This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/SFjSKjgK7K-f57WPswPIRMcf7no.roa File: SFjSKjgK7K-f57WPswPIRMcf7no.roa (raw, json) Hash identifier: GVCqmDFqdp6iu7oXTwzlvXJdDa6NYO1O4EIga3sM9XM= Subject key identifier: 48:58:D2:2A:38:0A:EC:AF:9F:E7:B5:8F:B3:03:C8:44:C7:1F:EE:7A Certificate issuer: /CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a Certificate serial: 019B7CED5BE33716AC481377F83562023408 Authority key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/SFjSKjgK7K-f57WPswPIRMcf7no.roa Signing time: Fri 02 Jan 2026 04:18:08 +0000 ROA not before: Fri 02 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 91.211.196.0/22 maxlen: 24 193.109.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:5b:e3:37:16:ac:48:13:77:f8:35:62:02:34:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a Validity Not Before: Jan 2 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4858d22a380aecaf9fe7b58fb303c844c71fee7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:eb:35:0b:6e:96:37:2a:cf:f7:4a:89:80:80: 30:72:9e:5f:28:e6:1c:c8:d2:a1:50:9d:15:51:02: 40:bd:42:cd:f6:ab:8a:42:b2:bc:d7:e3:46:ff:de: 6a:2a:cf:5e:58:05:93:eb:98:df:14:fc:82:65:fe: bf:a3:ab:e9:98:a0:5b:9b:94:c7:0c:8c:e0:50:d9: 2d:e7:61:fd:6b:e9:fd:ed:0c:b8:3a:a9:f5:5b:4c: 1c:b2:07:ae:5b:22:69:98:91:15:68:df:c5:bc:fe: 50:b2:ef:5d:86:4e:00:7a:a1:35:6f:53:bc:97:31: 9e:9b:fd:74:81:65:84:30:d8:ae:e8:b2:d3:94:6b: af:4f:50:bb:7c:a0:17:be:04:bb:2b:de:a7:11:c7: 45:ad:24:92:00:c2:ca:34:86:ed:27:b2:64:55:24: 8f:4a:69:60:05:1d:67:e1:e1:33:fd:3e:88:c7:3d: bc:82:68:c2:ec:65:40:45:d2:dc:cd:43:0d:a9:76: 90:4c:e7:5b:f9:2b:47:e8:93:64:b4:18:5a:26:d8: 44:e2:86:29:13:1e:c0:d0:98:10:69:f0:c8:73:f9: e5:84:1c:0e:24:5d:53:2f:52:29:9a:8b:0b:0f:c6: cc:14:f2:8f:4b:36:4c:b0:9f:97:3a:a9:76:47:48: 23:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:58:D2:2A:38:0A:EC:AF:9F:E7:B5:8F:B3:03:C8:44:C7:1F:EE:7A X509v3 Authority Key Identifier: keyid:3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/SFjSKjgK7K-f57WPswPIRMcf7no.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.196.0/22 193.109.152.0/21 Signature Algorithm: sha256WithRSAEncryption 6e:39:cd:4d:57:ac:99:0c:cf:f3:20:34:bb:48:89:2d:da:ee: 36:4d:a3:f1:25:a4:6f:29:ed:09:f7:c2:55:31:52:e7:90:47: bb:64:90:a7:d6:67:c2:49:fa:3e:3a:7b:37:88:be:e4:ab:f0: 9e:3e:92:72:51:2a:8a:27:b5:5e:11:03:fd:8d:98:c0:c6:b5: 8b:d6:2a:6d:b1:d8:05:e6:90:5c:38:73:eb:12:ca:2a:a4:7d: 68:9d:5b:0d:44:14:86:b9:29:1c:12:d0:cd:f8:56:5b:bd:24: 0f:bb:31:18:16:fd:ab:45:0e:a4:25:c8:be:98:ff:12:f7:de: 0a:53:d9:be:14:f9:50:49:d7:06:f6:97:de:5e:36:4e:40:8e: 6e:30:7f:ea:1e:0c:7d:0d:b0:b9:92:0d:f8:58:3c:92:21:e2: 99:6d:f3:a3:c7:2f:84:3e:61:5c:a8:75:8b:f7:af:6a:45:51: db:af:e9:d2:2a:20:bc:d2:7c:fc:23:a3:be:4d:16:10:07:a5: 63:4d:bd:58:24:03:b9:89:35:d3:89:b0:9f:59:40:5d:15:0f: f3:c4:26:90:c2:fe:cb:4b:12:b0:ac:ed:65:e6:7b:6e:2a:07: e6:8d:df:c9:c8:75:08:4b:44:b7:e5:59:6d:fb:ea:28:ee:82: 5d:fd:3a:45 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87VvjNxasSBN3+DViAjQIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNWZjNjliN2M2ZWU4Njk5MzBjZTBiODM5MWVlNWQ4NGM1 MzQ5NGEwHhcNMjYwMTAyMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODU4ZDIyYTM4MGFlY2FmOWZlN2I1OGZiMzAzYzg0NGM3MWZlZTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxes1C26WNyrP90qJgIAwcp5fKOYc yNKhUJ0VUQJAvULN9quKQrK81+NG/95qKs9eWAWT65jfFPyCZf6/o6vpmKBbm5TH DIzgUNkt52H9a+n97Qy4Oqn1W0wcsgeuWyJpmJEVaN/FvP5Qsu9dhk4AeqE1b1O8 lzGem/10gWWEMNiu6LLTlGuvT1C7fKAXvgS7K96nEcdFrSSSAMLKNIbtJ7JkVSSP SmlgBR1n4eEz/T6Ixz28gmjC7GVARdLczUMNqXaQTOdb+StH6JNktBhaJthE4oYp Ex7A0JgQafDIc/nlhBwOJF1TL1IpmosLD8bMFPKPSzZMsJ+XOql2R0gjNQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEhY0io4Cuyvn+e1j7MDyETHH+56MB8GA1UdIwQY MBaAFDtfxpt8buhpkwzguDke5dhMU0lKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFfR20zeHU2R21URE9DNE9SN2wyRXhUU1VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83YzE3MjctOWVhZi00OWM5LWFhZmMt Zjk5NDUzYTk1YTk5LzEvU0ZqU0tqZ0s3Sy1mNTdXUHN3UElSTWNmN25vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC83YzE3MjctOWVhZi00OWM5LWFhZmMtZjk5NDUzYTk1YTk5 LzEvTzFfR20zeHU2R21URE9DNE9SN2wyRXhUU1VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW9PEAwQD wW2YMA0GCSqGSIb3DQEBCwUAA4IBAQBuOc1NV6yZDM/zIDS7SIkt2u42TaPxJaRv Ke0J98JVMVLnkEe7ZJCn1mfCSfo+Ons3iL7kq/CePpJyUSqKJ7VeEQP9jZjAxrWL 1iptsdgF5pBcOHPrEsoqpH1onVsNRBSGuSkcEtDN+FZbvSQPuzEYFv2rRQ6kJci+ mP8S994KU9m+FPlQSdcG9pfeXjZOQI5uMH/qHgx9DbC5kg34WDySIeKZbfOjxy+E PmFcqHWL969qRVHbr+nSKiC80nz8I6O+TRYQB6VjTb1YJAO5iTXTibCfWUBdFQ/z xCaQwv7LSxKwrO1l5ntuKgfmjd/JyHUIS0S35Vlt++oo7oJd/TpF -----END CERTIFICATE-----Generated at Fri Jan 2 09:26:54 2026 by rpki-client