This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/sEmorA-ZRll0p0UMYOTfT8auHu8.roa File: sEmorA-ZRll0p0UMYOTfT8auHu8.roa (raw, json) Hash identifier: NXJluQHm5Ujqo8vGjkexvbDRO7wfW2RmWXBToETA0t4= Subject key identifier: B0:49:A8:AC:0F:99:46:59:74:A7:45:0C:60:E4:DF:4F:C6:AE:1E:EF Certificate issuer: /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3 Certificate serial: 019B7C1190CCEDCF932E5DCD4D20E87E3495 Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/sEmorA-ZRll0p0UMYOTfT8auHu8.roa Signing time: Fri 02 Jan 2026 00:18:04 +0000 ROA not before: Fri 02 Jan 2026 00:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31064 IP address blocks: 195.16.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:90:cc:ed:cf:93:2e:5d:cd:4d:20:e8:7e:34:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3 Validity Not Before: Jan 2 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b049a8ac0f99465974a7450c60e4df4fc6ae1eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:d5:5a:de:3e:35:fd:97:4d:46:50:94:30: d1:b9:10:66:18:4a:7b:eb:57:e4:1c:b0:c2:87:02: 4e:c9:2c:99:84:5d:37:e9:5d:ea:ac:f4:b0:45:32: 6b:ac:27:5b:d2:1e:05:2e:7c:78:9b:ad:7f:d1:3c: 3d:a2:8d:36:44:01:44:c6:4f:70:fe:2a:19:5d:a7: 1f:2d:6e:07:d3:0d:62:cf:96:d2:38:46:b6:b3:76: 3a:73:e0:c7:4a:da:0a:50:67:a6:5b:72:89:80:a8: 5e:e6:c4:40:01:23:fd:b5:5d:ce:7d:11:15:46:38: 16:8c:8c:fc:24:36:2f:41:b8:65:ef:82:99:0c:c6: 85:14:b3:34:2e:1c:43:a0:71:73:64:35:5a:91:c6: f7:2f:12:f5:6b:45:c7:ee:d6:22:e3:77:2a:03:58: 14:bd:54:8f:16:b9:45:b6:08:4e:4c:7e:a6:1d:07: f9:92:5e:e3:7d:e7:b2:99:20:0a:e8:b5:31:53:a5: bc:3a:18:a4:0e:bd:7a:98:7d:48:d6:c8:26:9a:19: a3:d4:4f:23:4e:4d:8a:c4:cb:e8:21:8a:34:f3:20: 9d:ed:2f:64:de:43:ae:d3:b8:bc:e6:ee:69:b0:4a: 3d:f4:74:bb:31:66:59:78:cc:64:23:42:6d:a1:39: 52:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:49:A8:AC:0F:99:46:59:74:A7:45:0C:60:E4:DF:4F:C6:AE:1E:EF X509v3 Authority Key Identifier: keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/sEmorA-ZRll0p0UMYOTfT8auHu8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.16.84.0/22 Signature Algorithm: sha256WithRSAEncryption 50:ca:1d:30:12:d1:89:0a:6d:72:1a:26:b0:e3:32:97:f6:70: 4b:fa:30:93:54:67:25:9c:38:65:47:8c:94:fb:0d:d2:55:b3: ae:86:92:a3:35:12:33:fe:73:ed:2f:f7:7a:23:16:c6:50:7b: 6e:12:53:44:90:92:8f:aa:9a:1b:72:96:d6:91:7b:29:d4:bb: 00:9a:c6:15:7f:8d:9f:41:12:db:d7:a3:a9:59:b9:43:9c:be: f5:85:03:c5:b5:5d:04:f6:61:12:42:d8:13:cb:87:05:b5:70: d6:37:87:a5:a2:a2:28:44:92:05:b1:1c:36:a7:4e:d2:3e:ad: 12:84:5c:7b:79:56:31:7d:9f:df:65:93:51:31:bb:a7:b1:8b: 36:38:31:14:eb:3b:49:10:0a:2e:b4:77:9d:fa:e9:e3:0b:4d: 56:e7:6e:e2:ce:b6:ab:93:28:e3:c2:6e:1f:6e:5c:22:30:0a: 88:97:c4:6b:0e:fc:b1:61:e8:2e:83:4b:14:41:0a:f4:85:86: aa:a3:f3:a8:c3:57:6c:da:f6:47:2d:d2:f2:e3:c9:b4:a7:ef: 82:38:5f:65:bb:36:22:9c:6a:d3:5b:7f:de:e0:3a:23:6e:c2: cd:ee:00:ae:cf:f3:76:c9:ef:77:e4:e7:51:f3:4a:20:dc:69: d3:49:ce:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EZDM7c+TLl3NTSDofjSVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZTE0NWZlM2I3OWIyYmY2OGFhZGJlMDA3ZGVmNmQ3MmFl ZjJhYzMwHhcNMjYwMTAyMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDQ5YThhYzBmOTk0NjU5NzRhNzQ1MGM2MGU0ZGY0ZmM2YWUxZWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygnVWt4+Nf2XTUZQlDDRuRBmGEp7 61fkHLDChwJOySyZhF036V3qrPSwRTJrrCdb0h4FLnx4m61/0Tw9oo02RAFExk9w /ioZXacfLW4H0w1iz5bSOEa2s3Y6c+DHStoKUGemW3KJgKhe5sRAASP9tV3OfREV RjgWjIz8JDYvQbhl74KZDMaFFLM0LhxDoHFzZDVakcb3LxL1a0XH7tYi43cqA1gU vVSPFrlFtghOTH6mHQf5kl7jfeeymSAK6LUxU6W8OhikDr16mH1I1sgmmhmj1E8j Tk2KxMvoIYo08yCd7S9k3kOu07i85u5psEo99HS7MWZZeMxkI0JtoTlSdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLBJqKwPmUZZdKdFDGDk30/Grh7vMB8GA1UdIwQY MBaAFDrhRf47ebK/aKrb4Afe9tcq7yrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3VGRl9qdDVzcjlvcXR2Z0I5NzIxeXJ2S3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84MmYwZjEtMjE0Ny00OWZkLWE0ZDYt YjdiNTc0ZWVkYzMzLzEvc0Vtb3JBLVpSbGwwcDBVTVlPVGZUOGF1SHU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84MmYwZjEtMjE0Ny00OWZkLWE0ZDYtYjdiNTc0ZWVkYzMz LzEvT3VGRl9qdDVzcjlvcXR2Z0I5NzIxeXJ2S3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwxBUMA0G CSqGSIb3DQEBCwUAA4IBAQBQyh0wEtGJCm1yGiaw4zKX9nBL+jCTVGclnDhlR4yU +w3SVbOuhpKjNRIz/nPtL/d6IxbGUHtuElNEkJKPqpobcpbWkXsp1LsAmsYVf42f QRLb16OpWblDnL71hQPFtV0E9mESQtgTy4cFtXDWN4eloqIoRJIFsRw2p07SPq0S hFx7eVYxfZ/fZZNRMbunsYs2ODEU6ztJEAoutHed+unjC01W527izrarkyjjwm4f blwiMAqIl8RrDvyxYegug0sUQQr0hYaqo/Oow1ds2vZHLdLy48m0p++COF9luzYi nGrTW3/e4DojbsLN7gCuz/N2ye935OdR80og3GnTSc6o -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:36 2026 by rpki-client