This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/SCfxhTRg7vuqifF8bQRKgajG91E.roa File: SCfxhTRg7vuqifF8bQRKgajG91E.roa (raw, json) Hash identifier: wp0+S1qlwyLRk1HvINrBgxEXYo/XnKOOpIUSgnFHiUs= Subject key identifier: 48:27:F1:85:34:60:EE:FB:AA:89:F1:7C:6D:04:4A:81:A8:C6:F7:51 Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64 Certificate serial: 019B783461E8DDC5CE7AA2C674F62C55E541 Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/SCfxhTRg7vuqifF8bQRKgajG91E.roa Signing time: Thu 01 Jan 2026 06:17:37 +0000 ROA not before: Thu 01 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210477 IP address blocks: 146.19.17.0/24 maxlen: 24 185.18.151.0/24 maxlen: 24 185.216.191.0/24 maxlen: 24 2a12:b500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:61:e8:dd:c5:ce:7a:a2:c6:74:f6:2c:55:e5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64 Validity Not Before: Jan 1 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4827f1853460eefbaa89f17c6d044a81a8c6f751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:47:95:e3:1d:e0:73:4f:69:0e:c7:3d:e0:ab: a8:3f:6d:b1:75:1f:bc:c4:44:5d:b2:ca:22:df:2c: 50:af:6b:65:36:ad:a6:cb:4b:4c:9f:7e:72:ba:cf: 5d:ea:77:37:6c:e7:d8:a8:fc:d4:0d:fb:26:0a:1d: a4:74:4f:4c:0f:c7:39:fb:67:66:a6:9c:5b:c2:e5: 12:f1:1a:45:0b:da:bb:10:9d:03:80:85:d8:b3:47: 5f:ff:d9:1b:8c:fa:dc:ed:43:ea:06:c5:13:5b:c2: d1:c1:b1:36:be:d4:7d:d3:15:d4:15:65:dc:28:00: 2f:35:ca:4d:14:37:5f:67:e7:88:9b:ca:7a:d5:09: f3:91:3f:c6:42:b7:cb:d7:3e:9e:e1:fc:f6:51:b0: 02:b2:29:0a:0d:14:11:3a:5b:4e:46:61:23:b3:b0: c4:1e:0b:93:7d:dd:a6:16:10:ef:a3:7c:ea:6c:4e: 17:19:7e:1e:3e:9c:9a:04:14:80:a2:d9:98:a1:2c: 04:c3:e9:fa:20:c1:d6:f0:54:4c:29:44:de:f8:58: 8e:b7:b8:b9:72:e9:c5:72:fb:ec:54:ba:8f:0c:2c: 71:cd:13:72:51:8b:a8:99:9b:b6:bf:c9:db:dd:5b: d4:05:68:2c:5f:aa:00:92:95:f1:96:93:e5:6b:90: 78:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:27:F1:85:34:60:EE:FB:AA:89:F1:7C:6D:04:4A:81:A8:C6:F7:51 X509v3 Authority Key Identifier: keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/SCfxhTRg7vuqifF8bQRKgajG91E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.17.0/24 185.18.151.0/24 185.216.191.0/24 IPv6: 2a12:b500::/32 Signature Algorithm: sha256WithRSAEncryption 21:8f:53:bc:14:68:53:fd:84:57:e0:0c:8c:f9:01:0c:77:f9: 0f:ac:a6:37:37:d7:cd:48:8e:02:49:1e:11:11:04:3c:91:9f: f5:29:aa:d6:31:91:2e:3d:d9:30:3d:58:d4:82:e5:14:81:f5: 54:9e:0f:c5:b8:6b:0d:60:ab:e3:1f:04:15:59:93:45:ec:55: 16:4d:ca:8f:89:91:8a:6d:f2:a7:5a:06:b0:f0:bf:83:0a:ff: 57:40:37:7e:d7:6f:1d:67:a2:29:76:e8:a9:0b:aa:1d:4e:b0: 2c:ee:e7:fe:8c:43:2c:2b:11:61:99:e1:ef:3b:66:71:3a:c8: 10:c7:d5:c7:a4:16:62:ce:e5:35:e5:35:c9:69:22:41:7e:03: b8:f3:e2:e4:ea:b4:18:06:22:c8:17:1b:a1:9b:9d:ff:70:20: 0a:c6:fc:6f:39:c9:ee:80:15:7c:7b:e5:52:d2:d9:fb:35:69: 81:05:75:e8:62:7c:e8:b6:24:9d:b4:0d:e0:d3:b3:af:4d:72: 60:7b:1f:02:fa:54:83:bb:68:65:b2:c3:d3:18:62:e1:fa:26: df:24:8e:14:03:f2:0f:12:d3:c5:b2:10:99:e3:a1:7b:c6:33: a3:f6:c3:ce:cb:d8:9f:45:82:01:fa:b6:2a:d9:c0:08:03:a8: c6:43:ba:12 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4NGHo3cXOeqLGdPYsVeVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTE4OTBjMzA1YjBmMmRhNDIwYjAxNjk3ZTNiZjIzZDQ4 NWFiNjQwHhcNMjYwMTAxMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODI3ZjE4NTM0NjBlZWZiYWE4OWYxN2M2ZDA0NGE4MWE4YzZmNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUeV4x3gc09pDsc94KuoP22xdR+8 xERdssoi3yxQr2tlNq2my0tMn35yus9d6nc3bOfYqPzUDfsmCh2kdE9MD8c5+2dm ppxbwuUS8RpFC9q7EJ0DgIXYs0df/9kbjPrc7UPqBsUTW8LRwbE2vtR90xXUFWXc KAAvNcpNFDdfZ+eIm8p61QnzkT/GQrfL1z6e4fz2UbACsikKDRQROltORmEjs7DE HguTfd2mFhDvo3zqbE4XGX4ePpyaBBSAotmYoSwEw+n6IMHW8FRMKUTe+FiOt7i5 cunFcvvsVLqPDCxxzRNyUYuomZu2v8nb3VvUBWgsX6oAkpXxlpPla5B46wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFEgn8YU0YO77qonxfG0ESoGoxvdRMB8GA1UdIwQY MBaAFL6hiQwwWw8tpCCwFpfjvyPUhatkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYWE3N2ItOWEwOS00ZjBhLWE4ODUt MzE3NmYwOTk5ZGRhLzEvU0NmeGhUUmc3dnVxaWZGOGJRUktnYWpHOTFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hYWE3N2ItOWEwOS00ZjBhLWE4ODUtMzE3NmYwOTk5ZGRh LzEvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAkhMRAwQA uRKXAwQAudi/MA0EAgACMAcDBQAqErUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhj1O8 FGhT/YRX4AyM+QEMd/kPrKY3N9fNSI4CSR4REQQ8kZ/1KarWMZEuPdkwPVjUguUU gfVUng/FuGsNYKvjHwQVWZNF7FUWTcqPiZGKbfKnWgaw8L+DCv9XQDd+128dZ6Ip duipC6odTrAs7uf+jEMsKxFhmeHvO2ZxOsgQx9XHpBZizuU15TXJaSJBfgO48+Lk 6rQYBiLIFxuhm53/cCAKxvxvOcnugBV8e+VS0tn7NWmBBXXoYnzotiSdtA3g07Ov TXJgex8C+lSDu2hlssPTGGLh+ibfJI4UA/IPEtPFshCZ46F7xjOj9sPOy9ifRYIB +rYq2cAIA6jGQ7oS -----END CERTIFICATE-----Generated at Mon Feb 9 18:38:07 2026 by rpki-client