This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SXZpp7DdyWD4gwzE7VdImSpSHxo.roa File: SXZpp7DdyWD4gwzE7VdImSpSHxo.roa (raw, json) Hash identifier: +VN9M0444RjHCNBC25nkhqwppSq26ndvC570U2JOvb0= Subject key identifier: 49:76:69:A7:B0:DD:C9:60:F8:83:0C:C4:ED:57:48:99:2A:52:1F:1A Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F856E8AD7FB63A9DE981A0FE84B0395 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SXZpp7DdyWD4gwzE7VdImSpSHxo.roa Signing time: Fri 02 Jan 2026 16:23:29 +0000 ROA not before: Fri 02 Jan 2026 16:23:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212667 IP address blocks: 195.133.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:6e:8a:d7:fb:63:a9:de:98:1a:0f:e8:4b:03:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=497669a7b0ddc960f8830cc4ed5748992a521f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:85:55:02:d1:db:6d:37:b5:87:a9:7a:2e:09: cb:b3:fb:a4:d5:60:3a:91:ba:bd:8c:71:71:76:df: 80:44:de:d6:5d:bb:64:da:b9:a2:67:eb:8c:fb:86: 95:de:bf:24:8a:5b:98:36:51:c8:f4:a0:22:5a:5b: b3:b5:9e:20:53:6f:6c:d5:aa:53:ec:c6:8a:9c:34: 3b:b5:e6:fb:42:ff:c7:84:bf:27:1e:62:71:6e:26: d5:be:e5:6c:10:71:51:83:2f:7f:4f:e5:ce:3d:48: b9:93:62:1f:cc:0c:46:75:6a:bd:3a:98:1c:36:23: 08:4b:be:58:10:46:c6:24:83:df:23:03:82:18:3c: 9c:87:2b:f2:44:27:ad:ae:8e:62:55:36:7f:0f:50: dc:67:02:78:10:fc:a4:c1:df:b2:dc:6c:73:71:99: 5f:8f:65:bf:c2:66:45:8f:8f:2d:17:a8:9e:a7:65: 5d:d8:0f:2d:90:be:6f:c9:d5:ff:30:06:af:31:d0: 5c:d2:32:8b:1f:09:f3:61:b5:4e:df:29:bc:7f:71: 8e:ff:45:da:70:b0:f5:06:50:cb:47:6c:72:fa:76: f3:f9:38:35:6f:9f:9e:cc:64:5c:22:18:57:f1:c3: 47:1a:9e:ce:f9:7f:d3:0e:ce:cd:88:0d:cb:eb:35: 15:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:76:69:A7:B0:DD:C9:60:F8:83:0C:C4:ED:57:48:99:2A:52:1F:1A X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SXZpp7DdyWD4gwzE7VdImSpSHxo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.133.86.0/24 Signature Algorithm: sha256WithRSAEncryption 57:74:14:d9:46:20:ce:97:b5:ec:44:26:b3:40:43:c6:27:b0: aa:b3:b2:0f:47:43:4b:ac:0a:e9:79:1b:f8:a7:68:aa:2a:ef: 6b:6b:b0:bc:ac:67:28:95:de:88:c6:dd:45:50:57:91:a8:17: 4b:16:d1:eb:6b:e5:e3:24:18:2e:ac:91:e4:0b:d8:2b:7a:a2: 5f:35:af:20:83:30:a5:1a:44:23:1c:28:66:f0:bf:9e:06:d5: 80:00:db:11:07:a2:9f:0e:01:16:92:84:41:ea:45:81:a2:33: 2b:8e:8a:ff:46:40:18:c8:30:cd:6b:5b:ed:9d:1d:81:2a:03: 02:33:db:c1:50:27:9c:32:d7:83:57:b2:5b:69:93:a9:45:2a: 37:81:12:04:47:b5:9a:30:f2:41:51:99:98:7a:84:a1:a9:3b: 55:42:a3:ae:b0:e5:41:d1:0d:d8:36:d5:26:b0:93:5e:b1:8c: 2d:bd:8f:93:3a:5f:6e:f1:d2:bb:9e:78:40:cd:3b:c1:9d:ef: d8:82:88:ad:f3:12:6b:20:dd:63:f8:13:97:28:3f:05:ea:f5: 79:ec:2b:ee:09:6f:2e:0d:86:a5:6e:e1:80:01:15:84:a3:05: 8b:e2:8c:a2:45:ac:77:98:9c:c6:dd:fe:0c:e7:59:0b:59:59: 09:94:96:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hW6K1/tjqd6YGg/oSwOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTc2NjlhN2IwZGRjOTYwZjg4MzBjYzRlZDU3NDg5OTJhNTIxZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14VVAtHbbTe1h6l6LgnLs/uk1WA6 kbq9jHFxdt+ARN7WXbtk2rmiZ+uM+4aV3r8kiluYNlHI9KAiWluztZ4gU29s1apT 7MaKnDQ7teb7Qv/HhL8nHmJxbibVvuVsEHFRgy9/T+XOPUi5k2IfzAxGdWq9Opgc NiMIS75YEEbGJIPfIwOCGDychyvyRCetro5iVTZ/D1DcZwJ4EPykwd+y3GxzcZlf j2W/wmZFj48tF6iep2Vd2A8tkL5vydX/MAavMdBc0jKLHwnzYbVO3ym8f3GO/0Xa cLD1BlDLR2xy+nbz+Tg1b5+ezGRcIhhX8cNHGp7O+X/TDs7NiA3L6zUVoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEl2aaew3clg+IMMxO1XSJkqUh8aMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvU1hacHA3RGR5V0Q0Z3d6RTdWZEltU3BTSHhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4VWMA0G CSqGSIb3DQEBCwUAA4IBAQBXdBTZRiDOl7XsRCazQEPGJ7Cqs7IPR0NLrArpeRv4 p2iqKu9ra7C8rGcold6Ixt1FUFeRqBdLFtHra+XjJBgurJHkC9greqJfNa8ggzCl GkQjHChm8L+eBtWAANsRB6KfDgEWkoRB6kWBojMrjor/RkAYyDDNa1vtnR2BKgMC M9vBUCecMteDV7JbaZOpRSo3gRIER7WaMPJBUZmYeoShqTtVQqOusOVB0Q3YNtUm sJNesYwtvY+TOl9u8dK7nnhAzTvBne/Ygoit8xJrIN1j+BOXKD8F6vV57CvuCW8u DYalbuGAARWEowWL4oyiRax3mJzG3f4M51kLWVkJlJaW -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:08 2026 by rpki-client