This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/SVPLS2ubDGmz996fszQp7r_8WjM.roa File: SVPLS2ubDGmz996fszQp7r_8WjM.roa (raw, json) Hash identifier: zb6o8Pz5mahpV7VTvHHDSV5gjebzFr1Ex6x7GDwi1/I= Subject key identifier: 49:53:CB:4B:6B:9B:0C:69:B3:F7:DE:9F:B3:34:29:EE:BF:FC:5A:33 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F83873B69ED554FB78AA835AE00DDC2 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/SVPLS2ubDGmz996fszQp7r_8WjM.roa Signing time: Fri 02 Jan 2026 16:21:24 +0000 ROA not before: Fri 02 Jan 2026 16:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132335 IP address blocks: 188.209.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:87:3b:69:ed:55:4f:b7:8a:a8:35:ae:00:dd:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4953cb4b6b9b0c69b3f7de9fb33429eebffc5a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ef:7e:80:97:39:41:3e:44:56:a5:18:e6:9f: 6f:68:29:7d:3d:6f:f9:ee:19:8c:a9:7d:02:c1:84: f6:f2:c0:cd:59:76:96:df:4f:44:9e:fa:d3:71:32: 9d:a6:6f:e7:94:26:59:a0:7d:0f:02:1e:5d:c4:08: f9:cc:c7:e1:51:90:bd:0b:22:dd:5d:b3:1c:04:16: 0e:fd:bf:47:41:f8:b4:00:5d:77:92:88:54:01:3f: 1c:1a:84:c6:cf:12:5a:8c:95:ab:37:eb:c8:38:99: 1a:7c:51:5b:ff:e4:7f:75:70:d9:f3:16:c1:f8:39: a8:0d:bf:50:8b:fa:7b:00:e3:7d:64:73:f7:1e:b3: 06:32:d0:8e:63:1e:aa:e3:41:7b:10:a1:a3:51:55: bd:b6:30:d7:c1:b1:17:df:5b:63:c3:7a:70:a9:fd: b5:0c:00:86:4b:01:19:db:5f:c5:2c:bd:f1:8d:3d: e3:7d:ee:e1:44:39:db:c7:d2:9f:87:0c:c6:49:63: 64:65:52:c7:eb:17:8f:da:cc:40:d6:02:53:ec:03: d7:96:c1:04:1c:df:75:7e:ee:98:39:4d:d6:ba:19: 96:be:67:f4:41:94:73:94:d3:14:49:9d:07:98:4b: 09:78:a8:3e:cb:d7:15:44:10:ae:01:25:f3:dc:b8: 2b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:53:CB:4B:6B:9B:0C:69:B3:F7:DE:9F:B3:34:29:EE:BF:FC:5A:33 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/SVPLS2ubDGmz996fszQp7r_8WjM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.209.133.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:3c:43:cb:49:6b:bf:c7:1c:82:ab:f5:70:74:8e:98:0e:05: cc:af:a4:2e:92:f5:f6:04:8c:88:97:bd:8d:d7:28:c0:eb:39: 06:ca:11:27:26:8b:72:df:5d:48:b9:9a:c2:07:78:29:7c:a2: 90:46:91:29:dc:b3:01:1d:31:f5:8b:78:5a:8d:53:0c:d4:74: 27:50:97:00:9f:27:60:91:36:c5:0d:37:f2:04:ab:3a:48:03: 7f:98:d7:84:ad:72:68:0e:f1:42:2c:1b:96:91:b7:30:fc:2a: 33:9f:65:3e:e1:b2:52:b9:91:11:43:32:50:00:79:c1:fc:4b: 46:4e:88:d8:4b:31:f5:0a:02:2c:31:84:8e:71:86:9b:95:19: 3f:33:07:4b:e6:f5:c9:1f:0e:66:2a:01:4b:cc:71:57:49:1c: 7f:21:9c:35:62:d5:01:45:fd:ae:c7:5e:96:a8:ed:9b:e9:d5: a2:23:e4:e2:2f:7f:55:92:1e:d4:46:fc:8c:57:0f:9c:0a:7c: 23:df:75:72:10:6c:eb:33:92:0d:5c:be:94:85:d2:77:d9:8f: a9:a0:29:6f:7c:11:e9:a2:9c:4b:90:eb:f4:d5:df:d9:5d:60: 39:9d:99:86:d0:c0:ad:87:bd:1a:0d:b3:ea:84:e7:5a:a7:68: d6:cd:4a:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g4c7ae1VT7eKqDWuAN3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTUzY2I0YjZiOWIwYzY5YjNmN2RlOWZiMzM0MjllZWJmZmM1YTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u9+gJc5QT5EVqUY5p9vaCl9PW/5 7hmMqX0CwYT28sDNWXaW309EnvrTcTKdpm/nlCZZoH0PAh5dxAj5zMfhUZC9CyLd XbMcBBYO/b9HQfi0AF13kohUAT8cGoTGzxJajJWrN+vIOJkafFFb/+R/dXDZ8xbB +DmoDb9Qi/p7AON9ZHP3HrMGMtCOYx6q40F7EKGjUVW9tjDXwbEX31tjw3pwqf21 DACGSwEZ21/FLL3xjT3jfe7hRDnbx9KfhwzGSWNkZVLH6xeP2sxA1gJT7APXlsEE HN91fu6YOU3WuhmWvmf0QZRzlNMUSZ0HmEsJeKg+y9cVRBCuASXz3LgrGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFElTy0trmwxps/fen7M0Ke6//FozMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvU1ZQTFMydWJER216OTk2ZnN6UXA3cl84V2pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNGFMA0G CSqGSIb3DQEBCwUAA4IBAQAaPEPLSWu/xxyCq/VwdI6YDgXMr6QukvX2BIyIl72N 1yjA6zkGyhEnJoty311IuZrCB3gpfKKQRpEp3LMBHTH1i3hajVMM1HQnUJcAnydg kTbFDTfyBKs6SAN/mNeErXJoDvFCLBuWkbcw/Cozn2U+4bJSuZERQzJQAHnB/EtG TojYSzH1CgIsMYSOcYablRk/MwdL5vXJHw5mKgFLzHFXSRx/IZw1YtUBRf2ux16W qO2b6dWiI+TiL39Vkh7URvyMVw+cCnwj33VyEGzrM5INXL6UhdJ32Y+poClvfBHp opxLkOv01d/ZXWA5nZmG0MCth70aDbPqhOdap2jWzUpm -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:15 2026 by rpki-client