This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SG_LjTqpCiGt3glzzcTf9NJH6wg.roa File: SG_LjTqpCiGt3glzzcTf9NJH6wg.roa (raw, json) Hash identifier: YnTeimNrwpLnJLf9YkBUHHh7CxRLoZYT0Yp+zuRNQH8= Subject key identifier: 48:6F:CB:8D:3A:A9:0A:21:AD:DE:09:73:CD:C4:DF:F4:D2:47:EB:08 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8470D8F201919441C66DBA722703DB Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SG_LjTqpCiGt3glzzcTf9NJH6wg.roa Signing time: Fri 02 Jan 2026 16:22:24 +0000 ROA not before: Fri 02 Jan 2026 16:22:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59432 IP address blocks: 31.56.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:70:d8:f2:01:91:94:41:c6:6d:ba:72:27:03:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=486fcb8d3aa90a21adde0973cdc4dff4d247eb08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:74:dc:a1:f4:2b:26:f9:6d:89:17:46:ff:38: 78:86:76:25:a6:6e:3b:37:55:1a:2c:3c:82:26:7d: bb:77:93:40:5f:98:dd:a4:4f:d2:92:2b:df:11:59: 97:b4:18:a7:29:fc:87:d0:e8:5e:cd:4d:be:c9:6c: 9a:c0:f3:0f:ea:dc:03:24:86:b6:1c:0e:33:3a:cd: 6d:93:ac:71:ed:93:d5:d1:cc:ec:da:53:48:bc:85: 6b:69:cf:9b:0b:c9:46:b6:3d:45:3c:a7:3b:69:08: 21:85:6b:92:a6:a0:c2:0d:a9:ec:14:71:44:13:c9: ac:a3:44:4b:01:54:aa:25:dd:28:1f:2e:d3:00:54: 02:a5:82:2c:e4:f6:59:53:41:5c:a2:87:16:21:32: 18:23:0a:5c:41:6a:9e:76:de:48:64:dd:8a:20:db: 01:bb:21:8a:c7:f0:af:38:88:d8:8f:fd:fb:97:88: 09:94:38:f4:7a:ef:9a:29:77:f1:e6:fb:93:ec:ac: ad:fc:16:a2:23:6b:d7:f3:6d:19:94:a4:47:07:fc: ae:34:2f:e8:54:7f:65:fa:bf:22:a3:f2:9d:28:8e: 3d:df:e0:0d:35:2d:6d:b5:6c:4c:60:ea:8b:61:04: 92:3b:09:4f:1a:e1:d7:f5:d0:b9:37:a4:d2:bd:b9: de:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6F:CB:8D:3A:A9:0A:21:AD:DE:09:73:CD:C4:DF:F4:D2:47:EB:08 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SG_LjTqpCiGt3glzzcTf9NJH6wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.82.0/24 Signature Algorithm: sha256WithRSAEncryption 42:14:47:cb:46:24:ce:d2:61:28:48:c9:ee:14:c1:c3:f7:5b: 86:e3:2b:6d:87:6f:12:8c:6d:fc:60:97:92:40:e2:8b:c2:63: 79:7a:6a:9d:4b:d2:38:8a:ce:ad:ef:4f:44:9c:3c:c7:c9:e7: 3c:f6:68:d7:58:8d:4e:c2:17:2c:d8:81:c1:c2:b4:1d:d9:04: 43:14:46:db:4d:53:d8:7f:e6:d0:d5:12:a3:7b:15:97:87:cf: 7d:6e:27:11:d3:14:45:b4:5b:32:ab:53:ee:16:5d:18:e0:b2: 78:77:a5:f9:a0:af:d8:ae:4e:35:59:c1:71:a4:fa:ab:dc:dd: f9:98:18:2a:40:50:98:9d:b7:0c:23:f6:0a:8a:14:e9:cd:0b: d3:04:a7:85:80:84:c5:84:74:42:f8:e0:13:09:fc:aa:7f:94: 1a:5f:35:4a:8e:e5:6a:3d:dc:46:4b:4f:fb:30:b3:6f:4f:c1: 0e:3a:1a:69:78:1e:59:01:7f:89:f6:4a:96:98:3a:73:b4:ed: 93:c1:6f:44:00:27:f8:3c:d8:c3:72:b7:17:96:0c:fe:13:a7: d2:72:1f:e0:d3:02:a9:25:b2:2d:ec:96:8c:29:b5:84:72:c4: 8b:1d:21:ef:34:e9:c7:b0:51:b0:75:23:1e:59:43:07:67:97: 73:84:46:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHDY8gGRlEHGbbpyJwPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODZmY2I4ZDNhYTkwYTIxYWRkZTA5NzNjZGM0ZGZmNGQyNDdlYjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HTcofQrJvltiRdG/zh4hnYlpm47 N1UaLDyCJn27d5NAX5jdpE/SkivfEVmXtBinKfyH0OhezU2+yWyawPMP6twDJIa2 HA4zOs1tk6xx7ZPV0czs2lNIvIVrac+bC8lGtj1FPKc7aQghhWuSpqDCDansFHFE E8mso0RLAVSqJd0oHy7TAFQCpYIs5PZZU0FcoocWITIYIwpcQWqedt5IZN2KINsB uyGKx/CvOIjYj/37l4gJlDj0eu+aKXfx5vuT7Kyt/BaiI2vX820ZlKRHB/yuNC/o VH9l+r8io/KdKI493+ANNS1ttWxMYOqLYQSSOwlPGuHX9dC5N6TSvbne1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEhvy406qQohrd4Jc83E3/TSR+sIMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvU0dfTGpUcXBDaUd0M2dsenpjVGY5TkpINndnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhSMA0G CSqGSIb3DQEBCwUAA4IBAQBCFEfLRiTO0mEoSMnuFMHD91uG4ytth28SjG38YJeS QOKLwmN5emqdS9I4is6t709EnDzHyec89mjXWI1Owhcs2IHBwrQd2QRDFEbbTVPY f+bQ1RKjexWXh899bicR0xRFtFsyq1PuFl0Y4LJ4d6X5oK/Yrk41WcFxpPqr3N35 mBgqQFCYnbcMI/YKihTpzQvTBKeFgITFhHRC+OATCfyqf5QaXzVKjuVqPdxGS0/7 MLNvT8EOOhppeB5ZAX+J9kqWmDpztO2TwW9EACf4PNjDcrcXlgz+E6fSch/g0wKp JbIt7JaMKbWEcsSLHSHvNOnHsFGwdSMeWUMHZ5dzhEb8 -----END CERTIFICATE-----Generated at Mon Jan 5 14:37:37 2026 by rpki-client