This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/SJYIkLcX_CNS1SprQ_soGckZIGQ.roa File: SJYIkLcX_CNS1SprQ_soGckZIGQ.roa (raw, json) Hash identifier: eDm4/cj9IxvpczJ1uU/Y+99aLmMJiA5yew/A11GEYVs= Subject key identifier: 48:96:08:90:B7:17:FC:23:52:D5:2A:6B:43:FB:28:19:C9:19:20:64 Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617 Certificate serial: 019B76EB11C192AE8A6BE0FAE8B89E436801 Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/SJYIkLcX_CNS1SprQ_soGckZIGQ.roa Signing time: Thu 01 Jan 2026 00:17:55 +0000 ROA not before: Thu 01 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49840 IP address blocks: 95.142.128.0/24 maxlen: 24 95.142.129.0/24 maxlen: 24 95.142.130.0/24 maxlen: 24 95.142.131.0/24 maxlen: 24 95.142.132.0/24 maxlen: 24 95.142.133.0/24 maxlen: 24 95.142.134.0/24 maxlen: 24 95.142.135.0/24 maxlen: 24 95.142.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:11:c1:92:ae:8a:6b:e0:fa:e8:b8:9e:43:68:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617 Validity Not Before: Jan 1 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48960890b717fc2352d52a6b43fb2819c9192064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:94:09:86:4a:01:d7:2c:7c:c3:02:c5:6e:37: e9:79:54:8f:18:75:c6:89:21:14:75:cc:09:ed:2a: dc:65:d9:fd:13:07:4f:2b:92:1c:99:a0:4a:b0:70: f2:34:f7:10:99:82:a2:5a:49:99:c5:5e:f1:c1:66: 02:66:44:5a:dc:e9:9b:d6:3f:d4:35:f0:e9:91:03: 1c:26:38:5a:78:a5:fa:df:ec:5c:db:ad:92:98:4b: 3e:a9:2b:ed:29:3c:47:a4:e7:e4:5b:46:79:0a:a5: 62:8d:6a:23:c1:26:ee:cb:43:68:e5:12:11:a2:fc: c1:af:36:fe:27:fd:9a:16:3e:71:1f:de:70:d9:ac: 69:24:09:4e:0b:b1:78:0b:63:4a:fb:d3:c6:49:dd: 16:66:90:66:d3:86:dd:4f:9a:a0:87:d6:c3:60:2a: 0c:3c:c5:cd:ef:e6:56:b2:1a:db:06:57:42:78:6a: e9:e1:e0:45:9a:31:22:b8:d3:5d:06:de:2f:77:4d: 01:7d:78:17:9b:62:13:30:ec:d0:b7:d2:9c:ef:3d: b6:6d:e8:dc:91:96:fb:83:b0:34:2e:da:f8:e0:e1: b2:a4:da:86:ea:cb:b1:b3:a2:35:34:a3:d3:f8:95: 0e:c0:38:27:56:18:86:d2:20:79:6f:10:98:b8:df: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:96:08:90:B7:17:FC:23:52:D5:2A:6B:43:FB:28:19:C9:19:20:64 X509v3 Authority Key Identifier: keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/SJYIkLcX_CNS1SprQ_soGckZIGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.142.128.0-95.142.136.255 Signature Algorithm: sha256WithRSAEncryption c5:02:3a:24:f0:ba:28:d6:6f:9d:d4:4f:29:be:bd:00:1f:06: 16:a8:e6:60:c8:66:12:d7:d9:ec:79:f8:56:14:64:33:dc:94: a7:23:4c:94:e3:5b:65:ac:3b:a1:49:72:6f:49:54:89:30:d2: 4c:a7:8f:c5:b8:c6:c0:f5:40:56:5e:d5:85:65:a8:26:03:74: 9a:e3:54:b3:fe:f6:c9:8e:54:9d:fa:3e:c8:9f:c4:1e:c9:6f: b6:e0:e8:6d:b4:ce:44:94:f8:39:21:09:23:9d:83:79:fc:1c: 52:98:f7:da:6c:37:d0:ee:c7:3a:e4:b7:c6:78:bd:3e:b6:48: 7f:96:2b:9e:a0:4d:bb:7a:20:41:60:ea:22:9f:82:89:b1:57: 4a:ba:cb:fe:03:30:d5:ca:05:a5:bc:13:d4:bc:1e:72:68:58: 8e:e1:b3:1f:8d:06:dc:b5:eb:75:fd:7b:9d:76:f6:a2:21:45: 82:15:36:b9:dc:8e:6a:6d:83:e0:89:ca:fc:b0:7c:eb:ee:bc: 12:19:6e:d8:33:7f:30:b8:b0:d3:1f:47:bc:f6:7b:c7:49:0b: 53:84:42:78:c3:69:e4:c2:f1:4c:69:09:09:83:ab:f8:25:02: 90:e4:69:b3:7a:02:0d:25:64:09:69:26:b4:e5:19:80:f1:3b: 98:e8:d0:6c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt26xHBkq6Ka+D66LieQ2gBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3N2ZlMDA1ZDdlNThlYzAzM2NhOWFiYTg3ZTA2MDYwMjE1 MzM2MTcwHhcNMjYwMTAxMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODk2MDg5MGI3MTdmYzIzNTJkNTJhNmI0M2ZiMjgxOWM5MTkyMDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZQJhkoB1yx8wwLFbjfpeVSPGHXG iSEUdcwJ7SrcZdn9EwdPK5IcmaBKsHDyNPcQmYKiWkmZxV7xwWYCZkRa3Omb1j/U NfDpkQMcJjhaeKX63+xc262SmEs+qSvtKTxHpOfkW0Z5CqVijWojwSbuy0No5RIR ovzBrzb+J/2aFj5xH95w2axpJAlOC7F4C2NK+9PGSd0WZpBm04bdT5qgh9bDYCoM PMXN7+ZWshrbBldCeGrp4eBFmjEiuNNdBt4vd00BfXgXm2ITMOzQt9Kc7z22bejc kZb7g7A0Ltr44OGypNqG6suxs6I1NKPT+JUOwDgnVhiG0iB5bxCYuN88PwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEiWCJC3F/wjUtUqa0P7KBnJGSBkMB8GA1UdIwQY MBaAFMd/4AXX5Y7AM8qauofgYGAhUzYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lMzJkZjgtM2ExZS00MmZjLWIzNTEt MGVkMjRlYmM0ZWQ4LzEvU0pZSWtMY1hfQ05TMVNwclFfc29HY2taSUdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lMzJkZjgtM2ExZS00MmZjLWIzNTEtMGVkMjRlYmM0ZWQ4 LzEveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAdfjoAD BABfjogwDQYJKoZIhvcNAQELBQADggEBAMUCOiTwuijWb53UTym+vQAfBhao5mDI ZhLX2ex5+FYUZDPclKcjTJTjW2WsO6FJcm9JVIkw0kynj8W4xsD1QFZe1YVlqCYD dJrjVLP+9smOVJ36PsifxB7Jb7bg6G20zkSU+DkhCSOdg3n8HFKY99psN9Duxzrk t8Z4vT62SH+WK56gTbt6IEFg6iKfgomxV0q6y/4DMNXKBaW8E9S8HnJoWI7hsx+N Bty163X9e5129qIhRYIVNrncjmptg+CJyvywfOvuvBIZbtgzfzC4sNMfR7z2e8dJ C1OEQnjDaeTC8UxpCQmDq/glApDkabN6Ag0lZAlpJrTlGYDxO5jo0Gw= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:11 2026 by rpki-client