This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SyWG8p7IvITOrzz7B3jHamYGUBg.roa File: SyWG8p7IvITOrzz7B3jHamYGUBg.roa (raw, json) Hash identifier: dDVMKYFpUaqFPr2wpgb7JzwnjeKz+FwOZ+KAE1lWLAc= Subject key identifier: 4B:25:86:F2:9E:C8:BC:84:CE:AF:3C:FB:07:78:C7:6A:66:06:50:18 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7DBCC3CB62B8BFE7861C10B727EBF Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SyWG8p7IvITOrzz7B3jHamYGUBg.roa Signing time: Thu 01 Jan 2026 18:17:56 +0000 ROA not before: Thu 01 Jan 2026 18:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202589 IP address blocks: 85.254.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:db:cc:3c:b6:2b:8b:fe:78:61:c1:0b:72:7e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b2586f29ec8bc84ceaf3cfb0778c76a66065018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:e8:dd:e5:76:4c:63:dd:25:a8:82:72:55: 3e:e8:72:bd:6e:8d:e5:c5:ba:d2:22:14:f0:91:c8: a3:15:0b:ef:49:71:fb:4f:c1:f7:c1:14:5d:17:35: 11:c2:3d:4b:92:94:a2:d6:9d:e5:8a:1c:b1:dd:e4: be:04:12:3c:43:14:b6:f3:49:01:cd:9b:d5:25:31: 2f:4d:d8:09:e5:41:3e:0c:90:43:5a:27:3c:ad:47: 89:a9:19:46:ec:da:43:c8:97:4e:b5:e4:85:51:e7: 35:38:e6:80:53:f8:c8:c3:ed:91:77:53:bf:dd:9d: 32:a5:5e:05:24:6f:b4:4d:bf:b3:89:99:4b:da:ed: b5:c9:84:db:91:6c:3f:77:7c:64:4b:20:c1:86:47: 16:02:e4:10:19:55:17:f2:c9:ad:a6:5a:e1:b1:00: 23:81:2c:3c:67:59:da:34:40:5d:f5:51:8e:52:39: 5d:7b:33:11:80:1c:30:0b:57:50:c5:bc:6b:02:99: 7b:e3:85:aa:32:1d:b5:2a:32:15:e7:ea:19:d9:66: 03:0b:7d:47:d7:5c:38:07:4b:3a:2a:05:ba:da:80: 34:d4:6e:4e:96:be:3c:a9:7b:04:e6:1d:37:8e:de: 97:f3:1e:27:72:2a:a8:bc:e9:da:49:ae:e0:10:93: 8b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:25:86:F2:9E:C8:BC:84:CE:AF:3C:FB:07:78:C7:6A:66:06:50:18 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SyWG8p7IvITOrzz7B3jHamYGUBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.58.0/24 Signature Algorithm: sha256WithRSAEncryption 00:f2:ed:b4:dc:74:4a:63:3d:15:e3:c0:4b:78:02:41:c5:33: ee:51:f3:19:9f:88:8d:45:03:09:2a:19:e3:00:d3:a4:1d:42: b2:e0:7b:f0:e9:c9:ad:fb:2c:5f:2d:d7:07:69:63:48:7a:00: a2:5b:ef:fb:3c:53:34:ca:24:3b:2e:cd:5f:08:24:78:ba:89: a7:fd:70:1c:20:79:57:bf:f6:f3:88:bf:08:06:32:fc:48:72: ef:9c:52:bb:df:63:76:af:ac:4a:bf:5a:62:19:ba:b5:85:b7: d3:43:37:84:11:72:60:ad:c0:48:4d:33:59:ef:a1:b7:3b:c9: 6e:46:2e:7a:ee:da:64:cb:4b:e9:84:9c:35:1f:ca:02:ae:74: 4c:14:c5:89:7a:03:38:03:a3:1a:98:cc:81:b3:f1:b1:c7:77: 5e:fa:f7:de:0f:f4:9a:3e:d4:28:92:68:09:7d:0d:22:6f:f6: b2:86:b1:27:2f:ee:00:b3:03:42:95:1d:f6:a0:66:d0:a5:bf: 7c:66:53:f5:25:e3:76:d3:ee:20:e5:85:58:bf:ec:23:a9:46: 1d:0f:4b:17:ed:e2:0c:97:da:cf:05:b7:7e:56:5a:d9:8c:bc: 72:fe:c4:9a:3b:01:ff:e9:9d:c0:10:d0:0b:05:bd:27:c4:12: bb:31:3d:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9vMPLYri/54YcELcn6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjI1ODZmMjllYzhiYzg0Y2VhZjNjZmIwNzc4Yzc2YTY2MDY1MDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3zo3eV2TGPdJaiCclU+6HK9bo3l xbrSIhTwkcijFQvvSXH7T8H3wRRdFzURwj1LkpSi1p3lihyx3eS+BBI8QxS280kB zZvVJTEvTdgJ5UE+DJBDWic8rUeJqRlG7NpDyJdOteSFUec1OOaAU/jIw+2Rd1O/ 3Z0ypV4FJG+0Tb+ziZlL2u21yYTbkWw/d3xkSyDBhkcWAuQQGVUX8smtplrhsQAj gSw8Z1naNEBd9VGOUjldezMRgBwwC1dQxbxrApl744WqMh21KjIV5+oZ2WYDC31H 11w4B0s6KgW62oA01G5Olr48qXsE5h03jt6X8x4nciqovOnaSa7gEJOLdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEslhvKeyLyEzq88+wd4x2pmBlAYMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvU3lXRzhwN0l2SVRPcnp6N0IzakhhbVlHVUJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVf46MA0G CSqGSIb3DQEBCwUAA4IBAQAA8u203HRKYz0V48BLeAJBxTPuUfMZn4iNRQMJKhnj ANOkHUKy4Hvw6cmt+yxfLdcHaWNIegCiW+/7PFM0yiQ7Ls1fCCR4uomn/XAcIHlX v/bziL8IBjL8SHLvnFK732N2r6xKv1piGbq1hbfTQzeEEXJgrcBITTNZ76G3O8lu Ri567tpky0vphJw1H8oCrnRMFMWJegM4A6MamMyBs/Gxx3de+vfeD/SaPtQokmgJ fQ0ib/ayhrEnL+4AswNClR32oGbQpb98ZlP1JeN20+4g5YVYv+wjqUYdD0sX7eIM l9rPBbd+VlrZjLxy/sSaOwH/6Z3AENALBb0nxBK7MT11 -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:13 2026 by rpki-client