This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/sjLa1NHXjGGWoSau_mh4jEEibtw.roa File: sjLa1NHXjGGWoSau_mh4jEEibtw.roa (raw, json) Hash identifier: vRF2AhOiDnVepqEvc7nWHC8rDFbzRsetZ3BDi3ch/Uk= Subject key identifier: B2:32:DA:D4:D1:D7:8C:61:96:A1:26:AE:FE:68:78:8C:41:22:6E:DC Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 019AFEB1A264B26CF27FD2406F6375A33C03 Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/sjLa1NHXjGGWoSau_mh4jEEibtw.roa Signing time: Mon 08 Dec 2025 16:00:45 +0000 ROA not before: Mon 08 Dec 2025 16:00:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215341 IP address blocks: 185.87.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:b1:a2:64:b2:6c:f2:7f:d2:40:6f:63:75:a3:3c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Dec 8 16:00:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b232dad4d1d78c6196a126aefe68788c41226edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:be:01:f0:92:ba:8c:ae:5f:23:c8:e2:19:d9: bd:bd:2b:24:8d:e0:39:8e:d4:32:3f:85:d9:83:ff: 81:c4:0e:42:01:d9:f3:e4:4d:8b:09:39:3c:23:0b: 43:b9:f2:83:46:ae:f8:75:51:b8:ad:3d:ab:9b:2e: 13:4f:dd:84:ab:7a:64:fb:22:69:12:45:a1:dd:f4: d6:89:93:c7:d5:bb:fe:7d:0c:94:f0:dc:1b:3e:6e: 4f:06:57:6d:d7:38:ac:0d:40:45:31:dc:50:ae:a3: 78:74:fb:16:30:07:d3:43:d7:b7:4e:9d:9b:f3:33: 19:0b:fc:d3:48:a2:2c:b3:6d:aa:e8:12:a8:87:8f: cc:37:04:72:03:b9:83:82:4f:b4:a2:fe:cd:59:d6: 4f:2d:60:d0:ff:3f:ae:76:bc:ed:37:b2:28:74:b8: be:91:f4:4b:7d:c8:a4:4e:62:5b:97:ee:d3:67:5e: 78:ca:63:14:ba:11:66:03:c5:3e:d5:38:53:12:02: 04:64:52:ed:45:a4:00:b3:e2:85:cc:11:72:ad:44: 3a:72:8b:9f:8e:ba:17:98:d9:be:a3:12:d5:44:f9: 88:74:9e:94:13:46:87:67:a0:86:9e:11:e9:dc:39: e0:31:46:91:8e:20:fc:3c:2c:fa:b6:dc:5b:34:93: 21:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:32:DA:D4:D1:D7:8C:61:96:A1:26:AE:FE:68:78:8C:41:22:6E:DC X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/sjLa1NHXjGGWoSau_mh4jEEibtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.21.0/24 Signature Algorithm: sha256WithRSAEncryption 69:67:25:49:c2:66:95:51:98:35:d0:bc:9b:f8:78:5d:5c:56: 03:b9:1d:fc:c6:24:7a:8b:02:c6:79:0c:85:94:84:8e:49:13: 5c:95:15:74:aa:a4:57:f7:ab:f5:47:19:36:7d:3b:69:a2:f3: f5:34:34:85:25:19:60:c1:8a:b7:31:14:44:86:dd:18:53:ec: c3:05:ec:a3:c0:c7:3d:b9:5b:57:ab:e3:d1:db:cf:19:45:8a: 77:ff:6b:69:b8:f6:93:db:b8:c4:28:3d:a4:66:32:3e:18:71: 34:ef:ab:48:d3:01:8e:ce:61:4c:57:62:d6:cc:e5:14:08:1f: 28:02:29:42:02:e6:d3:40:f0:14:bc:c2:13:72:42:b4:66:6f: dc:15:5b:8e:d7:32:af:7d:ce:b8:95:a9:73:ea:8b:d0:8d:27: 88:ac:82:f8:6f:1d:6d:62:8d:a1:3c:8b:f7:49:d2:55:c2:21: 22:5e:e4:fe:b7:05:bc:c8:1b:62:cf:67:f0:61:11:de:8e:3e: 8f:60:9a:4e:58:5e:5e:6e:5c:b1:70:20:1b:c5:df:08:cf:71: 3c:a3:a1:59:82:3a:17:e0:96:75:50:74:44:c9:09:30:bd:2b: 1b:ca:47:02:2e:a0:bc:c1:57:b1:4b:0f:45:38:c4:21:dc:a0: d7:8c:f7:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr+saJksmzyf9JAb2N1ozwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjUxMjA4MTYwMDQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjMyZGFkNGQxZDc4YzYxOTZhMTI2YWVmZTY4Nzg4YzQxMjI2ZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L4B8JK6jK5fI8jiGdm9vSskjeA5 jtQyP4XZg/+BxA5CAdnz5E2LCTk8IwtDufKDRq74dVG4rT2rmy4TT92Eq3pk+yJp EkWh3fTWiZPH1bv+fQyU8NwbPm5PBldt1zisDUBFMdxQrqN4dPsWMAfTQ9e3Tp2b 8zMZC/zTSKIss22q6BKoh4/MNwRyA7mDgk+0ov7NWdZPLWDQ/z+udrztN7IodLi+ kfRLfcikTmJbl+7TZ154ymMUuhFmA8U+1ThTEgIEZFLtRaQAs+KFzBFyrUQ6couf jroXmNm+oxLVRPmIdJ6UE0aHZ6CGnhHp3DngMUaRjiD8PCz6ttxbNJMhnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLIy2tTR14xhlqEmrv5oeIxBIm7cMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvc2pMYTFOSFhqR0dXb1NhdV9taDRqRUVpYnR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVcVMA0G CSqGSIb3DQEBCwUAA4IBAQBpZyVJwmaVUZg10Lyb+HhdXFYDuR38xiR6iwLGeQyF lISOSRNclRV0qqRX96v1Rxk2fTtpovP1NDSFJRlgwYq3MRREht0YU+zDBeyjwMc9 uVtXq+PR288ZRYp3/2tpuPaT27jEKD2kZjI+GHE076tI0wGOzmFMV2LWzOUUCB8o AilCAubTQPAUvMITckK0Zm/cFVuO1zKvfc64lalz6ovQjSeIrIL4bx1tYo2hPIv3 SdJVwiEiXuT+twW8yBtiz2fwYRHejj6PYJpOWF5eblyxcCAbxd8Iz3E8o6FZgjoX 4JZ1UHREyQkwvSsbykcCLqC8wVexSw9FOMQh3KDXjPec -----END CERTIFICATE-----Generated at Wed Dec 10 12:49:20 2025 by rpki-client