This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/sjA1ToSGjshXQBxrZlIojPI-aMY.roa File: sjA1ToSGjshXQBxrZlIojPI-aMY.roa (raw, json) Hash identifier: Bq4V8AmtwX68FBbbDKEPAX/kpr0bLZ62b5BVlxhBFAw= Subject key identifier: B2:30:35:4E:84:86:8E:C8:57:40:1C:6B:66:52:28:8C:F2:3E:68:C6 Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f Certificate serial: 019B7C12BB8C47CE48139C270994B2A63F09 Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/sjA1ToSGjshXQBxrZlIojPI-aMY.roa Signing time: Fri 02 Jan 2026 00:19:20 +0000 ROA not before: Fri 02 Jan 2026 00:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200638 IP address blocks: 185.26.86.0/24 maxlen: 24 2a13:3640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:bb:8c:47:ce:48:13:9c:27:09:94:b2:a6:3f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f Validity Not Before: Jan 2 00:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b230354e84868ec857401c6b6652288cf23e68c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:fd:9e:48:be:3d:75:2f:8d:fe:8a:0a:34: 96:11:53:81:7f:dd:de:ca:b6:76:2a:5b:79:f8:f7: b0:9b:9e:80:bb:a3:b2:0c:e3:e4:0f:ee:80:9d:2e: 65:17:a0:d2:b2:07:59:3e:65:5d:4a:6b:27:93:8d: 81:25:21:94:7c:c6:84:07:60:3a:40:b9:60:9e:f5: 7b:ef:66:31:83:86:80:73:ff:e4:22:72:72:d8:9b: 92:3e:54:11:82:c5:41:10:9e:2d:dc:54:b7:b3:b5: 39:da:79:48:a8:65:68:d8:23:9d:e6:b7:fd:2e:8c: 28:e3:d4:f8:59:e3:bb:8e:27:28:38:fb:59:70:6a: 43:6d:89:69:e3:f8:5e:63:dc:3e:27:74:5b:c5:40: 5c:94:10:83:f3:7d:ae:7c:b5:d9:8b:10:a7:fc:07: 70:d1:ad:6b:a4:00:b4:52:1f:0c:c9:13:df:e3:64: 9b:5d:7b:45:4d:89:63:5f:e4:c4:b8:b6:c7:7d:d0: 56:96:39:81:e9:9b:b4:ec:48:fa:9d:f7:35:df:7f: e7:b0:37:4d:e1:7b:a5:f1:0c:87:76:fe:28:0f:c5: c5:b3:d0:a9:5a:60:26:24:1d:28:30:48:b1:1c:aa: e8:c9:40:77:83:df:f4:88:3f:d6:a8:6d:41:21:44: bb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:30:35:4E:84:86:8E:C8:57:40:1C:6B:66:52:28:8C:F2:3E:68:C6 X509v3 Authority Key Identifier: keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/sjA1ToSGjshXQBxrZlIojPI-aMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.26.86.0/24 IPv6: 2a13:3640::/29 Signature Algorithm: sha256WithRSAEncryption 96:55:39:08:34:ed:45:db:f7:15:e2:c1:08:88:6a:a7:e1:89: e2:19:70:74:89:ae:2c:d8:a9:82:27:d4:9d:17:12:4a:6b:07: 59:e9:37:fd:27:bc:e7:47:90:e4:cd:88:28:45:f1:28:d7:43: e0:2c:75:80:fc:ab:4a:8a:31:81:5d:21:5a:42:73:5d:c0:c5: 7c:6e:7e:2f:16:b7:b0:33:d6:d4:80:8e:c1:99:42:3f:aa:11: c3:f2:c9:2b:02:75:da:f5:ef:4c:2a:64:7a:35:ce:97:c3:5a: f5:ac:d0:1a:41:92:b3:af:1c:d1:84:a7:9d:02:b7:82:04:6e: b0:6e:ad:a3:d5:f4:16:41:23:24:c1:85:ec:88:ac:fa:ba:3e: 19:3e:15:07:34:91:ee:3f:f5:54:4f:47:af:a9:a4:b6:9e:f1: cd:68:04:80:e2:08:3e:65:38:5b:52:4f:cb:45:9c:df:bc:49: 9b:70:3d:2d:e9:18:b7:5b:f5:ab:55:64:0e:97:af:cd:ea:d7: c4:70:33:95:c9:43:c4:68:78:26:ec:32:43:f5:9c:f7:e0:b9: 7e:7e:95:ef:0a:ba:0d:1e:00:c5:e5:fd:a9:76:cc:ab:c5:2b: 13:a4:4b:41:5c:99:d1:19:24:bc:fe:ff:c9:9a:c2:9b:9f:d8: d3:98:5b:a1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EruMR85IE5wnCZSypj8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTE1ZmZlMWRiZmU3NmE4MDVmZDBkZmIyZTBjOGQ3ZTQ5 YWY1OWYwHhcNMjYwMTAyMDAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjMwMzU0ZTg0ODY4ZWM4NTc0MDFjNmI2NjUyMjg4Y2YyM2U2OGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMv9nki+PXUvjf6KCjSWEVOBf93e yrZ2Klt5+Pewm56Au6OyDOPkD+6AnS5lF6DSsgdZPmVdSmsnk42BJSGUfMaEB2A6 QLlgnvV772Yxg4aAc//kInJy2JuSPlQRgsVBEJ4t3FS3s7U52nlIqGVo2COd5rf9 Lowo49T4WeO7jicoOPtZcGpDbYlp4/heY9w+J3RbxUBclBCD832ufLXZixCn/Adw 0a1rpAC0Uh8MyRPf42SbXXtFTYljX+TEuLbHfdBWljmB6Zu07Ej6nfc133/nsDdN 4Xul8QyHdv4oD8XFs9CpWmAmJB0oMEixHKroyUB3g9/0iD/WqG1BIUS7oQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLIwNU6Eho7IV0Aca2ZSKIzyPmjGMB8GA1UdIwQY MBaAFANRX/4dv+dqgF/Q37LgyNfkmvWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAt ZDM4NDk1ZmIwOWEwLzEvc2pBMVRvU0dqc2hYUUJ4clpsSW9qUEktYU1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAtZDM4NDk1ZmIwOWEw LzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuRpWMA0E AgACMAcDBQMqEzZAMA0GCSqGSIb3DQEBCwUAA4IBAQCWVTkINO1F2/cV4sEIiGqn 4YniGXB0ia4s2KmCJ9SdFxJKawdZ6Tf9J7znR5DkzYgoRfEo10PgLHWA/KtKijGB XSFaQnNdwMV8bn4vFrewM9bUgI7BmUI/qhHD8skrAnXa9e9MKmR6Nc6Xw1r1rNAa QZKzrxzRhKedAreCBG6wbq2j1fQWQSMkwYXsiKz6uj4ZPhUHNJHuP/VUT0evqaS2 nvHNaASA4gg+ZThbUk/LRZzfvEmbcD0t6Ri3W/WrVWQOl6/N6tfEcDOVyUPEaHgm 7DJD9Zz34Ll+fpXvCroNHgDF5f2pdsyrxSsTpEtBXJnRGSS8/v/JmsKbn9jTmFuh -----END CERTIFICATE-----Generated at Tue Feb 10 02:22:43 2026 by rpki-client