This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/SSrljm7TL06xk5tlaaXSkwUp7Kg.roa File: SSrljm7TL06xk5tlaaXSkwUp7Kg.roa (raw, json) Hash identifier: sazy4RYdkCBOD/szP8hwA6eovQhZhACNUEW3EOWYKpo= Subject key identifier: 49:2A:E5:8E:6E:D3:2F:4E:B1:93:9B:65:69:A5:D2:93:05:29:EC:A8 Certificate issuer: /CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960 Certificate serial: 019B7AC7A4EB2098D47CB8BF7B524E5EC002 Authority key identifier: A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/SSrljm7TL06xk5tlaaXSkwUp7Kg.roa Signing time: Thu 01 Jan 2026 18:17:42 +0000 ROA not before: Thu 01 Jan 2026 18:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20810 IP address blocks: 45.138.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a4:eb:20:98:d4:7c:b8:bf:7b:52:4e:5e:c0:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960 Validity Not Before: Jan 1 18:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=492ae58e6ed32f4eb1939b6569a5d2930529eca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9a:99:6d:0e:3d:e9:7c:06:2a:7c:bd:69:81: e3:6f:c0:bd:7d:10:6d:26:f6:c5:84:66:63:85:cb: 0b:df:d6:85:b0:ad:1c:8a:f6:39:86:6b:2d:c9:93: b2:e0:b0:b5:fd:32:c9:06:6f:d7:f8:54:02:2d:e4: 2b:16:8c:b8:8e:62:8f:17:b9:81:79:bf:e3:16:f5: 4e:fc:8c:8d:03:b0:58:dd:ee:84:4e:34:22:67:12: 41:80:33:83:c6:47:df:57:9a:3a:8f:b8:ec:e3:6c: 36:ad:fe:e3:2e:81:0d:a5:6a:ba:90:3b:34:04:e1: 35:af:7b:d9:4e:0a:0e:2c:33:e6:9f:5f:32:37:e6: 09:3e:38:12:66:9c:51:04:74:c4:37:d7:09:45:15: 59:d1:7f:64:f7:af:12:b5:f5:77:81:bf:4a:20:b8: 1d:94:7b:8a:61:db:4d:f8:22:75:22:97:38:fe:1f: c7:22:28:c2:0a:27:2c:29:bf:21:d9:0f:cc:62:a3: c2:7b:49:9b:a3:b9:a1:66:32:d8:5d:82:02:74:7d: 24:2c:ab:0e:81:f3:cb:e1:fc:61:6a:b5:69:e3:eb: 13:64:dc:f2:6b:c8:8a:7d:c9:36:e9:17:98:4c:85: cb:58:fd:2d:36:6d:4d:66:6f:8c:d6:bf:48:be:4d: eb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2A:E5:8E:6E:D3:2F:4E:B1:93:9B:65:69:A5:D2:93:05:29:EC:A8 X509v3 Authority Key Identifier: keyid:A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/SSrljm7TL06xk5tlaaXSkwUp7Kg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.56.0/22 Signature Algorithm: sha256WithRSAEncryption 41:67:7b:20:ab:85:dd:0d:a2:28:9a:df:74:d5:85:10:14:ec: 1a:5c:2c:e0:b9:f3:32:c4:d9:86:fb:aa:7a:d4:2b:26:89:d2: d7:03:22:23:3e:b0:f9:63:c2:52:e9:9f:c6:44:1a:80:a5:85: 9a:33:4c:00:67:11:90:08:80:be:13:69:3e:f9:ab:59:3d:47: fc:4d:be:bf:4e:62:72:f5:ed:ab:39:98:bc:44:e4:3f:24:08: 37:93:d0:8c:81:a4:2d:6a:71:d6:72:81:8e:37:8a:ca:9c:a3: 55:fe:93:7a:e2:0f:9c:b5:b0:eb:36:1f:3c:19:ff:b9:35:b4: 8d:6f:79:62:c6:e6:b2:4b:25:dc:9b:ca:9e:04:0f:fa:59:8b: d1:73:79:6d:c6:9c:9e:13:3b:e0:0a:85:2f:81:fe:7c:a8:0a: d5:80:1d:d4:58:82:01:3c:32:49:88:ca:1c:59:65:47:0e:da: 35:de:e9:3b:7c:97:7e:0d:c6:f1:ee:39:2b:9f:7e:c8:6c:26: 74:6e:cb:e9:4f:cc:b7:0c:f9:21:3b:2e:df:5c:98:a3:9e:c2: 88:3d:6a:44:82:7c:d3:75:f4:88:d5:c5:22:66:a4:69:68:77: 15:fa:8f:9a:56:9b:0d:58:43:8a:7c:fd:47:5c:b0:91:27:dc: c4:6f:84:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6TrIJjUfLi/e1JOXsACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YTM3YmViN2ZkNjVjYWE5YWZjNDZkOWYyNDI3M2NkMjdj MGY5NjAwHhcNMjYwMTAxMTgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTJhZTU4ZTZlZDMyZjRlYjE5MzliNjU2OWE1ZDI5MzA1MjllY2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5qZbQ496XwGKny9aYHjb8C9fRBt JvbFhGZjhcsL39aFsK0civY5hmstyZOy4LC1/TLJBm/X+FQCLeQrFoy4jmKPF7mB eb/jFvVO/IyNA7BY3e6ETjQiZxJBgDODxkffV5o6j7js42w2rf7jLoENpWq6kDs0 BOE1r3vZTgoOLDPmn18yN+YJPjgSZpxRBHTEN9cJRRVZ0X9k968StfV3gb9KILgd lHuKYdtN+CJ1Ipc4/h/HIijCCicsKb8h2Q/MYqPCe0mbo7mhZjLYXYICdH0kLKsO gfPL4fxharVp4+sTZNzya8iKfck26ReYTIXLWP0tNm1NZm+M1r9Ivk3rDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEkq5Y5u0y9OsZObZWml0pMFKeyoMB8GA1UdIwQY MBaAFKSje+t/1lyqmvxG2fJCc80nwPlgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEtONzYzX1dYS3FhX0ViWjhrSnp6U2ZBLVdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9mNDQwZGUtMTU5Mi00NThjLWFhYTMt N2M0NzI0MWMwYTg0LzEvU1NybGptN1RMMDZ4azV0bGFhWFNrd1VwN0tnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9mNDQwZGUtMTU5Mi00NThjLWFhYTMtN2M0NzI0MWMwYTg0 LzEvcEtONzYzX1dYS3FhX0ViWjhrSnp6U2ZBLVdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYo4MA0G CSqGSIb3DQEBCwUAA4IBAQBBZ3sgq4XdDaIomt901YUQFOwaXCzgufMyxNmG+6p6 1CsmidLXAyIjPrD5Y8JS6Z/GRBqApYWaM0wAZxGQCIC+E2k++atZPUf8Tb6/TmJy 9e2rOZi8ROQ/JAg3k9CMgaQtanHWcoGON4rKnKNV/pN64g+ctbDrNh88Gf+5NbSN b3lixuaySyXcm8qeBA/6WYvRc3ltxpyeEzvgCoUvgf58qArVgB3UWIIBPDJJiMoc WWVHDto13uk7fJd+Dcbx7jkrn37IbCZ0bsvpT8y3DPkhOy7fXJijnsKIPWpEgnzT dfSI1cUiZqRpaHcV+o+aVpsNWEOKfP1HXLCRJ9zEb4Rs -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:34 2026 by rpki-client