This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sNHyEglfXmAIPiRD775MbSYH6tc.roa File: sNHyEglfXmAIPiRD775MbSYH6tc.roa (raw, json) Hash identifier: XJfmFctOPcvalg0RiGkUVrMkpqdJ65Ne12DnCyEbqSo= Subject key identifier: B0:D1:F2:12:09:5F:5E:60:08:3E:24:43:EF:BE:4C:6D:26:07:EA:D7 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B93B790E0504CBE376FED648F877021C1 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sNHyEglfXmAIPiRD775MbSYH6tc.roa Signing time: Tue 06 Jan 2026 14:30:39 +0000 ROA not before: Tue 06 Jan 2026 14:30:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149573 IP address blocks: 217.145.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:b7:90:e0:50:4c:be:37:6f:ed:64:8f:87:70:21:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 6 14:30:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0d1f212095f5e60083e2443efbe4c6d2607ead7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:07:c3:34:ef:c9:a0:b7:68:3b:b3:61:d9: 02:0c:e6:d6:c7:2e:80:f3:ec:44:68:0a:84:e7:89: 4c:16:22:99:2a:c1:43:87:d2:11:af:24:e1:8f:bb: 2f:dc:86:16:e4:51:53:9c:01:be:b0:70:7b:15:00: 92:71:5c:47:2d:b0:f3:1c:86:55:d4:f4:36:62:de: 30:9e:72:e8:00:29:61:58:b9:2c:1f:e3:66:08:d8: 94:70:73:c2:7a:aa:0b:fb:56:5c:2f:d4:b1:65:3e: fb:73:f2:05:11:3e:c0:2b:29:9d:c7:e5:0e:4c:c1: 56:af:35:ec:d1:45:60:bc:88:20:fb:32:75:a2:12: 50:35:c8:5a:b6:a9:04:1a:1d:81:73:42:1d:69:7b: df:9c:d7:db:88:43:3f:ab:b0:17:96:00:17:33:b8: 59:6a:32:30:2a:41:b7:64:de:f7:13:e0:8e:67:6c: 32:42:19:03:d5:ab:39:4a:4a:75:e5:ca:92:10:76: c0:ab:b6:07:55:9f:9c:22:f6:80:e9:27:ae:98:fa: 08:00:9f:e7:b0:43:a3:75:c6:9e:28:30:6f:f6:55: ee:ac:ec:cd:5b:30:0c:07:4b:bb:a3:c8:72:f8:c3: d4:ce:37:cc:1c:cb:48:6f:d6:54:4a:c9:1b:2c:c0: 18:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D1:F2:12:09:5F:5E:60:08:3E:24:43:EF:BE:4C:6D:26:07:EA:D7 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sNHyEglfXmAIPiRD775MbSYH6tc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.145.69.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:8a:fe:6f:13:8f:c8:33:0f:73:36:3a:6c:2f:97:2f:65:62: 62:09:65:b0:ee:5c:b1:70:86:6b:b1:a5:82:8f:54:78:65:ef: bd:ce:2d:9b:3f:fb:95:75:af:e8:7b:d4:33:f8:22:fa:c8:d9: 6a:e8:64:06:8f:6e:74:af:50:64:2c:24:4c:a5:a4:68:78:6f: b5:5f:46:55:9e:38:c8:48:55:44:bd:b1:c6:72:47:1d:3c:ef: f8:eb:1c:d3:1f:3f:a4:f3:fc:b8:e3:fc:13:aa:8f:b9:40:29: 21:73:a4:43:7f:ec:3d:52:a3:a6:5f:80:69:44:ac:5f:fc:ae: f6:d5:58:7b:94:40:03:91:df:de:11:95:05:0c:df:8d:28:9f: 8d:f3:ff:a4:1e:3a:86:98:06:b0:06:13:a0:35:26:2d:93:24: 17:e6:7b:a3:6e:00:b9:33:2e:4a:b6:4c:48:0b:8e:67:55:1e: d9:42:c3:06:b3:7f:84:21:bd:73:7e:fc:d9:cf:80:74:70:ad: d4:bd:3e:14:3b:47:d3:aa:16:8b:49:d4:5b:73:47:ac:89:c3: 8a:41:22:ef:de:0f:5c:f6:be:86:7c:6b:1f:b8:f0:11:7c:db: 74:88:e8:18:b4:cd:76:2d:b4:70:62:c8:2f:24:33:ff:1b:8a: 14:8c:c3:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuTt5DgUEy+N2/tZI+HcCHBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTA2MTQzMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGQxZjIxMjA5NWY1ZTYwMDgzZTI0NDNlZmJlNGM2ZDI2MDdlYWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3gHwzTvyaC3aDuzYdkCDObWxy6A 8+xEaAqE54lMFiKZKsFDh9IRryThj7sv3IYW5FFTnAG+sHB7FQCScVxHLbDzHIZV 1PQ2Yt4wnnLoAClhWLksH+NmCNiUcHPCeqoL+1ZcL9SxZT77c/IFET7AKymdx+UO TMFWrzXs0UVgvIgg+zJ1ohJQNchatqkEGh2Bc0IdaXvfnNfbiEM/q7AXlgAXM7hZ ajIwKkG3ZN73E+COZ2wyQhkD1as5Skp15cqSEHbAq7YHVZ+cIvaA6SeumPoIAJ/n sEOjdcaeKDBv9lXurOzNWzAMB0u7o8hy+MPUzjfMHMtIb9ZUSskbLMAYgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLDR8hIJX15gCD4kQ+++TG0mB+rXMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvc05IeUVnbGZYbUFJUGlSRDc3NU1iU1lINnRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZFFMA0G CSqGSIb3DQEBCwUAA4IBAQCciv5vE4/IMw9zNjpsL5cvZWJiCWWw7lyxcIZrsaWC j1R4Ze+9zi2bP/uVda/oe9Qz+CL6yNlq6GQGj250r1BkLCRMpaRoeG+1X0ZVnjjI SFVEvbHGckcdPO/46xzTHz+k8/y44/wTqo+5QCkhc6RDf+w9UqOmX4BpRKxf/K72 1Vh7lEADkd/eEZUFDN+NKJ+N8/+kHjqGmAawBhOgNSYtkyQX5nujbgC5My5KtkxI C45nVR7ZQsMGs3+EIb1zfvzZz4B0cK3UvT4UO0fTqhaLSdRbc0esicOKQSLv3g9c 9r6GfGsfuPARfNt0iOgYtM12LbRwYsgvJDP/G4oUjMNG -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:42 2026 by rpki-client