This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/SA61zsgG810GXWoVTQr9UfM3Akc.roa File: SA61zsgG810GXWoVTQr9UfM3Akc.roa (raw, json) Hash identifier: sowBWjgYryIo2nwKnfPLsbqzgHkt4JyZalRf+7yBWok= Subject key identifier: 48:0E:B5:CE:C8:06:F3:5D:06:5D:6A:15:4D:0A:FD:51:F3:37:02:47 Certificate issuer: /CN=b328fe258a1b9bf6148a6ce0e8a712f18840904c Certificate serial: 019B7AC89326E9C8725B0622A28A9F39286D Authority key identifier: B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/SA61zsgG810GXWoVTQr9UfM3Akc.roa Signing time: Thu 01 Jan 2026 18:18:43 +0000 ROA not before: Thu 01 Jan 2026 18:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25459 IP address blocks: 83.172.128.0/22 maxlen: 22 83.172.132.0/23 maxlen: 23 83.172.160.0/23 maxlen: 23 83.172.180.0/22 maxlen: 22 83.172.188.0/23 maxlen: 23 2a02:cec0::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:93:26:e9:c8:72:5b:06:22:a2:8a:9f:39:28:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b328fe258a1b9bf6148a6ce0e8a712f18840904c Validity Not Before: Jan 1 18:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=480eb5cec806f35d065d6a154d0afd51f3370247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:3f:60:8b:49:9d:a4:f2:71:7e:5b:e0:67: 18:33:05:1e:f5:ae:a3:c9:24:60:42:08:3d:64:9c: 35:f3:cf:ab:aa:0d:99:71:f0:4c:36:78:c8:22:ad: bd:ba:f3:8f:36:44:c4:63:be:bc:dc:e6:ba:35:8f: 65:16:01:44:b0:d4:86:09:2e:66:4f:12:8f:19:0a: 5d:ee:4a:cc:fe:4f:76:a0:24:ff:d5:af:5f:53:8a: 91:7e:55:0b:11:77:c3:3f:52:0b:91:33:08:08:08: 09:6d:8a:1d:ae:da:7b:6d:5c:da:2d:b3:20:0a:29: e8:23:44:43:4c:56:ae:cf:2f:92:c2:85:19:1c:1f: 58:42:73:71:cc:87:d6:61:45:5a:33:42:23:c5:0e: 11:4f:e1:3f:c4:98:fc:ac:47:cd:cd:da:db:34:38: d9:dc:6b:31:35:f8:52:37:3b:62:b6:45:39:2d:6d: dc:33:4a:c2:48:3a:99:ce:12:b5:30:df:c8:2c:61: ee:1a:4c:a9:1a:35:0f:d2:d6:7a:a5:2f:5c:12:8d: 3c:3a:e0:9a:87:7c:7c:38:96:73:2a:e5:77:c4:04: b2:85:a7:7f:62:3c:f8:22:b6:c8:8b:d3:28:15:5b: 28:fc:15:3c:08:cb:7c:6c:e6:f7:b6:1d:53:39:ec: 2a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0E:B5:CE:C8:06:F3:5D:06:5D:6A:15:4D:0A:FD:51:F3:37:02:47 X509v3 Authority Key Identifier: keyid:B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/SA61zsgG810GXWoVTQr9UfM3Akc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.172.128.0-83.172.133.255 83.172.160.0/23 83.172.180.0/22 83.172.188.0/23 IPv6: 2a02:cec0::/30 Signature Algorithm: sha256WithRSAEncryption 47:5e:fd:99:9e:3e:f2:9a:f2:87:72:ee:0a:ef:41:3e:57:38: cb:48:e0:a2:2f:ff:3c:4a:68:da:69:ba:79:a7:26:e7:1f:73: 05:58:f2:9e:30:a0:57:51:ec:1b:fa:2d:51:c5:98:9d:4e:78: 4d:f8:38:7e:a2:a1:a6:c4:c4:50:2f:64:d8:85:d2:b5:bc:51: a4:b0:5c:29:4b:f6:32:bb:19:88:bf:a7:c8:f4:68:fa:48:b5: 27:64:00:6d:8f:86:e3:55:d4:f7:12:23:07:83:3a:59:d3:71: d8:02:15:f3:e4:1c:31:ce:11:90:1f:d7:03:84:18:5a:3b:8e: 9f:14:b2:a3:53:53:ac:0e:5f:e9:91:ff:42:8e:e9:f6:87:17: 3e:0b:1b:39:95:73:4b:a9:0a:2a:39:04:72:3b:c5:a8:a5:ea: 99:a5:db:75:48:13:05:cc:67:40:65:c3:3c:28:40:ae:09:b5: ec:96:4f:b2:71:23:fb:ee:02:fc:1f:04:df:b2:18:cb:fc:be: 94:c1:db:de:63:c5:65:7c:d4:69:9d:5e:07:61:36:b1:95:3c: d7:d6:44:dd:8b:e0:85:ed:fb:ad:fa:27:27:64:4e:08:b4:ea: 59:56:40:71:6b:96:e5:39:6f:b5:04:44:93:44:fe:c2:d0:70: c7:6b:fa:53 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt6yJMm6chyWwYiooqfOShtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMjhmZTI1OGExYjliZjYxNDhhNmNlMGU4YTcxMmYxODg0 MDkwNGMwHhcNMjYwMTAxMTgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODBlYjVjZWM4MDZmMzVkMDY1ZDZhMTU0ZDBhZmQ1MWYzMzcwMjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Q/YItJnaTycX5b4GcYMwUe9a6j ySRgQgg9ZJw188+rqg2ZcfBMNnjIIq29uvOPNkTEY7683Oa6NY9lFgFEsNSGCS5m TxKPGQpd7krM/k92oCT/1a9fU4qRflULEXfDP1ILkTMICAgJbYodrtp7bVzaLbMg CinoI0RDTFauzy+SwoUZHB9YQnNxzIfWYUVaM0IjxQ4RT+E/xJj8rEfNzdrbNDjZ 3GsxNfhSNztitkU5LW3cM0rCSDqZzhK1MN/ILGHuGkypGjUP0tZ6pS9cEo08OuCa h3x8OJZzKuV3xASyhad/Yjz4IrbIi9MoFVso/BU8CMt8bOb3th1TOewqhwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFEgOtc7IBvNdBl1qFU0K/VHzNwJHMB8GA1UdIwQY MBaAFLMo/iWKG5v2FIps4OinEvGIQJBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3lqLUpZb2JtX1lVaW16ZzZLY1M4WWhBa0V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hMTg4YmMtZGVlZS00MmVjLTgyODkt ZWQ4NGEwMDU4YTlmLzEvU0E2MXpzZ0c4MTBHWFdvVlRRcjlVZk0zQWtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hMTg4YmMtZGVlZS00MmVjLTgyODktZWQ4NGEwMDU4YTlm LzEvc3lqLUpZb2JtX1lVaW16ZzZLY1M4WWhBa0V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBAdTrIAD BAFTrIQDBAFTrKADBAJTrLQDBAFTrLwwDQQCAAIwBwMFAioCzsAwDQYJKoZIhvcN AQELBQADggEBAEde/ZmePvKa8ody7grvQT5XOMtI4KIv/zxKaNppunmnJucfcwVY 8p4woFdR7Bv6LVHFmJ1OeE34OH6ioabExFAvZNiF0rW8UaSwXClL9jK7GYi/p8j0 aPpItSdkAG2PhuNV1PcSIweDOlnTcdgCFfPkHDHOEZAf1wOEGFo7jp8UsqNTU6wO X+mR/0KO6faHFz4LGzmVc0upCio5BHI7xail6pml23VIEwXMZ0BlwzwoQK4JteyW T7JxI/vuAvwfBN+yGMv8vpTB295jxWV81GmdXgdhNrGVPNfWRN2L4IXt+636Jydk Tgi06llWQHFrluU5b7UERJNE/sLQcMdr+lM= -----END CERTIFICATE-----Generated at Mon Jan 26 20:26:07 2026 by rpki-client