This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa File: SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa (raw, json) Hash identifier: gor3itqwm2WwxifsDiiJPi35aYFb4fu1rJxZVzNphD8= Subject key identifier: 49:5A:BB:06:5C:8D:42:42:D6:A4:3A:54:AB:9B:55:11:09:E3:78:70 Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c Certificate serial: 019B7C806763C2E276DB0FD51D2C93FAA54B Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa Signing time: Fri 02 Jan 2026 02:19:08 +0000 ROA not before: Fri 02 Jan 2026 02:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.98.156.0/24 maxlen: 24 2a12:a900:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:67:63:c2:e2:76:db:0f:d5:1d:2c:93:fa:a5:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c Validity Not Before: Jan 2 02:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=495abb065c8d4242d6a43a54ab9b551109e37870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:ac:9f:46:70:74:18:1e:c3:5a:4a:89:56: 7b:1a:ea:05:f9:db:33:eb:ea:e6:45:32:db:29:cb: 97:87:2e:9a:0b:40:2e:18:34:1f:b8:61:c1:46:b2: 49:bc:17:dc:65:12:bd:e2:25:ed:ed:ed:8c:44:e9: a5:17:75:7d:ea:3a:a9:7b:ab:5a:07:08:5f:90:9d: 54:d7:4c:6a:44:d1:0e:33:2a:bf:13:58:91:20:81: bf:6f:4d:c8:61:d5:fd:2e:d7:47:d4:2e:69:a1:e5: 2e:f0:a3:a5:4c:a4:3c:12:4e:4e:fe:6a:76:5e:91: ae:ee:56:f5:d0:86:19:0a:ff:1b:4a:60:55:33:3b: de:22:e8:77:08:fa:30:cc:4b:b6:2c:5b:53:b4:a5: 1e:b5:0e:ed:2c:b7:65:b8:e3:85:b0:aa:cf:ad:96: 2d:d8:f1:b3:57:91:17:88:43:c1:df:d1:41:d9:35: 4c:ed:45:a5:72:3c:5d:ab:f5:5a:3e:49:11:99:35: c1:83:c1:b0:2e:3b:44:ca:8f:d7:8c:ae:73:9d:6f: e0:cd:11:41:82:4c:a8:3a:6f:c4:ec:38:4d:67:af: 28:f1:72:25:59:fd:cb:06:35:44:76:1c:f0:00:ac: 0e:6b:5b:18:b2:1a:0e:29:1e:91:3a:33:30:d8:11: 2f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5A:BB:06:5C:8D:42:42:D6:A4:3A:54:AB:9B:55:11:09:E3:78:70 X509v3 Authority Key Identifier: keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/SVq7BlyNQkLWpDpUq5tVEQnjeHA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.156.0/24 IPv6: 2a12:a900:1::/48 Signature Algorithm: sha256WithRSAEncryption 1a:f8:e7:a3:16:12:18:36:c3:84:e1:cf:8d:3d:ed:a1:a0:a7: 01:51:ca:7d:1c:3a:32:41:18:b6:d3:2e:7a:2e:fc:a6:84:df: f0:7c:48:4f:a0:d9:25:79:ac:d2:ef:36:0c:43:7b:9c:07:93: 91:57:23:e6:53:2b:7d:70:f6:5a:7f:99:e0:25:aa:c9:d0:b2: 68:f9:27:1a:fd:38:46:66:92:5e:18:e6:e4:17:59:2e:cf:37: 8e:2a:eb:c4:f6:09:24:79:82:9a:80:3b:d9:ec:df:bb:6f:24: a8:33:93:15:57:c4:7d:87:41:b0:e7:30:66:b2:dd:ed:37:bc: 10:55:6a:01:4f:f1:68:7d:71:b1:fb:ba:11:ea:33:4b:fc:1e: 31:db:5d:9c:55:b2:69:01:6d:34:85:d7:73:b7:1c:2d:2e:e2: 1c:4c:c6:84:fb:8a:7f:30:00:94:ac:1c:48:ae:28:3e:cd:c0: 3a:ab:a8:18:18:b5:76:a5:7d:09:65:4b:f2:2f:74:44:79:6c: 36:43:34:cb:54:b8:1b:df:41:ba:86:15:d0:31:68:5d:dd:c7: 30:15:ff:a5:e4:19:fc:39:e2:c5:32:b7:f6:a9:c6:53:8b:2f: 21:a6:c5:78:6f:c4:fb:d4:bf:d6:9f:28:0a:71:7b:76:b7:73: 32:a9:2e:72 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8gGdjwuJ22w/VHSyT+qVLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNDFjNjY0YzBjMDEzZGZmYjZlMGRkMWQ3M2IzNjljYmE1 ZmJkMWMwHhcNMjYwMTAyMDIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTVhYmIwNjVjOGQ0MjQyZDZhNDNhNTRhYjliNTUxMTA5ZTM3ODcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrqsn0ZwdBgew1pKiVZ7GuoF+dsz 6+rmRTLbKcuXhy6aC0AuGDQfuGHBRrJJvBfcZRK94iXt7e2MROmlF3V96jqpe6ta BwhfkJ1U10xqRNEOMyq/E1iRIIG/b03IYdX9LtdH1C5poeUu8KOlTKQ8Ek5O/mp2 XpGu7lb10IYZCv8bSmBVMzveIuh3CPowzEu2LFtTtKUetQ7tLLdluOOFsKrPrZYt 2PGzV5EXiEPB39FB2TVM7UWlcjxdq/VaPkkRmTXBg8GwLjtEyo/XjK5znW/gzRFB gkyoOm/E7DhNZ68o8XIlWf3LBjVEdhzwAKwOa1sYshoOKR6ROjMw2BEvXQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFElauwZcjUJC1qQ6VKubVREJ43hwMB8GA1UdIwQY MBaAFF9BxmTAwBPf+24N0dc7Npy6X70cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUt NjIzMDZhYmRmYTAzLzEvU1ZxN0JseU5Ra0xXcERwVXE1dFZFUW5qZUhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUtNjIzMDZhYmRmYTAz LzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuWKcMA8E AgACMAkDBwAqEqkAAAEwDQYJKoZIhvcNAQELBQADggEBABr456MWEhg2w4Thz409 7aGgpwFRyn0cOjJBGLbTLnou/KaE3/B8SE+g2SV5rNLvNgxDe5wHk5FXI+ZTK31w 9lp/meAlqsnQsmj5Jxr9OEZmkl4Y5uQXWS7PN44q68T2CSR5gpqAO9ns37tvJKgz kxVXxH2HQbDnMGay3e03vBBVagFP8Wh9cbH7uhHqM0v8HjHbXZxVsmkBbTSF13O3 HC0u4hxMxoT7in8wAJSsHEiuKD7NwDqrqBgYtXalfQllS/IvdER5bDZDNMtUuBvf QbqGFdAxaF3dxzAV/6XkGfw54sUyt/apxlOLLyGmxXhvxPvUv9afKApxe3a3czKp LnI= -----END CERTIFICATE-----Generated at Fri Jan 2 09:26:59 2026 by rpki-client