This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/SJIi9b7jF-tIX6-P-stvPvq18n8.roa File: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (raw, json) Hash identifier: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY= Subject key identifier: 48:92:22:F5:BE:E3:17:EB:48:5F:AF:8F:FA:CB:6F:3E:FA:B5:F2:7F Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019B77C6BBEF437EC0209EF1A8691875522A Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/SJIi9b7jF-tIX6-P-stvPvq18n8.roa Signing time: Thu 01 Jan 2026 04:17:51 +0000 ROA not before: Thu 01 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49791 IP address blocks: 92.60.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bb:ef:43:7e:c0:20:9e:f1:a8:69:18:75:52:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=489222f5bee317eb485faf8ffacb6f3efab5f27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:6d:f8:16:61:71:5d:dd:36:88:64:7b:60: 6a:d1:d2:03:e1:82:ad:f5:5c:1f:b0:e2:ab:52:5a: b9:ba:85:93:eb:77:09:ad:32:09:3e:03:f7:e0:64: 66:50:40:ea:2c:fe:37:4e:cf:a4:33:63:73:da:6c: e8:40:be:3e:25:eb:39:08:bd:97:4b:65:c8:1e:4f: f8:74:dd:86:49:d7:e0:b5:27:cd:e7:5d:5c:ce:12: 64:d0:93:d0:dd:65:1f:a8:32:cd:6d:0d:7d:dd:16: 19:bd:4e:54:8b:a8:33:80:d9:89:d8:15:5d:27:33: 5a:0f:df:2a:84:5a:ea:0f:df:66:d1:99:e5:06:a5: 29:89:4e:e5:a0:a9:9a:37:a1:44:2a:95:7b:23:16: d6:91:a5:db:58:5d:bf:ef:be:00:39:ca:c4:dd:47: 09:23:e5:92:d0:ac:d0:f1:24:05:3a:b5:8a:c5:e7: d8:7b:d5:b0:41:41:74:77:88:9e:de:26:2b:30:4b: 23:1e:73:79:ee:e3:bb:7f:ad:e1:e6:d5:06:ff:55: 50:50:17:7b:ff:e7:bb:ef:db:be:02:b2:02:a5:bb: a1:62:b8:56:c7:aa:28:eb:04:40:26:df:fe:7e:da: 5c:96:a3:f2:1d:62:b2:24:1d:81:4b:83:a5:7d:16: 17:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:92:22:F5:BE:E3:17:EB:48:5F:AF:8F:FA:CB:6F:3E:FA:B5:F2:7F X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/SJIi9b7jF-tIX6-P-stvPvq18n8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.60.75.0/24 Signature Algorithm: sha256WithRSAEncryption 40:5b:f2:80:9d:c7:e3:1e:71:47:10:21:8b:cf:aa:74:e4:1f: 77:9d:da:ae:3e:74:06:2d:51:28:cd:7d:7b:2c:57:38:15:f0: a8:77:80:45:6f:a3:f7:c7:3c:e6:99:ea:e2:8e:31:f9:00:51: 99:19:72:bd:67:8d:20:ff:98:07:0d:7c:47:53:91:2e:fb:00: 08:fb:e7:30:d7:66:05:3c:a9:7b:74:4b:f3:f5:c5:54:af:ac: 42:c7:8c:ed:0f:ab:f9:91:be:ca:c6:73:40:5c:f5:b3:0f:ca: 94:08:3f:fb:0c:d4:eb:3a:88:85:95:8c:77:bd:1c:8a:06:c5: d6:51:3d:91:bd:55:d7:7b:44:4e:ab:82:5e:cd:45:75:a3:77: 49:40:c2:69:f2:2a:6b:7a:c2:d9:c7:ff:f8:c4:ae:67:4b:8f: 37:66:2e:32:9b:fe:be:b0:e7:c5:62:8d:0d:35:b6:14:e5:85: 97:84:15:ac:36:87:4a:d0:1c:47:2d:ac:eb:3b:e8:bc:c6:8b: e9:6d:47:bf:69:e9:fb:4e:24:e8:3e:7c:ee:d9:93:9a:4c:1e: 33:4f:9a:79:67:c4:c5:b9:c8:fe:45:5a:0a:ae:fa:3c:a7:56: 95:ce:20:de:6d:ae:d6:62:a9:74:84:fd:b3:a7:46:51:0c:7d: c7:07:36:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrvvQ37AIJ7xqGkYdVIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODkyMjJmNWJlZTMxN2ViNDg1ZmFmOGZmYWNiNmYzZWZhYjVmMjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Vt+BZhcV3dNohke2Bq0dID4YKt 9VwfsOKrUlq5uoWT63cJrTIJPgP34GRmUEDqLP43Ts+kM2Nz2mzoQL4+Jes5CL2X S2XIHk/4dN2GSdfgtSfN511czhJk0JPQ3WUfqDLNbQ193RYZvU5Ui6gzgNmJ2BVd JzNaD98qhFrqD99m0ZnlBqUpiU7loKmaN6FEKpV7IxbWkaXbWF2/774AOcrE3UcJ I+WS0KzQ8SQFOrWKxefYe9WwQUF0d4ie3iYrMEsjHnN57uO7f63h5tUG/1VQUBd7 /+e779u+ArICpbuhYrhWx6oo6wRAJt/+ftpclqPyHWKyJB2BS4OlfRYXrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEiSIvW+4xfrSF+vj/rLbz76tfJ/MB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvU0pJaTliN2pGLXRJWDYtUC1zdHZQdnExOG44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDxLMA0G CSqGSIb3DQEBCwUAA4IBAQBAW/KAncfjHnFHECGLz6p05B93ndquPnQGLVEozX17 LFc4FfCod4BFb6P3xzzmmerijjH5AFGZGXK9Z40g/5gHDXxHU5Eu+wAI++cw12YF PKl7dEvz9cVUr6xCx4ztD6v5kb7KxnNAXPWzD8qUCD/7DNTrOoiFlYx3vRyKBsXW UT2RvVXXe0ROq4JezUV1o3dJQMJp8ipresLZx//4xK5nS483Zi4ym/6+sOfFYo0N NbYU5YWXhBWsNodK0BxHLazrO+i8xovpbUe/aen7TiToPnzu2ZOaTB4zT5p5Z8TF ucj+RVoKrvo8p1aVziDeba7WYql0hP2zp0ZRDH3HBzbo -----END CERTIFICATE-----Generated at Fri Jan 23 15:22:26 2026 by rpki-client