This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/SiN-egvtwnZmsIkMnlS_ti2Z8oo.roa File: SiN-egvtwnZmsIkMnlS_ti2Z8oo.roa (raw, json) Hash identifier: +a9n3GtFyFH5JC8/UIBQoBkf21E3Z0ZTMg3tsgsla2E= Subject key identifier: 4A:23:7E:7A:0B:ED:C2:76:66:B0:89:0C:9E:54:BF:B6:2D:99:F2:8A Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd Certificate serial: 019B7F82FCA809EE24771A784976FB98FECB Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/SiN-egvtwnZmsIkMnlS_ti2Z8oo.roa Signing time: Fri 02 Jan 2026 16:20:49 +0000 ROA not before: Fri 02 Jan 2026 16:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12926 IP address blocks: 185.113.156.0/22 maxlen: 22 213.63.0.0/16 maxlen: 16 213.63.0.0/17 maxlen: 17 213.63.128.0/17 maxlen: 17 213.141.0.0/19 maxlen: 19 2a00:fa00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:fc:a8:09:ee:24:77:1a:78:49:76:fb:98:fe:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd Validity Not Before: Jan 2 16:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a237e7a0bedc27666b0890c9e54bfb62d99f28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:76:49:a3:86:ee:73:83:21:41:b9:d7:cb:35: cf:96:1a:6d:88:9e:33:2b:f5:d8:b5:42:2d:fd:3a: 06:92:d3:62:07:b2:c1:ca:f6:d9:35:dd:24:6c:f5: fa:1b:71:1a:80:e4:a7:3c:77:02:74:b0:f3:3b:71: b8:51:37:1a:66:0c:21:68:c3:eb:55:1c:21:97:b1: c3:35:02:ef:bb:98:a7:6d:c9:3f:07:93:c7:8b:df: c8:65:50:36:88:65:33:90:78:73:4e:b1:80:d7:fa: 16:bf:ca:23:49:3d:71:fd:b0:17:d5:63:d2:fb:7c: 73:0a:97:84:c3:8d:2a:36:0c:42:c4:a6:7c:cd:73: 8d:d4:31:5e:1a:a5:24:cc:ef:66:50:13:ed:8e:36: 8b:0d:69:8c:b0:ec:ba:c5:54:f0:33:25:66:11:f6: a7:9e:48:9c:ec:37:1e:70:93:37:77:5c:c5:94:6c: bc:d8:98:64:70:63:93:2b:f9:40:ab:bf:f9:18:d8: c8:d2:e5:d2:7c:86:b3:11:3e:7a:09:0e:bd:df:3a: 53:cb:3c:10:8d:93:98:7c:7c:3e:dc:ac:e8:f4:f1: b0:b5:7f:c6:29:8d:88:9f:76:4e:31:a2:37:f6:6f: bb:86:95:9e:72:e0:86:9f:61:f5:2b:7e:07:71:c9: d1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:23:7E:7A:0B:ED:C2:76:66:B0:89:0C:9E:54:BF:B6:2D:99:F2:8A X509v3 Authority Key Identifier: keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/SiN-egvtwnZmsIkMnlS_ti2Z8oo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.156.0/22 213.63.0.0/16 213.141.0.0/19 IPv6: 2a00:fa00::/32 Signature Algorithm: sha256WithRSAEncryption 0a:74:42:d5:8c:4b:dc:8f:fd:71:44:66:dc:51:1d:4b:23:59: 87:9d:42:e1:0b:24:c6:cb:d3:eb:3d:2d:2e:dc:28:45:4f:d9: 81:fe:ee:2e:ac:de:c8:18:79:30:9e:d0:a0:39:fc:89:9b:b6: e0:df:8f:b6:d2:52:dd:48:8d:a8:21:41:26:93:35:02:a7:e9: ea:91:a3:ab:38:e6:2b:ea:1d:62:16:bc:ea:91:df:36:62:68: 83:f8:fd:98:fb:91:a7:af:12:7d:cd:18:2e:66:a6:7a:6c:c8: 87:72:4a:ae:98:22:e0:a0:4c:c9:fd:dc:a6:df:53:d4:f3:bc: 55:06:73:ca:62:fc:e6:df:f8:6a:9e:08:55:c9:be:56:d5:bd: 67:dd:0d:e0:3b:7c:43:65:9b:80:2e:bf:79:31:b6:fe:9c:4d: 98:ce:94:0a:a2:4d:38:e8:62:35:f5:ca:f1:55:36:98:6a:82: 30:d2:ac:51:b8:44:30:c3:91:3b:c2:ab:c6:46:f3:29:28:16: be:c0:b3:7c:e1:8c:16:21:bd:9d:bf:16:5d:89:2e:f6:1b:19: cf:0b:95:8f:11:b2:1a:8c:eb:d9:25:74:61:dd:d8:7c:6a:dc: df:d8:59:aa:6a:5f:5b:7c:89:86:93:c3:fb:73:c9:e9:1b:55: a8:66:01:2d -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/gvyoCe4kdxp4SXb7mP7LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YmNjNDA3YmYzODgxZTI5NjZhNTQ4YzQzMmIzZjA0MDE0 Njk5ZGQwHhcNMjYwMTAyMTYyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTIzN2U3YTBiZWRjMjc2NjZiMDg5MGM5ZTU0YmZiNjJkOTlmMjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nZJo4buc4MhQbnXyzXPlhptiJ4z K/XYtUIt/ToGktNiB7LByvbZNd0kbPX6G3EagOSnPHcCdLDzO3G4UTcaZgwhaMPr VRwhl7HDNQLvu5inbck/B5PHi9/IZVA2iGUzkHhzTrGA1/oWv8ojST1x/bAX1WPS +3xzCpeEw40qNgxCxKZ8zXON1DFeGqUkzO9mUBPtjjaLDWmMsOy6xVTwMyVmEfan nkic7DcecJM3d1zFlGy82JhkcGOTK/lAq7/5GNjI0uXSfIazET56CQ693zpTyzwQ jZOYfHw+3Kzo9PGwtX/GKY2In3ZOMaI39m+7hpWecuCGn2H1K34HccnRlQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFEojfnoL7cJ2ZrCJDJ5Uv7YtmfKKMB8GA1UdIwQY MBaAFBm8xAe/OIHilmpUjEMrPwQBRpndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYt NDQ5NzdkN2FiOWNhLzEvU2lOLWVndnR3blptc0lrTW5sU190aTJaOG9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYtNDQ5NzdkN2FiOWNh LzEvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwQCuXGcAwMA 1T8DBAXVjQAwDQQCAAIwBwMFACoA+gAwDQYJKoZIhvcNAQELBQADggEBAAp0QtWM S9yP/XFEZtxRHUsjWYedQuELJMbL0+s9LS7cKEVP2YH+7i6s3sgYeTCe0KA5/Imb tuDfj7bSUt1IjaghQSaTNQKn6eqRo6s45ivqHWIWvOqR3zZiaIP4/Zj7kaevEn3N GC5mpnpsyIdySq6YIuCgTMn93KbfU9TzvFUGc8pi/Obf+GqeCFXJvlbVvWfdDeA7 fENlm4Auv3kxtv6cTZjOlAqiTTjoYjX1yvFVNphqgjDSrFG4RDDDkTvCq8ZG8yko Fr7As3zhjBYhvZ2/Fl2JLvYbGc8LlY8RshqM69kldGHd2Hxq3N/YWapqX1t8iYaT w/tzyekbVahmAS0= -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:00 2026 by rpki-client