This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/SUsmu5Ag-4xHGcfy7I-KypJxpsc.roa File: SUsmu5Ag-4xHGcfy7I-KypJxpsc.roa (raw, json) Hash identifier: n8HW5vZsZRNckM8pkS3Nq4aPiFnPsCjT5rOGpbkWTrc= Subject key identifier: 49:4B:26:BB:90:20:FB:8C:47:19:C7:F2:EC:8F:8A:CA:92:71:A6:C7 Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e Certificate serial: 019B78A365A6AB09FDC0A275AD3E70382D4A Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/SUsmu5Ag-4xHGcfy7I-KypJxpsc.roa Signing time: Thu 01 Jan 2026 08:18:52 +0000 ROA not before: Thu 01 Jan 2026 08:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.120.172.0/24 maxlen: 24 185.120.173.0/24 maxlen: 24 185.120.174.0/24 maxlen: 24 185.120.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:65:a6:ab:09:fd:c0:a2:75:ad:3e:70:38:2d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e Validity Not Before: Jan 1 08:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=494b26bb9020fb8c4719c7f2ec8f8aca9271a6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:5d:f6:28:a4:c7:16:a5:79:52:4e:0d:83: 4e:5a:1c:7b:9a:81:0a:a2:30:83:8e:75:4c:cb:fc: fe:4d:87:75:2a:a3:fc:b8:6d:f5:e8:87:0c:f1:95: 1a:3f:5d:2f:e2:14:a8:07:68:4b:3b:0a:b9:b7:41: 6f:9c:6c:d0:d4:44:50:c2:c0:44:ea:40:1c:ad:93: 2a:95:18:b2:c2:02:a5:37:8a:b2:dd:4d:e1:79:c4: fa:3e:93:30:b9:af:e4:ac:0f:a2:bc:ef:bd:04:74: be:27:34:50:67:b7:a8:56:9b:5f:f6:13:19:6c:e4: f3:ff:62:a7:98:ab:32:ba:40:d9:0d:b4:bf:59:08: f3:fb:b2:00:de:05:e8:c8:20:6d:9f:87:1f:25:9d: 25:cb:60:90:11:85:23:2b:d9:e5:14:6a:08:6f:dc: 84:cd:75:db:56:5e:5d:85:1f:e7:a9:a9:8f:4e:89: 73:53:18:fd:0e:04:3a:cd:db:ee:1f:e8:e8:e0:6d: 5f:74:d4:53:a4:07:37:77:0f:d4:03:f5:7c:ec:82: e0:6e:a0:48:a7:7c:57:b9:40:d5:e4:f8:8c:c9:60: 65:d9:7b:95:b0:ba:d3:e1:dc:1f:11:89:c0:b5:43: 12:7b:a5:f1:89:75:b1:3b:04:be:df:49:fe:e5:92: 52:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4B:26:BB:90:20:FB:8C:47:19:C7:F2:EC:8F:8A:CA:92:71:A6:C7 X509v3 Authority Key Identifier: keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/SUsmu5Ag-4xHGcfy7I-KypJxpsc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.172.0/22 Signature Algorithm: sha256WithRSAEncryption 53:e8:4f:bf:8d:9a:15:1a:b0:84:8d:4f:0c:72:a2:c9:60:9c: 1d:d5:eb:cf:29:6e:22:d8:68:2e:84:1c:07:14:5e:31:09:7a: ea:ea:a3:54:a8:ad:04:d8:d4:5b:f2:9a:63:7a:f3:21:c2:e7: d6:3a:bf:f3:ab:8b:d6:d4:a9:8b:77:52:79:34:91:60:a9:0b: b8:35:88:72:db:3a:99:0b:5f:9e:93:62:29:8a:cb:73:37:0d: 38:96:98:6e:3f:2e:29:d0:a5:a8:dc:3f:c9:87:63:b4:21:33: 31:e1:d4:e4:07:6e:0b:1f:b1:b0:83:1a:13:16:fd:66:85:6b: 05:2c:ff:d4:7c:aa:b3:1d:1a:c6:18:21:ca:7c:38:c3:1a:01: 46:66:75:38:7d:ab:ef:2c:dc:ea:0c:64:ce:b9:74:35:04:57: 7d:03:b4:dc:1d:cf:2e:59:97:cb:d8:5d:33:9f:dc:f2:60:d2: 5f:0a:45:73:2a:4b:0a:3c:47:ee:9e:47:9d:5f:af:0f:81:d3: 3b:fa:fa:43:a0:de:ab:ee:ee:4d:3c:8e:70:0a:23:fc:3b:52: bf:f4:7a:3c:c9:1a:eb:90:44:22:2d:5d:ab:62:35:bf:16:23: 76:52:41:57:f3:6a:ba:df:24:43:36:5f:a6:37:e2:fe:e6:8d: 86:54:09:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o2Wmqwn9wKJ1rT5wOC1KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWFlNjQ2ZWEzNGFkMjY4OGFjYTJmZGQxYTZmMzM0MDM1 NjQ5NWUwHhcNMjYwMTAxMDgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTRiMjZiYjkwMjBmYjhjNDcxOWM3ZjJlYzhmOGFjYTkyNzFhNmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrBd9iikxxaleVJODYNOWhx7moEK ojCDjnVMy/z+TYd1KqP8uG316IcM8ZUaP10v4hSoB2hLOwq5t0FvnGzQ1ERQwsBE 6kAcrZMqlRiywgKlN4qy3U3hecT6PpMwua/krA+ivO+9BHS+JzRQZ7eoVptf9hMZ bOTz/2KnmKsyukDZDbS/WQjz+7IA3gXoyCBtn4cfJZ0ly2CQEYUjK9nlFGoIb9yE zXXbVl5dhR/nqamPTolzUxj9DgQ6zdvuH+jo4G1fdNRTpAc3dw/UA/V87ILgbqBI p3xXuUDV5PiMyWBl2XuVsLrT4dwfEYnAtUMSe6XxiXWxOwS+30n+5ZJSNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFElLJruQIPuMRxnH8uyPisqScabHMB8GA1UdIwQY MBaAFDRa5kbqNK0miKyi/dGm8zQDVkleMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zY2MxMzUtZjE2Ni00MmViLTgyMDMt ZjQ5MTIwYmVkNTFjLzEvU1VzbXU1QWctNHhIR2NmeTdJLUt5cEp4cHNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zY2MxMzUtZjE2Ni00MmViLTgyMDMtZjQ5MTIwYmVkNTFj LzEvTkZybVJ1bzByU2FJcktMOTBhYnpOQU5XU1Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXisMA0G CSqGSIb3DQEBCwUAA4IBAQBT6E+/jZoVGrCEjU8McqLJYJwd1evPKW4i2GguhBwH FF4xCXrq6qNUqK0E2NRb8ppjevMhwufWOr/zq4vW1KmLd1J5NJFgqQu4NYhy2zqZ C1+ek2IpistzNw04lphuPy4p0KWo3D/Jh2O0ITMx4dTkB24LH7GwgxoTFv1mhWsF LP/UfKqzHRrGGCHKfDjDGgFGZnU4favvLNzqDGTOuXQ1BFd9A7TcHc8uWZfL2F0z n9zyYNJfCkVzKksKPEfunkedX68PgdM7+vpDoN6r7u5NPI5wCiP8O1K/9Ho8yRrr kEQiLV2rYjW/FiN2UkFX82q63yRDNl+mN+L+5o2GVAlJ -----END CERTIFICATE-----Generated at Fri Jan 2 09:26:54 2026 by rpki-client