This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/1SJhyocRudC4i3a4wpxvnXhK1TE.roa File: 1SJhyocRudC4i3a4wpxvnXhK1TE.roa (raw, json) Hash identifier: Q8DohD/O4S8CVYT18myTFMGAt4L6+jeYMfQ4zRODCWc= Subject key identifier: D5:22:61:CA:87:11:B9:D0:B8:8B:76:B8:C2:9C:6F:9D:78:4A:D5:31 Certificate issuer: /CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123 Certificate serial: 019B7C1144683C088476193981926F47D2C8 Authority key identifier: 30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/1SJhyocRudC4i3a4wpxvnXhK1TE.roa Signing time: Fri 02 Jan 2026 00:17:45 +0000 ROA not before: Fri 02 Jan 2026 00:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 195.184.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.mft rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:44:68:3c:08:84:76:19:39:81:92:6f:47:d2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30160a1fc6282f5782a7a8a7ea0ed206b9444123 Validity Not Before: Jan 2 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d52261ca8711b9d0b88b76b8c29c6f9d784ad531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7a:9b:80:b6:ef:d1:77:a4:7b:fb:e6:4e:30: e6:f8:3e:a4:4c:c5:24:7d:fe:01:10:c4:b5:b2:86: 95:ca:83:ef:69:62:b2:48:49:83:d6:02:b0:5b:6e: 59:e6:13:ff:62:23:d1:d0:73:a4:ac:30:2b:30:11: ae:3c:82:6f:d1:f5:0f:25:a9:c9:fb:5f:2f:0f:64: 39:04:46:21:51:07:99:a9:53:fc:d4:b3:e1:7c:f9: 10:01:aa:5b:4e:36:60:6e:21:cf:6b:a2:9e:3b:8d: c3:d2:54:68:ba:36:43:be:fa:c7:49:da:29:f4:bf: e2:d6:42:c8:22:1c:8f:f3:b8:e8:65:df:d2:c6:85: 69:e0:78:b9:be:39:10:bf:95:4a:3b:ed:f8:75:aa: 05:09:b3:86:05:fa:df:b2:3a:61:54:fe:bc:36:fb: 27:9a:df:34:11:73:44:82:d4:3b:88:3b:9d:e9:55: 9d:fc:3d:96:c7:77:87:d2:2d:ab:a0:7c:9e:0d:d5: 48:f7:03:fd:96:b5:a5:c6:80:33:95:a5:6c:21:84: fb:97:ba:bb:3f:46:47:65:44:e0:bb:cf:0f:d8:1f: 03:b2:da:06:b7:20:11:97:a5:03:27:d1:51:00:3f: 28:96:5d:74:21:3f:2f:9f:14:ee:30:1a:3e:d7:ed: c0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:22:61:CA:87:11:B9:D0:B8:8B:76:B8:C2:9C:6F:9D:78:4A:D5:31 X509v3 Authority Key Identifier: keyid:30:16:0A:1F:C6:28:2F:57:82:A7:A8:A7:EA:0E:D2:06:B9:44:41:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBYKH8YoL1eCp6in6g7SBrlEQSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/1SJhyocRudC4i3a4wpxvnXhK1TE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ccdc8f-285d-43b6-8def-4b39fcabc371/1/MBYKH8YoL1eCp6in6g7SBrlEQSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.184.249.0/24 Signature Algorithm: sha256WithRSAEncryption 87:8a:4d:71:24:24:76:5e:f1:a6:0f:0e:79:fa:c6:3d:08:5f: 5a:11:74:d6:0e:05:3c:32:3d:0e:ec:e6:8d:f0:b8:d9:50:3c: 51:c9:41:96:b2:1a:19:01:c8:96:b6:a4:a4:4b:32:68:70:52: 30:c9:a3:74:f2:80:3e:a5:ec:b3:41:d5:08:a2:9b:5c:91:5d: 0a:0d:d3:bd:f8:85:b9:4b:4e:93:89:3f:91:d3:a3:10:bb:31: 29:57:43:b2:d8:61:a8:bd:93:d2:a8:fe:c9:79:1d:d3:ff:b6: f4:9c:5c:1e:8c:6b:4e:16:14:86:84:26:21:16:29:b2:94:8f: da:d3:d6:f1:75:05:d1:fb:d9:c0:01:ec:ba:a2:34:21:ba:50: f7:00:f5:39:ff:da:d9:4b:d8:23:4a:b5:08:69:ed:39:0c:36: f2:23:e1:c0:a2:37:2a:fc:30:24:87:8c:84:eb:12:47:fd:fb: ee:c7:9d:dc:41:76:c1:20:95:eb:49:b0:3a:79:58:73:cb:90: 4b:1a:7a:b0:cc:97:26:9a:b0:e6:d3:1a:e7:f8:aa:0f:e8:9a: a7:31:eb:95:96:b5:5b:d0:3e:a7:85:dd:4c:6e:e1:0a:4c:02: bb:28:f0:84:63:f1:fe:e3:27:b4:34:95:c3:11:fc:89:14:f9: 6a:31:63:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EURoPAiEdhk5gZJvR9LIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTYwYTFmYzYyODJmNTc4MmE3YThhN2VhMGVkMjA2Yjk0 NDQxMjMwHhcNMjYwMTAyMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTIyNjFjYTg3MTFiOWQwYjg4Yjc2YjhjMjljNmY5ZDc4NGFkNTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3qbgLbv0Xeke/vmTjDm+D6kTMUk ff4BEMS1soaVyoPvaWKySEmD1gKwW25Z5hP/YiPR0HOkrDArMBGuPIJv0fUPJanJ +18vD2Q5BEYhUQeZqVP81LPhfPkQAapbTjZgbiHPa6KeO43D0lRoujZDvvrHSdop 9L/i1kLIIhyP87joZd/SxoVp4Hi5vjkQv5VKO+34daoFCbOGBfrfsjphVP68Nvsn mt80EXNEgtQ7iDud6VWd/D2Wx3eH0i2roHyeDdVI9wP9lrWlxoAzlaVsIYT7l7q7 P0ZHZUTgu88P2B8DstoGtyARl6UDJ9FRAD8oll10IT8vnxTuMBo+1+3AIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNUiYcqHEbnQuIt2uMKcb514StUxMB8GA1UdIwQY MBaAFDAWCh/GKC9Xgqeop+oO0ga5REEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJZS0g4WW9MMWVDcDZpbjZnN1NCcmxFUVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jY2RjOGYtMjg1ZC00M2I2LThkZWYt NGIzOWZjYWJjMzcxLzEvMVNKaHlvY1J1ZEM0aTNhNHdweHZuWGhLMVRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9jY2RjOGYtMjg1ZC00M2I2LThkZWYtNGIzOWZjYWJjMzcx LzEvTUJZS0g4WW9MMWVDcDZpbjZnN1NCcmxFUVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7j5MA0G CSqGSIb3DQEBCwUAA4IBAQCHik1xJCR2XvGmDw55+sY9CF9aEXTWDgU8Mj0O7OaN 8LjZUDxRyUGWshoZAciWtqSkSzJocFIwyaN08oA+peyzQdUIoptckV0KDdO9+IW5 S06TiT+R06MQuzEpV0Oy2GGovZPSqP7JeR3T/7b0nFwejGtOFhSGhCYhFimylI/a 09bxdQXR+9nAAey6ojQhulD3APU5/9rZS9gjSrUIae05DDbyI+HAojcq/DAkh4yE 6xJH/fvux53cQXbBIJXrSbA6eVhzy5BLGnqwzJcmmrDm0xrn+KoP6JqnMeuVlrVb 0D6nhd1MbuEKTAK7KPCEY/H+4ye0NJXDEfyJFPlqMWOe -----END CERTIFICATE-----Generated at Fri Jan 9 17:07:00 2026 by rpki-client