAlY1oDAMAwQCVjW0AwQGVjWAAwQEV1YwAwQAX7E/AwQAX7FD AwQAX7FKAwQAX7FVAwQDwgZoMAwDBAHDKBYDBAHDKBgDBAPDSLADBADUhhQDBADU hhsDBAHUhwYDBAHVseIDBAHVseYDBAHVseoDBAHVse4DBAHVsfIDBAHVsfYwCwME AdWx+gMDAdWwMA0GCSqGSIb3DQEBCwUAA4IBAQAiFQkNJ3fl2Inw+uGx2aJqe7eA pVYcyYotq6D8XDrVBV03ifaRGnCHjVkr/sFaNaO+tGp4uBiuiHsesEYuRybrKjFg BgFF73/ih26e0bdTfbdD1D3F2aTQ7rDF4ksBmfEx/7xnEPjsndYSo5ouQPHhSFqu N2xaX9cmskGsRQPhKqQu+UiwBH4dScT0TvlBkQ/Gj2uJ35xbLiFv2cIl77y+8jG5 46GkEMi67tSbzb8jXyBrQHIxyOTjGyPUNIpZPF9XwPbXjrsr1mzF7TcN8n11rwSn PhqldIJ66qPAUYR7y45XewrCBtB5rXaCuMg/rklnfnxSDJqn2/EbXMw7aI4G -----END CERTIFICATE-----Generated at Sat Jan 17 02:49:59 2026 by rpki-client