This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/SZ7uQjj18-cU4bIpWv5dSgIvGBE.roa File: SZ7uQjj18-cU4bIpWv5dSgIvGBE.roa (raw, json) Hash identifier: rmE3xiiuA8FInWGbe7SdLUBpAe5mfXQkxmyusGShZtQ= Subject key identifier: 49:9E:EE:42:38:F5:F3:E7:14:E1:B2:29:5A:FE:5D:4A:02:2F:18:11 Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8 Certificate serial: 019B7DCA6A7D04A0C6927FA39C0ED3B88B2F Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/SZ7uQjj18-cU4bIpWv5dSgIvGBE.roa Signing time: Fri 02 Jan 2026 08:19:35 +0000 ROA not before: Fri 02 Jan 2026 08:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 192.76.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:6a:7d:04:a0:c6:92:7f:a3:9c:0e:d3:b8:8b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8 Validity Not Before: Jan 2 08:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=499eee4238f5f3e714e1b2295afe5d4a022f1811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:35:7f:f5:14:cc:ac:48:f8:00:81:de:5e:f5: f4:d5:27:6c:ee:8e:79:38:cf:5f:f3:a8:a4:8c:7a: 6e:69:f4:32:4e:e1:16:07:07:fb:15:8d:4c:a5:5d: 4e:9e:55:6a:75:54:0a:06:7a:d5:45:64:e2:88:81: 23:6e:57:bf:fb:a2:e6:c2:f6:96:80:06:26:ff:d4: 4c:48:7f:33:45:da:b8:8b:c3:15:6a:59:48:d6:de: 32:dd:fd:56:49:1b:50:0b:53:6d:43:0b:0c:a5:04: 9d:57:37:40:d7:db:4c:a7:c9:68:42:9c:c9:f2:f0: 91:d2:12:ea:37:e6:e3:ff:19:cf:37:aa:09:bf:a8: 90:18:cd:28:81:e9:39:a3:36:0c:fc:16:26:b3:76: 91:0b:9e:ce:41:61:01:1c:75:af:a4:3c:66:b4:f4: 05:bd:8d:48:99:bf:78:54:2d:32:32:30:87:84:5b: 6d:22:75:ae:4c:64:6a:90:af:9d:a3:e1:55:09:01: 29:be:0d:7c:ea:32:47:5d:ea:27:6f:8b:43:49:2b: 41:13:b7:d2:ad:fb:6e:9f:77:cd:4e:92:b4:47:d4: 14:4b:8f:ca:e7:b3:e1:0d:ee:fe:de:60:c0:79:9f: 90:92:60:88:f0:67:19:31:28:45:b6:a6:1b:7e:2b: 29:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9E:EE:42:38:F5:F3:E7:14:E1:B2:29:5A:FE:5D:4A:02:2F:18:11 X509v3 Authority Key Identifier: keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/SZ7uQjj18-cU4bIpWv5dSgIvGBE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.76.169.0/24 Signature Algorithm: sha256WithRSAEncryption 69:38:33:93:af:56:37:88:af:e7:7d:a8:46:2f:c9:76:10:bc: 65:7b:1f:d0:ad:bc:4e:79:19:84:3b:53:c4:40:ac:1b:7d:34: 09:29:23:60:45:c0:21:ea:a0:a7:15:23:8f:e1:5a:5c:27:2b: ed:1d:e4:97:13:88:10:71:bf:b6:04:e8:47:ec:24:28:44:c3: a0:fe:df:e5:be:f5:4c:b8:6d:0c:34:ed:6e:82:1d:b5:54:20: de:fd:14:6d:15:42:ad:ca:a0:8c:56:7f:30:2c:ea:3a:fb:fb: 49:87:c9:b2:27:98:37:b1:6f:fa:ba:61:6a:1e:18:1c:3a:cc: 63:9e:97:57:8d:eb:a3:d8:88:83:0f:aa:4c:d5:6f:ce:03:de: 28:23:b7:e2:41:56:12:c6:48:3f:2f:ee:dd:c5:37:39:ba:65: 54:db:f3:12:a5:27:bd:a1:af:71:ef:4e:5b:e0:d1:e1:8b:5f: 44:ce:d8:5a:78:df:62:e4:7b:41:46:02:1b:4a:d7:0d:d4:2a: 9d:41:10:6f:ea:0d:45:e6:c9:88:87:9e:ca:23:c4:fe:f6:50: 55:52:c0:17:84:94:1f:a9:8f:50:12:4c:20:2e:9a:90:fa:09: 21:de:8c:3c:78:be:54:d4:9c:0d:ef:5d:4d:d9:8c:4a:4e:dd: 64:28:7f:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ymp9BKDGkn+jnA7TuIsvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwOGUxN2E3ODFiNjQxMTlhM2E2MzU3MDAwMjU0ZjViNzk1 YjBkYTgwHhcNMjYwMTAyMDgxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTllZWU0MjM4ZjVmM2U3MTRlMWIyMjk1YWZlNWQ0YTAyMmYxODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDV/9RTMrEj4AIHeXvX01Sds7o55 OM9f86ikjHpuafQyTuEWBwf7FY1MpV1OnlVqdVQKBnrVRWTiiIEjble/+6LmwvaW gAYm/9RMSH8zRdq4i8MVallI1t4y3f1WSRtQC1NtQwsMpQSdVzdA19tMp8loQpzJ 8vCR0hLqN+bj/xnPN6oJv6iQGM0ogek5ozYM/BYms3aRC57OQWEBHHWvpDxmtPQF vY1Imb94VC0yMjCHhFttInWuTGRqkK+do+FVCQEpvg186jJHXeonb4tDSStBE7fS rftun3fNTpK0R9QUS4/K57PhDe7+3mDAeZ+QkmCI8GcZMShFtqYbfispOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEme7kI49fPnFOGyKVr+XUoCLxgRMB8GA1UdIwQY MBaAFOCOF6eBtkEZo6Y1cAAlT1t5Ww2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2Ut ZDVlNDVmMmNhODc5LzEvU1o3dVFqajE4LWNVNGJJcFd2NWRTZ0l2R0JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2UtZDVlNDVmMmNhODc5 LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEypMA0G CSqGSIb3DQEBCwUAA4IBAQBpODOTr1Y3iK/nfahGL8l2ELxlex/QrbxOeRmEO1PE QKwbfTQJKSNgRcAh6qCnFSOP4VpcJyvtHeSXE4gQcb+2BOhH7CQoRMOg/t/lvvVM uG0MNO1ugh21VCDe/RRtFUKtyqCMVn8wLOo6+/tJh8myJ5g3sW/6umFqHhgcOsxj npdXjeuj2IiDD6pM1W/OA94oI7fiQVYSxkg/L+7dxTc5umVU2/MSpSe9oa9x705b 4NHhi19EzthaeN9i5HtBRgIbStcN1CqdQRBv6g1F5smIh57KI8T+9lBVUsAXhJQf qY9QEkwgLpqQ+gkh3ow8eL5U1JwN711N2YxKTt1kKH+O -----END CERTIFICATE-----Generated at Sat Jan 3 04:59:32 2026 by rpki-client