This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SBWqYcKTNuH5mzV2FyAZ9voeinw.roa File: SBWqYcKTNuH5mzV2FyAZ9voeinw.roa (raw, json) Hash identifier: nKKFenKsk6CHE0IYSYKaUtRqbvL4ceO1+8GcGzEumQU= Subject key identifier: 48:15:AA:61:C2:93:36:E1:F9:9B:35:76:17:20:19:F6:FA:1E:8A:7C Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84B5CB44FD1096D3A65FE5C8B5F23E Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SBWqYcKTNuH5mzV2FyAZ9voeinw.roa Signing time: Fri 02 Jan 2026 16:22:42 +0000 ROA not before: Fri 02 Jan 2026 16:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213644 IP address blocks: 217.60.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b5:cb:44:fd:10:96:d3:a6:5f:e5:c8:b5:f2:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4815aa61c29336e1f99b3576172019f6fa1e8a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5a:27:f5:7b:b0:22:75:4d:e9:32:6c:31:05: d8:c3:c4:d1:c6:0a:b5:6e:de:61:66:85:58:7c:41: 65:ea:fa:ed:7f:06:d3:01:06:da:bd:06:84:02:40: be:40:0e:5c:8f:8d:bd:a7:4e:18:21:bf:72:58:a2: 17:85:e9:58:f1:dd:7c:e6:53:59:52:4e:bb:06:10: 7c:d8:51:50:93:2c:fd:5a:3e:95:3f:21:56:1a:48: f3:0f:13:06:80:ef:85:2f:b7:30:bd:42:b8:c7:cb: 2a:fb:a9:db:7c:c0:87:b6:6f:dc:4f:4f:e7:d8:ea: dc:3a:11:83:e9:d5:ac:8a:fa:7b:26:cf:5f:28:70: 54:f8:a9:fb:d4:87:29:70:e8:bf:a5:1a:c0:51:7b: dc:08:f4:dc:ee:23:e4:85:3e:0b:74:44:5f:f9:1b: bc:4f:d5:91:66:92:11:4d:ab:f8:a4:18:bf:46:e2: a4:67:36:c8:6c:f2:d7:ff:9f:77:d0:10:25:c6:5b: 44:10:82:a5:72:42:09:48:b3:a1:43:d0:c5:3d:98: 72:d5:2c:6f:97:e0:60:ed:22:cc:e3:bb:2a:0f:3b: 61:66:0b:f6:68:06:e5:db:0c:b6:b5:55:12:44:ed: 8b:db:05:a3:60:d7:b3:af:48:7c:b0:91:c5:ce:0c: 3f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:15:AA:61:C2:93:36:E1:F9:9B:35:76:17:20:19:F6:FA:1E:8A:7C X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SBWqYcKTNuH5mzV2FyAZ9voeinw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.60.236.0/24 Signature Algorithm: sha256WithRSAEncryption 52:f1:11:69:fb:7e:58:3a:2d:0d:2e:34:45:ea:61:a1:77:a3: 52:28:72:d1:81:9f:e4:11:c6:3e:4c:16:0f:28:c2:c8:62:fc: b4:f4:bd:f6:1e:33:bb:3b:d5:63:22:d4:b8:b3:d4:3d:4f:30: 57:31:1d:df:41:4e:c3:f5:90:51:3a:6a:71:11:cf:fa:12:16: 85:0b:7c:70:94:14:15:40:d6:ae:e6:15:b8:30:34:b1:53:da: 10:12:db:e9:36:c4:9d:30:0e:c5:26:e8:40:fe:c9:c5:c5:01: 02:58:ef:54:ba:64:68:90:3d:b4:a0:00:c3:ba:81:76:fc:20: 6f:26:16:93:ad:32:1f:df:a8:80:c0:23:de:cc:a6:5d:c0:b2: 32:9c:67:bf:4f:28:bc:f1:8e:d2:ac:29:1f:a1:f8:19:e9:c3: c9:a8:c2:25:eb:79:1c:55:6c:8f:a6:ab:fe:80:1d:2a:e1:d9: 86:b8:ee:74:5c:31:60:6a:cb:0e:a6:88:67:f9:af:74:34:e4: bf:ed:22:d1:97:65:db:1f:33:9e:8c:bb:be:f8:d3:15:6f:af: 5b:5e:a9:a9:a8:82:b9:19:2e:fe:6f:1d:04:0c:41:81:a7:ca: ec:6c:e4:3b:51:c6:03:6c:92:d1:e7:8a:63:a6:e6:c9:d2:e4: e5:61:93:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLXLRP0QltOmX+XItfI+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODE1YWE2MWMyOTMzNmUxZjk5YjM1NzYxNzIwMTlmNmZhMWU4YTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlon9XuwInVN6TJsMQXYw8TRxgq1 bt5hZoVYfEFl6vrtfwbTAQbavQaEAkC+QA5cj429p04YIb9yWKIXhelY8d185lNZ Uk67BhB82FFQkyz9Wj6VPyFWGkjzDxMGgO+FL7cwvUK4x8sq+6nbfMCHtm/cT0/n 2OrcOhGD6dWsivp7Js9fKHBU+Kn71IcpcOi/pRrAUXvcCPTc7iPkhT4LdERf+Ru8 T9WRZpIRTav4pBi/RuKkZzbIbPLX/5930BAlxltEEIKlckIJSLOhQ9DFPZhy1Sxv l+Bg7SLM47sqDzthZgv2aAbl2wy2tVUSRO2L2wWjYNezr0h8sJHFzgw/oQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEgVqmHCkzbh+Zs1dhcgGfb6Hop8MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvU0JXcVljS1ROdUg1bXpWMkZ5QVo5dm9laW53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2TzsMA0G CSqGSIb3DQEBCwUAA4IBAQBS8RFp+35YOi0NLjRF6mGhd6NSKHLRgZ/kEcY+TBYP KMLIYvy09L32HjO7O9VjItS4s9Q9TzBXMR3fQU7D9ZBROmpxEc/6EhaFC3xwlBQV QNau5hW4MDSxU9oQEtvpNsSdMA7FJuhA/snFxQECWO9UumRokD20oADDuoF2/CBv JhaTrTIf36iAwCPezKZdwLIynGe/Tyi88Y7SrCkfofgZ6cPJqMIl63kcVWyPpqv+ gB0q4dmGuO50XDFgassOpohn+a90NOS/7SLRl2XbHzOejLu++NMVb69bXqmpqIK5 GS7+bx0EDEGBp8rsbOQ7UcYDbJLR54pjpubJ0uTlYZOs -----END CERTIFICATE-----Generated at Mon Jan 5 14:38:00 2026 by rpki-client