This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sSggiCFWMsfdvIIHuYstgKw6heM.roa File: sSggiCFWMsfdvIIHuYstgKw6heM.roa (raw, json) Hash identifier: 40aKzMBtokQb0vdnAP4cKUxXEqAeR1M6M6rIdbbwJ0E= Subject key identifier: B1:28:20:88:21:56:32:C7:DD:BC:82:07:B9:8B:2D:80:AC:3A:85:E3 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A30637BD96F2AA81CBE3C954DE474C Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sSggiCFWMsfdvIIHuYstgKw6heM.roa Signing time: Thu 01 Jan 2026 08:18:28 +0000 ROA not before: Thu 01 Jan 2026 08:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 81.161.229.0/24 maxlen: 24 147.78.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:06:37:bd:96:f2:aa:81:cb:e3:c9:54:de:47:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1282088215632c7ddbc8207b98b2d80ac3a85e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4a:72:d4:c9:0e:cf:f2:23:34:73:ae:5f:a2: 8c:ac:7e:9c:7f:99:1d:83:78:1f:55:6d:34:6d:dc: 1b:95:ee:fd:52:e0:3e:81:67:11:6b:51:8f:4a:b9: 2f:23:4d:d5:a5:89:e0:2f:4c:63:1a:d6:3a:4e:9c: 56:b9:87:fb:ce:6a:58:36:7b:9b:f0:46:6d:38:94: 71:ea:52:14:8a:dc:7b:7a:f3:0e:3a:a3:1b:57:da: 02:f1:b0:8d:16:43:ac:30:6f:52:7d:9c:d8:9c:aa: d5:60:fb:07:f3:c0:ad:d7:cc:78:1e:05:cd:0b:c7: 4d:2d:89:33:8b:50:48:8c:cb:05:bf:65:31:06:dd: b5:1a:ab:ea:ac:b0:0e:78:7a:8f:9b:4a:e8:4e:bd: 3c:eb:ea:57:7e:12:dd:9b:16:32:cc:36:db:2c:30: 37:eb:dc:50:79:00:83:f9:0f:9e:ea:a3:66:2b:8d: e3:8d:52:75:6b:ed:d6:d9:96:b5:c6:d3:c5:63:d7: 4f:39:be:c2:dd:b3:73:bc:a6:33:a3:01:45:ee:ec: 1c:43:87:8e:8a:4f:0c:01:b0:c5:c5:87:a6:60:3f: 7e:5e:32:9e:5a:d5:db:55:4c:aa:96:eb:77:c6:f5: ab:9c:7f:9d:7d:f5:e5:d1:d2:5c:af:5a:d6:f3:aa: 1d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:28:20:88:21:56:32:C7:DD:BC:82:07:B9:8B:2D:80:AC:3A:85:E3 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sSggiCFWMsfdvIIHuYstgKw6heM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.229.0/24 147.78.101.0/24 Signature Algorithm: sha256WithRSAEncryption 86:ec:50:7e:b0:32:02:71:18:6d:5e:ae:f6:0a:e9:5b:24:47: e4:ab:d0:ce:13:13:e4:14:73:77:c0:62:e0:42:eb:60:de:6a: 7d:0b:b5:91:3d:73:9a:99:5a:de:fe:7f:04:59:e3:8f:78:7b: a8:a0:45:c5:bd:41:fe:3d:12:fc:50:98:7d:a4:d7:a5:48:f7: 79:b8:44:c4:74:27:9d:b8:5a:1e:61:41:ff:31:c1:c3:c6:19: 97:8b:bd:6a:6b:b4:3c:f4:1e:30:1f:10:fa:99:50:05:b3:d5: 67:c6:f3:49:c3:c8:19:c1:ce:b5:c7:0f:32:39:8a:bc:b4:03: 12:c0:49:b8:73:f3:3d:c3:34:45:47:ce:a2:ce:3e:ff:d4:12: 5d:53:4a:20:7c:31:e0:16:7f:f9:aa:8c:21:91:ae:3f:ba:f6: 8f:29:48:5a:71:94:2b:64:5b:73:b2:74:d3:92:0e:41:35:0d: c6:46:58:44:12:15:3d:87:0b:5b:ce:bb:d0:a8:a0:72:bb:b6: ff:8a:22:4e:cc:cf:84:fe:24:1f:bd:e8:a5:af:d7:fb:88:f5: ce:5c:e5:44:bb:d0:29:2c:da:4b:ba:3a:1e:8e:b7:c0:0e:ee: dc:0b:a5:f0:18:77:ce:79:77:4c:da:46:a4:01:95:56:ae:c6: b6:46:44:cb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4owY3vZbyqoHL48lU3kdMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTI4MjA4ODIxNTYzMmM3ZGRiYzgyMDdiOThiMmQ4MGFjM2E4NWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEpy1MkOz/IjNHOuX6KMrH6cf5kd g3gfVW00bdwble79UuA+gWcRa1GPSrkvI03VpYngL0xjGtY6TpxWuYf7zmpYNnub 8EZtOJRx6lIUitx7evMOOqMbV9oC8bCNFkOsMG9SfZzYnKrVYPsH88Ct18x4HgXN C8dNLYkzi1BIjMsFv2UxBt21GqvqrLAOeHqPm0roTr086+pXfhLdmxYyzDbbLDA3 69xQeQCD+Q+e6qNmK43jjVJ1a+3W2Za1xtPFY9dPOb7C3bNzvKYzowFF7uwcQ4eO ik8MAbDFxYemYD9+XjKeWtXbVUyqlut3xvWrnH+dffXl0dJcr1rW86od2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLEoIIghVjLH3byCB7mLLYCsOoXjMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvc1NnZ2lDRldNc2ZkdklJSHVZc3RnS3c2aGVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUaHlAwQA k05lMA0GCSqGSIb3DQEBCwUAA4IBAQCG7FB+sDICcRhtXq72CulbJEfkq9DOExPk FHN3wGLgQutg3mp9C7WRPXOamVre/n8EWeOPeHuooEXFvUH+PRL8UJh9pNelSPd5 uETEdCeduFoeYUH/McHDxhmXi71qa7Q89B4wHxD6mVAFs9VnxvNJw8gZwc61xw8y OYq8tAMSwEm4c/M9wzRFR86izj7/1BJdU0ogfDHgFn/5qowhka4/uvaPKUhacZQr ZFtzsnTTkg5BNQ3GRlhEEhU9hwtbzrvQqKByu7b/iiJOzM+E/iQfveilr9f7iPXO XOVEu9ApLNpLujoejrfADu7cC6XwGHfOeXdM2kakAZVWrsa2RkTL -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:45 2026 by rpki-client