This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/S0pVbx-v0aMF-649vkmXOkJ40sE.roa File: S0pVbx-v0aMF-649vkmXOkJ40sE.roa (raw, json) Hash identifier: Doh6QhRUJvlgcwbCfZxAEgxvc8Hffru4Kv7HD3Bi71E= Subject key identifier: 4B:4A:55:6F:1F:AF:D1:A3:05:FB:AE:3D:BE:49:97:3A:42:78:D2:C1 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC78D12A9391168FFCFBC0DAE1C1F98 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/S0pVbx-v0aMF-649vkmXOkJ40sE.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43278 IP address blocks: 85.8.186.0/24 maxlen: 24 91.220.80.0/24 maxlen: 24 194.147.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8d:12:a9:39:11:68:ff:cf:bc:0d:ae:1c:1f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b4a556f1fafd1a305fbae3dbe49973a4278d2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:ef:3d:45:bf:9d:fa:7d:66:4a:a2:86:7f: 29:e6:6c:05:f0:46:1d:84:f1:87:b3:9f:9b:5d:9d: 8c:3a:33:82:cf:ba:80:7f:b0:02:59:fb:f8:35:31: 25:cb:1d:5a:45:d6:c5:72:79:39:08:75:29:6c:aa: 9b:83:a5:83:22:12:85:3e:43:0a:78:4b:3b:7e:17: ee:15:9a:7d:41:1a:e8:d7:af:2a:c1:b3:60:52:d7: 01:7d:59:dc:8d:88:e2:1a:cb:08:ed:02:b8:38:68: e9:49:50:d6:6b:48:fd:c6:32:68:e0:9d:1a:3c:c0: 1a:b5:02:36:7e:b7:e2:07:da:e9:7a:a1:c5:7a:9c: b8:eb:c1:a1:a9:44:12:8d:4a:22:a5:7d:b2:48:b2: 9b:9b:bf:b4:a4:40:d6:04:c5:30:b5:f4:56:66:99: dc:8b:2f:88:65:24:8a:60:94:a6:1c:30:e4:02:5c: 92:ca:69:ec:50:fd:82:67:b7:52:78:31:4d:06:f1: 59:78:3c:a2:d0:99:ae:77:02:93:b4:47:ac:35:08: 6f:e4:58:d9:71:6a:7f:fe:18:c3:3e:dc:cd:c1:6d: f3:ea:61:22:23:98:e4:ce:36:ab:de:ab:6c:9c:29: 0c:9f:54:9d:77:f1:07:51:19:4e:99:0c:cb:ca:1c: bb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4A:55:6F:1F:AF:D1:A3:05:FB:AE:3D:BE:49:97:3A:42:78:D2:C1 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/S0pVbx-v0aMF-649vkmXOkJ40sE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.8.186.0/24 91.220.80.0/24 194.147.90.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:b6:1b:e3:2d:ae:c6:47:e8:5b:54:7b:41:5a:f8:cb:71:01: 3c:8c:7d:92:19:5c:f1:38:fc:08:c5:bf:a3:ad:22:3f:12:2c: df:44:bf:45:49:a8:0e:d9:d8:51:37:70:f5:e3:bd:ff:a3:fc: d6:f6:a3:68:51:57:fb:ed:e7:9c:fe:dd:b7:63:38:12:d7:bb: 75:61:46:17:b6:a9:bc:28:9b:36:33:a6:96:68:81:50:49:ea: cd:03:e0:bd:58:a8:77:71:ee:ad:09:75:c7:25:a3:dc:e5:d8: 44:c3:02:2d:d2:8c:a8:43:34:71:9d:41:b8:c5:0f:68:81:8c: 6a:0e:fb:3b:52:d8:e8:1f:5d:39:99:5c:67:5c:f0:eb:98:79: b9:54:58:ed:9b:f2:9f:20:a2:aa:2b:4d:af:7e:21:33:58:b6: 1e:62:08:2a:32:73:bb:df:ba:bd:39:fc:3a:6b:02:cf:a1:e4: 69:e8:b2:1a:08:15:55:f0:95:31:3d:92:f6:15:14:e0:1c:6f: e1:83:17:c8:69:07:71:8d:3c:af:bc:42:5b:1e:f6:c9:d7:93: e8:02:e7:72:88:49:41:1e:15:d7:ef:ba:be:9d:f1:f2:1a:a8: 09:37:9a:c2:78:a3:3a:18:46:4f:48:19:56:06:5e:e5:c5:39: f0:a6:3a:8e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6x40SqTkRaP/PvA2uHB+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjRhNTU2ZjFmYWZkMWEzMDVmYmFlM2RiZTQ5OTczYTQyNzhkMmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQrvPUW/nfp9Zkqihn8p5mwF8EYd hPGHs5+bXZ2MOjOCz7qAf7ACWfv4NTElyx1aRdbFcnk5CHUpbKqbg6WDIhKFPkMK eEs7fhfuFZp9QRro168qwbNgUtcBfVncjYjiGssI7QK4OGjpSVDWa0j9xjJo4J0a PMAatQI2frfiB9rpeqHFepy468GhqUQSjUoipX2ySLKbm7+0pEDWBMUwtfRWZpnc iy+IZSSKYJSmHDDkAlySymnsUP2CZ7dSeDFNBvFZeDyi0JmudwKTtEesNQhv5FjZ cWp//hjDPtzNwW3z6mEiI5jkzjar3qtsnCkMn1Sdd/EHURlOmQzLyhy71QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEtKVW8fr9GjBfuuPb5JlzpCeNLBMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvUzBwVmJ4LXYwYU1GLTY0OXZrbVhPa0o0MHNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVQi6AwQA W9xQAwQAwpNaMA0GCSqGSIb3DQEBCwUAA4IBAQCfthvjLa7GR+hbVHtBWvjLcQE8 jH2SGVzxOPwIxb+jrSI/EizfRL9FSagO2dhRN3D1473/o/zW9qNoUVf77eec/t23 YzgS17t1YUYXtqm8KJs2M6aWaIFQSerNA+C9WKh3ce6tCXXHJaPc5dhEwwIt0oyo QzRxnUG4xQ9ogYxqDvs7UtjoH105mVxnXPDrmHm5VFjtm/KfIKKqK02vfiEzWLYe YggqMnO737q9Ofw6awLPoeRp6LIaCBVV8JUxPZL2FRTgHG/hgxfIaQdxjTyvvEJb HvbJ15PoAudyiElBHhXX77q+nfHyGqgJN5rCeKM6GEZPSBlWBl7lxTnwpjqO -----END CERTIFICATE-----Generated at Mon Jan 19 20:36:28 2026 by rpki-client