This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/sdkmYCTpxXVubPzt0Vusqo9p2cM.roa File: sdkmYCTpxXVubPzt0Vusqo9p2cM.roa (raw, json) Hash identifier: cR5IHtVLgA9zfYhE/lZgYLsMdhZ5hl2OfHWB5ot/8mQ= Subject key identifier: B1:D9:26:60:24:E9:C5:75:6E:6C:FC:ED:D1:5B:AC:AA:8F:69:D9:C3 Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba Certificate serial: 019B7F1588124A8A8800F8573FAD73B49176 Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/sdkmYCTpxXVubPzt0Vusqo9p2cM.roa Signing time: Fri 02 Jan 2026 14:21:16 +0000 ROA not before: Fri 02 Jan 2026 14:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201080 IP address blocks: 37.60.155.0/24 maxlen: 24 37.60.156.0/23 maxlen: 24 37.60.157.0/24 maxlen: 24 37.60.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:88:12:4a:8a:88:00:f8:57:3f:ad:73:b4:91:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba Validity Not Before: Jan 2 14:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1d9266024e9c5756e6cfcedd15bacaa8f69d9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:cd:7a:00:22:27:46:b1:16:6f:0b:78:cc: 7a:3b:e2:c0:9e:71:b6:eb:45:0b:70:cb:0b:fa:75: 8e:e3:24:60:90:22:33:15:4b:88:be:a0:cc:7e:fd: b0:ec:2d:6c:a1:aa:22:d8:07:b1:3a:81:bf:fd:ea: 37:55:dd:63:a5:51:6f:52:48:29:eb:67:f3:fd:7e: 4d:35:ea:74:2b:28:f2:bd:d4:ed:20:60:2b:cd:3c: 52:02:bf:ee:4c:84:3e:b3:ca:be:88:ac:e2:f1:06: 83:77:e7:a3:3b:75:79:8c:c7:5f:ef:87:7d:8f:72: 61:bc:79:60:89:05:cc:33:2f:39:30:61:ed:30:fb: 4e:e4:5f:4a:ee:a3:88:7e:9d:6c:2a:6c:9e:9e:d7: 28:66:cd:51:9a:11:67:b6:2e:31:30:ec:41:25:f0: 85:17:5d:8c:cc:dd:cf:ec:50:55:77:e9:71:11:c1: 43:db:2a:7c:54:5b:a7:c0:33:10:46:68:16:3e:c7: f8:0c:5d:21:14:03:f6:be:db:06:9d:25:c9:0c:75: 5a:98:ad:8d:2e:f0:c7:5d:98:8d:48:8e:07:8a:a1: f4:c7:85:65:d8:42:21:38:6d:88:22:32:60:92:1e: 38:90:6f:41:ba:8e:79:0f:f6:48:a1:3b:c2:5a:e6: 49:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D9:26:60:24:E9:C5:75:6E:6C:FC:ED:D1:5B:AC:AA:8F:69:D9:C3 X509v3 Authority Key Identifier: keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/sdkmYCTpxXVubPzt0Vusqo9p2cM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.60.155.0-37.60.158.255 Signature Algorithm: sha256WithRSAEncryption 77:25:29:9b:51:3d:84:ee:bf:38:da:cb:e7:2c:d3:a1:6a:c8: 1f:01:76:d1:1c:36:89:9d:ba:bd:9d:ab:c3:ea:a8:99:a5:9e: da:1b:80:4a:37:93:60:1f:c2:f6:9c:e4:89:fc:be:4b:e4:a8: ad:4c:f8:b5:18:30:10:b8:21:05:40:e0:80:90:13:4a:18:3c: f8:e3:80:cb:57:dd:37:5b:19:9b:2b:e2:eb:25:f7:9c:d6:91: cc:40:2f:86:5e:3e:a6:5e:86:9c:c1:0c:a0:f8:89:ec:6c:60: 67:da:00:c9:34:43:6b:f6:fe:45:1c:65:74:34:58:85:ea:0e: bf:a1:21:8e:99:ff:74:eb:c4:54:3f:5d:cf:ca:eb:7d:9d:25: c9:f8:6b:04:bc:f9:4d:3b:48:60:0d:88:bb:b6:ee:fb:20:9b: 2a:4d:12:09:12:5d:b7:1e:c5:73:cc:8e:72:9e:73:4d:18:60: af:0a:6b:dd:b7:91:e0:88:6e:2f:d3:c1:b6:1c:a5:89:2f:43: dd:ed:15:0c:76:c9:5d:88:b3:79:24:92:5c:84:47:3c:5b:bb: 61:7d:d2:92:95:fe:70:45:8a:5e:54:db:5b:79:32:b6:b2:f6: 61:3f:7c:20:91:6d:8b:20:98:fe:2e:a0:8f:b4:92:cb:0d:4e: 9b:7b:5e:85 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/FYgSSoqIAPhXP61ztJF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YTMyZTQ0NWMyNGRlZDliODUyMTJkNDc5Yjg4MDA4MTY1 ZWJkYmEwHhcNMjYwMTAyMTQyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWQ5MjY2MDI0ZTljNTc1NmU2Y2ZjZWRkMTViYWNhYThmNjlkOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywPNegAiJ0axFm8LeMx6O+LAnnG2 60ULcMsL+nWO4yRgkCIzFUuIvqDMfv2w7C1soaoi2AexOoG//eo3Vd1jpVFvUkgp 62fz/X5NNep0KyjyvdTtIGArzTxSAr/uTIQ+s8q+iKzi8QaDd+ejO3V5jMdf74d9 j3JhvHlgiQXMMy85MGHtMPtO5F9K7qOIfp1sKmyentcoZs1RmhFnti4xMOxBJfCF F12MzN3P7FBVd+lxEcFD2yp8VFunwDMQRmgWPsf4DF0hFAP2vtsGnSXJDHVamK2N LvDHXZiNSI4HiqH0x4Vl2EIhOG2IIjJgkh44kG9Buo55D/ZIoTvCWuZJwQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLHZJmAk6cV1bmz87dFbrKqPadnDMB8GA1UdIwQY MBaAFJSjLkRcJN7ZuFIS1Hm4gAgWXr26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEtNdVJGd2szdG00VWhMVWViaUFDQlpldmJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mODkxYzQtMTlhYy00MzdjLWI3ODIt ZTE0ODdhNTRjMWU1LzEvc2RrbVlDVHB4WFZ1YlB6dDBWdXNxbzlwMmNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mODkxYzQtMTlhYy00MzdjLWI3ODItZTE0ODdhNTRjMWU1 LzEvbEtNdVJGd2szdG00VWhMVWViaUFDQlpldmJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAlPJsD BAAlPJ4wDQYJKoZIhvcNAQELBQADggEBAHclKZtRPYTuvzjay+cs06FqyB8BdtEc Nomdur2dq8PqqJmlntobgEo3k2Afwvac5In8vkvkqK1M+LUYMBC4IQVA4ICQE0oY PPjjgMtX3TdbGZsr4usl95zWkcxAL4ZePqZehpzBDKD4iexsYGfaAMk0Q2v2/kUc ZXQ0WIXqDr+hIY6Z/3TrxFQ/Xc/K632dJcn4awS8+U07SGANiLu27vsgmypNEgkS XbcexXPMjnKec00YYK8Ka923keCIbi/TwbYcpYkvQ93tFQx2yV2Is3kkklyERzxb u2F90pKV/nBFil5U21t5Mray9mE/fCCRbYsgmP4uoI+0kssNTpt7XoU= -----END CERTIFICATE-----Generated at Tue Feb 10 08:38:26 2026 by rpki-client