This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/S-sf-w-GYIgayxLmgzGZ1qSPmP4.roa File: S-sf-w-GYIgayxLmgzGZ1qSPmP4.roa (raw, json) Hash identifier: VexwBGDRtXYvqjAAI2Ru2LbV3Sl/+ATObeow9HNiBLY= Subject key identifier: 4B:EB:1F:FB:0F:86:60:88:1A:CB:12:E6:83:31:99:D6:A4:8F:98:FE Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7D0F84CF2B189D03E06C0270CD6D5 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/S-sf-w-GYIgayxLmgzGZ1qSPmP4.roa Signing time: Thu 01 Jan 2026 18:17:54 +0000 ROA not before: Thu 01 Jan 2026 18:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48798 IP address blocks: 80.81.60.0/24 maxlen: 24 85.254.172.0/24 maxlen: 24 85.254.182.0/24 maxlen: 24 85.254.183.0/24 maxlen: 24 185.176.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d0:f8:4c:f2:b1:89:d0:3e:06:c0:27:0c:d6:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4beb1ffb0f8660881acb12e6833199d6a48f98fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e5:2e:c7:11:61:05:15:68:a8:f1:ad:e8:f4: d8:b1:87:b3:a2:4c:93:20:28:94:e1:29:57:0e:f8: 67:11:1d:e9:d1:b2:bb:b8:de:cb:08:10:f2:db:d1: 6b:0d:42:a4:0b:c5:d0:72:64:f3:91:a0:ac:2a:a1: 1f:20:a8:01:7b:f5:3d:c5:e0:87:47:7e:bf:b4:50: 54:b4:77:fa:3a:c4:f3:3f:67:c9:7f:10:35:1d:44: 22:6d:75:0c:9d:12:44:da:4f:f1:8e:65:87:24:d4: 55:be:c1:9d:b3:80:33:28:20:cc:b6:fb:1a:1f:6f: 52:48:6f:aa:4a:4a:bb:1b:ce:ac:4c:cd:61:2d:5d: 66:e3:c6:b9:9b:ec:12:a2:3f:2c:5a:5f:26:ff:fc: d6:e4:ff:cf:14:e3:c4:df:47:03:00:3a:57:15:dc: 2c:19:40:7d:ef:e6:68:d7:a5:d9:08:3b:1f:34:b9: e0:45:52:72:95:6b:43:8e:d7:80:38:5d:d4:b0:d1: 13:8d:d9:ac:76:a2:e9:81:8b:e1:ae:b4:d0:49:62: ad:56:1f:19:aa:c1:f7:77:fa:5d:6b:09:0c:b3:9e: 0e:ea:a2:89:62:8b:0f:d8:8d:61:da:06:a0:a2:91: b0:b2:36:0b:5b:36:a7:4c:ec:ac:d0:85:d0:51:6f: cc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EB:1F:FB:0F:86:60:88:1A:CB:12:E6:83:31:99:D6:A4:8F:98:FE X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/S-sf-w-GYIgayxLmgzGZ1qSPmP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.81.60.0/24 85.254.172.0/24 85.254.182.0/23 185.176.117.0/24 Signature Algorithm: sha256WithRSAEncryption 84:ec:56:f2:78:44:52:3d:be:81:11:9f:ae:8a:8f:c7:6d:f7: 24:11:91:3e:87:f7:93:e8:58:c7:79:c6:15:59:6d:24:59:bb: 2f:e9:9d:5f:6d:c0:a7:16:3b:7c:6e:8d:0d:be:f3:ac:69:3e: 72:f8:29:84:b4:d2:31:24:fe:86:16:da:d8:03:57:6f:4a:37: da:45:28:39:e6:a3:21:ef:fc:a9:2f:cd:9b:75:9b:44:f5:3e: da:a0:c1:e5:e2:e0:c9:7b:40:14:29:46:5a:15:b8:27:78:52: 5d:bd:ae:2b:4c:c6:6b:86:c4:77:dc:f9:07:38:cc:b3:49:ca: 8f:30:41:54:3c:7d:99:c5:d1:7a:11:f3:94:7a:77:c0:2e:7b: e6:91:97:ea:24:98:0e:98:35:58:fb:cc:25:51:d7:52:b9:15: 08:b0:7a:83:3c:8c:e4:f3:a1:fd:3b:ec:7b:62:29:5c:6b:19: 8c:10:45:f6:90:50:ad:99:71:de:dd:2a:db:f2:42:d9:7f:e0: 34:4d:42:44:a5:99:fe:0c:6b:87:10:23:25:9d:4f:cf:f9:b5: a2:44:41:99:11:dd:0a:86:7a:4c:ba:e8:86:67:8d:a2:e9:54: 29:82:5c:28:cc:60:ed:72:eb:45:ec:a7:13:bd:08:f7:da:61: dd:9b:d1:25 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6x9D4TPKxidA+BsAnDNbVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmViMWZmYjBmODY2MDg4MWFjYjEyZTY4MzMxOTlkNmE0OGY5OGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OUuxxFhBRVoqPGt6PTYsYezokyT ICiU4SlXDvhnER3p0bK7uN7LCBDy29FrDUKkC8XQcmTzkaCsKqEfIKgBe/U9xeCH R36/tFBUtHf6OsTzP2fJfxA1HUQibXUMnRJE2k/xjmWHJNRVvsGds4AzKCDMtvsa H29SSG+qSkq7G86sTM1hLV1m48a5m+wSoj8sWl8m//zW5P/PFOPE30cDADpXFdws GUB97+Zo16XZCDsfNLngRVJylWtDjteAOF3UsNETjdmsdqLpgYvhrrTQSWKtVh8Z qsH3d/pdawkMs54O6qKJYosP2I1h2gagopGwsjYLWzanTOys0IXQUW/MTwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEvrH/sPhmCIGssS5oMxmdakj5j+MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvUy1zZi13LUdZSWdheXhMbWd6R1oxcVNQbVA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUFE8AwQA Vf6sAwQBVf62AwQAubB1MA0GCSqGSIb3DQEBCwUAA4IBAQCE7FbyeERSPb6BEZ+u io/HbfckEZE+h/eT6FjHecYVWW0kWbsv6Z1fbcCnFjt8bo0NvvOsaT5y+CmEtNIx JP6GFtrYA1dvSjfaRSg55qMh7/ypL82bdZtE9T7aoMHl4uDJe0AUKUZaFbgneFJd va4rTMZrhsR33PkHOMyzScqPMEFUPH2ZxdF6EfOUenfALnvmkZfqJJgOmDVY+8wl UddSuRUIsHqDPIzk86H9O+x7YilcaxmMEEX2kFCtmXHe3Srb8kLZf+A0TUJEpZn+ DGuHECMlnU/P+bWiREGZEd0KhnpMuuiGZ42i6VQpglwozGDtcutF7KcTvQj32mHd m9El -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:02 2026 by rpki-client