This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/sux632LKHtGX1EXDlRH988a1FGU.roa File: sux632LKHtGX1EXDlRH988a1FGU.roa (raw, json) Hash identifier: xXf8M6qicMrsGk7jlbi/KFdZjjGpVZHB2RA7AQ0CnCw= Subject key identifier: B2:EC:7A:DF:62:CA:1E:D1:97:D4:45:C3:95:11:FD:F3:C6:B5:14:65 Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b Certificate serial: 019B7DCAD28AEAE3DBD5AD8D5978349E7E02 Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/sux632LKHtGX1EXDlRH988a1FGU.roa Signing time: Fri 02 Jan 2026 08:20:02 +0000 ROA not before: Fri 02 Jan 2026 08:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204601 IP address blocks: 45.88.78.0/24 maxlen: 24 81.91.178.0/24 maxlen: 24 95.215.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d2:8a:ea:e3:db:d5:ad:8d:59:78:34:9e:7e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b Validity Not Before: Jan 2 08:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2ec7adf62ca1ed197d445c39511fdf3c6b51465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:77:c9:4a:8f:86:93:93:76:1b:99:82:e2: 34:d1:c8:04:52:23:b0:f0:14:d3:f5:f7:0e:69:cd: 04:41:67:15:b2:0a:d8:59:ce:e0:2d:32:ea:35:2e: 0f:7a:28:3a:17:49:64:ae:8c:f8:6a:b7:6f:15:1b: 89:0f:57:f1:6b:b5:e6:22:23:b8:2f:4e:f9:a0:a0: 1a:52:a8:95:33:6f:76:b9:60:98:03:10:2a:9a:be: 64:4d:53:21:8c:7a:b0:bd:c6:93:db:f7:43:6a:c8: 30:98:a1:12:96:ee:15:6a:e9:5d:95:11:fc:6f:32: cc:53:df:7b:fd:7c:67:13:e3:33:87:66:4c:23:ab: fd:85:b3:4b:33:71:60:2a:58:ee:a3:de:bc:3f:12: 87:c5:92:31:d1:da:8d:75:2e:71:50:93:d6:b3:99: 58:e5:7d:43:6e:23:8d:69:30:4e:30:d2:73:ff:89: 67:18:ac:29:11:8e:7b:77:2f:5a:d3:ff:56:a6:0f: 12:e4:e6:ae:fb:c3:7b:91:47:8a:95:d5:28:61:32: 16:f7:9e:c8:d7:68:09:34:50:0c:6e:cd:f4:9d:db: be:c8:b7:67:a8:6f:96:17:4b:c2:48:31:0c:1d:32: b8:1f:7d:e2:81:bd:69:17:76:fa:bc:86:f5:0f:e6: d9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EC:7A:DF:62:CA:1E:D1:97:D4:45:C3:95:11:FD:F3:C6:B5:14:65 X509v3 Authority Key Identifier: keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/sux632LKHtGX1EXDlRH988a1FGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.78.0/24 81.91.178.0/24 95.215.205.0/24 Signature Algorithm: sha256WithRSAEncryption 49:c0:0d:6e:45:98:14:a1:c9:75:c9:fb:a5:51:e2:c3:35:7a: a7:4e:73:2a:51:38:cf:d3:7c:69:b7:20:54:75:59:9d:12:80: 25:c0:82:ee:76:85:a8:06:66:bd:48:f8:c3:21:c2:e6:6c:f2: 20:ef:9b:96:d1:3b:03:2b:59:31:cc:8b:58:91:a7:ab:37:80: d5:73:9d:7c:32:0d:9b:23:83:41:31:f3:ef:9f:db:a5:96:e8: 54:ca:f1:ac:5e:cc:6b:ad:3b:ec:76:bd:22:92:c4:90:43:6b: 8a:e6:22:3b:29:0a:a2:7f:05:77:44:36:10:e8:b9:2d:30:14: 81:60:41:d4:43:cd:3b:ec:55:24:53:57:1a:f8:dc:0f:ce:a3: d4:b8:5f:c5:8f:e8:52:6b:8c:70:60:80:04:0e:08:3b:27:24: 49:3f:a8:cf:6f:89:0e:8d:34:1e:c6:1b:5a:52:61:8a:f0:da: ba:59:0e:5c:3c:3f:26:df:2d:79:5e:48:d0:d9:1e:ab:aa:5d: da:0b:fe:03:fb:74:59:09:3c:d7:96:1b:36:85:02:23:00:e3: d3:91:12:e3:d7:0e:8f:3f:4b:ca:87:da:e9:30:7d:e9:9d:21: e4:fe:29:1c:3c:3e:78:7f:b9:4d:15:8a:b3:55:c3:db:84:c5: fe:9c:9e:57 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9ytKK6uPb1a2NWXg0nn4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZDM2OWU2NmNkYmUzMGQ3YjNhZmY2MDgxZjIwYzE3YTk4 ZmRjNWIwHhcNMjYwMTAyMDgyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmVjN2FkZjYyY2ExZWQxOTdkNDQ1YzM5NTExZmRmM2M2YjUxNDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0d3yUqPhpOTdhuZguI00cgEUiOw 8BTT9fcOac0EQWcVsgrYWc7gLTLqNS4Peig6F0lkroz4ardvFRuJD1fxa7XmIiO4 L075oKAaUqiVM292uWCYAxAqmr5kTVMhjHqwvcaT2/dDasgwmKESlu4VauldlRH8 bzLMU997/XxnE+Mzh2ZMI6v9hbNLM3FgKljuo968PxKHxZIx0dqNdS5xUJPWs5lY 5X1DbiONaTBOMNJz/4lnGKwpEY57dy9a0/9Wpg8S5Oau+8N7kUeKldUoYTIW957I 12gJNFAMbs30ndu+yLdnqG+WF0vCSDEMHTK4H33igb1pF3b6vIb1D+bZUwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLLset9iyh7Rl9RFw5UR/fPGtRRlMB8GA1UdIwQY MBaAFMHTaeZs2+MNezr/YIHyDBepj9xbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2ROcDVtemI0dzE3T3Y5Z2dmSU1GNm1QM0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yMjQzNTEtM2E0Ny00MDE0LWIzOTUt YTYzNDc5NjEwOTY4LzEvc3V4NjMyTEtIdEdYMUVYRGxSSDk4OGExRkdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yMjQzNTEtM2E0Ny00MDE0LWIzOTUtYTYzNDc5NjEwOTY4 LzEvd2ROcDVtemI0dzE3T3Y5Z2dmSU1GNm1QM0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVhOAwQA UVuyAwQAX9fNMA0GCSqGSIb3DQEBCwUAA4IBAQBJwA1uRZgUocl1yfulUeLDNXqn TnMqUTjP03xptyBUdVmdEoAlwILudoWoBma9SPjDIcLmbPIg75uW0TsDK1kxzItY kaerN4DVc518Mg2bI4NBMfPvn9ulluhUyvGsXsxrrTvsdr0iksSQQ2uK5iI7KQqi fwV3RDYQ6LktMBSBYEHUQ8077FUkU1ca+NwPzqPUuF/Fj+hSa4xwYIAEDgg7JyRJ P6jPb4kOjTQexhtaUmGK8Nq6WQ5cPD8m3y15XkjQ2R6rql3aC/4D+3RZCTzXlhs2 hQIjAOPTkRLj1w6PP0vKh9rpMH3pnSHk/ikcPD54f7lNFYqzVcPbhMX+nJ5X -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:46 2026 by rpki-client