This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/SJrSIkNkCVFe6nfB0uQO_MeAu5Y.roa File: SJrSIkNkCVFe6nfB0uQO_MeAu5Y.roa (raw, json) Hash identifier: F5YlyVH6nJJVWDdy+znUqiWaL4/wtjIJh3etV+AoVuA= Subject key identifier: 48:9A:D2:22:43:64:09:51:5E:EA:77:C1:D2:E4:0E:FC:C7:80:BB:96 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B7F1613660C71C5E66FF1D2D3CF9743CF Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/SJrSIkNkCVFe6nfB0uQO_MeAu5Y.roa Signing time: Fri 02 Jan 2026 14:21:51 +0000 ROA not before: Fri 02 Jan 2026 14:21:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395374 IP address blocks: 92.62.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:13:66:0c:71:c5:e6:6f:f1:d2:d3:cf:97:43:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jan 2 14:21:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=489ad222436409515eea77c1d2e40efcc780bb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b8:7e:42:88:d1:8a:e2:7e:e3:a9:67:51:b9: af:90:0f:b7:e7:97:7b:fb:94:5f:22:cf:30:92:d8: 4f:10:34:1e:d9:d7:3c:9a:30:e1:6b:0c:65:fb:a6: 52:c6:12:43:01:7e:a3:b0:b3:d8:7e:1d:13:34:75: fa:91:e1:cb:be:ce:12:7a:3f:3d:b5:76:7f:c5:97: 26:02:7c:5f:3e:e3:ca:45:f5:32:39:f8:7f:55:13: 63:ea:0b:4a:85:cf:f0:18:19:0a:2d:f6:60:a4:12: c0:7f:6f:45:65:57:d0:da:52:58:41:ea:25:0b:45: 9f:1e:74:ae:9d:69:77:40:79:c7:76:ff:63:5c:c1: aa:b8:06:5a:40:2c:73:19:ad:a5:f3:a0:29:e6:da: 2c:1d:f2:c0:19:00:90:61:47:e6:bb:6a:aa:05:2a: a2:4c:fc:47:08:2e:a5:1c:b8:85:a7:bb:c7:e7:a2: 6a:73:72:60:d0:9d:80:b0:7b:a5:8e:9c:92:9a:97: a1:6a:53:7e:19:76:39:cc:4f:e4:78:9f:64:12:e9: ca:91:05:51:11:ce:25:87:f3:8d:98:90:72:21:73: 8e:77:f6:55:7e:73:52:4e:89:91:c8:c3:a6:ad:0e: 5f:5d:11:07:eb:a2:39:39:26:bd:9f:50:af:43:34: b6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9A:D2:22:43:64:09:51:5E:EA:77:C1:D2:E4:0E:FC:C7:80:BB:96 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/SJrSIkNkCVFe6nfB0uQO_MeAu5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.62.248.0/24 Signature Algorithm: sha256WithRSAEncryption 32:39:90:93:0c:af:c1:ac:0c:40:ee:71:be:7c:be:71:79:ab: ff:80:9c:c8:b3:dc:b8:17:3a:a6:8e:dc:46:d4:a9:da:13:84: 0d:e4:31:5d:e4:46:bd:85:8d:dd:6f:8d:e5:b6:f7:3b:02:4d: 7c:3f:6b:9e:32:17:3d:7f:a2:73:0c:2a:d0:cf:87:a4:46:60: a2:f5:bc:ce:8d:06:93:d2:c8:05:da:9e:fb:7a:7e:e7:2e:09: d8:30:ea:76:02:db:bb:8b:4f:61:9d:e0:a8:6e:cc:92:80:07: ff:3b:f6:8c:fb:cf:0f:4c:ab:b6:c1:45:8f:79:68:b8:9a:d3: 5e:27:ed:cb:a7:16:1b:39:22:a5:76:8b:17:06:01:15:04:f5: 06:2b:8d:57:2a:97:f1:83:4f:95:6a:18:c7:6e:7d:8b:90:d9: c7:29:0a:53:4d:eb:9c:9a:aa:c2:fb:67:b5:2f:1b:a5:a5:52: 89:9b:e6:3d:2a:b2:07:cc:5f:d2:3b:b1:b2:00:04:7c:e9:0e: c3:a7:a4:28:42:60:92:e3:18:7b:01:36:3b:aa:e6:cd:bb:ce: 58:7c:24:bf:d5:5a:45:07:db:13:ac:95:4e:15:a3:1c:01:34: 4b:4c:ac:f7:d6:d1:6a:ce:1b:15:de:e0:87:ab:4f:08:74:5d: a3:6c:a9:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FhNmDHHF5m/x0tPPl0PPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjYwMTAyMTQyMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODlhZDIyMjQzNjQwOTUxNWVlYTc3YzFkMmU0MGVmY2M3ODBiYjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLh+QojRiuJ+46lnUbmvkA+355d7 +5RfIs8wkthPEDQe2dc8mjDhawxl+6ZSxhJDAX6jsLPYfh0TNHX6keHLvs4Sej89 tXZ/xZcmAnxfPuPKRfUyOfh/VRNj6gtKhc/wGBkKLfZgpBLAf29FZVfQ2lJYQeol C0WfHnSunWl3QHnHdv9jXMGquAZaQCxzGa2l86Ap5tosHfLAGQCQYUfmu2qqBSqi TPxHCC6lHLiFp7vH56Jqc3Jg0J2AsHuljpySmpehalN+GXY5zE/keJ9kEunKkQVR Ec4lh/ONmJByIXOOd/ZVfnNSTomRyMOmrQ5fXREH66I5OSa9n1CvQzS2iQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEia0iJDZAlRXup3wdLkDvzHgLuWMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvU0pyU0lrTmtDVkZlNm5mQjB1UU9fTWVBdTVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD74MA0G CSqGSIb3DQEBCwUAA4IBAQAyOZCTDK/BrAxA7nG+fL5xeav/gJzIs9y4FzqmjtxG 1KnaE4QN5DFd5Ea9hY3db43ltvc7Ak18P2ueMhc9f6JzDCrQz4ekRmCi9bzOjQaT 0sgF2p77en7nLgnYMOp2Atu7i09hneCobsySgAf/O/aM+88PTKu2wUWPeWi4mtNe J+3LpxYbOSKldosXBgEVBPUGK41XKpfxg0+VahjHbn2LkNnHKQpTTeucmqrC+2e1 LxulpVKJm+Y9KrIHzF/SO7GyAAR86Q7Dp6QoQmCS4xh7ATY7qubNu85YfCS/1VpF B9sTrJVOFaMcATRLTKz31tFqzhsV3uCHq08IdF2jbKml -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:29 2026 by rpki-client