This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/SfBnrNJ_WUS1dtNWbITfzkTiNhM.roa File: SfBnrNJ_WUS1dtNWbITfzkTiNhM.roa (raw, json) Hash identifier: 9gUcD5SLmgCHBGNc2ITvT8oGUHundV2RJ6KAmEpd5mk= Subject key identifier: 49:F0:67:AC:D2:7F:59:44:B5:76:D3:56:6C:84:DF:CE:44:E2:36:13 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B78345413FA8CF1C6F8AA95294EC03673 Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/SfBnrNJ_WUS1dtNWbITfzkTiNhM.roa Signing time: Thu 01 Jan 2026 06:17:33 +0000 ROA not before: Thu 01 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136897 IP address blocks: 213.217.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:54:13:fa:8c:f1:c6:f8:aa:95:29:4e:c0:36:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49f067acd27f5944b576d3566c84dfce44e23613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:9a:5d:a3:f5:c9:93:03:b8:ff:79:85:20: 8a:89:22:c2:53:28:59:57:e7:41:71:e1:b1:ad:88: 5b:d0:65:97:3f:76:e9:d0:f0:56:8d:c2:8e:44:69: 12:f5:f7:4e:52:e9:9a:93:b1:2d:a0:a0:47:a7:01: 39:e6:08:dd:ca:7b:be:73:28:fd:82:4b:a6:0d:ee: 6b:b1:ef:63:dc:b3:3b:48:dc:fa:14:5a:2c:62:12: 2c:e9:62:f4:e7:82:5b:e7:14:ce:78:73:ce:88:5b: 50:dc:cf:68:1f:f2:64:46:5d:0e:e4:7a:ed:35:57: 49:cf:85:59:70:16:be:9d:b9:aa:19:cd:c9:44:bb: 12:fc:c7:a5:f6:ea:da:15:03:dd:fe:7e:bc:22:a3: d0:5e:cb:09:82:74:a8:f4:38:19:d0:c3:5e:8d:5b: c0:a7:ec:3c:f0:38:fe:09:42:47:f9:34:ed:52:a6: 7c:1c:3c:9c:cd:f6:e4:88:73:d1:15:09:38:23:41: dc:b0:af:c0:c7:ee:12:81:54:1a:a8:b3:b1:92:1b: 59:d6:3c:c0:47:9a:5b:38:88:46:f1:7b:1f:51:df: 6b:52:05:27:b6:21:43:1a:4d:aa:ea:1d:6e:00:cb: f5:06:b0:ba:15:d8:d3:2a:c7:87:f8:24:e5:7e:d9: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F0:67:AC:D2:7F:59:44:B5:76:D3:56:6C:84:DF:CE:44:E2:36:13 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/SfBnrNJ_WUS1dtNWbITfzkTiNhM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.217.9.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:23:eb:2b:9e:2f:ef:dc:83:52:21:f5:95:ed:89:40:af:70: 7f:5b:aa:8f:03:61:13:d7:b5:81:bc:d7:63:d9:f2:f2:aa:32: d0:55:3f:fe:f8:c1:7e:86:dd:98:2b:3a:32:a5:1f:97:3f:1a: 78:ad:6b:95:e0:db:e6:c7:65:64:60:69:1c:a2:df:81:59:b6: fa:ee:25:ab:41:40:9b:22:48:27:84:93:fb:f1:97:3f:7a:af: 07:a7:3d:c2:84:56:6e:ca:5c:62:d7:0c:95:e5:df:33:1d:ca: 59:86:a6:c4:2c:53:86:40:99:4d:13:ca:57:fb:16:50:55:7e: 33:ac:fa:14:d1:f1:e6:08:16:7b:2f:39:6e:a7:3e:c0:92:db: 58:c1:c5:d4:1d:26:75:6b:8e:44:b2:9c:f7:39:16:68:9f:eb: 0f:35:8e:c3:97:72:5c:d4:c3:91:67:0e:d0:85:a4:da:6e:39: f2:e9:48:02:6b:46:a0:51:7e:fe:60:bc:6e:fc:2c:6c:26:60: 46:b7:63:0c:49:25:6f:39:1a:4f:70:9d:12:f0:03:b7:eb:e1: 7b:2a:30:bd:f0:3d:f5:af:09:dd:27:20:31:37:09:b4:bf:ba: a3:30:81:6b:92:b3:2f:3b:56:09:0d:01:b9:6e:0e:9a:e6:e6: 3b:dc:ef:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFQT+ozxxviqlSlOwDZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWYwNjdhY2QyN2Y1OTQ0YjU3NmQzNTY2Yzg0ZGZjZTQ0ZTIzNjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSaaXaP1yZMDuP95hSCKiSLCUyhZ V+dBceGxrYhb0GWXP3bp0PBWjcKORGkS9fdOUumak7EtoKBHpwE55gjdynu+cyj9 gkumDe5rse9j3LM7SNz6FFosYhIs6WL054Jb5xTOeHPOiFtQ3M9oH/JkRl0O5Hrt NVdJz4VZcBa+nbmqGc3JRLsS/Mel9uraFQPd/n68IqPQXssJgnSo9DgZ0MNejVvA p+w88Dj+CUJH+TTtUqZ8HDyczfbkiHPRFQk4I0HcsK/Ax+4SgVQaqLOxkhtZ1jzA R5pbOIhG8XsfUd9rUgUntiFDGk2q6h1uAMv1BrC6FdjTKseH+CTlftmWJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEnwZ6zSf1lEtXbTVmyE385E4jYTMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvU2ZCbnJOSl9XVVMxZHROV2JJVGZ6a1RpTmhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dkJMA0G CSqGSIb3DQEBCwUAA4IBAQBPI+srni/v3INSIfWV7YlAr3B/W6qPA2ET17WBvNdj 2fLyqjLQVT/++MF+ht2YKzoypR+XPxp4rWuV4Nvmx2VkYGkcot+BWbb67iWrQUCb IkgnhJP78Zc/eq8Hpz3ChFZuylxi1wyV5d8zHcpZhqbELFOGQJlNE8pX+xZQVX4z rPoU0fHmCBZ7Lzlupz7AkttYwcXUHSZ1a45Espz3ORZon+sPNY7Dl3Jc1MORZw7Q haTabjny6UgCa0agUX7+YLxu/CxsJmBGt2MMSSVvORpPcJ0S8AO36+F7KjC98D31 rwndJyAxNwm0v7qjMIFrkrMvO1YJDQG5bg6a5uY73O+F -----END CERTIFICATE-----Generated at Wed Jan 21 09:38:35 2026 by rpki-client