This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sVnDRQojMggoHBMwstwogAUIb10.roa File: sVnDRQojMggoHBMwstwogAUIb10.roa (raw, json) Hash identifier: lrjOpwu8CUsiwlPDzIuONeeokbsBIdzb4gKw8x/CN4U= Subject key identifier: B1:59:C3:45:0A:23:32:08:28:1C:13:30:B2:DC:28:80:05:08:6F:5D Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F854A49226ED8C5BC08097772CDC8B0 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sVnDRQojMggoHBMwstwogAUIb10.roa Signing time: Fri 02 Jan 2026 16:23:20 +0000 ROA not before: Fri 02 Jan 2026 16:23:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42689 IP address blocks: 194.87.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:4a:49:22:6e:d8:c5:bc:08:09:77:72:cd:c8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b159c3450a233208281c1330b2dc288005086f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b5:38:59:2d:20:46:c4:a4:0c:3d:d3:bf:d7: 3a:ce:54:da:70:05:54:72:4a:d5:72:40:2c:3b:f0: 83:02:0a:5d:f9:42:ed:94:5b:f2:c5:0b:cb:ee:de: 58:ae:26:2e:9d:6b:46:3e:99:83:67:ca:20:c2:c4: 3b:84:05:40:b5:bb:c7:c7:6f:5a:c7:b4:90:e1:55: 85:ee:73:46:46:42:11:b0:05:ee:2e:73:88:44:a6: cd:dd:34:f9:71:86:67:cc:fc:5a:3c:af:8c:3d:27: e2:a4:91:b0:28:bd:d9:69:95:40:39:83:66:c6:4e: 05:b3:ef:b2:a5:53:91:ba:68:8f:73:f0:02:6f:a8: 95:6e:17:1a:5b:6a:30:60:6e:2c:3b:7d:14:9c:75: e2:a2:10:9a:4c:24:16:4a:fa:19:a0:81:92:c8:3c: 00:93:6f:ef:71:ab:b6:2b:55:1c:d1:dd:e4:1d:32: 1e:0f:f9:ea:fd:c7:6a:b8:1f:3f:26:1a:f6:16:b5: a8:46:c5:3a:17:13:cd:b8:4a:52:b9:b5:28:c6:54: 0d:bb:60:e9:41:4c:56:0b:b4:62:fa:73:a0:91:c5: 0a:3f:b0:67:33:42:d4:30:c9:9b:fc:27:d9:a1:e2: 78:62:d4:bf:8c:5d:c9:94:34:df:a1:63:63:a5:dd: d2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:59:C3:45:0A:23:32:08:28:1C:13:30:B2:DC:28:80:05:08:6F:5D X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sVnDRQojMggoHBMwstwogAUIb10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.135.0/24 Signature Algorithm: sha256WithRSAEncryption 57:3c:0b:23:52:fc:11:12:50:f7:5f:b2:71:dd:2d:98:19:69: d1:58:bb:47:53:ad:62:72:c7:3f:88:e6:b1:a3:c5:2c:83:5b: a4:dc:d2:4e:34:84:ba:ce:63:d5:ef:40:f2:ba:69:7b:5b:c1: f4:27:07:08:09:7e:2d:f6:f6:cd:b4:d2:11:b1:c2:bf:06:00: fc:37:01:a4:4f:44:79:37:b7:b5:d2:16:69:62:ee:48:be:82: 8a:a8:0c:fe:0c:46:b1:cc:43:d0:ec:15:52:d9:58:3f:a0:ad: 56:c5:9d:e0:04:d7:66:d1:11:8a:ac:b3:5d:f0:4d:d5:32:b7: 62:ba:b0:f1:2f:f0:b1:db:36:e7:70:40:15:be:35:6f:7a:72: 9d:6c:a2:3c:0c:25:71:bf:44:f3:d4:5d:19:80:84:1b:6c:73: ea:ed:57:9b:c5:05:80:fd:3b:c1:a4:49:5b:0c:b1:13:9d:12: c9:b0:47:33:36:21:08:57:0d:40:ad:a3:98:87:a8:cd:49:df: 55:6c:89:69:99:b4:e9:70:7f:5b:74:8d:4f:49:89:a4:06:61: 23:13:46:0b:85:52:fa:d8:d1:3b:ae:c2:00:87:a1:67:1b:86: 3b:c7:5f:61:44:8e:b6:66:d6:26:6b:bb:c4:65:e2:d3:7a:28: 6f:a2:9e:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hUpJIm7YxbwICXdyzciwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTU5YzM0NTBhMjMzMjA4MjgxYzEzMzBiMmRjMjg4MDA1MDg2ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7U4WS0gRsSkDD3Tv9c6zlTacAVU ckrVckAsO/CDAgpd+ULtlFvyxQvL7t5YriYunWtGPpmDZ8ogwsQ7hAVAtbvHx29a x7SQ4VWF7nNGRkIRsAXuLnOIRKbN3TT5cYZnzPxaPK+MPSfipJGwKL3ZaZVAOYNm xk4Fs++ypVORumiPc/ACb6iVbhcaW2owYG4sO30UnHXiohCaTCQWSvoZoIGSyDwA k2/vcau2K1Uc0d3kHTIeD/nq/cdquB8/Jhr2FrWoRsU6FxPNuEpSubUoxlQNu2Dp QUxWC7Ri+nOgkcUKP7BnM0LUMMmb/CfZoeJ4YtS/jF3JlDTfoWNjpd3SBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLFZw0UKIzIIKBwTMLLcKIAFCG9dMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvc1ZuRFJRb2pNZ2dvSEJNd3N0d29nQVVJYjEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwleHMA0G CSqGSIb3DQEBCwUAA4IBAQBXPAsjUvwRElD3X7Jx3S2YGWnRWLtHU61icsc/iOax o8Usg1uk3NJONIS6zmPV70Dyuml7W8H0JwcICX4t9vbNtNIRscK/BgD8NwGkT0R5 N7e10hZpYu5IvoKKqAz+DEaxzEPQ7BVS2Vg/oK1WxZ3gBNdm0RGKrLNd8E3VMrdi urDxL/Cx2zbncEAVvjVvenKdbKI8DCVxv0Tz1F0ZgIQbbHPq7VebxQWA/TvBpElb DLETnRLJsEczNiEIVw1AraOYh6jNSd9VbIlpmbTpcH9bdI1PSYmkBmEjE0YLhVL6 2NE7rsIAh6FnG4Y7x19hRI62ZtYma7vEZeLTeihvop4v -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:42 2026 by rpki-client