This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/sf51NOhxVRdedJBM3Z0cnGoghkQ.roa File: sf51NOhxVRdedJBM3Z0cnGoghkQ.roa (raw, json) Hash identifier: LN9NTe23NXKUtbp6+7QIyRE2B1TaB0xN6+rtM8kCrNA= Subject key identifier: B1:FE:75:34:E8:71:55:17:5E:74:90:4C:DD:9D:1C:9C:6A:20:86:44 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 019B78A2DE48A29216C0A578A7145A7B9F25 Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/sf51NOhxVRdedJBM3Z0cnGoghkQ.roa Signing time: Thu 01 Jan 2026 08:18:18 +0000 ROA not before: Thu 01 Jan 2026 08:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3758 IP address blocks: 45.86.188.0/23 maxlen: 24 80.94.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:de:48:a2:92:16:c0:a5:78:a7:14:5a:7b:9f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Jan 1 08:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1fe7534e87155175e74904cdd9d1c9c6a208644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:78:64:e6:72:2e:f6:be:55:cc:c3:df:6f:94: 7a:d4:cf:6e:41:1d:9b:80:57:d2:33:b6:2e:19:31: 5c:bb:fa:28:c9:9e:65:d9:ee:8a:0b:11:6b:68:65: 80:bc:f9:51:df:28:ce:62:d0:8a:f9:12:85:21:24: 21:d8:de:4d:62:b5:45:a7:9e:57:17:6c:01:08:32: 6b:df:d2:59:59:1e:85:77:48:3b:f1:56:24:35:b1: f1:37:bd:ca:28:f6:83:11:18:c9:50:c8:01:de:da: 09:1a:0e:42:9e:12:b9:83:78:c4:9c:1e:b8:53:5b: ad:b3:67:2d:36:c0:a5:a6:61:11:f1:b2:fa:40:68: be:6d:8d:5e:e0:74:59:dc:53:fd:09:2a:2a:77:31: b0:1c:7a:ce:ff:25:06:55:0a:76:cf:c6:74:ea:65: e9:62:28:ed:9f:2c:00:fa:f1:83:cd:0a:32:27:5a: 12:a9:b1:bd:47:a5:73:46:c9:69:0e:8c:ba:60:93: 1c:98:a4:f0:15:a4:a6:e4:51:1b:68:da:0a:4e:8b: 49:57:4a:31:e6:2c:c4:12:6d:9b:69:4c:8d:77:86: 77:1a:e9:c0:1f:74:53:89:61:bb:3d:87:6a:02:49: 21:61:a2:73:a8:5f:fb:92:09:6f:4d:34:a2:77:16: e5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FE:75:34:E8:71:55:17:5E:74:90:4C:DD:9D:1C:9C:6A:20:86:44 X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/sf51NOhxVRdedJBM3Z0cnGoghkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.188.0/23 80.94.89.0/24 Signature Algorithm: sha256WithRSAEncryption 60:8a:6a:f6:cb:5c:92:ae:29:20:fd:18:0d:e2:41:66:d7:04: 65:79:bc:ce:be:68:b8:90:0b:44:9d:85:41:8e:e1:16:11:15: fe:c4:24:06:15:bd:53:e5:70:a6:3a:35:5b:4a:6d:dd:a8:69: 18:14:20:65:b7:c7:06:59:db:5a:5b:15:98:d8:f0:a7:49:71: 9c:73:2e:94:03:db:59:8f:32:74:5b:97:ce:7e:67:9f:4d:6c: 75:ff:8a:08:79:2d:53:e0:1c:8b:27:5e:fa:14:49:41:6a:aa: 2b:15:34:11:11:34:72:be:c5:ac:e4:e4:eb:93:81:fc:ab:96: 5a:65:2f:08:53:43:ce:9a:30:aa:62:f2:b1:05:f2:58:f4:da: cb:44:d5:bd:25:a5:77:e4:50:0a:72:64:57:05:b6:95:70:9e: 74:91:ee:8e:30:95:6d:9d:c9:48:87:54:02:41:15:99:cc:39: 18:7c:b9:8c:04:8d:76:9f:d3:df:38:52:92:65:3d:be:69:66: 7d:c8:a8:59:62:dd:00:a1:bc:40:66:fd:ed:00:ad:c2:64:d9: 2c:b6:c9:bb:ae:7e:98:af:d1:9f:50:8d:89:b3:ea:ac:a4:e7: f6:18:8d:69:e3:a1:fb:da:be:97:f6:03:b8:9b:db:c9:7f:a7: 6d:de:fc:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ot5IopIWwKV4pxRae58lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjYwMTAxMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWZlNzUzNGU4NzE1NTE3NWU3NDkwNGNkZDlkMWM5YzZhMjA4NjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Xhk5nIu9r5VzMPfb5R61M9uQR2b gFfSM7YuGTFcu/ooyZ5l2e6KCxFraGWAvPlR3yjOYtCK+RKFISQh2N5NYrVFp55X F2wBCDJr39JZWR6Fd0g78VYkNbHxN73KKPaDERjJUMgB3toJGg5CnhK5g3jEnB64 U1uts2ctNsClpmER8bL6QGi+bY1e4HRZ3FP9CSoqdzGwHHrO/yUGVQp2z8Z06mXp YijtnywA+vGDzQoyJ1oSqbG9R6VzRslpDoy6YJMcmKTwFaSm5FEbaNoKTotJV0ox 5izEEm2baUyNd4Z3GunAH3RTiWG7PYdqAkkhYaJzqF/7kglvTTSidxblGwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLH+dTTocVUXXnSQTN2dHJxqIIZEMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvc2Y1MU5PaHhWUmRlZEpCTTNaMGNuR29naGtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLVa8AwQA UF5ZMA0GCSqGSIb3DQEBCwUAA4IBAQBgimr2y1ySrikg/RgN4kFm1wRlebzOvmi4 kAtEnYVBjuEWERX+xCQGFb1T5XCmOjVbSm3dqGkYFCBlt8cGWdtaWxWY2PCnSXGc cy6UA9tZjzJ0W5fOfmefTWx1/4oIeS1T4ByLJ176FElBaqorFTQRETRyvsWs5OTr k4H8q5ZaZS8IU0POmjCqYvKxBfJY9NrLRNW9JaV35FAKcmRXBbaVcJ50ke6OMJVt nclIh1QCQRWZzDkYfLmMBI12n9PfOFKSZT2+aWZ9yKhZYt0AobxAZv3tAK3CZNks tsm7rn6Yr9GfUI2Js+qspOf2GI1p46H72r6X9gO4m9vJf6dt3vz4 -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:12 2026 by rpki-client