This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/SgcLu_J57ri9QdS7r-Fpax5MJGA.roa File: SgcLu_J57ri9QdS7r-Fpax5MJGA.roa (raw, json) Hash identifier: MXNO285ADhSaZBi+/JYimjCvsKM2wa6LiEeUdjYvfSw= Subject key identifier: 4A:07:0B:BB:F2:79:EE:B8:BD:41:D4:BB:AF:E1:69:6B:1E:4C:24:60 Certificate issuer: /CN=554adb72b82ecfafc5705e25febcab5c82d76ee6 Certificate serial: 019B214A336CE54242D1D06B7E9E53E1307B Authority key identifier: 55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/SgcLu_J57ri9QdS7r-Fpax5MJGA.roa Signing time: Mon 15 Dec 2025 09:14:29 +0000 ROA not before: Mon 15 Dec 2025 09:14:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16297 IP address blocks: 185.100.236.0/22 maxlen: 22 217.18.96.0/19 maxlen: 19 217.118.0.0/20 maxlen: 20 217.118.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:4a:33:6c:e5:42:42:d1:d0:6b:7e:9e:53:e1:30:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=554adb72b82ecfafc5705e25febcab5c82d76ee6 Validity Not Before: Dec 15 09:14:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4a070bbbf279eeb8bd41d4bbafe1696b1e4c2460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:b0:17:de:cd:1f:62:7f:84:b0:21:dc:9f: b3:39:6c:15:72:a3:af:f9:8b:88:50:cc:f4:b6:b6: 95:a2:a6:09:06:c1:e0:18:c7:35:d5:d9:60:18:60: 2a:8a:19:cb:f6:b4:02:18:a9:d1:d5:8e:89:b3:96: fe:ef:b7:86:ad:44:67:35:b5:82:3f:13:75:68:8e: 35:16:45:80:36:bb:98:f7:15:20:6c:04:18:0e:72: 5b:df:24:ba:e7:5b:96:59:61:b4:04:6c:49:2d:c4: 69:d0:78:51:ce:fd:b3:02:84:d1:48:89:ad:dd:d8: 12:66:b8:bc:7d:ea:d0:1d:2d:ce:72:3a:f6:14:85: cb:fc:2e:de:70:19:21:e2:85:f7:dc:8e:5d:74:97: 4b:a5:5c:7c:d3:eb:5d:6d:97:1d:12:3d:b9:90:a5: 9f:83:41:e3:85:a2:85:c4:59:11:e2:e8:49:eb:24: 81:f9:ce:3c:6c:4f:b5:c9:7c:7a:63:af:d0:a8:b5: e5:c1:45:43:f7:08:a7:c7:df:e1:6d:dc:e9:61:f3: e9:fc:2e:dc:a9:6c:db:7e:53:a6:e6:50:a3:ab:53: e4:ab:f0:af:91:b4:c7:1b:cd:04:b5:be:77:44:48: 47:d4:c0:49:7e:a1:0c:67:66:b6:0a:62:c8:75:65: 1c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:07:0B:BB:F2:79:EE:B8:BD:41:D4:BB:AF:E1:69:6B:1E:4C:24:60 X509v3 Authority Key Identifier: keyid:55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/SgcLu_J57ri9QdS7r-Fpax5MJGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.236.0/22 217.18.96.0/19 217.118.0.0/20 Signature Algorithm: sha256WithRSAEncryption 81:96:f6:ce:ee:ae:68:e2:45:a6:07:fe:5b:3d:c9:41:c4:71: c6:9e:3b:29:89:01:e3:36:54:2d:c8:0a:49:b9:a7:cb:92:a4: 4b:94:7d:82:36:10:cf:da:78:5a:4e:40:1d:b8:0c:f8:d1:03: 2e:c3:f3:65:d3:54:1d:8b:fd:c9:3e:2f:83:fc:df:91:46:ec: 63:6b:de:e2:70:ef:d3:13:77:07:e5:25:04:ee:45:69:2c:7b: cf:b6:0e:a3:38:7c:f3:29:ec:d2:94:92:8a:63:68:87:d9:4e: 47:d2:1b:99:f8:3f:41:84:39:33:c2:93:5a:ef:80:f3:75:a6: 72:f3:a3:8b:2d:9a:11:ff:7f:b7:60:38:26:31:4d:71:01:5b: ad:8f:f0:cb:88:45:fa:71:ba:c0:2f:3e:6a:5f:12:b7:c2:03: 15:c4:b5:cc:2b:4b:69:31:f3:4d:1a:87:5b:a1:c9:5e:59:28: 42:c3:e1:f7:cd:7e:69:bb:93:8d:6d:a2:fb:4a:49:6c:1e:aa: 7b:20:a1:f8:0e:56:0e:1c:4a:19:29:0d:54:96:42:17:0b:3e: 2f:e3:b2:0c:ac:f8:b7:04:81:3b:70:26:37:7e:11:7b:b2:4e: 97:b7:37:28:2a:a3:3c:85:19:3f:59:9c:ee:e6:cd:e0:1b:a3: 32:0f:0c:71 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZshSjNs5UJC0dBrfp5T4TB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NGFkYjcyYjgyZWNmYWZjNTcwNWUyNWZlYmNhYjVjODJk NzZlZTYwHhcNMjUxMjE1MDkxNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTA3MGJiYmYyNzllZWI4YmQ0MWQ0YmJhZmUxNjk2YjFlNGMyNDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzGwF97NH2J/hLAh3J+zOWwVcqOv +YuIUMz0traVoqYJBsHgGMc11dlgGGAqihnL9rQCGKnR1Y6Js5b+77eGrURnNbWC PxN1aI41FkWANruY9xUgbAQYDnJb3yS651uWWWG0BGxJLcRp0HhRzv2zAoTRSImt 3dgSZri8ferQHS3Ocjr2FIXL/C7ecBkh4oX33I5ddJdLpVx80+tdbZcdEj25kKWf g0HjhaKFxFkR4uhJ6ySB+c48bE+1yXx6Y6/QqLXlwUVD9winx9/hbdzpYfPp/C7c qWzbflOm5lCjq1Pkq/CvkbTHG80Etb53REhH1MBJfqEMZ2a2CmLIdWUcnQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEoHC7vyee64vUHUu6/haWseTCRgMB8GA1UdIwQY MBaAFFVK23K4Ls+vxXBeJf68q1yC127mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlVyYmNyZ3V6Nl9GY0Y0bF9yeXJYSUxYYnVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi81ZTM4OTUtYWU5NS00M2UyLWI3YTEt NzU4NjNmNDM0NzZhLzEvU2djTHVfSjU3cmk5UWRTN3ItRnBheDVNSkdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi81ZTM4OTUtYWU5NS00M2UyLWI3YTEtNzU4NjNmNDM0NzZh LzEvVlVyYmNyZ3V6Nl9GY0Y0bF9yeXJYSUxYYnVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuWTsAwQF 2RJgAwQE2XYAMA0GCSqGSIb3DQEBCwUAA4IBAQCBlvbO7q5o4kWmB/5bPclBxHHG njspiQHjNlQtyApJuafLkqRLlH2CNhDP2nhaTkAduAz40QMuw/Nl01Qdi/3JPi+D /N+RRuxja97icO/TE3cH5SUE7kVpLHvPtg6jOHzzKezSlJKKY2iH2U5H0huZ+D9B hDkzwpNa74DzdaZy86OLLZoR/3+3YDgmMU1xAVutj/DLiEX6cbrALz5qXxK3wgMV xLXMK0tpMfNNGodbocleWShCw+H3zX5pu5ONbaL7SklsHqp7IKH4DlYOHEoZKQ1U lkIXCz4v47IMrPi3BIE7cCY3fhF7sk6XtzcoKqM8hRk/WZzu5s3gG6MyDwxx -----END CERTIFICATE-----Generated at Sat Dec 20 15:58:39 2025 by rpki-client