This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/SaVR4Q7HaKuonygX4BiiyKQj2f8.roa File: SaVR4Q7HaKuonygX4BiiyKQj2f8.roa (raw, json) Hash identifier: YedsxVbqbTDUov0rCr6YDh/qHzCnuBf/6uUWas1ywUE= Subject key identifier: 49:A5:51:E1:0E:C7:68:AB:A8:9F:28:17:E0:18:A2:C8:A4:23:D9:FF Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B35FC8ED0901BC45C2C6FD1F6F3C93B Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/SaVR4Q7HaKuonygX4BiiyKQj2f8.roa Signing time: Thu 01 Jan 2026 20:18:14 +0000 ROA not before: Thu 01 Jan 2026 20:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3223 IP address blocks: 85.92.115.0/24 maxlen: 24 160.238.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:fc:8e:d0:90:1b:c4:5c:2c:6f:d1:f6:f3:c9:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49a551e10ec768aba89f2817e018a2c8a423d9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:15:a9:ed:b0:33:32:46:e8:37:9e:73:b2: c7:fd:d7:fc:ac:70:77:ed:66:7d:e4:63:f4:fa:4e: 72:43:e6:6c:f5:df:c8:2f:cb:c7:8c:47:72:8c:64: 52:72:a5:c3:3c:62:a7:cf:fa:f4:85:68:41:fe:16: 6f:32:54:38:69:b2:2b:86:2f:a8:5e:40:c9:45:8e: a2:fa:45:03:09:3b:04:c4:6e:f7:21:f0:7d:cc:af: 19:27:a6:42:15:d7:be:e9:07:fb:e4:8c:e6:43:3a: 85:f2:8e:bb:84:08:31:0b:5b:6e:49:c8:45:2a:3d: 62:b2:77:b7:2e:90:3a:cf:c8:a2:e1:d8:89:1f:8b: 5b:29:ae:7d:16:2f:65:b6:27:e7:02:29:14:87:e2: b8:5d:05:fe:0e:b4:2a:e2:e7:ae:52:fd:55:bf:97: cd:45:79:fd:ee:18:1b:94:d3:8b:02:ff:9e:66:26: 51:ac:10:a8:ea:f2:56:83:2d:1a:82:3e:b3:51:3d: b6:31:9c:76:ff:02:c0:14:d4:00:ac:e8:52:2c:2d: d9:b1:b7:6d:a0:9d:89:b7:3e:64:2c:f7:56:a5:94: af:74:2d:4a:b9:a7:a6:f5:65:c7:bc:c9:9c:25:bc: 9e:5a:48:51:6e:7b:db:53:b9:62:db:26:12:ab:cd: f5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A5:51:E1:0E:C7:68:AB:A8:9F:28:17:E0:18:A2:C8:A4:23:D9:FF X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/SaVR4Q7HaKuonygX4BiiyKQj2f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.92.115.0/24 160.238.66.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:c7:3b:c0:8a:e1:48:a7:87:15:f2:e1:2f:25:00:ee:39:ac: 80:da:26:eb:2b:4e:02:40:40:92:2e:f9:5f:0d:b1:fa:0e:22: ab:3e:eb:14:f2:ba:a6:d5:99:99:21:07:e3:da:88:29:08:1c: 79:a5:b4:1b:29:14:e8:c1:af:ae:14:71:8d:fc:dc:f7:1e:e4: 74:dd:eb:99:eb:b9:0a:b3:a8:da:71:f2:1b:d2:43:71:85:b0: 55:db:78:33:ec:e5:0d:fd:2d:1b:73:4f:ff:90:7a:29:87:db: c8:37:89:a5:61:72:30:7f:48:4c:1e:dc:7d:0a:89:1f:f4:eb: c5:39:d3:7e:0e:ab:6f:90:1e:7b:60:c3:c8:86:1f:21:ee:ab: 72:79:d1:ab:b0:e3:cc:a2:3a:0e:64:d1:a1:e0:e3:73:01:fa: 95:b6:0d:2b:10:ac:3e:01:57:af:13:34:a8:3e:b6:0b:aa:f9: 68:7a:64:0c:22:11:4b:e4:b0:22:bc:07:87:27:25:5f:8d:e1: 22:d0:b4:0e:a7:5a:91:82:b0:a1:83:e3:b4:14:20:8e:fb:95: 57:96:4a:48:1f:97:da:c4:c6:e0:c2:2f:be:1a:a3:71:0f:72: da:3b:b2:cd:af:21:18:db:4d:6d:24:7c:bf:71:b6:6a:7f:40: d3:04:fc:26 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NfyO0JAbxFwsb9H288k7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWE1NTFlMTBlYzc2OGFiYTg5ZjI4MTdlMDE4YTJjOGE0MjNkOWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEgVqe2wMzJG6Deec7LH/df8rHB3 7WZ95GP0+k5yQ+Zs9d/IL8vHjEdyjGRScqXDPGKnz/r0hWhB/hZvMlQ4abIrhi+o XkDJRY6i+kUDCTsExG73IfB9zK8ZJ6ZCFde+6Qf75IzmQzqF8o67hAgxC1tuSchF Kj1isne3LpA6z8ii4diJH4tbKa59Fi9ltifnAikUh+K4XQX+DrQq4ueuUv1Vv5fN RXn97hgblNOLAv+eZiZRrBCo6vJWgy0agj6zUT22MZx2/wLAFNQArOhSLC3Zsbdt oJ2Jtz5kLPdWpZSvdC1Kuaem9WXHvMmcJbyeWkhRbnvbU7li2yYSq831zwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEmlUeEOx2irqJ8oF+AYosikI9n/MB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvU2FWUjRRN0hhS3VvbnlnWDRCaWl5S1FqMmY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVVxzAwQA oO5CMA0GCSqGSIb3DQEBCwUAA4IBAQA+xzvAiuFIp4cV8uEvJQDuOayA2ibrK04C QECSLvlfDbH6DiKrPusU8rqm1ZmZIQfj2ogpCBx5pbQbKRTowa+uFHGN/Nz3HuR0 3euZ67kKs6jacfIb0kNxhbBV23gz7OUN/S0bc0//kHoph9vIN4mlYXIwf0hMHtx9 Cokf9OvFOdN+DqtvkB57YMPIhh8h7qtyedGrsOPMojoOZNGh4ONzAfqVtg0rEKw+ AVevEzSoPrYLqvloemQMIhFL5LAivAeHJyVfjeEi0LQOp1qRgrChg+O0FCCO+5VX lkpIH5faxMbgwi++GqNxD3LaO7LNryEY201tJHy/cbZqf0DTBPwm -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:05 2026 by rpki-client