This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/sfK1aODDjj3azyZ1bdUJS8c2N_M.roa File: sfK1aODDjj3azyZ1bdUJS8c2N_M.roa (raw, json) Hash identifier: /jwodmN6QYmHvGpyA6Sd5qMX/Xiw+C7mUvTXuAPiEWg= Subject key identifier: B1:F2:B5:68:E0:C3:8E:3D:DA:CF:26:75:6D:D5:09:4B:C7:36:37:F3 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019AA0A4A24EEAD3090C4D452A2F4C846325 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/sfK1aODDjj3azyZ1bdUJS8c2N_M.roa Signing time: Thu 20 Nov 2025 09:42:15 +0000 ROA not before: Thu 20 Nov 2025 09:42:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 144.56.20.0/24 maxlen: 24 144.56.37.0/24 maxlen: 24 144.56.86.0/24 maxlen: 24 144.56.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:a4:a2:4e:ea:d3:09:0c:4d:45:2a:2f:4c:84:63:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Nov 20 09:42:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b1f2b568e0c38e3ddacf26756dd5094bc73637f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fd:7a:61:0f:80:eb:e4:b5:4d:3f:e4:bb:6a: 45:04:1b:ab:93:11:5f:49:a7:8a:e7:b4:7f:24:72: 8a:32:dc:c5:36:94:06:a8:ff:a5:c6:5f:d6:a2:e0: e5:cb:42:ed:ce:93:bd:5b:d5:59:e6:04:6f:97:a3: 53:03:ac:c0:ec:23:03:29:5d:8b:b8:23:d8:bd:67: 42:54:99:26:c5:07:7f:a7:ed:ca:0c:b6:4f:7c:74: 3d:22:d8:54:54:d4:94:1f:71:97:1e:da:eb:4b:40: 5f:fa:2b:97:76:9d:75:de:29:09:74:87:51:b8:64: 9a:62:1c:12:0a:f2:62:ad:33:46:68:1c:70:a3:a8: ae:33:f9:a0:74:2e:2b:f4:15:78:93:a5:ce:84:87: a3:85:a0:ad:dc:39:1a:e4:b4:cc:63:69:f3:4d:71: 6c:06:74:67:d2:0c:be:3c:3e:21:c4:5c:fb:09:1d: b4:50:6b:2b:69:15:d3:f2:11:87:5a:10:c4:e9:77: c9:8e:16:ca:46:7e:08:a4:1c:7d:48:50:7f:28:90: df:9c:02:71:37:e9:d5:d7:4a:40:b2:30:56:41:bd: 96:90:49:8d:cc:db:e8:b4:4a:e9:ff:06:09:48:f6: 90:96:21:cc:88:bd:9e:31:23:65:75:15:b8:22:c9: fa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F2:B5:68:E0:C3:8E:3D:DA:CF:26:75:6D:D5:09:4B:C7:36:37:F3 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/sfK1aODDjj3azyZ1bdUJS8c2N_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.20.0/24 144.56.37.0/24 144.56.86.0/24 144.56.107.0/24 Signature Algorithm: sha256WithRSAEncryption 59:87:79:6a:28:48:ef:2a:fb:c6:43:3e:5e:39:b1:3d:29:04: be:0b:08:4b:1b:f6:d7:cb:f5:5f:c0:fc:60:bd:f0:51:e2:26: da:d6:2b:49:07:c2:63:d8:31:76:54:15:b4:2b:dc:f0:e9:ca: e4:ee:b5:44:a2:93:b4:99:08:b7:f5:14:44:91:e3:f1:9c:d7: 1f:51:c6:a4:41:1c:b4:68:24:7e:ad:e6:d9:3f:86:ac:eb:e1: 5a:7b:a8:e8:7e:d5:f6:fd:d6:8b:7b:81:83:02:a8:61:d0:99: 30:d6:7a:79:7e:f3:af:c9:c7:9f:4d:6c:fa:10:93:f3:4a:7c: 01:e3:25:98:5f:60:3b:62:fc:4f:fc:16:2b:15:69:bf:20:ab: 6f:ce:ef:fc:8b:e1:8c:01:38:7c:31:b8:c7:90:7c:97:9b:22: 17:f3:6c:f4:88:d1:b5:0c:96:31:50:3f:3e:06:f8:93:7b:77: 79:c7:01:e8:2b:29:9a:8e:ab:20:8a:5b:46:5c:3b:25:73:f5: d0:b0:36:c5:ab:bd:7f:e4:bf:ff:78:a0:14:04:72:06:61:0d: f1:62:a5:f3:7c:83:92:d0:1a:74:0e:8a:d3:fb:c0:4e:d5:d2: ce:54:32:8d:f9:0a:64:1b:50:2b:29:e7:54:8c:41:dd:d8:20: 92:8d:05:67 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqgpKJO6tMJDE1FKi9MhGMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUxMTIwMDk0MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWYyYjU2OGUwYzM4ZTNkZGFjZjI2NzU2ZGQ1MDk0YmM3MzYzN2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf16YQ+A6+S1TT/ku2pFBBurkxFf SaeK57R/JHKKMtzFNpQGqP+lxl/WouDly0LtzpO9W9VZ5gRvl6NTA6zA7CMDKV2L uCPYvWdCVJkmxQd/p+3KDLZPfHQ9IthUVNSUH3GXHtrrS0Bf+iuXdp113ikJdIdR uGSaYhwSCvJirTNGaBxwo6iuM/mgdC4r9BV4k6XOhIejhaCt3Dka5LTMY2nzTXFs BnRn0gy+PD4hxFz7CR20UGsraRXT8hGHWhDE6XfJjhbKRn4IpBx9SFB/KJDfnAJx N+nV10pAsjBWQb2WkEmNzNvotErp/wYJSPaQliHMiL2eMSNldRW4Isn6TwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLHytWjgw4492s8mdW3VCUvHNjfzMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvc2ZLMWFPRERqajNhenlaMWJkVUpTOGMyTl9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAkDgUAwQA kDglAwQAkDhWAwQAkDhrMA0GCSqGSIb3DQEBCwUAA4IBAQBZh3lqKEjvKvvGQz5e ObE9KQS+CwhLG/bXy/VfwPxgvfBR4iba1itJB8Jj2DF2VBW0K9zw6crk7rVEopO0 mQi39RREkePxnNcfUcakQRy0aCR+rebZP4as6+Fae6joftX2/daLe4GDAqhh0Jkw 1np5fvOvycefTWz6EJPzSnwB4yWYX2A7YvxP/BYrFWm/IKtvzu/8i+GMATh8MbjH kHyXmyIX82z0iNG1DJYxUD8+BviTe3d5xwHoKymajqsgiltGXDslc/XQsDbFq71/ 5L//eKAUBHIGYQ3xYqXzfIOS0Bp0DorT+8BO1dLOVDKN+QpkG1ArKedUjEHd2CCS jQVn -----END CERTIFICATE-----Generated at Fri Dec 5 09:26:59 2025 by rpki-client