This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/SX294m--1vDxMY6Pvv6-ci7dNJ4.roa File: SX294m--1vDxMY6Pvv6-ci7dNJ4.roa (raw, json) Hash identifier: bzsnnZDkBTJaiqPd5qwvFscE5qs3E0+zYHYP17Yj7CA= Subject key identifier: 49:7D:BD:E2:6F:BE:D6:F0:F1:31:8E:8F:BE:FE:BE:72:2E:DD:34:9E Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Certificate serial: 019B78A261CCABB30D1CC5A39D204BDBE2DB Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/SX294m--1vDxMY6Pvv6-ci7dNJ4.roa Signing time: Thu 01 Jan 2026 08:17:46 +0000 ROA not before: Thu 01 Jan 2026 08:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 194.33.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:61:cc:ab:b3:0d:1c:c5:a3:9d:20:4b:db:e2:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Validity Not Before: Jan 1 08:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=497dbde26fbed6f0f1318e8fbefebe722edd349e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:17:d4:f7:20:a7:68:ce:4e:64:73:9a:e6: 88:10:a3:91:b6:92:a2:d6:04:d2:7a:73:44:b3:ea: e3:17:13:eb:5a:db:86:eb:b2:95:ca:c9:37:ce:ce: bd:80:26:df:51:cc:c9:e7:16:4f:c3:5c:47:79:47: 62:92:47:40:40:4f:33:2e:67:13:56:79:b0:f9:0c: d8:eb:e6:d3:ee:4f:c5:df:51:98:31:af:35:d7:75: 3a:7b:d0:cf:d4:5d:46:c8:c7:b2:bb:e2:91:8e:e1: 3d:02:a5:9b:51:b0:7b:1f:49:33:90:84:13:a6:23: f7:1c:70:bb:a3:2a:ae:b3:6b:7f:0d:f0:ab:c3:91: e3:db:60:30:9c:10:53:d6:ad:93:98:e7:2a:42:d8: bc:a0:95:3f:12:1c:c1:54:34:f6:5f:6f:f2:84:24: 4d:b4:8a:df:da:21:94:69:68:cf:04:f0:8f:b7:1f: 6d:61:f0:bb:46:6f:65:71:33:43:be:b4:0b:38:a9: f1:5d:ff:91:e6:f4:34:c5:b4:9e:01:56:f9:69:16: 94:b9:2b:57:4c:9c:24:1c:0a:af:e6:34:23:fa:7c: f1:eb:8a:74:fc:d8:54:b9:e9:43:58:ad:2e:ab:9b: 46:e7:aa:b5:62:d8:32:e2:2a:06:da:3d:28:2f:1a: ba:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7D:BD:E2:6F:BE:D6:F0:F1:31:8E:8F:BE:FE:BE:72:2E:DD:34:9E X509v3 Authority Key Identifier: keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/SX294m--1vDxMY6Pvv6-ci7dNJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.59.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:3e:c7:7a:c5:3b:49:c8:1f:d9:66:d0:ce:11:01:4a:b5:40: 25:d9:41:9f:e1:43:03:58:35:76:95:41:f4:e8:af:b5:90:f7: 14:95:a3:db:75:ef:51:56:dd:dc:0e:fa:fa:f6:79:e0:24:be: 74:05:56:46:9a:ae:24:eb:6d:9a:62:ea:e9:5d:d5:78:12:29: 32:8c:76:5e:54:7f:3d:ed:fa:54:5c:c6:7a:b2:28:04:7e:65: 75:e9:eb:17:90:8b:39:39:35:68:4d:d2:ae:91:07:4f:52:ef: 6e:78:53:22:ed:d9:c4:1d:cd:b3:04:a2:f6:47:1d:25:1d:67: 63:51:73:60:fa:fe:52:b2:9a:2c:4e:49:7a:dd:49:0f:a0:a1: 77:d8:ed:78:3a:0a:db:e8:25:f1:93:a7:d5:02:e0:55:dd:2c: e3:d6:7d:0a:ae:8a:77:f7:17:86:4e:88:7e:bf:23:b8:db:34: d0:04:a3:a0:b6:fd:15:dc:88:0b:0c:ad:70:82:dc:87:78:97: 89:1c:78:78:26:c4:6c:60:66:e8:a5:04:18:08:13:03:fa:bf: dc:a6:50:1e:6a:fc:c6:f4:41:3a:76:d7:2d:f7:47:ef:c6:f5: 2e:31:42:81:13:d9:d8:4a:c3:db:87:4c:5c:93:49:40:c4:9f: 9f:2f:73:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4omHMq7MNHMWjnSBL2+LbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy NWJhMTAwHhcNMjYwMTAxMDgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTdkYmRlMjZmYmVkNmYwZjEzMThlOGZiZWZlYmU3MjJlZGQzNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviEX1Pcgp2jOTmRzmuaIEKORtpKi 1gTSenNEs+rjFxPrWtuG67KVysk3zs69gCbfUczJ5xZPw1xHeUdikkdAQE8zLmcT Vnmw+QzY6+bT7k/F31GYMa8113U6e9DP1F1GyMeyu+KRjuE9AqWbUbB7H0kzkIQT piP3HHC7oyqus2t/DfCrw5Hj22AwnBBT1q2TmOcqQti8oJU/EhzBVDT2X2/yhCRN tIrf2iGUaWjPBPCPtx9tYfC7Rm9lcTNDvrQLOKnxXf+R5vQ0xbSeAVb5aRaUuStX TJwkHAqv5jQj+nzx64p0/NhUuelDWK0uq5tG56q1Ytgy4ioG2j0oLxq6hQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEl9veJvvtbw8TGOj77+vnIu3TSeMB8GA1UdIwQY MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt NTVhOTMwZmMwYzcxLzEvU1gyOTRtLS0xdkR4TVk2UHZ2Ni1jaTdkTko0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiE7MA0G CSqGSIb3DQEBCwUAA4IBAQA+Psd6xTtJyB/ZZtDOEQFKtUAl2UGf4UMDWDV2lUH0 6K+1kPcUlaPbde9RVt3cDvr69nngJL50BVZGmq4k622aYurpXdV4EikyjHZeVH89 7fpUXMZ6sigEfmV16esXkIs5OTVoTdKukQdPUu9ueFMi7dnEHc2zBKL2Rx0lHWdj UXNg+v5SsposTkl63UkPoKF32O14Ogrb6CXxk6fVAuBV3Szj1n0Krop39xeGToh+ vyO42zTQBKOgtv0V3IgLDK1wgtyHeJeJHHh4JsRsYGbopQQYCBMD+r/cplAeavzG 9EE6dtct90fvxvUuMUKBE9nYSsPbh0xck0lAxJ+fL3NQ -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:42 2026 by rpki-client