This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/SLDmAijGZOcd5frrWpDur506vuM.roa File: SLDmAijGZOcd5frrWpDur506vuM.roa (raw, json) Hash identifier: fXeTnCjaeXZCdY9tyeELwVUATm4Y5QQiz2mZBpqAt/g= Subject key identifier: 48:B0:E6:02:28:C6:64:E7:1D:E5:FA:EB:5A:90:EE:AF:9D:3A:BE:E3 Certificate issuer: /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0 Certificate serial: 019B9E4B010CA900064B3DD61C6149A49A82 Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/SLDmAijGZOcd5frrWpDur506vuM.roa Signing time: Thu 08 Jan 2026 15:47:54 +0000 ROA not before: Thu 08 Jan 2026 15:47:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 185.253.192.0/23 maxlen: 23 2a04:4c00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:4b:01:0c:a9:00:06:4b:3d:d6:1c:61:49:a4:9a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0 Validity Not Before: Jan 8 15:47:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48b0e60228c664e71de5faeb5a90eeaf9d3abee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:48:74:3f:1c:4a:99:5b:28:74:6b:aa:86: 53:1f:b0:25:f0:9b:98:51:ef:93:45:e9:ed:fd:8b: 0c:52:95:06:d3:77:e4:f0:ec:d3:b8:46:6d:15:fb: a0:c2:7b:8a:ee:b2:f6:0a:06:a6:f1:7f:c8:60:80: fb:40:16:60:3c:72:46:45:9e:9d:6a:d0:19:f1:9f: 30:e9:81:e8:1c:d0:9e:23:3e:06:08:ea:6e:46:be: 7d:fa:4f:16:53:b3:b5:06:b5:66:df:7d:ef:29:21: 0a:0a:80:99:ac:75:a1:91:f3:40:34:20:b7:14:b5: 2b:f8:d8:97:68:e0:6f:8a:95:a6:a5:34:75:64:e2: a0:2f:01:3d:4e:e5:1d:e2:f6:3b:6e:d7:3f:0f:cd: 98:9c:6c:67:62:a5:04:1b:d3:85:3f:f4:1f:08:21: 67:d8:80:8c:34:73:26:c6:a5:6f:a0:6d:3c:0c:bc: fb:18:45:a8:82:a1:f5:2a:9d:25:8e:42:b0:52:e6: 75:91:c8:c4:86:b6:37:6d:51:14:73:dc:06:0e:ab: aa:6a:6f:09:6e:d0:f5:da:e2:67:21:35:ee:ca:4c: c7:56:a5:50:e7:c1:19:8f:a1:2b:fd:b9:82:b9:e2: 56:75:9b:9e:62:bd:d0:e1:ae:6e:52:16:c2:9f:bb: 38:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B0:E6:02:28:C6:64:E7:1D:E5:FA:EB:5A:90:EE:AF:9D:3A:BE:E3 X509v3 Authority Key Identifier: keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/SLDmAijGZOcd5frrWpDur506vuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.192.0/23 IPv6: 2a04:4c00::/29 Signature Algorithm: sha256WithRSAEncryption 60:45:54:f7:d0:35:a4:8e:27:e7:44:70:44:f8:f3:78:0b:4b: 69:39:ba:4c:95:28:c0:e2:b7:fd:52:94:0f:b4:a6:2c:b4:19: 47:c6:fe:7b:76:dc:07:31:12:18:7d:b7:80:6c:45:e4:0c:4b: a1:b8:12:51:67:a2:d9:fa:05:82:f6:41:3b:01:bd:e4:ff:48: 93:a4:25:c8:38:6e:2e:76:3f:4e:97:92:47:2c:0f:bd:4e:a3: fb:a8:ef:40:f3:fe:ca:d5:c6:3e:84:79:87:bf:79:ac:ae:16: 1c:21:eb:c6:70:e9:4a:fb:90:bd:d9:37:5c:61:df:eb:09:b6: 1c:91:83:31:a1:da:93:06:14:a5:99:f5:06:50:98:99:f9:a3: c1:ca:71:3d:e5:41:fb:89:0e:86:53:76:11:ea:50:d5:b9:c0: a3:8e:2d:1a:e5:66:34:00:18:bd:f5:64:dd:4a:b4:15:38:5e: b7:e9:8c:0c:da:bb:18:27:44:1c:60:8b:89:c9:50:3e:a0:9b: cd:0d:72:7b:5e:52:6d:8f:5d:3b:70:5b:d0:7b:10:9a:be:97: 91:30:d1:6b:71:a0:3a:6e:4b:c0:74:20:b0:aa:84:ad:0f:64: 5e:76:4f:28:83:a7:1c:10:c0:2b:14:31:19:dd:0b:e7:ef:8e: bc:21:ed:3c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZueSwEMqQAGSz3WHGFJpJqCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZjY2NTA1ODJjMDBkYmIyNTkxY2VkYzI5OGMwY2QzYzU5 NjhhYjAwHhcNMjYwMTA4MTU0NzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGIwZTYwMjI4YzY2NGU3MWRlNWZhZWI1YTkwZWVhZjlkM2FiZWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNxIdD8cSplbKHRrqoZTH7Al8JuY Ue+TRent/YsMUpUG03fk8OzTuEZtFfugwnuK7rL2Cgam8X/IYID7QBZgPHJGRZ6d atAZ8Z8w6YHoHNCeIz4GCOpuRr59+k8WU7O1BrVm333vKSEKCoCZrHWhkfNANCC3 FLUr+NiXaOBvipWmpTR1ZOKgLwE9TuUd4vY7btc/D82YnGxnYqUEG9OFP/QfCCFn 2ICMNHMmxqVvoG08DLz7GEWogqH1Kp0ljkKwUuZ1kcjEhrY3bVEUc9wGDquqam8J btD12uJnITXuykzHVqVQ58EZj6Er/bmCueJWdZueYr3Q4a5uUhbCn7s4ewIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEiw5gIoxmTnHeX661qQ7q+dOr7jMB8GA1UdIwQY MBaAFL72ZQWCwA27JZHO3CmMDNPFloqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnZabEJZTEFEYnNsa2M3Y0tZd00wOFdXaXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9mZmMyMDQtZDRkMi00YTY3LTg1YWYt ZjlhMzNmZjAxMWNiLzEvU0xEbUFpakdaT2NkNWZycldwRHVyNTA2dnVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9mZmMyMDQtZDRkMi00YTY3LTg1YWYtZjlhMzNmZjAxMWNi LzEvdnZabEJZTEFEYnNsa2M3Y0tZd00wOFdXaXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuf3AMA0E AgACMAcDBQMqBEwAMA0GCSqGSIb3DQEBCwUAA4IBAQBgRVT30DWkjifnRHBE+PN4 C0tpObpMlSjA4rf9UpQPtKYstBlHxv57dtwHMRIYfbeAbEXkDEuhuBJRZ6LZ+gWC 9kE7Ab3k/0iTpCXIOG4udj9Ol5JHLA+9TqP7qO9A8/7K1cY+hHmHv3msrhYcIevG cOlK+5C92TdcYd/rCbYckYMxodqTBhSlmfUGUJiZ+aPBynE95UH7iQ6GU3YR6lDV ucCjji0a5WY0ABi99WTdSrQVOF636YwM2rsYJ0QcYIuJyVA+oJvNDXJ7XlJtj107 cFvQexCavpeRMNFrcaA6bkvAdCCwqoStD2Redk8og6ccEMArFDEZ3Qvn7468Ie08 -----END CERTIFICATE-----Generated at Mon Jan 26 19:19:17 2026 by rpki-client