This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/sl41r5vOIO1KpvZZJQxR33Khq90.roa File: sl41r5vOIO1KpvZZJQxR33Khq90.roa (raw, json) Hash identifier: ve75rcYWOaGtNCgz+k4h9k5tBtp2OQ6lpeVbeGSJAn8= Subject key identifier: B2:5E:35:AF:9B:CE:20:ED:4A:A6:F6:59:25:0C:51:DF:72:A1:AB:DD Certificate issuer: /CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014 Certificate serial: 019B76EABA07168799F8E9ED649F8EB3540D Authority key identifier: FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/sl41r5vOIO1KpvZZJQxR33Khq90.roa Signing time: Thu 01 Jan 2026 00:17:33 +0000 ROA not before: Thu 01 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5405 IP address blocks: 185.242.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ba:07:16:87:99:f8:e9:ed:64:9f:8e:b3:54:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014 Validity Not Before: Jan 1 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b25e35af9bce20ed4aa6f659250c51df72a1abdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:4e:72:72:2d:d8:2c:54:68:8a:c8:e0:4f: b2:58:50:c8:8e:26:2a:3e:7d:99:85:b0:10:4b:f2: 48:e4:0f:34:36:53:a6:12:f4:e7:bb:7d:99:53:55: aa:92:6c:2c:df:3a:3c:ea:ca:13:ef:a9:1c:9a:7a: 12:c2:8a:8f:9d:67:f2:4c:58:a6:43:4b:9a:c8:81: 34:e1:9c:6b:26:3d:da:65:af:a6:21:88:b5:6f:eb: 84:2d:5d:9c:d9:6a:54:87:5d:1f:99:b2:cb:71:86: 25:9c:73:3f:c0:cf:b0:44:18:1f:93:03:47:47:d8: 54:02:3b:34:9f:b8:87:0e:d7:dc:c5:87:fb:32:5c: 88:fc:13:96:71:b1:4a:87:f7:83:8d:70:4c:c9:6c: 2e:8f:83:58:7b:ff:29:53:82:e8:ad:bc:30:51:df: 89:5d:cb:3f:85:d6:d2:74:40:fc:6e:a1:09:f9:62: 40:ac:cf:9f:c5:f8:14:48:2d:a8:ef:e0:6a:8f:d2: 6d:03:e0:6e:4d:a4:39:b9:72:b8:2c:8d:20:2b:d3: 57:5f:3b:aa:4f:8f:42:42:94:57:52:41:0e:99:91: c2:b6:20:e0:3a:e1:1e:23:20:2e:43:f3:80:c7:68: 77:cd:87:51:cd:64:e0:6a:5a:ca:ff:cc:64:b7:c0: f2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5E:35:AF:9B:CE:20:ED:4A:A6:F6:59:25:0C:51:DF:72:A1:AB:DD X509v3 Authority Key Identifier: keyid:FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/sl41r5vOIO1KpvZZJQxR33Khq90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.76.0/24 Signature Algorithm: sha256WithRSAEncryption 54:c5:41:2d:07:5d:75:ac:5f:77:75:cd:30:8d:95:41:fd:6a: 38:f4:41:76:5c:78:fb:dd:66:34:4d:c7:68:55:fc:7e:1d:54: a8:17:5d:4f:d8:e3:da:47:f1:13:68:13:40:1d:81:1f:4d:91: a6:bd:38:e6:82:b6:a1:05:95:7e:34:8a:6d:3f:67:19:de:9b: 33:1a:90:48:cf:1d:6f:0b:96:fe:19:dd:85:01:08:20:20:3f: 60:f1:ef:b5:27:b1:ba:8e:f8:5d:22:1c:8d:e7:01:f3:89:91: 6c:2d:d9:1c:e2:cd:47:16:07:8d:45:fa:93:10:f6:cc:ae:1d: 81:ef:c8:4c:90:90:36:bd:6b:c0:fa:a8:8a:3e:1a:ab:53:f4: e1:ac:c3:f5:dc:0e:bb:d4:2f:65:7b:b5:6f:6a:30:15:97:97: 0f:d4:e7:0b:7f:c7:50:58:5d:72:ac:ed:04:9a:ba:8c:15:26: 86:38:4c:2d:94:d3:64:52:a0:91:6a:c7:8b:27:28:20:43:4b: 58:b8:36:04:d9:8b:c4:5c:50:a2:19:ed:50:d4:74:14:8a:d3: c4:94:f7:3a:83:d8:bd:68:f4:2c:9c:f4:29:78:3e:aa:16:e6: 1d:66:43:86:e4:b8:5b:58:53:cb:a2:04:5e:6d:f1:be:00:01: 15:3e:d0:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26roHFoeZ+OntZJ+Os1QNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYzNmNWNhNDc5MmQ5NGQxYWEzNmViNWVhM2FhMWI0MDQz Y2QwMTQwHhcNMjYwMTAxMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjVlMzVhZjliY2UyMGVkNGFhNmY2NTkyNTBjNTFkZjcyYTFhYmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5FOcnIt2CxUaIrI4E+yWFDIjiYq Pn2ZhbAQS/JI5A80NlOmEvTnu32ZU1Wqkmws3zo86soT76kcmnoSwoqPnWfyTFim Q0uayIE04ZxrJj3aZa+mIYi1b+uELV2c2WpUh10fmbLLcYYlnHM/wM+wRBgfkwNH R9hUAjs0n7iHDtfcxYf7MlyI/BOWcbFKh/eDjXBMyWwuj4NYe/8pU4LorbwwUd+J Xcs/hdbSdED8bqEJ+WJArM+fxfgUSC2o7+Bqj9JtA+BuTaQ5uXK4LI0gK9NXXzuq T49CQpRXUkEOmZHCtiDgOuEeIyAuQ/OAx2h3zYdRzWTgalrK/8xkt8DyvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLJeNa+bziDtSqb2WSUMUd9yoavdMB8GA1UdIwQY MBaAFP/D9cpHktlNGqNuteo6obQEPNAUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhQMXlrZVMyVTBhbzI2MTZqcWh0QVE4MEJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZDY5NjMtZDI1Yy00MDJmLTllYTEt MjhlZDBmOTI4MTMzLzEvc2w0MXI1dk9JTzFLcHZaWkpReFIzM0tocTkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mZDY5NjMtZDI1Yy00MDJmLTllYTEtMjhlZDBmOTI4MTMz LzEvXzhQMXlrZVMyVTBhbzI2MTZqcWh0QVE4MEJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufJMMA0G CSqGSIb3DQEBCwUAA4IBAQBUxUEtB111rF93dc0wjZVB/Wo49EF2XHj73WY0Tcdo Vfx+HVSoF11P2OPaR/ETaBNAHYEfTZGmvTjmgrahBZV+NIptP2cZ3pszGpBIzx1v C5b+Gd2FAQggID9g8e+1J7G6jvhdIhyN5wHziZFsLdkc4s1HFgeNRfqTEPbMrh2B 78hMkJA2vWvA+qiKPhqrU/ThrMP13A671C9le7VvajAVl5cP1OcLf8dQWF1yrO0E mrqMFSaGOEwtlNNkUqCRaseLJyggQ0tYuDYE2YvEXFCiGe1Q1HQUitPElPc6g9i9 aPQsnPQpeD6qFuYdZkOG5LhbWFPLogRebfG+AAEVPtCS -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:31 2026 by rpki-client