This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/SG2_tHaBQkpi4vG7SW95-7dbH-k.roa File: SG2_tHaBQkpi4vG7SW95-7dbH-k.roa (raw, json) Hash identifier: kuEwvUkxR/LXVUjb63SMtwknWtHd5XAun4tmexNO47M= Subject key identifier: 48:6D:BF:B4:76:81:42:4A:62:E2:F1:BB:49:6F:79:FB:B7:5B:1F:E9 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79113CAA77A8B4A40F78FB517FC9258E Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/SG2_tHaBQkpi4vG7SW95-7dbH-k.roa Signing time: Thu 01 Jan 2026 10:18:51 +0000 ROA not before: Thu 01 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 104.239.55.0/24 maxlen: 24 104.249.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3c:aa:77:a8:b4:a4:0f:78:fb:51:7f:c9:25:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=486dbfb47681424a62e2f1bb496f79fbb75b1fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:65:99:f9:ad:c1:c3:a0:44:d2:db:28:9b:ba: 26:76:4c:89:a1:46:0c:19:d0:92:92:d3:0d:0a:13: d1:22:20:e6:62:83:60:09:df:b4:99:ea:30:64:53: 69:69:fb:ac:c7:b5:7d:45:f1:d0:87:ae:87:16:7d: fc:e2:bd:ca:81:ea:e2:d5:2f:4b:24:81:c4:5e:83: 33:2c:bd:fa:17:10:77:aa:a4:05:2e:fc:25:f7:bd: 25:66:be:e5:8e:af:ea:dd:cd:e8:53:73:f9:23:7e: 71:69:b8:5d:12:2c:a5:7b:cf:4b:91:93:9c:80:c4: 01:b1:29:24:5d:a8:0f:75:8a:9e:5a:2d:19:06:b4: 0f:1b:11:ed:39:43:33:e4:59:3f:c4:1b:20:a3:a7: 6c:cb:de:5d:ab:8a:47:f3:fd:20:5f:0c:bb:ae:16: ca:13:b5:86:8e:f7:89:98:7d:f5:64:29:6a:73:27: 1b:be:14:48:a3:b6:09:47:f7:e5:e5:1e:bf:49:18: b1:eb:0c:a4:dc:1d:b7:c8:7e:a3:3c:37:c6:e0:15: 61:ec:3f:64:f1:bc:c5:0e:d0:19:c4:e9:1d:ad:5e: 80:d9:f6:c1:8d:82:61:19:94:0d:1e:38:3e:aa:60: 19:47:b5:12:19:08:c9:02:1c:46:27:39:8f:b7:c1: b2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6D:BF:B4:76:81:42:4A:62:E2:F1:BB:49:6F:79:FB:B7:5B:1F:E9 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/SG2_tHaBQkpi4vG7SW95-7dbH-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.239.55.0/24 104.249.23.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:40:8b:af:c8:d1:f4:de:ce:1a:73:70:b6:65:83:20:e6:ae: 49:ba:5c:a0:ba:de:76:39:95:96:10:0a:8c:65:5c:f5:e0:ab: 98:eb:e9:3b:70:77:b4:4b:19:6c:33:5b:50:a2:27:67:a4:81: ec:a4:21:e5:d3:e7:4a:6c:67:e4:b9:f2:f0:a4:7c:37:6a:14: 7b:e7:c2:f1:b9:2b:1c:e3:9c:21:f0:34:cd:57:d8:79:71:44: f1:a1:bf:e1:43:dd:5c:90:02:fc:96:01:34:de:35:63:65:6e: 41:15:c9:c9:64:45:86:80:23:e1:6a:50:6e:9a:c0:20:00:70: 57:2a:37:dd:47:e8:80:90:9c:dd:b7:06:a8:7a:1e:c2:03:f6: a5:a8:2c:59:c9:b9:e2:6a:d8:58:f0:7c:79:b8:1c:02:b6:16: b8:e0:80:55:1b:bc:bf:9e:59:eb:19:32:f3:a4:52:a9:77:ee: fe:b7:bc:5b:d7:8c:fd:6b:77:5d:36:a7:72:85:28:ed:71:89: 54:e3:15:7e:2a:c4:7d:c0:25:0e:9c:5f:02:4a:b9:52:0d:a5: 1b:97:b4:dd:a2:46:23:55:28:9f:39:d9:9f:03:2e:9d:df:f5: 50:26:e5:97:fb:74:5f:b6:5a:6c:d9:fc:a0:1f:74:47:3e:ee: 28:2d:75:32 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ETyqd6i0pA94+1F/ySWOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODZkYmZiNDc2ODE0MjRhNjJlMmYxYmI0OTZmNzlmYmI3NWIxZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWWZ+a3Bw6BE0tsom7omdkyJoUYM GdCSktMNChPRIiDmYoNgCd+0meowZFNpafusx7V9RfHQh66HFn384r3Kgeri1S9L JIHEXoMzLL36FxB3qqQFLvwl970lZr7ljq/q3c3oU3P5I35xabhdEiyle89LkZOc gMQBsSkkXagPdYqeWi0ZBrQPGxHtOUMz5Fk/xBsgo6dsy95dq4pH8/0gXwy7rhbK E7WGjveJmH31ZClqcycbvhRIo7YJR/fl5R6/SRix6wyk3B23yH6jPDfG4BVh7D9k 8bzFDtAZxOkdrV6A2fbBjYJhGZQNHjg+qmAZR7USGQjJAhxGJzmPt8GyhQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEhtv7R2gUJKYuLxu0lvefu3Wx/pMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvU0cyX3RIYUJRa3BpNHZHN1NXOTUtN2RiSC1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaO83AwQA aPkXMA0GCSqGSIb3DQEBCwUAA4IBAQBvQIuvyNH03s4ac3C2ZYMg5q5Julygut52 OZWWEAqMZVz14KuY6+k7cHe0SxlsM1tQoidnpIHspCHl0+dKbGfkufLwpHw3ahR7 58LxuSsc45wh8DTNV9h5cUTxob/hQ91ckAL8lgE03jVjZW5BFcnJZEWGgCPhalBu msAgAHBXKjfdR+iAkJzdtwaoeh7CA/alqCxZybniathY8Hx5uBwCtha44IBVG7y/ nlnrGTLzpFKpd+7+t7xb14z9a3ddNqdyhSjtcYlU4xV+KsR9wCUOnF8CSrlSDaUb l7TdokYjVSifOdmfAy6d3/VQJuWX+3Rftlps2fygH3RHPu4oLXUy -----END CERTIFICATE-----Generated at Fri Jan 2 02:38:14 2026 by rpki-client