This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/SiKhmBqx288_iA8YdORMHjIzhN8.roa File: SiKhmBqx288_iA8YdORMHjIzhN8.roa (raw, json) Hash identifier: lmaMDWK3PpIdhnJCYtTeNySaUk10VMAD50KNNgmgGiM= Subject key identifier: 4A:22:A1:98:1A:B1:DB:CF:3F:88:0F:18:74:E4:4C:1E:32:33:84:DF Certificate issuer: /CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb Certificate serial: 019B7DC9EF80B74A66A9130C2E5E5C919BE6 Authority key identifier: A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/SiKhmBqx288_iA8YdORMHjIzhN8.roa Signing time: Fri 02 Jan 2026 08:19:04 +0000 ROA not before: Fri 02 Jan 2026 08:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209148 IP address blocks: 85.209.184.0/22 maxlen: 22 2a09:9c40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:ef:80:b7:4a:66:a9:13:0c:2e:5e:5c:91:9b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb Validity Not Before: Jan 2 08:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a22a1981ab1dbcf3f880f1874e44c1e323384df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:eb:c6:ab:4a:1f:66:7a:8e:46:f6:9f:36: ac:44:b3:ed:45:31:dc:e4:a7:89:21:2b:5c:13:e6: d0:14:81:42:e4:68:62:8e:a3:94:29:2f:db:f6:e4: d0:f7:48:41:a5:74:1c:a8:51:3c:85:91:56:66:ad: 96:09:df:ca:26:7d:7a:84:c7:a4:cf:d6:35:ff:43: 81:86:32:7d:45:6f:49:a8:d4:ae:d9:fb:ff:3f:09: 35:48:16:c2:3c:f2:d4:28:b7:e7:1b:10:8a:f2:a5: cf:7e:94:e3:e1:36:95:7c:0d:70:29:23:9f:77:46: a3:33:1e:0c:e2:ae:20:31:2a:53:22:2f:29:7d:16: 3a:b0:cf:14:a6:ae:ac:27:f0:04:5a:bb:80:a4:64: 3d:53:29:40:1f:9f:a9:5f:d6:10:34:d8:42:2a:64: a4:3b:a2:8b:a7:ca:52:4a:c6:29:ae:b7:73:59:14: fe:6a:13:da:51:e4:a7:44:1d:a9:83:2e:64:c9:6b: 34:9e:67:a8:18:f6:0a:31:4a:ac:17:47:96:cc:6b: fb:97:d0:00:92:59:82:ea:5c:50:e7:98:f3:3a:85: 2d:ab:ff:33:f1:05:81:cf:18:59:d0:be:ee:7b:a7: 3b:13:a3:6e:1c:21:85:bd:0d:1a:fa:06:c9:95:b7: 02:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:22:A1:98:1A:B1:DB:CF:3F:88:0F:18:74:E4:4C:1E:32:33:84:DF X509v3 Authority Key Identifier: keyid:A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/SiKhmBqx288_iA8YdORMHjIzhN8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.184.0/22 IPv6: 2a09:9c40::/29 Signature Algorithm: sha256WithRSAEncryption 90:f3:4a:72:ef:f2:b8:bf:50:ff:5c:c7:83:4f:3c:b4:9b:c0: 96:e5:36:b4:ee:7c:4c:1d:6f:cc:24:4c:65:00:a5:08:7f:a8: 28:93:81:6c:a2:c8:59:28:65:fd:d6:cc:4d:62:2d:da:1f:c3: b4:80:90:95:f4:c8:40:31:38:2e:ac:a6:2b:07:f9:43:38:d1: 19:48:b6:84:54:79:49:e5:db:7b:8d:d4:8d:0a:a9:d2:c5:7e: 45:3c:63:34:5e:0f:47:0f:b6:51:ad:ad:81:60:a4:02:d9:39: f0:da:26:ef:bb:92:6d:6c:3a:04:a2:ff:be:58:63:68:6f:2f: 40:f1:3b:a9:0f:23:30:c8:7b:c7:72:e1:29:ba:b2:05:3b:6f: 4c:ce:93:a6:cf:a4:3c:a5:e7:98:60:8e:98:5b:23:a3:fc:05: 31:e5:d3:6d:2f:f5:9b:c2:04:50:33:87:3f:9c:68:c9:da:19: 48:56:33:60:a6:4c:d9:75:f9:fa:ef:cb:26:18:d6:53:30:83: 17:a1:bf:8a:6b:95:33:26:b8:41:bb:92:8d:d5:35:92:4c:c2: 09:81:25:56:aa:21:f1:ff:5a:80:a4:01:1b:e0:6b:38:00:b6: 8f:f8:25:f7:bc:12:f5:e1:61:11:ec:75:e9:04:91:6f:57:bd: 22:f6:a1:d4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9ye+At0pmqRMMLl5ckZvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Zjg2Mjc1ZGMyMWM2MWRhMGNlY2QxMjdlOTc3NGNjYWEz MmIwYmIwHhcNMjYwMTAyMDgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTIyYTE5ODFhYjFkYmNmM2Y4ODBmMTg3NGU0NGMxZTMyMzM4NGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3XrxqtKH2Z6jkb2nzasRLPtRTHc 5KeJIStcE+bQFIFC5GhijqOUKS/b9uTQ90hBpXQcqFE8hZFWZq2WCd/KJn16hMek z9Y1/0OBhjJ9RW9JqNSu2fv/Pwk1SBbCPPLUKLfnGxCK8qXPfpTj4TaVfA1wKSOf d0ajMx4M4q4gMSpTIi8pfRY6sM8Upq6sJ/AEWruApGQ9UylAH5+pX9YQNNhCKmSk O6KLp8pSSsYprrdzWRT+ahPaUeSnRB2pgy5kyWs0nmeoGPYKMUqsF0eWzGv7l9AA klmC6lxQ55jzOoUtq/8z8QWBzxhZ0L7ue6c7E6NuHCGFvQ0a+gbJlbcCyQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEoioZgasdvPP4gPGHTkTB4yM4TfMB8GA1UdIwQY MBaAFKT4YnXcIcYdoM7NEn6XdMyqMrC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBoaWRkd2h4aDJnenMwU2ZwZDB6S295c0xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YThiZjItNmNiMy00OWFlLTllMzIt ODgyOWVlNjYxYzY0LzEvU2lLaG1CcXgyODhfaUE4WWRPUk1Iakl6aE44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83YThiZjItNmNiMy00OWFlLTllMzItODgyOWVlNjYxYzY0 LzEvcFBoaWRkd2h4aDJnenMwU2ZwZDB6S295c0xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCVdG4MA0E AgACMAcDBQMqCZxAMA0GCSqGSIb3DQEBCwUAA4IBAQCQ80py7/K4v1D/XMeDTzy0 m8CW5Ta07nxMHW/MJExlAKUIf6gok4FsoshZKGX91sxNYi3aH8O0gJCV9MhAMTgu rKYrB/lDONEZSLaEVHlJ5dt7jdSNCqnSxX5FPGM0Xg9HD7ZRra2BYKQC2Tnw2ibv u5JtbDoEov++WGNoby9A8TupDyMwyHvHcuEpurIFO29MzpOmz6Q8peeYYI6YWyOj /AUx5dNtL/WbwgRQM4c/nGjJ2hlIVjNgpkzZdfn678smGNZTMIMXob+Ka5UzJrhB u5KN1TWSTMIJgSVWqiHx/1qApAEb4Gs4ALaP+CX3vBL14WER7HXpBJFvV70i9qHU -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:47 2026 by rpki-client