This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/SeDJ1hAulV7F8UvJZdo94_98zCY.roa File: SeDJ1hAulV7F8UvJZdo94_98zCY.roa (raw, json) Hash identifier: 2+EBqbTY3BogbTiuWVXf6LiOVDqJoUQjJrYdOmKpJQU= Subject key identifier: 49:E0:C9:D6:10:2E:95:5E:C5:F1:4B:C9:65:DA:3D:E3:FF:7C:CC:26 Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090 Certificate serial: 019B79ECD4A915860A05BB09B78A6FF2B33D Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/SeDJ1hAulV7F8UvJZdo94_98zCY.roa Signing time: Thu 01 Jan 2026 14:18:42 +0000 ROA not before: Thu 01 Jan 2026 14:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25084 IP address blocks: 212.87.240.0/23 maxlen: 23 212.87.244.0/22 maxlen: 22 2a01:699::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d4:a9:15:86:0a:05:bb:09:b7:8a:6f:f2:b3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090 Validity Not Before: Jan 1 14:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49e0c9d6102e955ec5f14bc965da3de3ff7ccc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4e:a3:23:fd:94:fc:24:c4:25:79:7f:b1:0f: d2:e8:bc:54:b1:31:73:c3:27:1b:be:7d:60:76:4c: 9a:28:6f:c9:64:dd:c4:13:cf:34:51:d0:84:4e:3a: ce:8a:04:f4:b8:30:cc:1d:15:76:dc:e3:c2:8d:a5: d3:42:cf:4a:35:d7:d5:09:17:c0:d9:6c:d6:a3:93: e2:33:87:24:b5:f2:66:00:73:ea:24:d8:7f:6d:ed: 04:cc:34:81:8e:2a:f6:d6:ac:74:a0:6c:b2:92:94: 17:f4:0e:2c:cd:d5:c0:93:88:36:f9:1b:5e:6f:b0: 92:ac:0b:27:c7:64:78:22:47:0a:ea:39:74:57:04: 1f:ac:c3:48:35:0b:ff:ae:de:e6:71:53:f9:a1:dd: e2:2a:fb:01:69:d2:40:50:cf:89:16:6b:21:a6:d1: 1f:cd:a7:4f:31:ff:f0:3b:8b:6b:c6:15:0a:6d:a7: 5d:de:21:1f:1c:36:72:0c:af:b1:df:d6:37:2d:5f: 29:d0:7d:3c:7e:6a:2e:bb:99:06:a3:31:53:42:17: a7:94:25:97:e4:3e:c1:f2:79:44:20:d8:1f:f4:26: b1:06:b4:9c:73:37:6e:38:bd:a6:cd:ce:43:60:14: f7:c2:11:41:1c:f9:81:4d:f0:2f:c0:3f:ef:8b:cd: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E0:C9:D6:10:2E:95:5E:C5:F1:4B:C9:65:DA:3D:E3:FF:7C:CC:26 X509v3 Authority Key Identifier: keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/SeDJ1hAulV7F8UvJZdo94_98zCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.87.240.0/23 212.87.244.0/22 IPv6: 2a01:699::/32 Signature Algorithm: sha256WithRSAEncryption a1:e4:63:05:fd:f6:82:bc:5c:2c:29:58:37:d2:6d:d1:c0:eb: 2c:17:71:9e:64:c6:ec:0c:c5:9d:c6:5f:7a:fc:87:28:9e:a1: 63:4c:c6:2f:50:c2:84:68:40:d4:cc:56:eb:63:b0:15:9d:d0: b6:c1:05:bc:9e:c8:5d:2e:0f:53:b4:59:02:e3:af:25:74:21: 7f:c4:05:52:18:d3:e6:ff:71:e5:c5:96:a1:77:5e:ef:d1:89: 55:38:33:9e:43:08:8f:1c:5b:74:41:3c:64:ea:e8:33:a0:57: 11:68:fe:a4:e8:8b:52:78:78:46:6d:91:0d:88:95:1b:a7:23: 94:6d:2e:13:6e:51:52:39:5f:cf:3d:8c:9e:c9:c6:ef:b5:a6: fe:c5:71:7d:54:78:47:ad:4f:07:b6:19:ba:2e:00:76:56:24: 8f:22:d6:f2:2a:18:0a:cf:3c:30:b8:15:1c:a9:7a:9b:39:2a: e5:4d:b6:a7:32:b0:d6:82:48:a2:92:da:f0:3d:44:18:e5:c3: da:5c:e3:2f:4d:bc:dd:3f:6e:9c:5b:bc:97:c2:58:e7:99:ec: 8e:9d:06:cf:7e:82:61:c0:95:4f:fd:32:b5:58:06:36:c9:d3: 1e:38:8f:e7:d2:1c:3f:8d:e4:3d:ab:3b:3e:db:ac:aa:45:09: 13:db:6b:3b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57NSpFYYKBbsJt4pv8rM9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMmFhOTYxYjQ3N2Q1NDIzZDg1YjdkNDNmM2VmYTI2MzI2 ZDcwOTAwHhcNMjYwMTAxMTQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWUwYzlkNjEwMmU5NTVlYzVmMTRiYzk2NWRhM2RlM2ZmN2NjYzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE6jI/2U/CTEJXl/sQ/S6LxUsTFz wycbvn1gdkyaKG/JZN3EE880UdCETjrOigT0uDDMHRV23OPCjaXTQs9KNdfVCRfA 2WzWo5PiM4cktfJmAHPqJNh/be0EzDSBjir21qx0oGyykpQX9A4szdXAk4g2+Rte b7CSrAsnx2R4IkcK6jl0VwQfrMNINQv/rt7mcVP5od3iKvsBadJAUM+JFmshptEf zadPMf/wO4trxhUKbadd3iEfHDZyDK+x39Y3LV8p0H08fmouu5kGozFTQhenlCWX 5D7B8nlEINgf9CaxBrScczduOL2mzc5DYBT3whFBHPmBTfAvwD/vi82j/QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEngydYQLpVexfFLyWXaPeP/fMwmMB8GA1UdIwQY MBaAFLAqqWG0d9VCPYW31D8++iYybXCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEt MDc4N2E1MDNjYTY5LzEvU2VESjFoQXVsVjdGOFV2Slpkbzk0Xzk4ekNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEtMDc4N2E1MDNjYTY5 LzEvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQB1FfwAwQC 1Ff0MA0EAgACMAcDBQAqAQaZMA0GCSqGSIb3DQEBCwUAA4IBAQCh5GMF/faCvFws KVg30m3RwOssF3GeZMbsDMWdxl96/IconqFjTMYvUMKEaEDUzFbrY7AVndC2wQW8 nshdLg9TtFkC468ldCF/xAVSGNPm/3HlxZahd17v0YlVODOeQwiPHFt0QTxk6ugz oFcRaP6k6ItSeHhGbZENiJUbpyOUbS4TblFSOV/PPYyeycbvtab+xXF9VHhHrU8H thm6LgB2ViSPItbyKhgKzzwwuBUcqXqbOSrlTbanMrDWgkiiktrwPUQY5cPaXOMv TbzdP26cW7yXwljnmeyOnQbPfoJhwJVP/TK1WAY2ydMeOI/n0hw/jeQ9qzs+26yq RQkT22s7 -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:35 2026 by rpki-client