This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SxUkT0237Nn719kyKsgNQA9KX0Y.roa File: SxUkT0237Nn719kyKsgNQA9KX0Y.roa (raw, json) Hash identifier: RDnB6k8m2cwTsQuETfFdVw00beCZUjW8jIuWvo8UuFI= Subject key identifier: 4B:15:24:4F:4D:B7:EC:D9:FB:D7:D9:32:2A:C8:0D:40:0F:4A:5F:46 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B2D14B3C7EB9A0E366069BFB0095D088A Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SxUkT0237Nn719kyKsgNQA9KX0Y.roa Signing time: Wed 17 Dec 2025 16:11:30 +0000 ROA not before: Wed 17 Dec 2025 16:11:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209618 IP address blocks: 185.231.187.0/25 maxlen: 25 185.231.187.128/25 maxlen: 25 2a0a:e9c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:14:b3:c7:eb:9a:0e:36:60:69:bf:b0:09:5d:08:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Dec 17 16:11:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4b15244f4db7ecd9fbd7d9322ac80d400f4a5f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9d:0c:43:7a:7f:85:98:c6:00:b4:de:a0:41: 13:59:9b:60:a6:76:cb:d5:ff:5f:a6:c0:f4:77:6b: 03:18:43:d8:48:11:80:91:c1:36:3f:bf:2d:f9:44: 16:2d:05:7e:f2:1f:c8:67:5d:35:35:1e:77:05:b2: ca:ce:57:bc:7d:89:35:68:3d:e3:ce:c4:b5:5a:7b: b4:07:1c:b0:b5:9a:36:cc:c9:02:ea:52:1f:72:4c: 4e:c0:ea:39:73:37:4e:b4:86:8c:ba:bc:4c:5f:b8: 64:b3:bb:75:e9:28:65:5a:b7:57:27:8c:ab:fe:69: 5b:84:62:cf:08:9b:ca:96:0c:5a:20:84:45:80:f7: c0:2e:6f:91:79:27:5a:04:df:20:f9:47:ce:ea:78: 09:70:58:9f:df:0f:47:e5:b4:79:76:9b:a9:c6:98: e7:68:97:e2:68:b1:8a:42:a0:01:a4:fd:c3:f5:f3: 13:7e:ad:8f:a2:33:55:cd:96:42:a2:3a:1c:f2:7a: 7f:9f:d1:e0:e1:82:b2:b7:3f:7c:0b:b5:7d:74:4e: ee:82:d3:0c:a5:a8:92:c0:d9:cd:7c:50:70:a5:fd: 34:a6:9d:20:3a:ae:73:cd:4a:21:01:c3:8c:bc:aa: 22:7c:61:30:8b:47:bf:db:bc:78:58:8b:47:d9:56: 7c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:15:24:4F:4D:B7:EC:D9:FB:D7:D9:32:2A:C8:0D:40:0F:4A:5F:46 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SxUkT0237Nn719kyKsgNQA9KX0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.187.0/24 IPv6: 2a0a:e9c2::/32 Signature Algorithm: sha256WithRSAEncryption 07:db:e1:8b:1d:7f:0b:48:70:6d:5a:a1:91:44:e3:8d:14:e0: f3:b4:37:19:dd:f4:d3:4d:a9:83:3f:4b:e0:87:e8:e5:a4:9f: 3f:e2:cd:40:b5:4c:f6:0d:5d:ed:c3:a8:dc:27:ef:47:55:32: f3:eb:c6:60:a7:bc:52:1c:49:f7:d3:72:73:19:b3:ac:ba:52: 1d:1d:b2:54:ab:c3:59:79:3c:cf:68:b5:f4:fc:84:cf:c4:7d: 5f:e6:fd:c6:53:25:dd:53:b3:03:77:f0:0c:3d:13:02:ed:d8: ef:89:58:69:72:7c:cb:43:44:4a:6c:99:8f:92:3a:41:4f:e3: 8b:f8:74:69:0c:9e:ef:e9:05:2d:30:07:88:10:a8:bd:f8:05: 8b:26:f8:ae:b4:43:7e:05:87:d0:e7:8c:d3:07:b2:1f:aa:fa: 9e:5d:63:d8:be:43:02:44:1a:1e:72:72:4a:98:59:2e:3b:d9: 43:08:84:33:5f:e0:79:fe:26:35:bb:67:2b:23:aa:70:07:c7: 12:9b:00:27:03:b9:a5:6b:17:8a:ab:87:9a:e7:4b:c4:5f:c6: 12:51:9d:e6:a3:f2:26:56:3d:9b:54:6d:6c:b7:4b:b4:fa:ac: 28:4c:9b:9b:4a:47:b0:a2:2a:67:c1:8c:84:1f:43:74:27:09: 73:8c:2e:54 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZstFLPH65oONmBpv7AJXQiKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjUxMjE3MTYxMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjE1MjQ0ZjRkYjdlY2Q5ZmJkN2Q5MzIyYWM4MGQ0MDBmNGE1ZjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ0MQ3p/hZjGALTeoEETWZtgpnbL 1f9fpsD0d2sDGEPYSBGAkcE2P78t+UQWLQV+8h/IZ101NR53BbLKzle8fYk1aD3j zsS1Wnu0BxywtZo2zMkC6lIfckxOwOo5czdOtIaMurxMX7hks7t16ShlWrdXJ4yr /mlbhGLPCJvKlgxaIIRFgPfALm+ReSdaBN8g+UfO6ngJcFif3w9H5bR5dpupxpjn aJfiaLGKQqABpP3D9fMTfq2PojNVzZZCojoc8np/n9Hg4YKytz98C7V9dE7ugtMM paiSwNnNfFBwpf00pp0gOq5zzUohAcOMvKoifGEwi0e/27x4WItH2VZ84QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEsVJE9Nt+zZ+9fZMirIDUAPSl9GMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvU3hVa1QwMjM3Tm43MTlreUtzZ05RQTlLWDBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuee7MA0E AgACMAcDBQAqCunCMA0GCSqGSIb3DQEBCwUAA4IBAQAH2+GLHX8LSHBtWqGRROON FODztDcZ3fTTTamDP0vgh+jlpJ8/4s1AtUz2DV3tw6jcJ+9HVTLz68Zgp7xSHEn3 03JzGbOsulIdHbJUq8NZeTzPaLX0/ITPxH1f5v3GUyXdU7MDd/AMPRMC7djviVhp cnzLQ0RKbJmPkjpBT+OL+HRpDJ7v6QUtMAeIEKi9+AWLJviutEN+BYfQ54zTB7If qvqeXWPYvkMCRBoecnJKmFkuO9lDCIQzX+B5/iY1u2crI6pwB8cSmwAnA7mlaxeK q4ea50vEX8YSUZ3mo/ImVj2bVG1st0u0+qwoTJubSkewoipnwYyEH0N0JwlzjC5U -----END CERTIFICATE-----Generated at Thu Dec 18 02:51:12 2025 by rpki-client