This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/sAyU4xMSkCbUXtQYlQLKAGvYiQo.roa File: sAyU4xMSkCbUXtQYlQLKAGvYiQo.roa (raw, json) Hash identifier: RkRCTXNlSFMbpkEpwodFQykpZIZOApT+g3O1/9JWMjA= Subject key identifier: B0:0C:94:E3:13:12:90:26:D4:5E:D4:18:95:02:CA:00:6B:D8:89:0A Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F159C1C722557A72CC760771723CDF7 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/sAyU4xMSkCbUXtQYlQLKAGvYiQo.roa Signing time: Fri 02 Jan 2026 14:21:21 +0000 ROA not before: Fri 02 Jan 2026 14:21:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12874 IP address blocks: 2.16.17.0/24 maxlen: 24 2.19.179.0/24 maxlen: 24 80.67.66.0/24 maxlen: 24 84.53.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:9c:1c:72:25:57:a7:2c:c7:60:77:17:23:cd:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b00c94e313129026d45ed4189502ca006bd8890a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:71:24:66:f0:fd:18:fc:fc:cd:bd:e8:57:01: 06:0a:9c:96:5b:d3:5c:bf:28:e8:85:36:cd:72:98: 4e:fe:34:07:4f:15:e9:ec:b9:e2:56:a4:69:d7:7e: e4:5d:fa:60:ab:2d:a4:52:cc:7e:a1:22:c2:3b:d7: 56:c3:77:b8:51:f6:4e:92:c8:1f:fd:31:a4:61:ea: 56:80:b5:4d:04:38:33:a6:41:0f:55:ab:dc:77:76: 8d:2f:61:80:b9:94:8d:d5:27:ee:21:cd:33:e4:8c: 09:4d:cf:cc:bf:1c:d3:a3:11:2a:e2:5e:1f:9d:ed: c6:f3:27:1c:95:0e:38:49:3b:14:d7:86:6f:42:3f: 53:d5:ea:fb:f3:85:29:a2:9f:89:95:ca:2d:ca:7f: 60:bf:5e:96:16:36:57:9c:fd:bb:98:ba:7a:31:cf: 54:50:98:61:fa:e9:5e:80:06:78:07:2d:14:70:8b: 46:df:67:d6:e5:f0:b3:25:2d:cc:7f:4c:47:6a:12: 25:0e:23:c1:e6:b9:53:df:f6:ef:be:88:7e:21:5e: 94:a2:53:87:75:66:64:97:de:26:b6:a8:fc:11:c3: 6c:ca:2b:92:ce:60:e3:a3:f4:15:a9:11:b1:ce:6a: 72:a9:c3:99:87:7c:1b:57:06:39:7b:48:1f:80:8c: 24:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0C:94:E3:13:12:90:26:D4:5E:D4:18:95:02:CA:00:6B:D8:89:0A X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/sAyU4xMSkCbUXtQYlQLKAGvYiQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.16.17.0/24 2.19.179.0/24 80.67.66.0/24 84.53.184.0/24 Signature Algorithm: sha256WithRSAEncryption 56:f7:de:86:01:c5:f8:b4:1f:2a:8c:42:27:e4:69:29:23:0e: 96:e2:66:c7:a1:33:33:df:ba:67:3d:08:d4:c0:4b:fc:31:9e: a3:32:09:25:85:4d:53:24:36:89:94:c7:87:a4:2f:6e:ab:1b: 7c:96:64:01:6d:d0:21:99:3c:4d:a0:09:c4:02:14:e7:40:b2: 8a:09:b0:81:31:be:f5:1e:b5:eb:d8:34:81:f4:91:b6:db:aa: 46:bb:bd:51:2b:a5:0f:95:db:3c:9d:ab:5e:27:b3:bd:c4:91: 09:df:81:24:ef:eb:b5:8f:a2:2d:24:34:de:77:ad:2e:a2:4c: 80:ac:7f:13:0a:ca:ef:be:4f:da:16:e5:35:7d:5c:79:f4:bf: ae:2e:96:38:29:2a:e3:67:69:c4:75:e7:38:c4:00:99:87:12: 8b:51:97:a8:11:c1:a6:6b:07:2e:68:f5:d0:e0:3c:17:f6:9a: 25:d0:4f:88:40:98:69:a1:f8:1b:73:a5:01:5a:5d:e9:27:97: 50:1a:66:fa:56:ee:b5:a9:ed:40:d2:5d:de:8a:19:07:d7:b1: 89:0b:37:e8:5a:fe:b1:15:56:ff:81:60:23:e1:0c:d3:e9:50: f6:39:ff:06:86:08:4e:6b:27:ba:4a:e6:29:07:ff:60:15:59: 30:c7:03:2d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FZwcciVXpyzHYHcXI833MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDBjOTRlMzEzMTI5MDI2ZDQ1ZWQ0MTg5NTAyY2EwMDZiZDg4OTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HEkZvD9GPz8zb3oVwEGCpyWW9Nc vyjohTbNcphO/jQHTxXp7LniVqRp137kXfpgqy2kUsx+oSLCO9dWw3e4UfZOksgf /TGkYepWgLVNBDgzpkEPVavcd3aNL2GAuZSN1SfuIc0z5IwJTc/MvxzToxEq4l4f ne3G8ycclQ44STsU14ZvQj9T1er784Upop+Jlcotyn9gv16WFjZXnP27mLp6Mc9U UJhh+ulegAZ4By0UcItG32fW5fCzJS3Mf0xHahIlDiPB5rlT3/bvvoh+IV6UolOH dWZkl94mtqj8EcNsyiuSzmDjo/QVqRGxzmpyqcOZh3wbVwY5e0gfgIwkAQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLAMlOMTEpAm1F7UGJUCygBr2IkKMB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvc0F5VTR4TVNrQ2JVWHRRWWxRTEtBR3ZZaVFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAAhARAwQA AhOzAwQAUENCAwQAVDW4MA0GCSqGSIb3DQEBCwUAA4IBAQBW996GAcX4tB8qjEIn 5GkpIw6W4mbHoTMz37pnPQjUwEv8MZ6jMgklhU1TJDaJlMeHpC9uqxt8lmQBbdAh mTxNoAnEAhTnQLKKCbCBMb71HrXr2DSB9JG226pGu71RK6UPlds8nateJ7O9xJEJ 34Ek7+u1j6ItJDTed60uokyArH8TCsrvvk/aFuU1fVx59L+uLpY4KSrjZ2nEdec4 xACZhxKLUZeoEcGmawcuaPXQ4DwX9pol0E+IQJhpofgbc6UBWl3pJ5dQGmb6Vu61 qe1A0l3eihkH17GJCzfoWv6xFVb/gWAj4QzT6VD2Of8GhghOaye6SuYpB/9gFVkw xwMt -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:42 2026 by rpki-client