This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/SH-0mJS__xq0Nrwordyx2eNpy6E.roa File: SH-0mJS__xq0Nrwordyx2eNpy6E.roa (raw, json) Hash identifier: MFyq3HcX0V4paZzyvO44VehUzFoDp8T3DaYSoMIBwAg= Subject key identifier: 48:7F:B4:98:94:BF:FF:1A:B4:36:BC:28:AD:DC:B1:D9:E3:69:CB:A1 Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6 Certificate serial: 019B797ECEA4EF7940994D268C752D73BB21 Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/SH-0mJS__xq0Nrwordyx2eNpy6E.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 89.186.51.0/24 maxlen: 24 89.186.52.0/24 maxlen: 24 89.186.53.0/24 maxlen: 24 89.186.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 15:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ce:a4:ef:79:40:99:4d:26:8c:75:2d:73:bb:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=487fb49894bfff1ab436bc28addcb1d9e369cba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d3:f4:c2:f7:f1:80:a9:d4:55:96:6f:b7:b8: 81:5a:10:41:ab:29:25:a0:e9:65:3c:f4:8b:8d:fa: 9d:60:1c:21:bd:c9:45:8f:46:9e:21:43:61:0d:9e: dc:a7:c1:bd:9f:78:56:19:28:24:e1:39:6b:73:86: a9:4e:19:2d:a3:18:da:62:a1:ac:ab:4c:d5:99:07: 4b:5f:b0:e2:31:0d:62:45:7a:18:b1:96:6a:9b:29: 99:37:df:e5:00:94:cc:a3:dc:ae:9b:63:1d:4c:10: 66:74:7c:ae:c2:c1:bb:28:45:9f:1b:41:d5:62:6c: b9:ea:68:19:08:54:c5:fe:e1:19:84:42:b5:12:70: 80:61:c6:a8:59:ee:0b:16:7d:3f:bf:5b:91:fa:ee: bf:32:b0:b1:0c:f6:b3:8c:95:62:fe:47:74:8d:a0: b2:f1:7d:23:71:ae:0b:9e:fb:69:19:3c:c6:7a:41: 7c:0b:9a:8b:e7:8b:d1:50:c2:17:7b:2f:1d:7e:32: ce:01:82:21:72:3e:e7:96:d4:fb:25:ec:4e:d0:96: 7a:b6:59:3f:94:6b:83:a5:cc:ac:03:35:48:7e:dd: 08:a0:f3:63:b0:68:9e:f7:34:73:fa:50:e4:89:b5: e1:4a:f3:27:89:27:cc:0e:3e:22:99:51:34:96:e6: fb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7F:B4:98:94:BF:FF:1A:B4:36:BC:28:AD:DC:B1:D9:E3:69:CB:A1 X509v3 Authority Key Identifier: keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/SH-0mJS__xq0Nrwordyx2eNpy6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.186.51.0-89.186.54.255 Signature Algorithm: sha256WithRSAEncryption 23:cf:c8:f5:fa:d6:65:ad:38:4b:80:64:d6:0d:13:bc:1d:fe: 88:7e:07:c5:8e:0f:68:d9:95:d7:c4:d2:d2:15:a6:c4:74:8f: 5c:9e:39:f4:83:91:d4:65:4e:6b:04:e0:8d:06:7b:66:c9:4d: 6f:0f:9c:12:d8:e9:ff:c2:a1:5f:f0:cf:18:7b:fc:ba:05:98: 90:ba:a0:65:cc:93:b8:c6:21:90:31:d5:c0:ef:51:54:e8:8e: cf:33:61:10:7f:1c:36:60:97:15:ee:e9:d6:06:1b:68:71:25: 13:70:ee:82:05:4e:f0:59:8b:02:cd:74:ab:18:d8:a5:ee:5a: 99:47:96:ae:14:b9:47:11:44:01:e6:a5:4e:04:ad:ab:21:ac: e3:f0:37:f5:f5:84:ab:87:91:88:56:81:c5:83:36:e3:1f:0e: 86:89:e7:6d:9e:6b:f2:26:74:83:34:f0:66:de:91:f9:f5:0e: 1c:10:39:33:d9:ca:4f:db:ce:f4:07:f0:39:a0:66:90:2f:78: 4d:90:dc:e2:3d:fd:e0:b6:75:92:7e:ff:86:c4:9f:96:ef:18: d1:d1:6d:8d:0d:b4:2c:f8:f9:3d:88:31:7d:71:ae:58:24:01: fd:40:ca:63:cd:b0:33:b2:6c:97:8f:34:40:9a:3d:c5:d5:d9: 52:c2:ad:9f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5fs6k73lAmU0mjHUtc7shMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MzAwNTYxOTY4OGVmYmFmZmQwNmUxMDhhNDNiZGYyMDY0 M2UwZDYwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODdmYjQ5ODk0YmZmZjFhYjQzNmJjMjhhZGRjYjFkOWUzNjljYmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NP0wvfxgKnUVZZvt7iBWhBBqykl oOllPPSLjfqdYBwhvclFj0aeIUNhDZ7cp8G9n3hWGSgk4Tlrc4apThktoxjaYqGs q0zVmQdLX7DiMQ1iRXoYsZZqmymZN9/lAJTMo9yum2MdTBBmdHyuwsG7KEWfG0HV Ymy56mgZCFTF/uEZhEK1EnCAYcaoWe4LFn0/v1uR+u6/MrCxDPazjJVi/kd0jaCy 8X0jca4LnvtpGTzGekF8C5qL54vRUMIXey8dfjLOAYIhcj7nltT7JexO0JZ6tlk/ lGuDpcysAzVIft0IoPNjsGie9zRz+lDkibXhSvMniSfMDj4imVE0lub77QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEh/tJiUv/8atDa8KK3csdnjacuhMB8GA1UdIwQY MBaAFLUwBWGWiO+6/9BuEIpDvfIGQ+DWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy85OTVmYmQtOTFmYi00M2JiLThmMjYt Y2Q0YmQ0NDI3NWM1LzEvU0gtMG1KU19feHEwTnJ3b3JkeXgyZU5weTZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy85OTVmYmQtOTFmYi00M2JiLThmMjYtY2Q0YmQ0NDI3NWM1 LzEvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABZujMD BABZujYwDQYJKoZIhvcNAQELBQADggEBACPPyPX61mWtOEuAZNYNE7wd/oh+B8WO D2jZldfE0tIVpsR0j1yeOfSDkdRlTmsE4I0Ge2bJTW8PnBLY6f/CoV/wzxh7/LoF mJC6oGXMk7jGIZAx1cDvUVTojs8zYRB/HDZglxXu6dYGG2hxJRNw7oIFTvBZiwLN dKsY2KXuWplHlq4UuUcRRAHmpU4ErashrOPwN/X1hKuHkYhWgcWDNuMfDoaJ522e a/ImdIM08Gbekfn1DhwQOTPZyk/bzvQH8DmgZpAveE2Q3OI9/eC2dZJ+/4bEn5bv GNHRbY0NtCz4+T2IMX1xrlgkAf1AymPNsDOybJePNECaPcXV2VLCrZ8= -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:55 2026 by rpki-client