This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/SgXCmcW2VqNAuwlXtNE7H8kavuE.roa File: SgXCmcW2VqNAuwlXtNE7H8kavuE.roa (raw, json) Hash identifier: BxOBOzbJCEP3iGviiBfbh9UD9hBZ4TteDSfJO/nP+gk= Subject key identifier: 4A:05:C2:99:C5:B6:56:A3:40:BB:09:57:B4:D1:3B:1F:C9:1A:BE:E1 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B3610F47629666EAF30E4287C15C60F Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/SgXCmcW2VqNAuwlXtNE7H8kavuE.roa Signing time: Thu 01 Jan 2026 20:18:19 +0000 ROA not before: Thu 01 Jan 2026 20:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198953 IP address blocks: 194.107.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:10:f4:76:29:66:6e:af:30:e4:28:7c:15:c6:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a05c299c5b656a340bb0957b4d13b1fc91abee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:1b:d6:43:17:fb:05:e1:ce:ac:90:f5:5e: 76:fd:1a:af:14:bf:01:5d:d6:91:54:e2:63:36:16: 84:97:b1:ac:0d:d3:b4:b5:c8:9b:1a:c7:40:f2:fe: 41:c8:08:19:37:91:6b:1b:f6:21:e2:4c:ff:8b:18: ca:cf:9a:93:9b:3d:65:20:d1:1e:67:41:69:58:45: 34:aa:11:25:b0:83:62:48:d2:70:73:b0:11:08:e8: 15:aa:74:55:d9:85:c0:00:14:44:f7:d4:52:9b:26: 0c:61:a0:f4:22:32:44:04:5f:ff:48:d5:ff:50:45: 75:cb:43:3c:a6:f7:74:2b:1a:f0:74:41:32:a1:de: 6b:61:e9:60:eb:cd:b9:93:56:92:64:8c:fe:fd:a7: 89:ed:06:5d:8e:6d:b3:23:e7:11:77:a2:8e:03:03: 33:d5:1c:0c:fa:c0:1e:1c:fb:fc:95:eb:ab:2f:f0: b4:8e:ae:6f:d3:10:71:52:83:b0:bd:cd:c8:a4:6d: d4:ef:0c:3a:f8:0a:2c:6c:d8:72:9a:50:6e:49:c3: 42:a2:39:12:b5:18:32:d9:98:2a:0a:14:31:11:7c: 75:e0:62:ee:92:a9:9d:67:c8:51:6f:1e:ed:8d:3e: a2:8a:82:33:e1:b9:b4:c7:3c:2b:cb:b6:f8:98:72: fa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:05:C2:99:C5:B6:56:A3:40:BB:09:57:B4:D1:3B:1F:C9:1A:BE:E1 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/SgXCmcW2VqNAuwlXtNE7H8kavuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.107.200.0/24 Signature Algorithm: sha256WithRSAEncryption 46:a6:1d:73:3f:82:7c:ee:34:27:91:bd:db:a7:52:78:80:e0: 23:d9:59:19:71:1b:da:da:3c:6f:da:06:1b:95:b2:7b:2e:9c: 38:8b:f5:23:c0:d0:e3:d5:ac:58:94:dc:15:fc:62:d8:12:be: cd:51:90:99:b9:97:80:4f:b8:2a:d7:0b:c1:6b:6a:e9:d7:a2: 73:5f:45:2a:f4:5d:fe:8c:e6:d7:63:1b:28:8a:7f:dd:97:bd: 3a:82:07:16:29:2e:2e:8c:3a:e4:ee:2a:92:20:44:1c:ea:a3: c3:db:73:a2:c4:f6:84:5f:91:a6:92:15:b5:6d:2c:2d:aa:26: e4:52:26:99:c9:77:ae:0a:1c:4f:f8:17:bc:0c:94:3c:46:30: cf:97:d2:40:8a:d4:f0:e6:79:3d:a9:a4:e7:f2:70:0c:ad:fb: a2:14:fc:fb:ad:a5:f6:29:07:7e:23:8a:6f:24:40:57:49:13: 75:03:5e:32:28:82:74:ce:03:24:e9:65:8c:2d:4e:6d:08:f6: ac:f6:f6:ad:0c:94:1d:18:72:84:fb:0c:03:9c:c8:12:22:e9: fe:8b:e9:cb:b7:12:28:7b:ab:83:38:61:c2:2b:df:f3:3f:75: 8a:a8:0b:7e:6a:9f:a0:ac:b3:ff:44:90:e3:48:e0:f7:b9:59: 4b:7e:c9:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhD0dilmbq8w5Ch8FcYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTA1YzI5OWM1YjY1NmEzNDBiYjA5NTdiNGQxM2IxZmM5MWFiZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNcb1kMX+wXhzqyQ9V52/RqvFL8B XdaRVOJjNhaEl7GsDdO0tcibGsdA8v5ByAgZN5FrG/Yh4kz/ixjKz5qTmz1lINEe Z0FpWEU0qhElsINiSNJwc7ARCOgVqnRV2YXAABRE99RSmyYMYaD0IjJEBF//SNX/ UEV1y0M8pvd0KxrwdEEyod5rYelg6825k1aSZIz+/aeJ7QZdjm2zI+cRd6KOAwMz 1RwM+sAeHPv8leurL/C0jq5v0xBxUoOwvc3IpG3U7ww6+AosbNhymlBuScNCojkS tRgy2ZgqChQxEXx14GLukqmdZ8hRbx7tjT6iioIz4bm0xzwry7b4mHL6TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEoFwpnFtlajQLsJV7TROx/JGr7hMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvU2dYQ21jVzJWcU5BdXdsWHRORTdIOGthdnVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmvIMA0G CSqGSIb3DQEBCwUAA4IBAQBGph1zP4J87jQnkb3bp1J4gOAj2VkZcRva2jxv2gYb lbJ7Lpw4i/UjwNDj1axYlNwV/GLYEr7NUZCZuZeAT7gq1wvBa2rp16JzX0Uq9F3+ jObXYxsoin/dl706ggcWKS4ujDrk7iqSIEQc6qPD23OixPaEX5GmkhW1bSwtqibk UiaZyXeuChxP+Be8DJQ8RjDPl9JAitTw5nk9qaTn8nAMrfuiFPz7raX2KQd+I4pv JEBXSRN1A14yKIJ0zgMk6WWMLU5tCPas9vatDJQdGHKE+wwDnMgSIun+i+nLtxIo e6uDOGHCK9/zP3WKqAt+ap+grLP/RJDjSOD3uVlLfsnn -----END CERTIFICATE-----Generated at Thu Jan 15 13:18:45 2026 by rpki-client