This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa File: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (raw, json) Hash identifier: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I= Subject key identifier: B3:1E:03:5E:A3:9A:59:8A:D5:A8:BE:2F:C0:B1:0F:07:42:AF:5E:FC Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019B78A37290E406B213F02869B9738F6195 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa Signing time: Thu 01 Jan 2026 08:18:56 +0000 ROA not before: Thu 01 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47447 IP address blocks: 149.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:72:90:e4:06:b2:13:f0:28:69:b9:73:8f:61:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b31e035ea39a598ad5a8be2fc0b10f0742af5efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d5:a9:e3:d3:aa:73:da:86:26:1c:68:5f:06: 06:14:40:fb:42:bf:ca:60:97:8d:27:78:db:b8:5c: 6d:f8:85:67:9d:06:2a:16:74:02:e2:da:13:09:79: e9:2c:3f:b6:4b:4f:a1:35:76:0d:77:da:63:f5:c5: 6b:0e:a7:c4:2a:ce:8a:19:4a:b9:02:1b:d3:54:af: fd:e1:cb:ac:12:26:70:88:fa:4a:29:b5:b3:6b:53: 9c:b6:c3:fa:e8:a0:4f:ed:a6:37:da:36:a0:e1:a8: a0:ba:46:a9:29:85:c4:e6:97:73:12:ee:c2:9e:1e: 3b:78:60:ad:48:4e:25:17:43:12:dd:2e:04:0e:63: 5f:17:bb:d8:2d:68:46:51:90:ac:bd:51:ca:16:72: 80:4d:54:b7:ee:53:61:4b:54:3e:7d:db:0e:24:86: 46:cf:9d:29:4d:ae:0e:f7:45:d6:27:b3:28:61:da: 27:b5:43:a3:3a:6e:3e:06:cc:64:fd:71:37:aa:0b: ce:13:78:7d:bf:0d:67:e2:05:6a:ae:a8:a3:0f:b5: 87:16:2e:9c:58:da:d0:cf:34:58:12:e8:35:30:10: 34:cb:89:16:0a:81:b9:d2:03:ab:ad:20:6d:8d:1e: f1:72:2b:6e:a1:6b:3e:0a:ee:dd:34:5c:b2:a3:31: 6f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1E:03:5E:A3:9A:59:8A:D5:A8:BE:2F:C0:B1:0F:07:42:AF:5E:FC X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.154.159.0/24 Signature Algorithm: sha256WithRSAEncryption 00:06:e2:ec:e5:53:3a:34:76:4e:2c:15:fb:fd:f0:4e:06:4d: 79:ee:10:1f:ac:43:1a:e6:50:6a:75:13:d1:bb:b5:a3:1d:9f: b9:6b:31:b8:7a:d7:ee:45:c5:7e:56:1a:e9:74:d1:23:f1:45: 50:16:77:67:23:36:28:c9:db:d5:44:cb:72:27:4d:ba:ae:e6: 63:4c:d6:96:2a:d6:94:5a:3f:0c:b1:76:f1:29:6b:32:9f:57: 20:75:8c:40:21:36:da:4a:8a:17:03:64:8f:ef:ee:fe:08:cd: b1:2c:91:33:c1:ea:86:92:dc:4d:b3:5e:37:ee:0f:ae:d6:dc: 00:52:22:4f:a3:ac:1d:cc:b5:56:99:b2:9d:80:6b:6b:77:cb: 94:c4:9a:80:0f:0a:03:10:15:9c:bc:5f:04:e3:69:e2:97:fe: 6f:ab:2b:3d:32:a1:4c:58:ac:cd:a6:3a:79:7f:be:23:06:6b: ca:ed:61:3a:ef:63:0b:5a:82:bc:f7:a9:23:0b:1e:26:d0:ce: 90:7b:69:7a:ba:49:05:bd:31:18:a0:c7:77:a1:47:d5:71:7c: ec:e1:f0:00:4e:a8:01:15:f7:a0:5e:7a:b8:09:af:f5:8d:fc: 90:98:84:e2:fe:4c:17:45:62:37:2f:8a:7c:0f:6a:b6:a5:d8: 13:d6:c5:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o3KQ5AayE/Aoablzj2GVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzFlMDM1ZWEzOWE1OThhZDVhOGJlMmZjMGIxMGYwNzQyYWY1ZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNWp49Oqc9qGJhxoXwYGFED7Qr/K YJeNJ3jbuFxt+IVnnQYqFnQC4toTCXnpLD+2S0+hNXYNd9pj9cVrDqfEKs6KGUq5 AhvTVK/94cusEiZwiPpKKbWza1OctsP66KBP7aY32jag4aigukapKYXE5pdzEu7C nh47eGCtSE4lF0MS3S4EDmNfF7vYLWhGUZCsvVHKFnKATVS37lNhS1Q+fdsOJIZG z50pTa4O90XWJ7MoYdontUOjOm4+Bsxk/XE3qgvOE3h9vw1n4gVqrqijD7WHFi6c WNrQzzRYEug1MBA0y4kWCoG50gOrrSBtjR7xcituoWs+Cu7dNFyyozFvcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLMeA16jmlmK1ai+L8CxDwdCr178MB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvc3g0RFhxT2FXWXJWcUw0dndMRVBCMEt2WHZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlZqfMA0G CSqGSIb3DQEBCwUAA4IBAQAABuLs5VM6NHZOLBX7/fBOBk157hAfrEMa5lBqdRPR u7WjHZ+5azG4etfuRcV+VhrpdNEj8UVQFndnIzYoydvVRMtyJ026ruZjTNaWKtaU Wj8MsXbxKWsyn1cgdYxAITbaSooXA2SP7+7+CM2xLJEzweqGktxNs1437g+u1twA UiJPo6wdzLVWmbKdgGtrd8uUxJqADwoDEBWcvF8E42nil/5vqys9MqFMWKzNpjp5 f74jBmvK7WE672MLWoK896kjCx4m0M6Qe2l6ukkFvTEYoMd3oUfVcXzs4fAATqgB FfegXnq4Ca/1jfyQmITi/kwXRWI3L4p8D2q2pdgT1sW5 -----END CERTIFICATE-----Generated at Wed Jan 21 20:24:13 2026 by rpki-client