This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/SBUsospASb3EsMhP62NmTHT6SVw.roa File: SBUsospASb3EsMhP62NmTHT6SVw.roa (raw, json) Hash identifier: 0+KXBZnA9I41d7SaRHS/S7In8wI7A6juxPzuhg0b63k= Subject key identifier: 48:15:2C:A2:CA:40:49:BD:C4:B0:C8:4F:EB:63:66:4C:74:FA:49:5C Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0 Certificate serial: 019B76EB91F799D793127F21AAD5742FB76F Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/SBUsospASb3EsMhP62NmTHT6SVw.roa Signing time: Thu 01 Jan 2026 00:18:28 +0000 ROA not before: Thu 01 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 91.234.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:91:f7:99:d7:93:12:7f:21:aa:d5:74:2f:b7:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0 Validity Not Before: Jan 1 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48152ca2ca4049bdc4b0c84feb63664c74fa495c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b3:db:16:d5:4a:38:1f:4e:f5:9e:54:f4:8f: 8a:5f:b0:35:05:f4:68:71:f1:59:af:48:40:c7:b9: 99:61:ea:d4:e2:1d:b5:0c:70:df:cf:cb:af:77:94: 7e:e0:de:08:02:56:49:66:60:ee:fa:72:01:96:4c: 37:8d:fb:a1:e7:c2:42:67:4c:36:58:ac:f9:5d:de: de:6b:62:ce:04:09:b5:84:49:16:81:79:06:8d:8d: bc:aa:14:5d:db:1d:d5:0e:c1:9f:85:a4:2c:0b:ca: 92:57:1b:1d:ac:b3:7d:0a:aa:6e:97:a9:5d:78:85: 53:48:bf:3b:ff:33:f7:9a:ea:cf:a7:24:79:75:04: 2c:60:56:14:80:70:e5:de:6d:0e:6e:e9:3c:9a:9f: 6b:bc:ac:0f:f5:3a:b7:4f:b4:17:57:e3:e3:5c:0c: 58:ae:17:ff:b3:bb:1a:33:11:8a:b1:77:23:48:d0: 02:c8:c1:c1:e4:5d:7e:19:62:b6:45:54:d8:35:30: 05:b7:b3:2a:6c:eb:bd:e1:72:b3:fa:5e:f5:5f:5e: c4:a9:c8:ca:67:2e:5b:fc:2f:95:62:ef:72:94:cc: bf:d1:42:cd:53:e0:b9:d4:9a:6a:88:a9:ce:f4:b3: 08:d2:89:33:6b:5d:42:bf:13:e9:d7:14:44:38:de: c6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:15:2C:A2:CA:40:49:BD:C4:B0:C8:4F:EB:63:66:4C:74:FA:49:5C X509v3 Authority Key Identifier: keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/SBUsospASb3EsMhP62NmTHT6SVw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.38.0/24 Signature Algorithm: sha256WithRSAEncryption 68:c9:3b:85:b9:83:db:bf:d8:b3:aa:ee:6e:d5:cb:40:34:e8: a9:9e:93:59:37:9c:b4:5e:df:3a:7b:f9:fc:28:f3:3b:c4:9a: 42:e8:d0:10:8d:bb:fc:4b:05:cc:e8:3b:f7:07:70:27:9b:4e: 33:ce:21:1f:1a:a6:f6:3e:9f:aa:b4:70:9d:06:dd:f5:de:b2: 61:a5:b2:06:c8:a7:70:36:79:62:97:ae:89:a8:ae:3f:61:fb: f7:f1:1e:dc:f5:8b:8b:65:de:b0:6f:be:41:8d:b9:db:c5:84: 2c:28:cc:27:3c:3a:d4:7e:f4:de:58:b6:3f:32:09:4a:c0:4a: 8c:42:39:9c:fc:14:21:78:4b:d0:10:1d:3c:51:ba:06:5b:4f: bb:2e:12:74:0e:c8:4a:83:b3:7e:32:cc:02:91:20:f6:0f:15: 97:d2:70:dd:27:df:5b:1d:a1:9e:67:db:c8:e9:8f:bf:ce:32: cd:cd:ad:eb:0f:e7:1e:d3:26:95:bb:3b:8f:4d:a6:34:3e:7b: 25:0c:61:c6:c5:56:21:c7:93:b1:e8:40:8a:a0:ed:1d:f9:b3: 62:0a:f6:49:54:bb:a9:29:3e:1f:3b:7d:71:12:dd:e4:19:51: 97:bb:59:1a:d3:5a:b2:40:bc:2e:ed:8c:44:b8:03:54:d0:03: 38:29:c3:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt265H3mdeTEn8hqtV0L7dvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NGQ0NzRmOTQ2OTRhODEwNGY1ZTQxM2FiMmI5YzA5NTU5 Yjc5ZjAwHhcNMjYwMTAxMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODE1MmNhMmNhNDA0OWJkYzRiMGM4NGZlYjYzNjY0Yzc0ZmE0OTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbPbFtVKOB9O9Z5U9I+KX7A1BfRo cfFZr0hAx7mZYerU4h21DHDfz8uvd5R+4N4IAlZJZmDu+nIBlkw3jfuh58JCZ0w2 WKz5Xd7ea2LOBAm1hEkWgXkGjY28qhRd2x3VDsGfhaQsC8qSVxsdrLN9Cqpul6ld eIVTSL87/zP3murPpyR5dQQsYFYUgHDl3m0Obuk8mp9rvKwP9Tq3T7QXV+PjXAxY rhf/s7saMxGKsXcjSNACyMHB5F1+GWK2RVTYNTAFt7MqbOu94XKz+l71X17EqcjK Zy5b/C+VYu9ylMy/0ULNU+C51JpqiKnO9LMI0okza11CvxPp1xREON7GEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEgVLKLKQEm9xLDIT+tjZkx0+klcMB8GA1UdIwQY MBaAFEdNR0+UaUqBBPXkE6srnAlVm3nwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82MzhiYzMtZTk0NS00MDBhLWFmNzkt MGI2ZjAwMmQxOTc4LzEvU0JVc29zcEFTYjNFc01oUDYyTm1USFQ2U1Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny82MzhiYzMtZTk0NS00MDBhLWFmNzktMGI2ZjAwMmQxOTc4 LzEvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+omMA0G CSqGSIb3DQEBCwUAA4IBAQBoyTuFuYPbv9izqu5u1ctANOipnpNZN5y0Xt86e/n8 KPM7xJpC6NAQjbv8SwXM6Dv3B3Anm04zziEfGqb2Pp+qtHCdBt313rJhpbIGyKdw Nnlil66JqK4/Yfv38R7c9YuLZd6wb75BjbnbxYQsKMwnPDrUfvTeWLY/MglKwEqM Qjmc/BQheEvQEB08UboGW0+7LhJ0DshKg7N+MswCkSD2DxWX0nDdJ99bHaGeZ9vI 6Y+/zjLNza3rD+ce0yaVuzuPTaY0PnslDGHGxVYhx5Ox6ECKoO0d+bNiCvZJVLup KT4fO31xEt3kGVGXu1ka01qyQLwu7YxEuANU0AM4KcOw -----END CERTIFICATE-----Generated at Mon Jan 26 23:22:55 2026 by rpki-client