This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa File: Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa (raw, json) Hash identifier: t8YcGZN/KfNS1zoLXEsPr4LvXKVj1kisjNpdPg7jWEk= Subject key identifier: 4A:37:5C:E8:4C:63:43:67:01:B3:BE:67:56:49:6E:30:A1:CF:6C:06 Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1 Certificate serial: 019B791029D8D1CAE904B33FED82439AD122 Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa Signing time: Thu 01 Jan 2026 10:17:40 +0000 ROA not before: Thu 01 Jan 2026 10:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9136 IP address blocks: 185.225.135.0/24 maxlen: 24 2a0d:c405::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:29:d8:d1:ca:e9:04:b3:3f:ed:82:43:9a:d1:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1 Validity Not Before: Jan 1 10:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a375ce84c63436701b3be6756496e30a1cf6c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6d:2b:b6:85:0b:c6:52:d8:ee:e4:53:3b:90: c7:c2:62:96:4d:60:31:4e:83:61:fb:6e:b3:b6:3a: 54:a5:eb:33:5e:7f:d2:d9:a8:9a:1c:18:05:54:25: 2f:6e:a5:57:6b:24:47:1e:a9:cf:86:69:0e:67:01: fe:aa:81:40:bb:07:f3:2e:05:a6:d9:b8:4d:bd:58: 82:b8:b5:d0:01:84:64:95:2a:53:34:4c:9d:6b:76: c3:d7:17:69:f7:0b:f0:e9:7c:8a:84:f6:c5:2f:39: 27:f7:80:54:46:87:cf:ca:74:2d:64:f0:2a:2f:8d: bb:e2:8d:61:55:4d:01:e7:bb:3a:ac:b6:bf:6e:5f: 71:36:5a:f4:43:43:d7:1a:24:26:29:f1:99:03:e5: 3b:90:ee:b0:22:32:90:d8:de:1f:99:6d:17:6b:ea: 6f:fe:91:8f:8c:a2:91:7c:d5:1f:ec:7a:9d:9a:03: f4:11:90:ea:fd:b0:0c:08:b3:e3:a0:c5:09:ab:e0: 87:a9:72:12:f0:a0:64:a7:c3:10:a7:01:fc:e2:d6: 25:1f:be:62:af:93:83:5b:2b:39:19:a1:3b:20:d6: 15:a4:7f:c3:ff:4d:3f:4e:34:cc:ad:50:8e:f2:28: df:1c:98:92:0d:70:4f:7c:25:e9:a0:d3:d7:6b:d8: c9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:37:5C:E8:4C:63:43:67:01:B3:BE:67:56:49:6E:30:A1:CF:6C:06 X509v3 Authority Key Identifier: keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/Sjdc6ExjQ2cBs75nVkluMKHPbAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.135.0/24 IPv6: 2a0d:c405::/32 Signature Algorithm: sha256WithRSAEncryption 3f:e7:4c:6a:38:cc:a4:b5:20:b5:e7:98:d0:b8:00:61:23:2c: 0c:f6:cd:ae:bb:b4:38:39:eb:88:b2:34:ca:dc:e1:9c:4d:2f: 2f:62:4f:7c:43:b1:29:27:16:4f:71:e3:c2:33:a3:52:f6:66: fc:c0:d1:7b:f0:6c:97:9e:95:f6:1a:e0:42:19:ef:f0:4d:d7: f4:27:13:52:ef:a5:c0:ab:d8:1f:48:d7:8f:c2:75:36:61:15: a4:5e:e4:84:db:4d:73:f5:bf:b5:b7:9d:a5:95:c8:9f:3f:6d: 58:a9:b2:9a:81:6e:c3:11:6c:51:0f:ff:f6:44:97:93:aa:f7: d6:c5:e2:c2:bb:f2:2f:bd:f9:c3:a4:c3:5e:10:80:e2:e3:70: 39:6a:4a:b6:43:d4:ea:43:c8:cf:aa:f2:54:9d:e4:9d:9f:61: d2:6c:25:03:71:22:3d:de:6b:7d:79:28:c7:8b:31:f5:a1:ca: 7f:94:4e:62:e5:5e:c8:06:9c:42:2e:57:56:52:3e:15:b7:8b: dd:c3:d6:3a:78:7e:99:17:65:fd:97:78:39:dd:dd:b1:af:7a: d6:2d:c6:b7:4a:ff:a1:6a:ca:cf:17:d0:8e:80:6e:51:f1:00: bd:8f:6b:ef:cd:a2:7e:5e:86:4c:a1:0a:1d:3d:ba:8e:7b:ce: ba:61:01:c7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ECnY0crpBLM/7YJDmtEiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYTQ2ZWFhZTdhZWYyZjQ0ZmU2NjAxNjJiYjlkYzcwZDY1 MjVhZjEwHhcNMjYwMTAxMTAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTM3NWNlODRjNjM0MzY3MDFiM2JlNjc1NjQ5NmUzMGExY2Y2YzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG0rtoULxlLY7uRTO5DHwmKWTWAx ToNh+26ztjpUpeszXn/S2aiaHBgFVCUvbqVXayRHHqnPhmkOZwH+qoFAuwfzLgWm 2bhNvViCuLXQAYRklSpTNEyda3bD1xdp9wvw6XyKhPbFLzkn94BURofPynQtZPAq L4274o1hVU0B57s6rLa/bl9xNlr0Q0PXGiQmKfGZA+U7kO6wIjKQ2N4fmW0Xa+pv /pGPjKKRfNUf7HqdmgP0EZDq/bAMCLPjoMUJq+CHqXIS8KBkp8MQpwH84tYlH75i r5ODWys5GaE7INYVpH/D/00/TjTMrVCO8ijfHJiSDXBPfCXpoNPXa9jJWQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEo3XOhMY0NnAbO+Z1ZJbjChz2wGMB8GA1UdIwQY MBaAFN6kbqrnrvL0T+ZgFiu53HDWUlrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEt MWZhOWFjNTgwYjhlLzEvU2pkYzZFeGpRMmNCczc1blZrbHVNS0hQYkFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEtMWZhOWFjNTgwYjhl LzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAueGHMA0E AgACMAcDBQAqDcQFMA0GCSqGSIb3DQEBCwUAA4IBAQA/50xqOMyktSC155jQuABh IywM9s2uu7Q4OeuIsjTK3OGcTS8vYk98Q7EpJxZPcePCM6NS9mb8wNF78GyXnpX2 GuBCGe/wTdf0JxNS76XAq9gfSNePwnU2YRWkXuSE201z9b+1t52llcifP21YqbKa gW7DEWxRD//2RJeTqvfWxeLCu/IvvfnDpMNeEIDi43A5akq2Q9TqQ8jPqvJUneSd n2HSbCUDcSI93mt9eSjHizH1ocp/lE5i5V7IBpxCLldWUj4Vt4vdw9Y6eH6ZF2X9 l3g53d2xr3rWLca3Sv+hasrPF9COgG5R8QC9j2vvzaJ+XoZMoQodPbqOe866YQHH -----END CERTIFICATE-----Generated at Tue Jan 20 04:29:09 2026 by rpki-client