This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/SBfXG2HCIyRLSR8L8Bb1OYjrk-4.roa File: SBfXG2HCIyRLSR8L8Bb1OYjrk-4.roa (raw, json) Hash identifier: iLlK4LPvVZZcpk8oXFX0Dv4WoTJ656cEevpkzzhvsnQ= Subject key identifier: 48:17:D7:1B:61:C2:23:24:4B:49:1F:0B:F0:16:F5:39:88:EB:93:EE Certificate issuer: /CN=181e4d608152fc244afffba2dc72b851b19b2527 Certificate serial: 019B775902F7076ECDA9200280907DC76886 Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/SBfXG2HCIyRLSR8L8Bb1OYjrk-4.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31257 IP address blocks: 86.62.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:02:f7:07:6e:cd:a9:20:02:80:90:7d:c7:68:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4817d71b61c223244b491f0bf016f53988eb93ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:f5:b8:b9:59:d1:9a:c2:1e:cf:33:65:58: ff:04:1d:2d:b9:46:4a:13:36:e7:35:b0:e0:57:cd: 33:ea:32:ca:16:34:5c:ff:6c:1f:78:e8:96:e4:ef: d8:8a:c2:5b:97:90:dd:c2:ae:a8:3c:57:15:5f:4c: 24:13:28:46:ed:b8:7f:85:ca:c2:b9:38:1e:39:11: 27:d9:ac:20:c8:9b:e4:cb:24:f2:e6:20:98:b4:b2: c3:cd:dc:b3:e4:e5:74:11:26:da:87:08:74:cf:8c: 7d:0e:ec:57:9c:3a:2e:12:27:55:82:1d:59:f7:a1: e4:94:c8:d0:5d:2d:c8:bd:11:8d:30:cd:68:f9:16: 45:7c:06:73:c0:99:ea:07:d7:13:91:76:91:be:cb: f7:da:c8:d7:84:aa:3e:dd:9a:90:68:79:54:65:7f: 1e:c4:97:bd:0c:50:ac:e6:f6:c6:bd:db:e0:52:b1: cb:dd:ff:7d:d8:2e:8e:da:e4:4a:cc:31:6a:88:ea: 5b:99:d9:46:61:ea:55:0d:1e:91:af:82:f2:d4:e8: d6:97:e2:9b:96:fa:c7:a2:59:ce:3b:c8:86:31:dd: 0b:6e:8c:1c:51:e2:85:73:57:7d:d9:9a:1b:b3:db: cc:c9:94:f2:d8:06:0e:86:29:34:8c:2c:b3:10:3d: c0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:17:D7:1B:61:C2:23:24:4B:49:1F:0B:F0:16:F5:39:88:EB:93:EE X509v3 Authority Key Identifier: keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/SBfXG2HCIyRLSR8L8Bb1OYjrk-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.62.6.0/24 Signature Algorithm: sha256WithRSAEncryption 41:c6:e4:a9:bf:80:77:c8:c5:c3:14:f3:7a:56:75:b8:5c:af: fd:19:7b:ab:3b:87:d8:bb:bd:10:f6:09:69:41:4e:8a:9f:38: 4d:58:ee:51:6c:3a:ba:f4:5f:e9:74:39:db:3c:4d:22:1b:16: f4:95:47:0b:9e:0e:b8:fd:c5:d2:2b:82:1c:a1:06:04:fa:b3: 6d:03:76:de:85:e7:e8:8d:27:04:19:1c:cf:62:ce:67:e9:05: 66:7a:92:58:1d:f7:ae:e6:12:19:b2:e6:bc:92:c3:7a:cd:67: 7f:cf:92:8d:e1:26:38:01:d1:bb:d3:cd:21:de:c7:4f:e8:d9: 62:eb:ba:ec:85:c3:8f:eb:9c:a8:eb:1c:b2:1a:85:07:df:ab: d9:7e:39:88:30:07:79:46:fb:5a:2e:bd:69:f6:39:ed:7a:12: da:9f:fd:f5:1a:fe:cd:61:4c:03:4a:74:31:e0:c1:37:e4:b7: 6a:98:8d:ce:7b:f3:95:82:a6:51:8b:0c:16:8b:e9:45:32:34: 51:68:7f:92:90:53:e3:9d:ed:a8:8a:b4:ab:30:24:d5:b0:58: 5a:8f:29:07:f7:af:87:19:61:32:03:2f:92:ed:f0:5e:cc:14: ea:da:9e:4b:b7:a4:49:e9:c3:8d:1d:5c:5e:6b:d4:bc:cb:c5: cb:5f:a0:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQL3B27NqSACgJB9x2iGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MWU0ZDYwODE1MmZjMjQ0YWZmZmJhMmRjNzJiODUxYjE5 YjI1MjcwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODE3ZDcxYjYxYzIyMzI0NGI0OTFmMGJmMDE2ZjUzOTg4ZWI5M2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg71uLlZ0ZrCHs8zZVj/BB0tuUZK EzbnNbDgV80z6jLKFjRc/2wfeOiW5O/YisJbl5Ddwq6oPFcVX0wkEyhG7bh/hcrC uTgeOREn2awgyJvkyyTy5iCYtLLDzdyz5OV0ESbahwh0z4x9DuxXnDouEidVgh1Z 96HklMjQXS3IvRGNMM1o+RZFfAZzwJnqB9cTkXaRvsv32sjXhKo+3ZqQaHlUZX8e xJe9DFCs5vbGvdvgUrHL3f992C6O2uRKzDFqiOpbmdlGYepVDR6Rr4Ly1OjWl+Kb lvrHolnOO8iGMd0LbowcUeKFc1d92Zobs9vMyZTy2AYOhik0jCyzED3AMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEgX1xthwiMkS0kfC/AW9TmI65PuMB8GA1UdIwQY MBaAFBgeTWCBUvwkSv/7otxyuFGxmyUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0I1TllJRlNfQ1JLX191aTNISzRVYkdiSlNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85MjE3ZjktODEzZC00N2FmLWFkNjIt MzIyMDhkNTQ0YTg0LzEvU0JmWEcySENJeVJMU1I4TDhCYjFPWWpyay00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85MjE3ZjktODEzZC00N2FmLWFkNjItMzIyMDhkNTQ0YTg0 LzEvR0I1TllJRlNfQ1JLX191aTNISzRVYkdiSlNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVj4GMA0G CSqGSIb3DQEBCwUAA4IBAQBBxuSpv4B3yMXDFPN6VnW4XK/9GXurO4fYu70Q9glp QU6KnzhNWO5RbDq69F/pdDnbPE0iGxb0lUcLng64/cXSK4IcoQYE+rNtA3behefo jScEGRzPYs5n6QVmepJYHfeu5hIZsua8ksN6zWd/z5KN4SY4AdG7080h3sdP6Nli 67rshcOP65yo6xyyGoUH36vZfjmIMAd5RvtaLr1p9jntehLan/31Gv7NYUwDSnQx 4ME35LdqmI3Oe/OVgqZRiwwWi+lFMjRRaH+SkFPjne2oirSrMCTVsFhajykH96+H GWEyAy+S7fBezBTq2p5Lt6RJ6cONHVxea9S8y8XLX6CY -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:17 2026 by rpki-client