This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/sj4WoR0pK3o9Cpa-Y1nrHOoXpkI.roa File: sj4WoR0pK3o9Cpa-Y1nrHOoXpkI.roa (raw, json) Hash identifier: +woHvnKUvjlFOtldAvZbs9Ud6X9DPUWePpuRt9RpD6g= Subject key identifier: B2:3E:16:A1:1D:29:2B:7A:3D:0A:96:BE:63:59:EB:1C:EA:17:A6:42 Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E37A520FEF8ABA2C09C511ADB7D6C18 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/sj4WoR0pK3o9Cpa-Y1nrHOoXpkI.roa Signing time: Fri 02 Jan 2026 10:18:54 +0000 ROA not before: Fri 02 Jan 2026 10:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207223 IP address blocks: 93.120.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a5:20:fe:f8:ab:a2:c0:9c:51:1a:db:7d:6c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b23e16a11d292b7a3d0a96be6359eb1cea17a642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:06:96:28:17:6d:84:ef:05:6a:53:54:7d: 74:f7:45:22:c2:de:0d:1e:b3:e7:e3:17:7b:81:bb: 77:50:78:26:89:56:e7:b0:37:d7:f6:d0:55:dd:4f: cd:9a:b4:94:a9:fc:e5:42:56:f7:b9:c6:1f:f9:e2: b4:be:ce:ac:d7:34:df:7e:09:49:f5:89:3e:42:0a: 15:16:b4:57:08:08:8d:05:00:18:7b:84:cb:2a:02: e7:03:fb:49:7a:22:27:04:22:5e:fb:1c:70:e4:c4: 97:ff:68:2e:a8:1a:cb:58:d0:a6:06:2e:d0:70:e3: 25:ec:ba:83:c1:03:62:31:cf:fe:b4:44:13:2b:6d: ae:e1:c1:51:78:b7:73:06:fb:18:e6:1a:be:66:d0: 85:7f:89:05:6b:c6:a2:1c:69:43:05:df:ce:45:d0: 7a:a2:d7:39:57:df:2d:dd:00:a4:3b:e0:5c:0a:8d: 1d:56:5c:cf:b9:9b:d7:cd:c1:61:01:e4:d8:65:21: 47:b6:ea:b2:52:fb:a9:33:87:87:3f:e1:e8:55:01: 6d:47:8b:fc:bc:33:f7:54:d2:b8:2a:92:40:36:07: fd:63:e0:4d:98:92:1b:34:ea:7a:df:24:53:64:c9: 94:ff:7c:2b:2e:a4:15:80:dc:78:0a:01:b2:dd:82: bc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3E:16:A1:1D:29:2B:7A:3D:0A:96:BE:63:59:EB:1C:EA:17:A6:42 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/sj4WoR0pK3o9Cpa-Y1nrHOoXpkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.120.41.0/24 Signature Algorithm: sha256WithRSAEncryption 55:40:2a:e6:3e:39:9c:6e:5b:e2:f9:ed:8f:8c:2f:96:0e:5f: ab:35:2a:d7:d5:a2:af:2c:e5:09:f2:ac:bd:7b:35:da:ca:85: 24:cb:65:fe:04:ff:f9:e7:9e:f3:1b:f0:99:96:a8:a4:16:f9: 4c:9f:51:61:66:bc:92:d3:5e:21:62:bd:ee:53:ca:e8:b5:14: 7b:e3:32:df:11:6e:65:46:cb:62:b0:76:cd:df:3d:ea:d1:af: 7b:8e:b0:84:70:b9:d4:52:04:3b:35:26:11:21:72:86:79:67: ae:6c:d0:26:24:42:17:14:6f:d2:a0:da:36:7c:b2:5a:45:08: 68:0a:06:bb:df:0c:65:36:8a:32:f7:95:04:56:38:30:39:fd: 32:9e:b9:df:7e:31:a8:b6:cb:00:b9:e8:0e:03:84:7d:bb:b2: 55:69:3b:80:c1:ac:5a:c1:97:a7:9d:f8:c6:4f:2d:aa:6e:14: 5e:6b:a1:80:7c:75:5e:77:0a:ef:78:26:72:8c:e0:40:34:c0: 39:53:4e:87:d1:4b:b2:d5:f7:60:ba:9b:80:4d:a1:fd:30:f0: 33:61:b2:ee:f6:43:33:8c:01:65:bb:4f:72:3b:82:79:3a:ed: fe:15:6f:7a:39:ec:a0:16:88:a1:73:9f:36:dc:7b:67:0c:a5: 27:b3:cc:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N6Ug/virosCcURrbfWwYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjNlMTZhMTFkMjkyYjdhM2QwYTk2YmU2MzU5ZWIxY2VhMTdhNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfkGligXbYTvBWpTVH1090Uiwt4N HrPn4xd7gbt3UHgmiVbnsDfX9tBV3U/NmrSUqfzlQlb3ucYf+eK0vs6s1zTffglJ 9Yk+QgoVFrRXCAiNBQAYe4TLKgLnA/tJeiInBCJe+xxw5MSX/2guqBrLWNCmBi7Q cOMl7LqDwQNiMc/+tEQTK22u4cFReLdzBvsY5hq+ZtCFf4kFa8aiHGlDBd/ORdB6 otc5V98t3QCkO+BcCo0dVlzPuZvXzcFhAeTYZSFHtuqyUvupM4eHP+HoVQFtR4v8 vDP3VNK4KpJANgf9Y+BNmJIbNOp63yRTZMmU/3wrLqQVgNx4CgGy3YK81QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLI+FqEdKSt6PQqWvmNZ6xzqF6ZCMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvc2o0V29SMHBLM285Q3BhLVkxbnJIT29YcGtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXgpMA0G CSqGSIb3DQEBCwUAA4IBAQBVQCrmPjmcblvi+e2PjC+WDl+rNSrX1aKvLOUJ8qy9 ezXayoUky2X+BP/5557zG/CZlqikFvlMn1FhZryS014hYr3uU8rotRR74zLfEW5l RstisHbN3z3q0a97jrCEcLnUUgQ7NSYRIXKGeWeubNAmJEIXFG/SoNo2fLJaRQho Cga73wxlNooy95UEVjgwOf0ynrnffjGotssAuegOA4R9u7JVaTuAwaxawZennfjG Ty2qbhRea6GAfHVedwrveCZyjOBANMA5U06H0Uuy1fdgupuATaH9MPAzYbLu9kMz jAFlu09yO4J5Ou3+FW96OeygFoihc5823HtnDKUns8xy -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:40 2026 by rpki-client