This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/sGxBkJsDb4cSDB9YLAQ4WsuWlSM.roa File: sGxBkJsDb4cSDB9YLAQ4WsuWlSM.roa (raw, json) Hash identifier: e/01H24SljJCRbIVQagIuqTJISHsrceaMA0ctl1O+PM= Subject key identifier: B0:6C:41:90:9B:03:6F:87:12:0C:1F:58:2C:04:38:5A:CB:96:95:23 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF19AC8FC95129F8BC9F3D9194A6311 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/sGxBkJsDb4cSDB9YLAQ4WsuWlSM.roa Signing time: Fri 02 Jan 2026 18:21:38 +0000 ROA not before: Fri 02 Jan 2026 18:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212667 IP address blocks: 46.38.128.0/24 maxlen: 24 46.38.130.0/24 maxlen: 24 212.16.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:9a:c8:fc:95:12:9f:8b:c9:f3:d9:19:4a:63:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b06c41909b036f87120c1f582c04385acb969523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:eb:62:99:49:0d:c6:23:a7:c4:3d:cf:13:cf: 07:63:eb:2e:36:54:ac:dd:b4:01:9a:6f:59:56:41: b9:3a:77:f5:59:78:1c:75:0a:55:c5:05:98:b4:ba: 62:e7:1a:17:73:af:97:78:a1:12:b0:97:df:f2:5e: a8:57:00:4d:81:51:63:38:e4:50:f0:19:2b:56:26: 05:05:09:32:29:ca:37:b1:c6:5d:6a:2c:db:d8:4a: 9e:9f:05:af:02:08:58:7d:85:3d:bd:d7:85:9a:78: 2c:ca:2b:3f:63:08:25:0a:a6:ac:ff:dc:60:54:2a: 0e:6e:75:19:27:65:89:fb:3b:bf:86:db:3c:2a:21: 98:e4:87:85:1e:61:bd:56:9c:f7:4a:9f:da:da:44: f6:49:60:2e:2d:dc:aa:27:4e:81:52:03:09:ef:4a: d7:76:55:f0:ca:af:5c:ee:db:c0:b5:8d:4b:46:16: 76:9c:67:30:c1:35:80:45:68:c8:02:c4:f4:2e:87: 16:71:b3:60:06:7c:83:3e:a0:b6:19:13:da:16:1f: ec:42:63:12:3c:30:aa:53:0c:4b:9b:d1:b1:70:75: 3f:6d:12:3a:7f:e6:0c:5f:40:98:ae:47:d6:b2:42: ae:b6:31:b0:89:6f:eb:20:66:a6:42:1f:44:3e:27: 8b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6C:41:90:9B:03:6F:87:12:0C:1F:58:2C:04:38:5A:CB:96:95:23 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/sGxBkJsDb4cSDB9YLAQ4WsuWlSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.38.128.0/24 46.38.130.0/24 212.16.80.0/24 Signature Algorithm: sha256WithRSAEncryption 26:3e:f9:0b:28:69:bd:9b:4a:1e:1d:e0:2e:13:72:63:c5:a3: de:38:c8:cb:85:e1:53:cd:31:de:c3:e8:fc:b1:12:bb:59:65: ad:2e:49:95:93:e2:5b:10:bb:3b:0b:6a:5c:63:93:43:2f:ed: 1c:2e:99:ba:7b:8e:e2:36:cc:2e:2f:da:88:7b:07:58:65:3d: 9d:91:b6:c7:86:83:d3:75:1c:1c:85:62:d3:44:41:d7:17:48: f1:8d:d7:e3:d1:f5:db:a6:b0:34:c5:de:b5:5a:df:2e:1e:f1: 21:b2:bf:c6:e9:9b:89:e8:fc:a2:24:bc:ce:74:8f:61:6f:0f: d8:37:32:0b:71:c4:c3:54:f6:f3:ef:58:9d:3e:91:86:a0:ac: 54:72:df:5b:cd:46:93:46:e7:63:2e:f7:13:71:0b:3a:ea:26: d6:6e:21:ce:73:a9:92:88:0d:7b:51:ff:6f:29:cf:5f:5b:99: c2:4d:ce:b9:b5:35:76:01:5d:08:af:c2:c8:9a:65:d1:c7:f8: 14:51:83:76:11:da:3c:05:04:c7:6c:09:f4:d5:2c:3e:bb:8b: 69:60:2b:66:8c:7a:db:6a:e8:05:ab:cb:d4:0a:c0:a1:5a:5e: 70:92:29:f8:b8:12:9f:b2:6f:3e:1d:15:2b:f4:30:56:44:66: e0:28:9e:1e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/8ZrI/JUSn4vJ89kZSmMRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDZjNDE5MDliMDM2Zjg3MTIwYzFmNTgyYzA0Mzg1YWNiOTY5NTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAretimUkNxiOnxD3PE88HY+suNlSs 3bQBmm9ZVkG5Onf1WXgcdQpVxQWYtLpi5xoXc6+XeKESsJff8l6oVwBNgVFjOORQ 8BkrViYFBQkyKco3scZdaizb2EqenwWvAghYfYU9vdeFmngsyis/YwglCqas/9xg VCoObnUZJ2WJ+zu/hts8KiGY5IeFHmG9Vpz3Sp/a2kT2SWAuLdyqJ06BUgMJ70rX dlXwyq9c7tvAtY1LRhZ2nGcwwTWARWjIAsT0LocWcbNgBnyDPqC2GRPaFh/sQmMS PDCqUwxLm9GxcHU/bRI6f+YMX0CYrkfWskKutjGwiW/rIGamQh9EPieLewIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLBsQZCbA2+HEgwfWCwEOFrLlpUjMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvc0d4QmtKc0RiNGNTREI5WUxBUTRXc3VXbFNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiaAAwQA LiaCAwQA1BBQMA0GCSqGSIb3DQEBCwUAA4IBAQAmPvkLKGm9m0oeHeAuE3JjxaPe OMjLheFTzTHew+j8sRK7WWWtLkmVk+JbELs7C2pcY5NDL+0cLpm6e47iNswuL9qI ewdYZT2dkbbHhoPTdRwchWLTREHXF0jxjdfj0fXbprA0xd61Wt8uHvEhsr/G6ZuJ 6PyiJLzOdI9hbw/YNzILccTDVPbz71idPpGGoKxUct9bzUaTRudjLvcTcQs66ibW biHOc6mSiA17Uf9vKc9fW5nCTc65tTV2AV0Ir8LImmXRx/gUUYN2Edo8BQTHbAn0 1Sw+u4tpYCtmjHrbaugFq8vUCsChWl5wkin4uBKfsm8+HRUr9DBWRGbgKJ4e -----END CERTIFICATE-----Generated at Wed Jan 21 04:03:11 2026 by rpki-client