This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/SaKKyHpOD3wqJT3JiiYNAHctMUs.roa File: SaKKyHpOD3wqJT3JiiYNAHctMUs.roa (raw, json) Hash identifier: vYu2BPD/JTb3QfvuTGtQgG6mWhslGxEOpJGkYyo7jVM= Subject key identifier: 49:A2:8A:C8:7A:4E:0F:7C:2A:25:3D:C9:8A:26:0D:00:77:2D:31:4B Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e Certificate serial: 019B7AC78D1C6A1FCF6B2A6D1A12A67CE336 Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/SaKKyHpOD3wqJT3JiiYNAHctMUs.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50799 IP address blocks: 145.43.248.0/24 maxlen: 24 145.43.249.0/24 maxlen: 24 145.43.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8d:1c:6a:1f:cf:6b:2a:6d:1a:12:a6:7c:e3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49a28ac87a4e0f7c2a253dc98a260d00772d314b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:64:83:c2:42:91:37:c8:e3:10:12:5d:5a:34: 96:11:94:d2:dc:60:f3:2f:3b:f8:b3:49:90:78:e0: 58:e3:60:8a:e4:4c:6e:49:c1:cc:b5:85:01:89:10: eb:9d:6a:c1:23:55:44:99:8b:f4:c0:b8:2a:20:34: 54:9a:ed:36:31:d6:f9:cc:e4:77:dd:09:7e:9f:cc: 5c:2d:97:01:d5:01:52:1f:be:85:cc:5d:90:e0:7e: dd:11:7c:99:f4:27:44:a4:2a:79:78:0d:7b:2f:8e: 5e:d2:e2:f4:d5:a3:9a:5a:f6:1a:15:1c:c6:a8:15: 9c:15:bc:5d:b2:ff:08:84:03:a5:01:92:48:f1:d9: cc:58:44:58:21:0f:b8:70:32:74:25:90:ed:6c:58: 5d:b8:94:98:9e:7d:06:fb:f3:f3:1a:10:f7:2f:e0: d8:3e:ac:f7:5e:db:02:d7:f5:63:bd:78:b5:2c:fd: 95:a7:c4:11:9e:03:5e:93:0a:5f:e1:75:17:c4:f3: 5c:62:b0:25:c7:4c:10:e6:39:da:0d:74:f1:d8:08: d7:0b:40:2b:4c:53:ee:7a:d8:f3:7c:c2:36:fd:a0: 6e:91:3e:bd:cf:32:9a:c7:df:31:e4:b6:a5:71:7e: 01:38:88:01:fe:b7:6d:dc:cb:1f:58:45:00:1d:3e: d1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A2:8A:C8:7A:4E:0F:7C:2A:25:3D:C9:8A:26:0D:00:77:2D:31:4B X509v3 Authority Key Identifier: keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/SaKKyHpOD3wqJT3JiiYNAHctMUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.43.248.0-145.43.250.255 Signature Algorithm: sha256WithRSAEncryption 36:e0:cd:2e:5a:e2:7b:e8:6b:f1:cd:c3:cc:7f:64:f5:a5:e5: cd:7d:ce:64:49:0e:20:47:85:07:c1:b6:79:68:f6:2a:16:14: ef:af:5a:74:aa:57:74:9f:4e:51:c5:25:7d:be:50:53:a1:34: c3:9e:f5:8e:0f:b3:e6:ff:13:cd:b0:9d:50:9d:e5:87:21:10: 34:e1:23:8e:3a:77:e7:9d:fe:4d:02:bb:4d:92:b0:b2:4b:5f: e9:4b:bb:25:73:76:2b:5c:63:54:21:73:45:23:2c:e9:5d:83: e3:82:ab:26:39:14:9d:f1:5c:b8:79:e9:a8:df:80:66:ea:95: 63:5e:10:2b:08:09:a1:01:ed:bc:bd:08:8b:fd:ec:d8:eb:ea: d9:ed:e4:69:20:01:1f:40:1c:2d:c5:66:a2:fc:67:71:ae:a0: 12:d7:9d:4a:25:b0:8f:d9:b4:cd:0f:18:3a:c8:45:7b:3e:56: b4:36:14:b4:10:00:5b:21:e8:88:f5:22:84:9f:9b:56:cb:6b: 80:da:be:e0:17:53:0a:23:17:1f:f8:f1:9c:0d:a5:ec:e0:ce: 9c:db:67:1c:2a:88:f0:5c:fc:a1:fc:fc:73:1e:4f:fb:e4:70: a6:d6:5b:94:ed:5f:14:fa:df:9e:25:8a:a1:01:ec:d5:ab:b1: a7:0b:07:5a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6x40cah/PayptGhKmfOM2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTI2ODFkZGEwMDcwMmE3NTk3YTcxMjU3ZTE0ZjdhNzI1 ZTg5MGUwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWEyOGFjODdhNGUwZjdjMmEyNTNkYzk4YTI2MGQwMDc3MmQzMTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGSDwkKRN8jjEBJdWjSWEZTS3GDz Lzv4s0mQeOBY42CK5ExuScHMtYUBiRDrnWrBI1VEmYv0wLgqIDRUmu02Mdb5zOR3 3Ql+n8xcLZcB1QFSH76FzF2Q4H7dEXyZ9CdEpCp5eA17L45e0uL01aOaWvYaFRzG qBWcFbxdsv8IhAOlAZJI8dnMWERYIQ+4cDJ0JZDtbFhduJSYnn0G+/PzGhD3L+DY Pqz3XtsC1/VjvXi1LP2Vp8QRngNekwpf4XUXxPNcYrAlx0wQ5jnaDXTx2AjXC0Ar TFPuetjzfMI2/aBukT69zzKax98x5LalcX4BOIgB/rdt3MsfWEUAHT7RPwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEmiish6Tg98KiU9yYomDQB3LTFLMB8GA1UdIwQY MBaAFD3iaB3aAHAqdZenElfhT3pyXokOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYt ZTBhYzcyNjNkYjEyLzEvU2FLS3lIcE9EM3dxSlQzSmlpWU5BSGN0TVVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYtZTBhYzcyNjNkYjEy LzEvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAORK/gD BACRK/owDQYJKoZIhvcNAQELBQADggEBADbgzS5a4nvoa/HNw8x/ZPWl5c19zmRJ DiBHhQfBtnlo9ioWFO+vWnSqV3SfTlHFJX2+UFOhNMOe9Y4Ps+b/E82wnVCd5Ych EDThI446d+ed/k0Cu02SsLJLX+lLuyVzditcY1Qhc0UjLOldg+OCqyY5FJ3xXLh5 6ajfgGbqlWNeECsICaEB7by9CIv97Njr6tnt5GkgAR9AHC3FZqL8Z3GuoBLXnUol sI/ZtM0PGDrIRXs+VrQ2FLQQAFsh6Ij1IoSfm1bLa4DavuAXUwojFx/48ZwNpezg zpzbZxwqiPBc/KH8/HMeT/vkcKbWW5TtXxT6354liqEB7NWrsacLB1o= -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:45 2026 by rpki-client