This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/Sjx8Db6pkn2_X7XkTkVkrHu39II.roa File: Sjx8Db6pkn2_X7XkTkVkrHu39II.roa (raw, json) Hash identifier: L70KZEVpZd+9Yn8XtQUD7ShK+v4vhSOp8udCniXBES8= Subject key identifier: 4A:3C:7C:0D:BE:A9:92:7D:BF:5F:B5:E4:4E:45:64:AC:7B:B7:F4:82 Certificate issuer: /CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f Certificate serial: 019B7E385C2B8B0F56A9A3ED94E3BDEBE431 Authority key identifier: 32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/Sjx8Db6pkn2_X7XkTkVkrHu39II.roa Signing time: Fri 02 Jan 2026 10:19:41 +0000 ROA not before: Fri 02 Jan 2026 10:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50163 IP address blocks: 109.71.208.0/21 maxlen: 21 2a03:e00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:5c:2b:8b:0f:56:a9:a3:ed:94:e3:bd:eb:e4:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f Validity Not Before: Jan 2 10:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a3c7c0dbea9927dbf5fb5e44e4564ac7bb7f482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a5:fd:ad:8d:ee:03:72:41:ad:12:9d:f6:1f: 0e:1f:97:8a:48:81:9d:b2:b7:36:3b:47:36:4a:b3: fb:73:1c:58:e1:cb:10:07:70:da:a1:a9:fa:2c:cb: 0c:31:98:33:d7:b0:f8:13:44:f0:83:9e:89:53:7c: da:46:52:25:51:f8:6d:24:f8:eb:43:b4:2b:97:4b: df:e5:35:c9:a3:60:31:d8:f4:0f:aa:da:bd:d8:98: 4e:0d:58:91:71:a0:25:4c:1e:55:7f:18:43:c4:5a: fe:ac:41:76:10:ee:e9:af:f1:82:7c:4e:96:25:84: 0a:85:07:bf:45:bf:6f:f8:e8:c9:79:65:7c:d9:16: a2:cb:7c:94:54:6b:f4:15:1e:e4:a8:7c:50:84:da: 78:ba:ae:5c:78:e2:d6:fb:f2:fc:da:ad:25:cb:dc: 9d:f3:8c:c8:e9:59:03:52:92:c1:48:da:57:d0:88: 11:62:a9:00:84:1f:d9:2d:20:07:c0:7c:ee:9d:13: 65:97:fc:13:35:92:d0:fb:04:14:25:34:bc:02:c8: 96:f1:ba:12:6d:62:3f:1d:ca:6b:80:0c:6c:d0:58: fa:a6:03:b0:15:1d:d9:e3:dc:00:50:51:1f:54:a1: 43:33:54:00:17:be:2d:25:de:02:98:5e:98:b9:57: 77:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3C:7C:0D:BE:A9:92:7D:BF:5F:B5:E4:4E:45:64:AC:7B:B7:F4:82 X509v3 Authority Key Identifier: keyid:32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/Sjx8Db6pkn2_X7XkTkVkrHu39II.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.71.208.0/21 IPv6: 2a03:e00::/32 Signature Algorithm: sha256WithRSAEncryption 58:48:b8:5c:f6:f6:68:23:6f:d8:c6:22:0f:ba:16:c2:f0:22: 09:cd:ce:e9:10:9b:76:c2:49:54:c3:dd:84:90:f1:f2:8f:ca: 71:28:70:a4:6d:bf:e7:8c:cc:3a:1a:2c:30:46:8d:96:ce:24: 90:60:0f:3a:4e:ef:3b:cd:54:5e:b0:6f:57:82:69:e0:fb:1b: 3d:bc:0a:cc:af:0d:1c:f3:7a:aa:77:bb:6d:33:e9:1e:7d:04: 4f:c3:18:04:78:1b:d3:22:3f:9a:87:b7:e8:cf:2b:a3:72:07: e4:fb:24:4f:5d:21:19:7a:74:6c:19:46:5e:15:2b:8f:7e:ea: 64:2c:dd:f8:21:81:b5:12:4c:18:47:a8:68:c1:c1:f8:53:7d: fd:7d:2d:7f:86:30:ad:19:11:55:89:ff:5e:89:c2:39:e6:99: 66:37:8a:af:28:a5:3a:f9:dc:16:a0:43:f2:90:7a:4d:81:ea: c1:74:58:56:f8:7b:5f:2f:4e:ad:7d:4d:96:e6:a8:ac:32:e9: a3:69:b8:66:b7:fc:3e:ae:12:64:a0:83:f7:14:5d:a1:26:81: 41:1a:61:02:a0:ee:72:a3:50:27:e5:38:a0:d0:34:1f:b9:b7: 49:d3:9f:de:a4:cb:00:88:1c:91:f2:35:51:5a:d3:fd:91:23: 0f:27:0e:4c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OFwriw9WqaPtlOO96+QxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYzAyNzRiYzE3ZjljNzVjZDNmYzEwZjhiNTgyNWExOTM4 MmFiNGYwHhcNMjYwMTAyMTAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTNjN2MwZGJlYTk5MjdkYmY1ZmI1ZTQ0ZTQ1NjRhYzdiYjdmNDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaX9rY3uA3JBrRKd9h8OH5eKSIGd src2O0c2SrP7cxxY4csQB3Daoan6LMsMMZgz17D4E0Twg56JU3zaRlIlUfhtJPjr Q7Qrl0vf5TXJo2Ax2PQPqtq92JhODViRcaAlTB5VfxhDxFr+rEF2EO7pr/GCfE6W JYQKhQe/Rb9v+OjJeWV82Raiy3yUVGv0FR7kqHxQhNp4uq5ceOLW+/L82q0ly9yd 84zI6VkDUpLBSNpX0IgRYqkAhB/ZLSAHwHzunRNll/wTNZLQ+wQUJTS8AsiW8boS bWI/HcprgAxs0Fj6pgOwFR3Z49wAUFEfVKFDM1QAF74tJd4CmF6YuVd3SwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEo8fA2+qZJ9v1+15E5FZKx7t/SCMB8GA1UdIwQY MBaAFDLAJ0vBf5x1zT/BD4tYJaGTgqtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXNBblM4Rl9uSFhOUDhFUGkxZ2xvWk9DcTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS80MTZhYWYtODYwMi00MTk2LWI1MWQt NDFkMDg3YjM4MjhiLzEvU2p4OERiNnBrbjJfWDdYa1RrVmtySHUzOUlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS80MTZhYWYtODYwMi00MTk2LWI1MWQtNDFkMDg3YjM4Mjhi LzEvTXNBblM4Rl9uSFhOUDhFUGkxZ2xvWk9DcTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDbUfQMA0E AgACMAcDBQAqAw4AMA0GCSqGSIb3DQEBCwUAA4IBAQBYSLhc9vZoI2/YxiIPuhbC 8CIJzc7pEJt2wklUw92EkPHyj8pxKHCkbb/njMw6GiwwRo2WziSQYA86Tu87zVRe sG9Xgmng+xs9vArMrw0c83qqd7ttM+kefQRPwxgEeBvTIj+ah7fozyujcgfk+yRP XSEZenRsGUZeFSuPfupkLN34IYG1EkwYR6howcH4U339fS1/hjCtGRFVif9eicI5 5plmN4qvKKU6+dwWoEPykHpNgerBdFhW+HtfL06tfU2W5qisMumjabhmt/w+rhJk oIP3FF2hJoFBGmECoO5yo1An5Tig0DQfubdJ05/epMsAiByR8jVRWtP9kSMPJw5M -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:18 2026 by rpki-client