This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/sxLxAtHZwjLt62bCzACT8k_EKTs.roa File: sxLxAtHZwjLt62bCzACT8k_EKTs.roa (raw, json) Hash identifier: 1l4e9qeUH7lZXuHCARClU98Z9yuYDrKKJQ+J0TPgdsU= Subject key identifier: B3:12:F1:02:D1:D9:C2:32:ED:EB:66:C2:CC:00:93:F2:4F:C4:29:3B Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239 Certificate serial: 019B7834D532B81B029A4E1C55049D4F546C Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/sxLxAtHZwjLt62bCzACT8k_EKTs.roa Signing time: Thu 01 Jan 2026 06:18:06 +0000 ROA not before: Thu 01 Jan 2026 06:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12605 IP address blocks: 81.10.128.0/17 maxlen: 17 86.56.128.0/17 maxlen: 17 90.146.0.0/16 maxlen: 16 90.146.0.0/17 maxlen: 17 90.146.128.0/17 maxlen: 17 185.196.156.0/22 maxlen: 22 212.33.32.0/19 maxlen: 19 212.241.64.0/18 maxlen: 18 2a00:cf8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d5:32:b8:1b:02:9a:4e:1c:55:04:9d:4f:54:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239 Validity Not Before: Jan 1 06:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b312f102d1d9c232edeb66c2cc0093f24fc4293b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f4:4e:3b:e2:50:10:89:d0:56:59:4e:bb:61: a2:86:67:f6:56:b3:ba:46:58:23:44:2d:ac:9d:6f: 87:6c:e2:59:5f:09:26:7c:0e:12:4c:49:cc:20:91: 24:81:ff:d6:ec:91:eb:1e:8d:07:57:68:43:72:bf: 31:0e:a5:75:d1:e7:9e:cb:ba:77:3f:22:63:c2:95: b5:2b:ba:4c:28:10:5f:4a:47:9e:67:27:2c:24:20: 27:7a:a9:85:76:35:a1:45:a0:41:bb:66:8e:39:72: 56:8e:3c:9e:d1:d2:67:cc:57:e8:8d:1e:79:ec:8d: 12:b6:16:2d:81:5f:7c:87:16:d6:7f:e4:89:5f:f5: 36:c4:e2:77:05:03:cd:78:8e:a5:15:1f:8f:66:d8: e9:03:7f:68:73:1f:c2:5d:d6:f0:0b:13:bc:ac:d0: 8b:50:21:16:62:86:d6:bd:bc:29:97:01:ea:c1:44: 65:bf:b4:d5:4e:18:b6:ac:0c:23:3b:3f:fa:72:61: c8:6b:bc:55:f6:0e:83:85:12:94:c1:59:0e:16:96: 9a:e0:26:ad:b6:4d:a3:92:22:0f:d2:2c:53:9c:d2: 23:6e:47:be:d6:aa:7f:0a:61:87:a2:f3:09:8b:b1: 66:a6:83:58:47:fa:e3:cb:7d:8f:6a:94:e0:eb:3c: 2a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:12:F1:02:D1:D9:C2:32:ED:EB:66:C2:CC:00:93:F2:4F:C4:29:3B X509v3 Authority Key Identifier: keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/sxLxAtHZwjLt62bCzACT8k_EKTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.10.128.0/17 86.56.128.0/17 90.146.0.0/16 185.196.156.0/22 212.33.32.0/19 212.241.64.0/18 IPv6: 2a00:cf8::/32 Signature Algorithm: sha256WithRSAEncryption db:0b:b0:b6:72:6d:5a:9f:20:a6:28:5f:f4:38:de:2e:06:b2: 8f:43:52:6a:22:0d:88:8a:b6:e2:8c:17:86:44:c3:64:c5:44: 01:fa:80:dc:8b:fa:07:bc:97:9a:33:01:ec:c2:c1:f4:a1:e4: 6c:44:d8:bf:dc:d3:93:47:33:cf:ad:67:e1:1a:3a:ad:be:58: 13:75:51:c8:12:16:a6:f2:e4:6e:f3:0f:e6:ba:c2:14:19:7c: 37:0d:2b:db:ad:11:09:28:92:87:cb:e7:05:46:fe:ec:dd:3e: f8:41:0d:7a:95:d3:c3:d1:10:62:8d:58:a7:e0:3c:2b:22:08: 1d:06:d6:0a:e8:41:ec:2f:e7:9c:38:8c:80:a9:b4:07:05:ad: c4:74:bb:bd:05:d8:4f:39:04:98:81:67:58:2a:9c:b5:fb:ad: 93:a6:f8:5c:d8:ac:eb:d1:11:f6:6d:65:7f:f4:2e:86:94:9c: d2:61:51:2a:3a:f1:ca:96:d9:00:9b:d6:88:b3:1e:2f:0e:49: f7:bd:db:ae:59:c0:3f:2a:6d:7f:9e:bd:2b:dc:02:a6:a2:63: 7c:17:b4:a8:59:5b:ca:c5:f7:be:a9:b3:9b:b7:cc:73:10:56: 38:42:31:c7:e1:9b:33:41:59:62:f2:f9:a9:e7:8d:3f:04:a0: 13:28:9a:0e -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt4NNUyuBsCmk4cVQSdT1RsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDkzMmY3MDY0YjFmZGU5YTEyMjVmMzMyNzc5ZmMyMmU2 NzMyMzkwHhcNMjYwMTAxMDYxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzEyZjEwMmQxZDljMjMyZWRlYjY2YzJjYzAwOTNmMjRmYzQyOTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/ROO+JQEInQVllOu2Gihmf2VrO6 RlgjRC2snW+HbOJZXwkmfA4STEnMIJEkgf/W7JHrHo0HV2hDcr8xDqV10eeey7p3 PyJjwpW1K7pMKBBfSkeeZycsJCAneqmFdjWhRaBBu2aOOXJWjjye0dJnzFfojR55 7I0SthYtgV98hxbWf+SJX/U2xOJ3BQPNeI6lFR+PZtjpA39ocx/CXdbwCxO8rNCL UCEWYobWvbwplwHqwURlv7TVThi2rAwjOz/6cmHIa7xV9g6DhRKUwVkOFpaa4Cat tk2jkiIP0ixTnNIjbke+1qp/CmGHovMJi7FmpoNYR/rjy32PapTg6zwqGwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFLMS8QLR2cIy7etmwswAk/JPxCk7MB8GA1UdIwQY MBaAFLvZMvcGSx/emhIl8zJ3n8IuZzI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWIt ZDE3OTg4MWQwNjE4LzEvc3hMeEF0SFp3akx0NjJiQ3pBQ1Q4a19FS1RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWItZDE3OTg4MWQwNjE4 LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjApBAIAATAjAwQHUQqAAwQH VjiAAwMAWpIDBAK5xJwDBAXUISADBAbU8UAwDQQCAAIwBwMFACoADPgwDQYJKoZI hvcNAQELBQADggEBANsLsLZybVqfIKYoX/Q43i4Gso9DUmoiDYiKtuKMF4ZEw2TF RAH6gNyL+ge8l5ozAezCwfSh5GxE2L/c05NHM8+tZ+EaOq2+WBN1UcgSFqby5G7z D+a6whQZfDcNK9utEQkokofL5wVG/uzdPvhBDXqV08PREGKNWKfgPCsiCB0G1gro Qewv55w4jICptAcFrcR0u70F2E85BJiBZ1gqnLX7rZOm+FzYrOvREfZtZX/0LoaU nNJhUSo68cqW2QCb1oizHi8OSfe9265ZwD8qbX+evSvcAqaiY3wXtKhZW8rF976p s5u3zHMQVjhCMcfhmzNBWWLy+annjT8EoBMomg4= -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:42 2026 by rpki-client