This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/sJA3bdglwzqxKfzPM35m2aTX4ng.roa File: sJA3bdglwzqxKfzPM35m2aTX4ng.roa (raw, json) Hash identifier: fX5ZiyHsaTye8vyRamvxdGcVC4NMnL4iGSo+Aib5peY= Subject key identifier: B0:90:37:6D:D8:25:C3:3A:B1:29:FC:CF:33:7E:66:D9:A4:D7:E2:78 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F839CD96C523D54B2273D7EE0E97B6A Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/sJA3bdglwzqxKfzPM35m2aTX4ng.roa Signing time: Fri 02 Jan 2026 16:21:30 +0000 ROA not before: Fri 02 Jan 2026 16:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48558 IP address blocks: 37.230.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:9c:d9:6c:52:3d:54:b2:27:3d:7e:e0:e9:7b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b090376dd825c33ab129fccf337e66d9a4d7e278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a6:d9:db:e4:9f:25:04:bc:eb:e1:56:c6:71: ff:c5:f0:94:5c:40:59:3f:b9:62:c8:bd:fd:cd:a8: 45:b8:ff:e5:7d:1a:1b:e1:87:99:ad:40:46:87:d9: 81:a8:1d:5a:c1:f2:69:58:a7:77:65:6d:44:2e:9a: 3f:69:99:37:48:17:d0:d6:6b:48:f5:6e:3d:95:c4: 1d:c8:f9:10:39:80:03:53:03:6c:ad:36:dc:f0:7c: ea:79:6a:8d:a7:24:4c:a9:83:ee:0a:2e:6d:cf:56: 22:9d:e7:b9:56:ab:8e:00:05:01:06:65:51:c3:5a: 88:ea:00:8e:f1:6e:c9:78:5c:b7:cd:05:16:34:ee: d5:d7:fb:de:d5:f7:5a:01:15:3d:68:ac:bf:7b:5b: 63:97:a9:ab:e0:25:ec:a8:93:65:c0:7b:61:6b:fe: 00:d1:56:06:6d:17:61:64:f6:76:ec:5e:c1:9f:76: 11:2c:75:2c:77:0c:5a:2f:b7:9f:95:69:60:6c:5a: 28:eb:aa:11:02:f1:5e:6e:e3:ac:e6:ba:0d:2b:73: 5b:59:bd:d7:ea:1e:3d:a0:c7:cf:bd:4e:ad:a5:99: 3c:d0:50:85:2e:28:6c:63:4b:46:ec:52:8b:5c:d9: c7:d0:43:4f:9b:cf:ab:12:b9:d4:62:66:b2:12:dc: b2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:90:37:6D:D8:25:C3:3A:B1:29:FC:CF:33:7E:66:D9:A4:D7:E2:78 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/sJA3bdglwzqxKfzPM35m2aTX4ng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.206.0/23 Signature Algorithm: sha256WithRSAEncryption c8:96:df:b7:3c:f9:ee:cc:5c:af:89:07:81:8f:17:9c:08:da: 69:f0:df:31:a6:1e:ba:5d:dc:29:99:cb:6c:b4:77:32:e3:01: 27:46:4b:55:e4:15:35:c8:f2:4a:f1:d6:af:93:81:e4:df:59: 63:65:b8:5f:91:4c:d8:8e:db:0c:de:56:3f:3e:31:b6:f1:bd: c3:c6:1f:fe:e3:95:67:27:10:90:57:71:bc:16:46:b4:3d:01: 40:68:34:0a:e3:b1:e4:11:90:c6:1c:64:88:91:9e:47:f7:cb: 31:42:d5:e2:66:8c:67:3c:2b:58:a1:a8:6b:28:27:3d:bb:20: 91:45:a1:9d:28:06:0e:fb:77:42:1b:37:b0:2e:d0:d9:d8:0d: 88:13:32:67:cd:7a:a0:e4:5b:09:88:5e:c8:4d:36:6d:7f:a2: ed:09:44:43:27:ee:43:f2:a5:c3:b4:f9:51:90:9a:59:49:ba: bc:51:ba:71:1f:88:1f:06:22:b1:37:16:4a:19:4c:8a:9d:b2: 39:da:59:a6:68:8a:cb:6c:a1:08:29:22:03:33:b5:8a:8f:36: ad:85:ad:a8:c8:9d:44:bc:69:83:ff:7f:ef:d6:3e:51:41:c3: ef:31:a0:6d:3d:7e:07:df:6f:8d:65:9d:97:4e:ee:fd:69:2f: 8c:35:d1:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g5zZbFI9VLInPX7g6XtqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDkwMzc2ZGQ4MjVjMzNhYjEyOWZjY2YzMzdlNjZkOWE0ZDdlMjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6bZ2+SfJQS86+FWxnH/xfCUXEBZ P7liyL39zahFuP/lfRob4YeZrUBGh9mBqB1awfJpWKd3ZW1ELpo/aZk3SBfQ1mtI 9W49lcQdyPkQOYADUwNsrTbc8HzqeWqNpyRMqYPuCi5tz1Yinee5VquOAAUBBmVR w1qI6gCO8W7JeFy3zQUWNO7V1/ve1fdaARU9aKy/e1tjl6mr4CXsqJNlwHtha/4A 0VYGbRdhZPZ27F7Bn3YRLHUsdwxaL7eflWlgbFoo66oRAvFebuOs5roNK3NbWb3X 6h49oMfPvU6tpZk80FCFLihsY0tG7FKLXNnH0ENPm8+rErnUYmayEtyyrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLCQN23YJcM6sSn8zzN+Ztmk1+J4MB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvc0pBM2JkZ2x3enF4S2Z6UE0zNW0yYVRYNG5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJebOMA0G CSqGSIb3DQEBCwUAA4IBAQDIlt+3PPnuzFyviQeBjxecCNpp8N8xph66Xdwpmcts tHcy4wEnRktV5BU1yPJK8davk4Hk31ljZbhfkUzYjtsM3lY/PjG28b3Dxh/+45Vn JxCQV3G8Fka0PQFAaDQK47HkEZDGHGSIkZ5H98sxQtXiZoxnPCtYoahrKCc9uyCR RaGdKAYO+3dCGzewLtDZ2A2IEzJnzXqg5FsJiF7ITTZtf6LtCURDJ+5D8qXDtPlR kJpZSbq8UbpxH4gfBiKxNxZKGUyKnbI52lmmaIrLbKEIKSIDM7WKjzatha2oyJ1E vGmD/3/v1j5RQcPvMaBtPX4H32+NZZ2XTu79aS+MNdHH -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:25 2026 by rpki-client