This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SsKlVoMZJOgv5G4g-dNmkESI-EI.roa File: SsKlVoMZJOgv5G4g-dNmkESI-EI.roa (raw, json) Hash identifier: ItWFgENLeBKk4b5flfJUXGfxl3g5LBIyYBzxAldJ/AY= Subject key identifier: 4A:C2:A5:56:83:19:24:E8:2F:E4:6E:20:F9:D3:66:90:44:88:F8:42 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F856DF2947F775AA9962279FD6489A5 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SsKlVoMZJOgv5G4g-dNmkESI-EI.roa Signing time: Fri 02 Jan 2026 16:23:29 +0000 ROA not before: Fri 02 Jan 2026 16:23:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 193.124.16.0/24 maxlen: 24 194.87.38.0/24 maxlen: 24 194.87.72.0/24 maxlen: 24 194.87.114.0/24 maxlen: 24 194.87.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:6d:f2:94:7f:77:5a:a9:96:22:79:fd:64:89:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ac2a556831924e82fe46e20f9d366904488f842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:46:32:6c:ee:19:d0:22:12:a7:22:74:cf: 84:20:c1:f7:bc:78:74:7c:9a:75:fc:31:69:ee:0a: e3:b3:2c:ce:49:2e:bb:49:49:da:e0:d0:92:32:70: da:60:56:1a:f7:19:c6:15:21:2f:42:a5:c0:b2:df: 94:71:4e:cc:1d:ef:d6:14:a5:52:8f:6c:df:41:62: d6:4a:01:73:4b:40:0f:39:04:43:3f:0d:41:fb:fe: 40:7f:66:5d:ac:55:71:d1:73:55:c7:e2:75:f6:47: 47:30:3f:33:11:a3:95:03:7e:6c:55:0f:f8:54:4d: 06:8d:03:51:36:86:5e:d7:b1:c0:01:77:6a:c8:10: b9:2b:55:00:40:b0:23:62:c9:d2:84:24:91:f5:2d: c0:21:d2:7f:79:85:60:ab:b6:af:a5:0b:66:83:ce: 1a:fc:b3:ca:2b:de:27:f3:d3:cc:e6:3b:35:9d:b7: 40:81:71:56:cd:b3:7e:01:b6:02:cb:0d:11:26:07: 17:f2:aa:7a:34:00:d6:c8:e8:88:88:86:af:7d:6b: 7f:09:c7:5f:ac:22:1c:61:f7:cb:f6:7e:cf:f1:cb: 7c:4f:01:8c:38:9d:3a:38:5f:c4:df:d8:10:a2:83: a5:e7:f3:8d:5a:40:f3:ba:9f:18:7c:66:db:d1:7f: 5f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C2:A5:56:83:19:24:E8:2F:E4:6E:20:F9:D3:66:90:44:88:F8:42 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SsKlVoMZJOgv5G4g-dNmkESI-EI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.124.16.0/24 194.87.38.0/24 194.87.72.0/24 194.87.114.0/24 194.87.127.0/24 Signature Algorithm: sha256WithRSAEncryption 15:79:ab:76:7a:7a:c9:6e:36:53:2a:70:75:ab:26:e6:4d:12: 46:15:c3:21:31:71:b4:a0:89:07:fd:e4:be:81:c8:bf:df:03: 39:eb:65:cc:5e:07:cc:72:86:97:94:fd:95:fa:72:0e:2d:90: 4f:7a:a3:2c:a0:2a:6a:6b:d5:05:05:85:a6:8e:f3:79:3f:18: 5f:2f:4a:6c:74:80:72:75:ed:4e:8d:b4:85:4e:e8:01:ed:e5: cf:f0:7d:b1:c8:00:5d:d2:c8:b6:65:46:f4:75:32:3d:56:a1: 4e:a7:3b:7b:7f:1e:97:08:ee:d1:25:73:7c:9a:55:db:b0:e3: d7:9d:88:50:95:c4:8c:64:df:57:88:dc:e4:e5:46:f6:bb:42: c4:23:68:84:bb:6f:10:ef:1f:98:28:f5:c5:7d:d0:cc:da:dd: 77:1d:d3:e6:b9:e4:a9:39:6b:ad:1a:3b:f3:78:d4:5a:a6:33: 0d:40:e4:1d:4d:ea:27:67:b3:28:f1:7b:da:d2:f9:a5:c6:35: 2b:f5:f5:67:77:dd:d0:9a:82:cd:ea:74:b1:9f:5d:ab:23:57: 46:07:55:aa:b1:0f:90:fb:cf:34:0a:a0:3f:b6:2c:87:0c:b6: 29:e9:66:71:89:5f:3f:8b:3b:e8:4d:ff:0d:e2:6a:ab:b9:19: 67:10:1d:b2 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/hW3ylH93WqmWInn9ZImlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWMyYTU1NjgzMTkyNGU4MmZlNDZlMjBmOWQzNjY5MDQ0ODhmODQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8ZGMmzuGdAiEqcidM+EIMH3vHh0 fJp1/DFp7grjsyzOSS67SUna4NCSMnDaYFYa9xnGFSEvQqXAst+UcU7MHe/WFKVS j2zfQWLWSgFzS0APOQRDPw1B+/5Af2ZdrFVx0XNVx+J19kdHMD8zEaOVA35sVQ/4 VE0GjQNRNoZe17HAAXdqyBC5K1UAQLAjYsnShCSR9S3AIdJ/eYVgq7avpQtmg84a /LPKK94n89PM5js1nbdAgXFWzbN+AbYCyw0RJgcX8qp6NADWyOiIiIavfWt/Ccdf rCIcYffL9n7P8ct8TwGMOJ06OF/E39gQooOl5/ONWkDzup8YfGbb0X9frQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFErCpVaDGSToL+RuIPnTZpBEiPhCMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvU3NLbFZvTVpKT2d2NUc0Zy1kTm1rRVNJLUVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwXwQAwQA wlcmAwQAwldIAwQAwldyAwQAwld/MA0GCSqGSIb3DQEBCwUAA4IBAQAVeat2enrJ bjZTKnB1qybmTRJGFcMhMXG0oIkH/eS+gci/3wM562XMXgfMcoaXlP2V+nIOLZBP eqMsoCpqa9UFBYWmjvN5PxhfL0psdIByde1OjbSFTugB7eXP8H2xyABd0si2ZUb0 dTI9VqFOpzt7fx6XCO7RJXN8mlXbsOPXnYhQlcSMZN9XiNzk5Ub2u0LEI2iEu28Q 7x+YKPXFfdDM2t13HdPmueSpOWutGjvzeNRapjMNQOQdTeonZ7Mo8Xva0vmlxjUr 9fVnd93QmoLN6nSxn12rI1dGB1WqsQ+Q+880CqA/tiyHDLYp6WZxiV8/izvoTf8N 4mqruRlnEB2y -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:51 2026 by rpki-client