This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SLgtZdSBxprQ9QtTE2oRwhnQT7s.roa File: SLgtZdSBxprQ9QtTE2oRwhnQT7s.roa (raw, json) Hash identifier: /ztlmKL1HHb/09bYkWiIMH6vHTYAZ90E0HA+XmCWDhQ= Subject key identifier: 48:B8:2D:65:D4:81:C6:9A:D0:F5:0B:53:13:6A:11:C2:19:D0:4F:BB Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7DFF483FC8F778BF376D70CABAC99 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SLgtZdSBxprQ9QtTE2oRwhnQT7s.roa Signing time: Thu 01 Jan 2026 18:17:57 +0000 ROA not before: Thu 01 Jan 2026 18:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212717 IP address blocks: 85.254.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:df:f4:83:fc:8f:77:8b:f3:76:d7:0c:ab:ac:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48b82d65d481c69ad0f50b53136a11c219d04fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e7:e8:d2:b7:05:69:3e:b1:fb:aa:ad:34:b0: ec:9c:60:c0:18:91:8b:cd:63:5e:5e:0d:de:0c:c8: 6c:4d:04:dc:3c:40:ab:aa:c5:8e:57:4e:fb:b3:c6: 57:c5:a0:2a:97:9a:ad:a4:4b:7a:a2:fa:b9:13:f8: 42:10:ce:d7:75:5f:0e:f3:8e:0c:85:11:1a:0d:18: b5:df:b8:af:a2:02:67:e4:25:11:2e:47:d2:ee:da: 39:cf:c8:a9:4b:5e:ee:0c:1c:27:cf:12:f2:bc:43: a3:a0:9d:1d:c1:a8:ca:f2:d7:85:ec:bb:36:e6:11: a1:6b:8e:c4:61:1a:b4:1a:e8:1a:58:59:de:6b:14: 99:cc:26:f9:ee:13:f3:0c:b5:ba:2a:df:cb:57:30: 60:3f:71:83:2f:1e:0f:d3:9b:bf:e3:4c:39:39:a6: fa:1f:b3:f8:77:6f:92:ce:85:e6:40:72:9c:4a:1a: 76:e7:76:22:4b:7d:12:bc:f5:6b:e4:91:30:8c:a8: f6:83:84:dd:bf:9c:e5:d9:64:c6:78:57:b5:b9:c8: 34:1d:b7:cc:96:ff:5b:6b:7a:d7:1b:db:87:f8:76: e8:54:a0:45:93:0a:88:a8:9b:69:4b:9f:6e:dd:21: 50:74:16:ac:05:bf:03:82:08:72:2a:da:05:77:25: 0e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B8:2D:65:D4:81:C6:9A:D0:F5:0B:53:13:6A:11:C2:19:D0:4F:BB X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SLgtZdSBxprQ9QtTE2oRwhnQT7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.28.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:10:08:fc:ea:a7:4e:34:f2:6b:e4:37:d6:d5:a5:7c:4c:47: 0a:b2:c9:82:f8:c8:49:78:b7:dc:80:c1:71:3c:d5:52:52:99: a7:63:19:84:6e:c6:5a:fc:db:ea:98:a4:56:41:30:01:2c:fc: 4d:c5:11:82:17:0b:36:a1:e9:35:f2:fe:09:87:c6:e9:84:be: 9e:fe:0f:2c:28:ab:66:78:04:ca:32:1a:0e:8d:a0:2c:92:a0: ea:76:6a:d5:47:29:77:06:ca:15:3f:1c:38:84:81:33:7a:74: b7:5c:30:e6:a9:61:17:a8:52:da:c8:3e:00:3c:64:c1:53:30: a4:86:77:30:38:bf:33:f4:b6:7b:32:3d:23:ff:71:c7:e3:e6: 41:de:55:72:76:56:a5:c0:24:c1:8a:59:90:b0:e1:32:14:64: e4:d9:b7:be:0c:35:76:b2:4a:43:23:c2:1b:85:c3:9b:01:29: 3f:d0:32:a2:f0:0d:63:7b:0e:02:ee:35:cc:b0:27:47:bc:d5: a7:c9:8d:99:5d:25:d1:c2:8f:7f:c1:7d:21:bb:19:2c:3e:97: 9e:9b:62:61:73:3e:5a:75:26:cb:54:26:ec:7d:89:b8:c4:f8: 5c:52:1f:3b:5a:8e:e9:a5:9c:37:16:8d:45:64:fe:b9:c5:c9: 4e:8b:09:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9/0g/yPd4vzdtcMq6yZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGI4MmQ2NWQ0ODFjNjlhZDBmNTBiNTMxMzZhMTFjMjE5ZDA0ZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzufo0rcFaT6x+6qtNLDsnGDAGJGL zWNeXg3eDMhsTQTcPECrqsWOV077s8ZXxaAql5qtpEt6ovq5E/hCEM7XdV8O844M hREaDRi137ivogJn5CURLkfS7to5z8ipS17uDBwnzxLyvEOjoJ0dwajK8teF7Ls2 5hGha47EYRq0GugaWFneaxSZzCb57hPzDLW6Kt/LVzBgP3GDLx4P05u/40w5Oab6 H7P4d2+SzoXmQHKcShp253YiS30SvPVr5JEwjKj2g4Tdv5zl2WTGeFe1ucg0HbfM lv9ba3rXG9uH+HboVKBFkwqIqJtpS59u3SFQdBasBb8DgghyKtoFdyUO0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEi4LWXUgcaa0PULUxNqEcIZ0E+7MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvU0xndFpkU0J4cHJROVF0VEUyb1J3aG5RVDdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVf4cMA0G CSqGSIb3DQEBCwUAA4IBAQA7EAj86qdONPJr5DfW1aV8TEcKssmC+MhJeLfcgMFx PNVSUpmnYxmEbsZa/NvqmKRWQTABLPxNxRGCFws2oek18v4Jh8bphL6e/g8sKKtm eATKMhoOjaAskqDqdmrVRyl3BsoVPxw4hIEzenS3XDDmqWEXqFLayD4APGTBUzCk hncwOL8z9LZ7Mj0j/3HH4+ZB3lVydlalwCTBilmQsOEyFGTk2be+DDV2skpDI8Ib hcObASk/0DKi8A1jew4C7jXMsCdHvNWnyY2ZXSXRwo9/wX0huxksPpeem2Jhcz5a dSbLVCbsfYm4xPhcUh87Wo7ppZw3Fo1FZP65xclOiwlI -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:52 2026 by rpki-client