This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/SZG8XeixTaqiVxW5rJUPZ8oUaFs.roa File: SZG8XeixTaqiVxW5rJUPZ8oUaFs.roa (raw, json) Hash identifier: 1YSVd0Zexb+YYuPe7vCuTagdfSqZISFbptqFWf/HX9o= Subject key identifier: 49:91:BC:5D:E8:B1:4D:AA:A2:57:15:B9:AC:95:0F:67:CA:14:68:5B Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de Certificate serial: 019B7FF15D31F046235FAE7178593CB56FBB Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/SZG8XeixTaqiVxW5rJUPZ8oUaFs.roa Signing time: Fri 02 Jan 2026 18:21:23 +0000 ROA not before: Fri 02 Jan 2026 18:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 185.29.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:5d:31:f0:46:23:5f:ae:71:78:59:3c:b5:6f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de Validity Not Before: Jan 2 18:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4991bc5de8b14daaa25715b9ac950f67ca14685b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:25:38:04:c1:e4:97:77:04:da:6a:61:f3:2a: a7:51:c4:7b:16:6b:30:9f:94:1a:a3:41:9e:44:14: 35:fa:c1:c3:62:b4:9c:8c:d2:b2:9d:86:a7:8b:22: 68:13:e0:ef:f1:35:62:84:47:3a:e9:15:22:ad:19: 29:62:b1:9a:e4:01:52:1b:39:7f:d1:52:d6:5f:1a: a7:1c:7c:95:4d:49:d8:80:5f:a6:11:80:f6:4b:cf: 98:d4:49:28:31:09:aa:4a:6e:2a:5a:82:b2:8b:98: d6:b3:1d:2e:4c:0a:8d:b6:eb:78:a5:b2:6c:83:fb: 8d:76:4e:1c:e0:c7:de:7f:2f:c5:9b:31:bf:0f:4a: bc:dd:90:4c:75:8d:e6:f2:06:05:4d:cb:19:ff:41: e8:7a:01:eb:4f:ba:40:16:4b:5a:51:79:fd:c6:e1: 10:73:30:7c:42:bd:93:a1:70:d1:80:c2:12:55:23: 15:6e:6f:bf:a6:0f:d7:b2:eb:94:ed:9a:81:c8:39: 11:4f:6f:95:74:84:7c:c2:d1:19:e0:bf:8d:ff:b8: 38:6e:86:51:af:9e:40:cc:56:c3:90:9f:9f:98:16: f5:01:8e:36:36:6c:b4:bc:71:35:43:6d:b3:94:2b: d5:b3:6c:6b:79:50:7a:0a:0e:06:23:93:ff:71:52: f6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:91:BC:5D:E8:B1:4D:AA:A2:57:15:B9:AC:95:0F:67:CA:14:68:5B X509v3 Authority Key Identifier: keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/SZG8XeixTaqiVxW5rJUPZ8oUaFs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.76.0/24 Signature Algorithm: sha256WithRSAEncryption 70:95:ae:1b:8c:a8:3b:3c:b2:57:4e:6b:f0:a7:ca:2c:8c:20: ad:70:5a:d7:b3:e2:7d:43:74:f5:3c:43:dd:6d:37:2d:de:59: ba:3a:44:9d:23:df:b9:76:64:bf:be:73:1a:3a:39:be:f6:49: 1e:90:56:1c:5a:f6:71:26:a3:9d:98:99:51:6f:83:4b:e4:04: 83:f9:b7:2d:ec:cd:03:8c:a9:2c:68:fd:b9:ed:a4:f4:ce:0d: 80:6a:f8:02:65:b0:b7:a6:b0:35:02:a0:0c:b4:3a:a9:0d:c0: 67:44:46:6e:96:31:89:6f:49:51:42:38:c1:b5:85:f9:07:8d: c1:cb:93:f6:27:db:92:ae:5a:31:4b:bd:42:86:35:7c:e4:b6: 47:f0:3d:7e:ba:d0:06:82:01:07:94:0c:c9:a8:ce:33:5c:17: 67:31:75:c9:df:a1:41:72:43:2b:60:6b:2c:19:70:2e:3a:5a: 5a:b6:8b:c9:2b:e7:de:be:bd:4e:40:63:39:19:77:87:10:be: 5e:51:ae:c5:5d:1c:bd:91:d6:49:9f:af:99:5a:d5:d2:44:a7: 0c:6b:f5:99:15:39:94:f4:0b:37:48:93:e1:85:c6:7d:d5:fc: 1d:4c:4e:07:ee:0c:18:d6:e9:5a:b4:af:24:77:7a:51:4a:1f: 56:12:94:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8V0x8EYjX65xeFk8tW+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OTA5NzBkZGJiNzYxOWNjODIxODZkZGI1MzZlYjRlODk4 NWQyZGUwHhcNMjYwMTAyMTgyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTkxYmM1ZGU4YjE0ZGFhYTI1NzE1YjlhYzk1MGY2N2NhMTQ2ODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CU4BMHkl3cE2mph8yqnUcR7Fmsw n5Qao0GeRBQ1+sHDYrScjNKynYaniyJoE+Dv8TVihEc66RUirRkpYrGa5AFSGzl/ 0VLWXxqnHHyVTUnYgF+mEYD2S8+Y1EkoMQmqSm4qWoKyi5jWsx0uTAqNtut4pbJs g/uNdk4c4Mfefy/FmzG/D0q83ZBMdY3m8gYFTcsZ/0HoegHrT7pAFktaUXn9xuEQ czB8Qr2ToXDRgMISVSMVbm+/pg/XsuuU7ZqByDkRT2+VdIR8wtEZ4L+N/7g4boZR r55AzFbDkJ+fmBb1AY42Nmy0vHE1Q22zlCvVs2xreVB6Cg4GI5P/cVL2DwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEmRvF3osU2qolcVuayVD2fKFGhbMB8GA1UdIwQY MBaAFBaQlw3bt2GcyCGG3bU2606JhdLeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnBDWERkdTNZWnpJSVliZHRUYnJUb21GMHQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yZTg1MzctMzZiZS00OThmLTgxNTUt Y2MwM2JkMzE1ZmY5LzEvU1pHOFhlaXhUYXFpVnhXNXJKVVBaOG9VYUZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8yZTg1MzctMzZiZS00OThmLTgxNTUtY2MwM2JkMzE1ZmY5 LzEvRnBDWERkdTNZWnpJSVliZHRUYnJUb21GMHQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuR1MMA0G CSqGSIb3DQEBCwUAA4IBAQBwla4bjKg7PLJXTmvwp8osjCCtcFrXs+J9Q3T1PEPd bTct3lm6OkSdI9+5dmS/vnMaOjm+9kkekFYcWvZxJqOdmJlRb4NL5ASD+bct7M0D jKksaP257aT0zg2AavgCZbC3prA1AqAMtDqpDcBnREZuljGJb0lRQjjBtYX5B43B y5P2J9uSrloxS71ChjV85LZH8D1+utAGggEHlAzJqM4zXBdnMXXJ36FBckMrYGss GXAuOlpatovJK+fevr1OQGM5GXeHEL5eUa7FXRy9kdZJn6+ZWtXSRKcMa/WZFTmU 9As3SJPhhcZ91fwdTE4H7gwY1ulatK8kd3pRSh9WEpR7 -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:04 2026 by rpki-client