This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/ScLpLUNZL4vKCzV0ioVZs8KIGbk.roa File: ScLpLUNZL4vKCzV0ioVZs8KIGbk.roa (raw, json) Hash identifier: l3DsOEgdCZrtfFwSIDhFNx1mhPstKFxARhBxgPBJ1Ks= Subject key identifier: 49:C2:E9:2D:43:59:2F:8B:CA:0B:35:74:8A:85:59:B3:C2:88:19:B9 Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Certificate serial: 019B7A5B8D52C09FEFB892DFE97C50401812 Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/ScLpLUNZL4vKCzV0ioVZs8KIGbk.roa Signing time: Thu 01 Jan 2026 16:19:38 +0000 ROA not before: Thu 01 Jan 2026 16:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 87.58.64.0/24 maxlen: 24 87.58.65.0/24 maxlen: 24 159.254.0.0/24 maxlen: 24 159.254.1.0/24 maxlen: 24 159.254.2.0/24 maxlen: 24 159.254.3.0/24 maxlen: 24 159.254.4.0/24 maxlen: 24 159.254.5.0/24 maxlen: 24 159.254.6.0/24 maxlen: 24 159.254.7.0/24 maxlen: 24 159.254.8.0/24 maxlen: 24 159.254.9.0/24 maxlen: 24 159.254.10.0/24 maxlen: 24 159.254.11.0/24 maxlen: 24 159.254.12.0/24 maxlen: 24 159.254.80.0/24 maxlen: 24 159.254.81.0/24 maxlen: 24 159.254.82.0/24 maxlen: 24 159.254.186.0/24 maxlen: 24 159.254.187.0/24 maxlen: 24 159.254.188.0/24 maxlen: 24 159.254.189.0/24 maxlen: 24 159.254.190.0/24 maxlen: 24 159.254.191.0/24 maxlen: 24 159.254.255.0/24 maxlen: 24 194.9.116.0/24 maxlen: 24 2a03:eec0:3601::/48 maxlen: 48 2a03:eec0:3602::/48 maxlen: 48 2a03:eec0:3603::/48 maxlen: 48 2a03:eec0:3604::/48 maxlen: 48 2a03:eec0:3605::/48 maxlen: 48 2a03:eec0:3606::/48 maxlen: 48 2a03:eec0:3607::/48 maxlen: 48 2a03:eec0:3608::/48 maxlen: 48 2a03:eec0:3609::/48 maxlen: 48 2a03:eec0:360a::/48 maxlen: 48 2a03:eec0:360b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8d:52:c0:9f:ef:b8:92:df:e9:7c:50:40:18:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Validity Not Before: Jan 1 16:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49c2e92d43592f8bca0b35748a8559b3c28819b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d5:ae:0b:60:5f:fd:9f:ed:57:34:5c:cc:51: 5f:8a:fd:af:ee:e8:1b:4f:31:ec:95:26:79:26:5c: ce:92:8d:fd:8f:ae:b6:ea:86:ed:1a:51:93:d3:67: 7b:12:08:ed:9c:c4:30:a1:c3:f9:39:16:00:45:f7: 36:30:a2:4c:30:cd:78:2e:f4:ed:0b:7a:66:41:f8: 25:08:4f:6b:8a:79:4e:a8:7e:5c:da:f3:28:19:c7: 2f:3a:71:f1:36:ec:5f:bc:cf:c7:ce:db:46:d7:a5: 96:df:79:aa:17:3a:1e:20:72:4d:46:16:03:d4:c0: de:09:a5:5c:a1:74:16:51:f9:10:b1:55:98:e3:0e: 65:15:f9:5a:dc:b5:b0:e7:a9:ab:ce:7f:c9:f2:d5: 25:5c:8a:37:b9:ae:93:1a:d2:ff:55:2f:c3:09:47: f0:f3:69:15:8d:10:b0:93:90:ab:9b:3b:60:26:24: 21:0f:b3:06:1c:e0:e0:a8:a8:58:de:1b:d3:bd:07: 97:c0:da:77:03:fd:4d:48:f7:32:5e:f0:48:c3:4a: 20:30:9c:4f:1c:af:4d:4a:b6:53:a9:f1:70:ec:ee: 4c:21:79:ee:6e:ef:c4:47:61:70:b5:c9:b5:06:46: 2e:ae:bc:ee:49:e0:46:a7:1c:70:d9:43:2f:8d:32: 3d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C2:E9:2D:43:59:2F:8B:CA:0B:35:74:8A:85:59:B3:C2:88:19:B9 X509v3 Authority Key Identifier: keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/ScLpLUNZL4vKCzV0ioVZs8KIGbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.58.64.0/23 159.254.0.0-159.254.12.255 159.254.80.0-159.254.82.255 159.254.186.0-159.254.191.255 159.254.255.0/24 194.9.116.0/24 IPv6: 2a03:eec0:3601::-2a03:eec0:360b:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a1:19:dd:37:5c:6d:83:e7:12:b7:6c:84:4e:39:b3:45:e5:ca: 19:34:c2:4e:51:a7:13:d3:3b:85:29:20:fd:a4:01:d1:96:11: a5:32:26:40:a5:8d:0f:07:62:d8:58:31:da:a1:27:5f:59:25: 3b:b6:8c:be:89:b6:ec:a3:31:b4:e6:fc:21:bd:43:84:cd:93: b0:55:d6:f2:37:68:75:de:78:a1:56:1b:10:8d:78:24:d4:e7: 50:ae:45:f5:fe:8b:4a:94:91:21:f1:14:8f:31:b1:c5:af:71: 31:06:35:2e:59:26:02:d3:03:41:4b:f7:8c:33:c0:c0:a9:92: 39:4e:72:8a:9b:78:0b:d7:82:66:dd:ff:73:d5:00:ea:67:9c: 78:20:cd:0f:cc:0d:ed:c7:f2:af:01:15:22:bf:4d:f5:37:27: f9:ce:2d:68:24:37:b6:da:aa:61:40:0f:69:40:d8:eb:5f:25: 3f:9d:73:d4:17:d5:12:08:99:8c:1c:8d:22:74:f4:a2:66:4a: 36:b5:db:c1:d7:42:2e:60:9e:85:81:85:af:54:d5:2f:ad:ec: eb:9c:85:ce:95:55:ba:14:d1:07:b8:76:c5:63:e4:0e:38:45: 99:0f:16:ea:ec:8f:b5:01:0e:6c:d1:45:97:fc:13:7c:3d:44: 4a:0f:7d:80 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZt6W41SwJ/vuJLf6XxQQBgSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi OGFhMjAwHhcNMjYwMTAxMTYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWMyZTkyZDQzNTkyZjhiY2EwYjM1NzQ4YTg1NTliM2MyODgxOWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNWuC2Bf/Z/tVzRczFFfiv2v7ugb TzHslSZ5JlzOko39j6626obtGlGT02d7EgjtnMQwocP5ORYARfc2MKJMMM14LvTt C3pmQfglCE9rinlOqH5c2vMoGccvOnHxNuxfvM/HzttG16WW33mqFzoeIHJNRhYD 1MDeCaVcoXQWUfkQsVWY4w5lFfla3LWw56mrzn/J8tUlXIo3ua6TGtL/VS/DCUfw 82kVjRCwk5CrmztgJiQhD7MGHODgqKhY3hvTvQeXwNp3A/1NSPcyXvBIw0ogMJxP HK9NSrZTqfFw7O5MIXnubu/ER2Fwtcm1BkYurrzuSeBGpxxw2UMvjTI9WwIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFEnC6S1DWS+Lygs1dIqFWbPCiBm5MB8GA1UdIwQY MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt YjliNjU0MDJiOTI4LzEvU2NMcExVTlpMNHZLQ3pWMGlvVlpzOEtJR2JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4 LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBBBAIAATA7AwQBVzpAMAsD AwGf/gMEAJ/+DDAMAwQEn/5QAwQAn/5SMAwDBAGf/roDBAaf/oADBACf/v8DBADC CXQwGgQCAAIwFDASAwcAKgPuwDYBAwcCKgPuwDYIMA0GCSqGSIb3DQEBCwUAA4IB AQChGd03XG2D5xK3bIROObNF5coZNMJOUacT0zuFKSD9pAHRlhGlMiZApY0PB2LY WDHaoSdfWSU7toy+ibbsozG05vwhvUOEzZOwVdbyN2h13nihVhsQjXgk1OdQrkX1 /otKlJEh8RSPMbHFr3ExBjUuWSYC0wNBS/eMM8DAqZI5TnKKm3gL14Jm3f9z1QDq Z5x4IM0PzA3tx/KvARUiv031Nyf5zi1oJDe22qphQA9pQNjrXyU/nXPUF9USCJmM HI0idPSiZko2tdvB10IuYJ6FgYWvVNUvrezrnIXOlVW6FNEHuHbFY+QOOEWZDxbq 7I+1AQ5s0UWX/BN8PURKD32A -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:58 2026 by rpki-client