This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/SFnLmcRXNoAvKmHKtCKbBqiDke8.roa File: SFnLmcRXNoAvKmHKtCKbBqiDke8.roa (raw, json) Hash identifier: PBomLl2Jg/1jBfjMIeHic9H2KfOA2H8CNEl1uZ5aGRg= Subject key identifier: 48:59:CB:99:C4:57:36:80:2F:2A:61:CA:B4:22:9B:06:A8:83:91:EF Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B7AC830B174642D65945A0CBBDAECE181 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/SFnLmcRXNoAvKmHKtCKbBqiDke8.roa Signing time: Thu 01 Jan 2026 18:18:18 +0000 ROA not before: Thu 01 Jan 2026 18:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201670 IP address blocks: 195.20.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:30:b1:74:64:2d:65:94:5a:0c:bb:da:ec:e1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 1 18:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4859cb99c45736802f2a61cab4229b06a88391ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:52:92:82:c9:3c:82:a5:0e:e8:c2:41:04: 34:d8:da:ee:7b:ff:c6:67:86:09:62:35:87:3c:20: 19:b0:b9:7a:e2:94:5b:1b:e7:0e:59:70:9f:9e:10: 58:f2:1b:2f:7b:3e:75:19:c8:9a:f3:d8:d3:99:2d: d6:7d:af:62:30:08:56:af:e4:04:6f:3d:4f:ee:a0: eb:91:09:99:36:8e:ce:d3:ed:e3:2c:d0:e9:e2:b8: 43:61:87:85:12:3c:ac:9e:61:d6:9a:96:df:6c:58: ba:fb:e2:0a:f4:e4:0e:6b:fd:8b:f8:14:48:a3:45: d5:95:bd:6e:fe:db:9a:9b:46:56:ba:fb:0e:92:4d: 9e:59:a5:e2:c5:86:23:83:29:15:53:7a:09:59:bf: 62:b9:61:c0:7e:a0:5c:42:fe:3c:a4:ca:2a:82:2f: 37:1a:72:3d:f7:73:b6:34:2d:1c:a1:48:e0:c1:9b: 8f:b0:c0:72:75:00:b1:40:d1:b8:fa:1d:62:d3:9f: 1b:77:59:0b:6c:72:5c:a9:dc:31:55:a3:cc:ed:17: 04:40:e6:08:e3:a0:11:2b:f4:66:91:46:ff:85:8b: 21:cc:ec:b8:01:f0:15:2d:6d:86:f6:c5:b0:f5:00: ed:67:2c:a2:0a:00:86:8e:f5:1d:02:e4:d6:3f:2e: f8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:59:CB:99:C4:57:36:80:2F:2A:61:CA:B4:22:9B:06:A8:83:91:EF X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/SFnLmcRXNoAvKmHKtCKbBqiDke8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.20.19.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:2e:46:a7:93:f4:ea:a4:f1:98:14:2c:a9:8e:eb:23:43:69: de:a1:c6:8b:13:c4:7f:92:7a:12:a1:32:96:21:df:ec:5a:de: 6f:29:27:4c:d3:8d:6a:4c:7d:d5:ac:14:95:92:4b:9b:0f:6e: 69:f4:37:d9:7f:00:cc:ab:ae:5d:00:c2:ee:90:ea:97:a9:b1: f5:17:db:ee:0f:e8:0b:3b:ae:4e:aa:6b:38:f9:06:cd:97:e1: 0e:9b:d5:72:73:2a:77:33:5b:5b:9a:30:4b:e9:0c:05:b4:7b: 40:7f:22:26:b4:3e:d3:c4:1d:71:0f:84:b4:9f:14:89:36:6b: 5a:54:81:40:eb:17:b3:d4:e8:e3:2d:0b:b8:76:e1:c9:ce:65: c4:2e:b1:10:c7:84:c4:9d:e5:f1:1f:91:28:7a:6e:50:cd:bc: 92:23:6a:77:1c:0f:33:26:ce:27:84:a1:8f:66:7c:3c:eb:48: 8e:79:72:7f:84:94:5a:7b:d4:76:cd:8a:ae:a1:04:5d:63:6b: 47:01:1e:a2:4d:6e:f0:bc:1f:73:2c:f9:4a:c8:30:b6:55:11: fd:cb:a6:e0:83:91:a2:f6:21:0d:51:eb:1e:df:e7:fb:1f:6f: e7:e3:9f:18:13:4d:32:15:df:fe:cc:17:81:17:e9:ae:64:ab: ff:7a:a3:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yDCxdGQtZZRaDLva7OGBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTAxMTgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODU5Y2I5OWM0NTczNjgwMmYyYTYxY2FiNDIyOWIwNmE4ODM5MWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9dSkoLJPIKlDujCQQQ02Nrue//G Z4YJYjWHPCAZsLl64pRbG+cOWXCfnhBY8hsvez51Gcia89jTmS3Wfa9iMAhWr+QE bz1P7qDrkQmZNo7O0+3jLNDp4rhDYYeFEjysnmHWmpbfbFi6++IK9OQOa/2L+BRI o0XVlb1u/tuam0ZWuvsOkk2eWaXixYYjgykVU3oJWb9iuWHAfqBcQv48pMoqgi83 GnI993O2NC0coUjgwZuPsMBydQCxQNG4+h1i058bd1kLbHJcqdwxVaPM7RcEQOYI 46ARK/RmkUb/hYshzOy4AfAVLW2G9sWw9QDtZyyiCgCGjvUdAuTWPy74KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEhZy5nEVzaALyphyrQimwaog5HvMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvU0ZuTG1jUlhOb0F2S21IS3RDS2JCcWlEa2U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxQTMA0G CSqGSIb3DQEBCwUAA4IBAQAbLkank/TqpPGYFCypjusjQ2neocaLE8R/knoSoTKW Id/sWt5vKSdM041qTH3VrBSVkkubD25p9DfZfwDMq65dAMLukOqXqbH1F9vuD+gL O65Oqms4+QbNl+EOm9Vycyp3M1tbmjBL6QwFtHtAfyImtD7TxB1xD4S0nxSJNmta VIFA6xez1OjjLQu4duHJzmXELrEQx4TEneXxH5Eoem5QzbySI2p3HA8zJs4nhKGP Znw860iOeXJ/hJRae9R2zYquoQRdY2tHAR6iTW7wvB9zLPlKyDC2VRH9y6bgg5Gi 9iENUese3+f7H2/n458YE00yFd/+zBeBF+muZKv/eqNu -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:27 2026 by rpki-client