This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/sMbSEv8BvKMigB2Rn06X1FTL_SY.roa File: sMbSEv8BvKMigB2Rn06X1FTL_SY.roa (raw, json) Hash identifier: zoPxy3TNXWePBCasNbP3BAKAAt1yNd6aywKgb4ChbyI= Subject key identifier: B0:C6:D2:12:FF:01:BC:A3:22:80:1D:91:9F:4E:97:D4:54:CB:FD:26 Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254 Certificate serial: 019B7910AC16834D058D6FF9B67608D3DCC8 Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/sMbSEv8BvKMigB2Rn06X1FTL_SY.roa Signing time: Thu 01 Jan 2026 10:18:14 +0000 ROA not before: Thu 01 Jan 2026 10:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133398 IP address blocks: 85.11.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ac:16:83:4d:05:8d:6f:f9:b6:76:08:d3:dc:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254 Validity Not Before: Jan 1 10:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0c6d212ff01bca322801d919f4e97d454cbfd26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:e4:ff:b7:d5:73:f2:df:a5:32:b6:7b:06: 11:db:0a:7a:f6:b3:e9:1e:27:dc:9f:5a:29:f6:5b: 26:d5:28:5a:db:a1:b4:e9:69:5a:d4:93:a6:0e:a7: e7:28:4e:06:10:26:32:12:b3:b2:d0:36:df:34:26: 12:55:ad:4c:14:8a:f5:fa:d3:c5:0f:6b:aa:6f:c3: f5:b9:88:18:ca:3b:d7:e6:67:6e:a3:63:53:ac:c8: 36:96:26:80:6b:5f:d0:3f:06:47:92:88:46:10:1e: 6c:35:17:ed:b0:c9:3a:ad:c8:73:cc:ae:eb:03:f5: 0b:42:6c:86:ea:e0:2f:29:a9:43:96:0c:b4:f5:00: 33:41:c6:d0:79:e1:23:09:ca:8a:13:d1:f8:c2:14: 6d:0b:42:19:e3:79:16:3d:bf:3e:c2:e6:68:f6:58: a0:7e:b8:bb:cf:78:85:d9:50:36:9f:6f:e3:97:60: 34:9c:d2:3f:ae:1b:d6:22:6a:d4:ec:c7:e0:f4:68: 62:2c:bb:fb:15:e6:33:fe:ba:e7:27:d2:45:35:80: 9d:ea:91:18:10:62:97:a9:00:07:2c:f8:14:3b:d5: 16:98:ec:ea:7b:d5:c9:d7:f5:4a:5b:29:2a:d2:5b: d2:07:ed:a1:3f:c8:85:fc:1d:88:0a:34:17:75:e4: e5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C6:D2:12:FF:01:BC:A3:22:80:1D:91:9F:4E:97:D4:54:CB:FD:26 X509v3 Authority Key Identifier: keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/sMbSEv8BvKMigB2Rn06X1FTL_SY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.11.161.0/24 Signature Algorithm: sha256WithRSAEncryption 67:42:9f:86:eb:dd:d5:17:28:de:14:9d:d0:07:95:12:74:15: 0a:fe:09:6d:50:0d:b5:79:b7:2f:88:bb:7c:58:75:48:ee:d9: df:67:dd:89:10:f6:0a:37:39:f3:88:76:ac:ae:f6:05:0c:7c: 1b:14:96:a4:b7:a7:9f:98:5e:a6:39:5e:eb:44:a9:01:4f:9d: 4e:06:c1:3a:f1:c9:e3:73:ed:f7:ef:b4:1d:b6:e1:95:84:36: 49:72:dd:8c:52:23:8a:16:ce:e1:5e:3b:0d:85:d0:cf:cf:a9: 98:dc:a1:01:d3:07:4a:99:8e:d8:5f:f1:3f:1b:97:b1:20:c0: 0b:7f:2f:da:d9:43:60:c0:cf:e4:5c:22:78:a7:c2:8c:f9:cb: be:e3:d0:9f:53:29:99:c1:9b:7f:bc:1e:f4:5f:06:5e:3d:82: 07:b5:ca:c5:37:20:43:3f:66:51:4b:e6:6f:3c:6e:7a:6b:bd: 47:12:df:a9:5a:8a:71:a0:65:5e:65:07:2e:ed:9b:6b:26:5c: 85:f6:fe:16:00:7c:1b:10:f9:cc:55:20:bc:81:9f:0b:f2:3e: 91:d5:3d:a7:ac:da:a5:ff:0b:d1:75:3c:30:bd:ad:8a:51:4e: 42:04:8c:41:9c:fe:dd:0a:3d:52:10:71:83:c3:bb:9c:c8:5a: 00:6a:65:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EKwWg00FjW/5tnYI09zIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh ZWYyNTQwHhcNMjYwMTAxMTAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGM2ZDIxMmZmMDFiY2EzMjI4MDFkOTE5ZjRlOTdkNDU0Y2JmZDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC/k/7fVc/LfpTK2ewYR2wp69rPp Hifcn1op9lsm1Sha26G06Wla1JOmDqfnKE4GECYyErOy0DbfNCYSVa1MFIr1+tPF D2uqb8P1uYgYyjvX5mduo2NTrMg2liaAa1/QPwZHkohGEB5sNRftsMk6rchzzK7r A/ULQmyG6uAvKalDlgy09QAzQcbQeeEjCcqKE9H4whRtC0IZ43kWPb8+wuZo9lig fri7z3iF2VA2n2/jl2A0nNI/rhvWImrU7Mfg9GhiLLv7FeYz/rrnJ9JFNYCd6pEY EGKXqQAHLPgUO9UWmOzqe9XJ1/VKWykq0lvSB+2hP8iF/B2ICjQXdeTlNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLDG0hL/AbyjIoAdkZ9Ol9RUy/0mMB8GA1UdIwQY MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt MmNjNjc1NzI2OTc1LzEvc01iU0V2OEJ2S01pZ0IyUm4wNlgxRlRMX1NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1 LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVQuhMA0G CSqGSIb3DQEBCwUAA4IBAQBnQp+G693VFyjeFJ3QB5USdBUK/gltUA21ebcviLt8 WHVI7tnfZ92JEPYKNznziHasrvYFDHwbFJakt6efmF6mOV7rRKkBT51OBsE68cnj c+3377QdtuGVhDZJct2MUiOKFs7hXjsNhdDPz6mY3KEB0wdKmY7YX/E/G5exIMAL fy/a2UNgwM/kXCJ4p8KM+cu+49CfUymZwZt/vB70XwZePYIHtcrFNyBDP2ZRS+Zv PG56a71HEt+pWopxoGVeZQcu7ZtrJlyF9v4WAHwbEPnMVSC8gZ8L8j6R1T2nrNql /wvRdTwwva2KUU5CBIxBnP7dCj1SEHGDw7ucyFoAamWU -----END CERTIFICATE-----Generated at Wed Jan 21 01:07:59 2026 by rpki-client