This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SdVVYoo8KYZP6hOva8vVfgQJ65w.roa File: SdVVYoo8KYZP6hOva8vVfgQJ65w.roa (raw, json) Hash identifier: ofX8Vcn1syqsGTkaTt9gmswlmP3/peS6INT1zFJ4VPA= Subject key identifier: 49:D5:55:62:8A:3C:29:86:4F:EA:13:AF:6B:CB:D5:7E:04:09:EB:9C Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019BD7DB289FFCBCF77F12326A61ACAB4B8C Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SdVVYoo8KYZP6hOva8vVfgQJ65w.roa Signing time: Mon 19 Jan 2026 20:03:42 +0000 ROA not before: Mon 19 Jan 2026 20:03:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 45.66.228.0/24 maxlen: 24 45.66.231.0/24 maxlen: 24 45.89.247.0/24 maxlen: 24 45.141.158.0/24 maxlen: 24 81.161.238.0/24 maxlen: 24 85.217.130.0/23 maxlen: 24 87.120.87.0/24 maxlen: 24 87.120.126.0/24 maxlen: 24 87.120.166.0/24 maxlen: 24 87.121.60.0/23 maxlen: 23 87.121.132.0/22 maxlen: 24 87.121.165.0/24 maxlen: 24 92.119.196.0/23 maxlen: 24 92.249.50.0/24 maxlen: 24 93.123.109.0/24 maxlen: 24 185.218.84.0/22 maxlen: 24 185.222.160.0/24 maxlen: 24 193.25.216.0/24 maxlen: 24 194.55.186.0/24 maxlen: 24 194.169.175.0/24 maxlen: 24 212.73.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:db:28:9f:fc:bc:f7:7f:12:32:6a:61:ac:ab:4b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 19 20:03:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49d555628a3c29864fea13af6bcbd57e0409eb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:17:01:f9:1f:c6:c7:21:69:1c:42:95:4f:68: 6f:83:93:a9:05:14:52:81:9f:a2:c8:4f:58:f5:e1: a7:80:f8:90:21:a5:6a:3b:25:18:b4:f0:52:df:9f: 93:09:88:7b:f3:d1:68:52:3f:41:74:d3:e0:59:a6: f1:72:1c:a4:61:4a:41:ac:0e:a0:aa:c9:5e:cf:e7: b8:db:fd:06:e9:75:92:6b:55:e2:df:de:3d:45:0e: 8c:84:36:3a:32:d5:f5:10:80:2f:a6:0d:8a:d9:e6: d0:97:6a:f8:5a:0e:35:6b:d2:06:e6:1d:8c:e0:f6: 49:5d:7a:6d:4c:45:33:e7:2d:9e:58:fc:46:68:cc: 51:8b:90:be:81:6e:4d:c5:4d:f1:16:b0:70:13:21: a5:e9:14:d4:a9:2d:3a:ef:87:22:fa:3d:e0:b3:c5: 4f:61:15:f1:4d:41:8c:0b:41:11:ee:ef:b1:9f:67: 86:bc:1b:62:24:c9:8c:88:39:66:73:e2:f7:47:a0: 13:54:47:01:2c:20:21:05:8e:e6:e6:5f:d6:b6:9a: e8:42:5e:ba:41:17:41:21:d7:64:8d:8a:64:f1:60: c7:31:18:8b:be:9a:66:6a:8a:1b:bd:89:d0:18:ea: 73:19:b3:9a:3c:f0:38:db:82:26:e0:80:ab:21:d5: cf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D5:55:62:8A:3C:29:86:4F:EA:13:AF:6B:CB:D5:7E:04:09:EB:9C X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SdVVYoo8KYZP6hOva8vVfgQJ65w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.228.0/24 45.66.231.0/24 45.89.247.0/24 45.141.158.0/24 81.161.238.0/24 85.217.130.0/23 87.120.87.0/24 87.120.126.0/24 87.120.166.0/24 87.121.60.0/23 87.121.132.0/22 87.121.165.0/24 92.119.196.0/23 92.249.50.0/24 93.123.109.0/24 185.218.84.0/22 185.222.160.0/24 193.25.216.0/24 194.55.186.0/24 194.169.175.0/24 212.73.149.0/24 Signature Algorithm: sha256WithRSAEncryption 42:89:96:a8:26:92:f6:89:d3:3f:0e:87:5b:5b:0f:45:f2:c8: b6:24:8e:25:09:5c:77:bd:c7:6b:0e:3d:0f:60:f0:80:7d:2f: 8c:af:3a:cb:fe:f5:dc:7b:63:3d:d2:45:66:57:e8:ec:6f:70: b6:6b:a5:29:30:e7:5e:e3:a6:e4:30:76:25:76:6c:15:4b:9b: 8e:6f:f9:86:51:8d:d4:ba:a5:74:97:1c:51:a9:2b:27:a1:d1: 6a:e6:8a:11:ee:de:a6:9b:47:33:fa:6d:d5:0a:3a:0b:38:a0: 8f:ef:da:be:27:9f:57:b9:1c:52:50:46:a1:78:84:bf:8c:cf: 89:b2:e4:03:1b:60:e4:8e:5e:c1:43:e5:5a:f4:95:48:00:3f: f1:c7:19:e6:f2:50:0b:ac:d2:7e:cb:c9:c4:d8:ce:93:68:b6: 69:e2:98:22:4c:82:30:a8:c8:c1:a7:fb:b3:16:a5:75:c9:be: 73:76:58:ad:c9:f1:a2:1e:1a:75:98:02:4c:18:6e:16:56:8c: 20:a3:c1:7e:c3:d5:47:44:f4:cd:3a:d6:e8:9b:72:a2:8e:a4: 57:84:9b:00:38:61:21:57:78:ab:0f:1e:32:00:6c:14:fc:54: 07:39:63:13:1a:b5:50:82:21:dd:00:58:1f:45:79:5d:39:4c: 14:96:ac:0e -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZvX2yif/Lz3fxIyamGsq0uMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTE5MjAwMzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWQ1NTU2MjhhM2MyOTg2NGZlYTEzYWY2YmNiZDU3ZTA0MDllYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhcB+R/GxyFpHEKVT2hvg5OpBRRS gZ+iyE9Y9eGngPiQIaVqOyUYtPBS35+TCYh789FoUj9BdNPgWabxchykYUpBrA6g qslez+e42/0G6XWSa1Xi3949RQ6MhDY6MtX1EIAvpg2K2ebQl2r4Wg41a9IG5h2M 4PZJXXptTEUz5y2eWPxGaMxRi5C+gW5NxU3xFrBwEyGl6RTUqS0674ci+j3gs8VP YRXxTUGMC0ER7u+xn2eGvBtiJMmMiDlmc+L3R6ATVEcBLCAhBY7m5l/WtproQl66 QRdBIddkjYpk8WDHMRiLvppmaoobvYnQGOpzGbOaPPA424Im4ICrIdXPtQIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFEnVVWKKPCmGT+oTr2vL1X4ECeucMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvU2RWVllvbzhLWVpQNmhPdmE4dlZmZ1FKNjV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAC1C 5AMEAC1C5wMEAC1Z9wMEAC2NngMEAFGh7gMEAVXZggMEAFd4VwMEAFd4fgMEAFd4 pgMEAVd5PAMEAld5hAMEAFd5pQMEAVx3xAMEAFz5MgMEAF17bQMEArnaVAMEALne oAMEAMEZ2AMEAMI3ugMEAMKprwMEANRJlTANBgkqhkiG9w0BAQsFAAOCAQEAQomW qCaS9onTPw6HW1sPRfLItiSOJQlcd73Haw49D2DwgH0vjK86y/713HtjPdJFZlfo 7G9wtmulKTDnXuOm5DB2JXZsFUubjm/5hlGN1LqldJccUakrJ6HRauaKEe7epptH M/pt1Qo6Czigj+/aviefV7kcUlBGoXiEv4zPibLkAxtg5I5ewUPlWvSVSAA/8ccZ 5vJQC6zSfsvJxNjOk2i2aeKYIkyCMKjIwaf7sxaldcm+c3ZYrcnxoh4adZgCTBhu FlaMIKPBfsPVR0T0zTrW6Jtyoo6kV4SbADhhIVd4qw8eMgBsFPxUBzljExq1UIIh 3QBYH0V5XTlMFJasDg== -----END CERTIFICATE-----Generated at Tue Jan 20 18:21:34 2026 by rpki-client