This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/SaaOxyoRftnC93VwoMwsYhac2Cg.roa File: SaaOxyoRftnC93VwoMwsYhac2Cg.roa (raw, json) Hash identifier: Jyzc6vUApI7lUiCT6AHnK70fIf9nJAWEiYkk+m1RDzw= Subject key identifier: 49:A6:8E:C7:2A:11:7E:D9:C2:F7:75:70:A0:CC:2C:62:16:9C:D8:28 Certificate issuer: /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052 Certificate serial: 019B7CEE5FE73C29422D90CFFAD298CD7909 Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/SaaOxyoRftnC93VwoMwsYhac2Cg.roa Signing time: Fri 02 Jan 2026 04:19:15 +0000 ROA not before: Fri 02 Jan 2026 04:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197928 IP address blocks: 91.229.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5f:e7:3c:29:42:2d:90:cf:fa:d2:98:cd:79:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052 Validity Not Before: Jan 2 04:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49a68ec72a117ed9c2f77570a0cc2c62169cd828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:ee:3f:01:63:ac:5f:cc:5c:a9:bd:b8:9d: 86:f9:06:4c:86:cd:b6:2f:ca:25:52:7c:ab:cb:0a: ba:d3:4a:8c:6a:b6:35:9f:66:73:d2:a8:25:ec:aa: 8e:17:27:ca:2b:86:44:1d:10:77:12:6f:03:89:db: 15:e6:f7:20:84:9e:b3:89:ad:9d:57:29:61:87:0e: 6f:5c:58:8e:d6:e7:9e:f4:a2:5e:1b:0d:67:15:78: 6e:2f:13:f6:67:cf:af:e1:be:cd:75:04:04:99:02: c5:20:69:8c:24:8e:b1:66:bc:57:fc:bb:e3:33:0b: 84:19:8d:b1:67:be:7d:fe:d7:0a:9f:9a:76:99:43: c3:1e:93:23:f2:aa:12:af:0c:a7:0b:12:80:9e:d5: 52:ef:85:9b:d9:d4:38:bd:77:1d:9c:d4:f0:01:16: 19:a9:83:96:88:8a:71:ec:fd:0b:78:0c:29:07:89: 39:b9:ba:58:db:fd:81:f0:6b:74:76:77:44:1e:5b: 24:49:39:0e:39:41:f8:2d:b9:de:a5:e7:f5:50:60: 7f:54:f5:b1:41:d9:06:0f:a0:16:fe:4a:6a:3d:00: 73:41:11:5b:8f:8f:52:24:33:f3:82:9c:dd:2a:a5: 91:0a:7e:10:69:8a:e6:cd:76:fb:8f:c7:8a:d9:18: 33:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A6:8E:C7:2A:11:7E:D9:C2:F7:75:70:A0:CC:2C:62:16:9C:D8:28 X509v3 Authority Key Identifier: keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/SaaOxyoRftnC93VwoMwsYhac2Cg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.238.0/24 Signature Algorithm: sha256WithRSAEncryption 04:ea:78:0f:6a:52:8e:4e:e2:c1:7d:1c:f5:e5:db:21:32:44: be:e3:08:7d:a6:b6:7d:a5:8c:65:20:9e:39:56:1b:92:89:fe: 8d:8c:83:f0:90:e5:3f:b7:47:13:c1:46:09:b7:17:77:ed:e4: 1b:f2:0d:94:26:4c:be:80:83:fe:9d:13:51:cd:51:14:ea:48: dd:6a:4e:ee:ea:2b:24:3c:43:4f:7a:fa:13:d2:a9:4a:f8:3e: d2:a9:7d:1d:bd:64:11:21:fc:48:0b:d6:1e:6e:d6:45:c5:c7: bb:43:6a:93:88:e0:92:55:46:6a:74:32:ab:08:39:50:61:29: 14:15:7a:d9:31:dd:3d:d4:66:0d:8e:42:3b:b8:7f:ff:86:8e: 1f:9e:c4:74:57:a3:42:4c:0b:ad:55:1f:58:e3:04:94:3e:fc: ff:38:0d:82:a8:7e:24:79:8a:0a:91:d1:36:fe:4c:41:04:47: f0:f3:a1:3d:98:c6:f6:ec:02:ce:fb:ff:3a:83:d2:5f:6e:7e: 00:bd:0d:34:43:70:ab:b4:1e:7e:4f:60:92:a1:cc:f9:41:23: ef:c4:67:89:f3:30:c2:11:da:ef:c2:b0:11:df:aa:7a:23:4c: d8:5f:3c:e3:ed:8c:69:4a:88:e2:a1:85:f5:cf:3d:b1:fe:9f: d7:a4:1b:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87l/nPClCLZDP+tKYzXkJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNGM1YWNkNmZhMWU2YTkxMTI5YWM0MjQwNTdhODc3NTU4 ZTgwNTIwHhcNMjYwMTAyMDQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWE2OGVjNzJhMTE3ZWQ5YzJmNzc1NzBhMGNjMmM2MjE2OWNkODI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumruPwFjrF/MXKm9uJ2G+QZMhs22 L8olUnyrywq600qMarY1n2Zz0qgl7KqOFyfKK4ZEHRB3Em8DidsV5vcghJ6zia2d Vylhhw5vXFiO1uee9KJeGw1nFXhuLxP2Z8+v4b7NdQQEmQLFIGmMJI6xZrxX/Lvj MwuEGY2xZ759/tcKn5p2mUPDHpMj8qoSrwynCxKAntVS74Wb2dQ4vXcdnNTwARYZ qYOWiIpx7P0LeAwpB4k5ubpY2/2B8Gt0dndEHlskSTkOOUH4Lbnepef1UGB/VPWx QdkGD6AW/kpqPQBzQRFbj49SJDPzgpzdKqWRCn4QaYrmzXb7j8eK2RgzBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEmmjscqEX7Zwvd1cKDMLGIWnNgoMB8GA1UdIwQY MBaAFOtMWs1voeapESmsQkBXqHdVjoBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAt ZGNiZGY3MWZmMzQ3LzEvU2FhT3h5b1JmdG5DOTNWd29Nd3NZaGFjMkNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAtZGNiZGY3MWZmMzQ3 LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+XuMA0G CSqGSIb3DQEBCwUAA4IBAQAE6ngPalKOTuLBfRz15dshMkS+4wh9prZ9pYxlIJ45 VhuSif6NjIPwkOU/t0cTwUYJtxd37eQb8g2UJky+gIP+nRNRzVEU6kjdak7u6isk PENPevoT0qlK+D7SqX0dvWQRIfxIC9YebtZFxce7Q2qTiOCSVUZqdDKrCDlQYSkU FXrZMd091GYNjkI7uH//ho4fnsR0V6NCTAutVR9Y4wSUPvz/OA2CqH4keYoKkdE2 /kxBBEfw86E9mMb27ALO+/86g9Jfbn4AvQ00Q3CrtB5+T2CSocz5QSPvxGeJ8zDC EdrvwrAR36p6I0zYXzzj7YxpSojioYX1zz2x/p/XpBvm -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:26 2026 by rpki-client