This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/S1jpIYU2pdyOm86Ekw65pir3-bY.roa File: S1jpIYU2pdyOm86Ekw65pir3-bY.roa (raw, json) Hash identifier: n376vHxrsIXOyQdU+e+2c3li+uvHApOskctbMarm8Dg= Subject key identifier: 4B:58:E9:21:85:36:A5:DC:8E:9B:CE:84:93:0E:B9:A6:2A:F7:F9:B6 Certificate issuer: /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a Certificate serial: 019B76EB16F7063DC4204E019E90E70D4D1E Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/S1jpIYU2pdyOm86Ekw65pir3-bY.roa Signing time: Thu 01 Jan 2026 00:17:56 +0000 ROA not before: Thu 01 Jan 2026 00:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 185.97.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:16:f7:06:3d:c4:20:4e:01:9e:90:e7:0d:4d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b58e9218536a5dc8e9bce84930eb9a62af7f9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ef:3e:60:25:da:79:b2:6d:85:79:ba:dd:e5: c5:8e:00:ee:40:b3:d5:35:ae:ce:7c:25:ca:8c:28: fd:74:f8:36:0a:9d:60:67:99:e5:31:1b:84:3a:18: 86:18:bb:15:86:c8:a7:fa:ea:81:b2:2d:f7:9c:be: b7:d1:72:a9:10:18:47:c6:42:ab:d5:1e:2d:ca:22: 50:15:09:b8:76:7a:0f:d7:d3:ff:e2:0f:85:0b:b7: 37:1b:8b:35:23:ef:a3:ee:48:9a:d2:ed:00:b0:4f: 35:43:17:e2:2c:15:f5:f8:47:e4:de:49:a4:c7:4e: db:c7:06:1f:bf:be:0d:3f:bd:1d:a6:7d:12:4f:47: d4:ae:ae:b6:3d:17:30:85:3a:d8:d7:fb:bc:33:6f: 1d:f1:db:20:64:11:e8:4f:e0:39:98:c9:96:fe:c1: ff:c2:67:a8:fc:37:aa:32:28:53:e3:50:51:be:06: 46:61:9a:6c:ed:12:d9:61:d4:91:af:ed:54:73:cb: fe:3d:dc:9b:0c:23:c6:3d:ef:2f:7d:30:d8:52:e0: bf:15:b9:c1:6d:27:4c:2a:4a:55:0c:ec:cd:15:72: a9:72:85:63:2f:cc:92:24:a5:14:b3:33:75:6b:2b: 35:27:9c:a0:20:b3:f9:33:13:c2:27:98:98:fd:f9: 64:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:58:E9:21:85:36:A5:DC:8E:9B:CE:84:93:0E:B9:A6:2A:F7:F9:B6 X509v3 Authority Key Identifier: keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/S1jpIYU2pdyOm86Ekw65pir3-bY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.11.0/24 Signature Algorithm: sha256WithRSAEncryption b2:7e:dc:b3:59:52:18:d1:53:05:44:a1:3c:a8:30:2c:4c:ce: 61:7a:90:18:b6:10:bc:fd:c5:c3:34:b0:14:11:dc:44:c8:cd: 67:f8:cb:c5:0e:2b:a3:1d:8d:ef:33:42:0e:89:7b:00:dc:52: 58:40:d8:11:c1:13:d3:8c:56:32:3c:7d:7b:34:0b:e7:68:36: e1:e8:9c:9f:4e:f6:af:2f:79:6c:e7:5b:bd:39:35:ba:cb:96: 45:20:e5:76:62:32:47:bd:67:2b:b9:bc:8f:d7:bc:f5:42:99: 70:48:93:d8:f7:bd:59:16:1d:9b:11:3a:a3:a5:bd:50:56:bd: 68:4c:06:fb:df:55:56:fc:85:c9:e5:58:c4:89:a4:96:81:bf: ba:7d:91:d5:87:9a:2d:17:ca:d7:87:08:b2:d5:78:f7:1f:ad: b4:21:91:0f:55:16:6b:02:c3:59:6f:52:f9:a7:56:76:e8:f8: f6:7f:fa:cc:9f:37:00:3d:77:d2:d3:9b:19:c6:f1:dc:3d:1b: 6b:5b:4f:fa:67:77:39:ca:39:c7:4c:ce:48:67:1a:cb:d0:3c: 0b:39:a4:26:7c:98:fd:d7:a0:18:0d:7f:30:a6:6a:9d:e8:47: 14:92:3f:8e:00:0f:8b:ec:ed:dc:7a:62:07:a6:9e:0d:f2:f4: bc:9b:72:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xb3Bj3EIE4BnpDnDU0eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMDM3NGQ3MWJjNTdkYjk2ZGMzOTNlOTFmZWJiOWU5ZDU5 ZmVmOWEwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjU4ZTkyMTg1MzZhNWRjOGU5YmNlODQ5MzBlYjlhNjJhZjdmOWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye8+YCXaebJthXm63eXFjgDuQLPV Na7OfCXKjCj9dPg2Cp1gZ5nlMRuEOhiGGLsVhsin+uqBsi33nL630XKpEBhHxkKr 1R4tyiJQFQm4dnoP19P/4g+FC7c3G4s1I++j7kia0u0AsE81QxfiLBX1+Efk3kmk x07bxwYfv74NP70dpn0ST0fUrq62PRcwhTrY1/u8M28d8dsgZBHoT+A5mMmW/sH/ wmeo/DeqMihT41BRvgZGYZps7RLZYdSRr+1Uc8v+PdybDCPGPe8vfTDYUuC/FbnB bSdMKkpVDOzNFXKpcoVjL8ySJKUUszN1ays1J5ygILP5MxPCJ5iY/flkGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEtY6SGFNqXcjpvOhJMOuaYq9/m2MB8GA1UdIwQY MBaAFJ4DdNcbxX25bcOT6R/ruenVn++aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdOMDF4dkZmYmx0dzVQcEgtdTU2ZFdmNzVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jNDNhNzUtYTMyNi00YzZkLTg3Y2Et ODE3ZDg0ZTUzZDUzLzEvUzFqcElZVTJwZHlPbTg2RWt3NjVwaXIzLWJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jNDNhNzUtYTMyNi00YzZkLTg3Y2EtODE3ZDg0ZTUzZDUz LzEvbmdOMDF4dkZmYmx0dzVQcEgtdTU2ZFdmNzVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWELMA0G CSqGSIb3DQEBCwUAA4IBAQCyftyzWVIY0VMFRKE8qDAsTM5hepAYthC8/cXDNLAU EdxEyM1n+MvFDiujHY3vM0IOiXsA3FJYQNgRwRPTjFYyPH17NAvnaDbh6JyfTvav L3ls51u9OTW6y5ZFIOV2YjJHvWcrubyP17z1QplwSJPY971ZFh2bETqjpb1QVr1o TAb731VW/IXJ5VjEiaSWgb+6fZHVh5otF8rXhwiy1Xj3H620IZEPVRZrAsNZb1L5 p1Z26Pj2f/rMnzcAPXfS05sZxvHcPRtrW0/6Z3c5yjnHTM5IZxrL0DwLOaQmfJj9 16AYDX8wpmqd6EcUkj+OAA+L7O3cemIHpp4N8vS8m3LX -----END CERTIFICATE-----Generated at Sat Jan 3 01:33:22 2026 by rpki-client