This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sSR-Lok8IVabp1iVVb_8S4B_4N4.roa File: sSR-Lok8IVabp1iVVb_8S4B_4N4.roa (raw, json) Hash identifier: NZkwbSx4NZLjzD4gQw9WEQc2fRPz4rGM5thDwMGmkuI= Subject key identifier: B1:24:7E:2E:89:3C:21:56:9B:A7:58:95:55:BF:FC:4B:80:7F:E0:DE Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BDAFFE8AA0BBA718B8C0C4BE74788EEAC Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sSR-Lok8IVabp1iVVb_8S4B_4N4.roa Signing time: Tue 20 Jan 2026 10:42:42 +0000 ROA not before: Tue 20 Jan 2026 10:42:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 31.57.200.0/24 maxlen: 24 31.58.180.0/22 maxlen: 24 31.58.184.0/21 maxlen: 24 31.58.192.0/22 maxlen: 24 31.58.239.0/24 maxlen: 24 31.59.84.0/22 maxlen: 24 31.59.90.0/23 maxlen: 24 94.183.151.0/24 maxlen: 24 94.183.158.0/24 maxlen: 24 94.183.164.0/24 maxlen: 24 94.183.166.0/24 maxlen: 24 94.183.174.0/24 maxlen: 24 94.183.175.0/24 maxlen: 24 94.183.176.0/24 maxlen: 24 94.183.180.0/24 maxlen: 24 94.183.181.0/24 maxlen: 24 217.60.15.0/24 maxlen: 24 217.60.25.0/24 maxlen: 24 217.60.160.0/20 maxlen: 24 217.60.176.0/21 maxlen: 24 217.60.188.0/22 maxlen: 24 217.60.208.0/20 maxlen: 24 217.60.224.0/21 maxlen: 24 217.60.232.0/22 maxlen: 24 217.60.237.0/24 maxlen: 24 2a14:6e40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:ff:e8:aa:0b:ba:71:8b:8c:0c:4b:e7:47:88:ee:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 20 10:42:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1247e2e893c21569ba7589555bffc4b807fe0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bd:f6:b2:d0:4d:77:c0:d7:a6:99:ae:5d:9a: 12:1b:9f:b1:bc:bb:f2:3a:c1:d2:a2:ea:45:04:56: ae:56:1b:60:43:05:25:c7:8d:71:8d:37:bc:5f:c3: c3:75:00:98:0b:f8:cc:94:e8:01:81:66:2c:4b:29: ee:80:31:86:40:41:31:b4:1e:f2:1b:e4:65:66:46: 2d:73:c8:5e:9b:f2:64:28:f4:db:b4:8e:ca:c9:47: 7b:f2:ad:b2:f6:0a:95:20:27:0d:66:c2:39:f3:f8: 02:f5:be:b5:6c:09:d0:d0:03:97:40:fd:34:5c:b7: ca:16:4f:b7:ce:e2:ec:f2:f7:82:93:65:14:6c:73: 6a:97:da:be:4a:00:9b:e3:bb:88:b4:88:81:a2:8c: ae:ae:db:9c:17:f9:25:67:6e:ee:7f:12:57:90:b0: 93:bc:92:5a:4e:f4:7a:01:82:80:94:26:e5:57:a3: 5b:78:f4:ae:25:db:ea:cc:ae:69:11:e6:be:0b:e1: ab:c3:e0:64:16:d2:1f:1e:d1:8c:96:54:a8:60:e4: 04:fc:af:96:e6:b4:7e:a4:11:9d:f1:93:76:9d:9c: 1f:de:03:29:2f:89:e3:54:95:62:29:34:61:c4:c8: 53:28:6a:17:b9:5d:11:15:34:02:80:43:b7:e2:e2: 97:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:24:7E:2E:89:3C:21:56:9B:A7:58:95:55:BF:FC:4B:80:7F:E0:DE X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sSR-Lok8IVabp1iVVb_8S4B_4N4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.200.0/24 31.58.180.0-31.58.195.255 31.58.239.0/24 31.59.84.0/22 31.59.90.0/23 94.183.151.0/24 94.183.158.0/24 94.183.164.0/24 94.183.166.0/24 94.183.174.0-94.183.176.255 94.183.180.0/23 217.60.15.0/24 217.60.25.0/24 217.60.160.0-217.60.183.255 217.60.188.0/22 217.60.208.0-217.60.235.255 217.60.237.0/24 IPv6: 2a14:6e40:1::/48 Signature Algorithm: sha256WithRSAEncryption a0:5d:a1:32:d7:aa:ac:7a:84:b4:cc:63:0f:1d:00:bc:5a:dc: 9d:5e:31:52:77:27:27:9f:30:fd:14:9b:64:ba:7a:61:08:17: 95:3e:4d:e9:b7:aa:4c:37:c0:ef:b0:63:0b:c2:4a:92:39:7a: da:91:19:c4:48:0d:cb:16:a3:8e:8f:c0:04:b8:15:2e:b9:36: 62:b8:75:23:85:8f:65:b9:15:38:20:1b:ab:e5:63:d5:18:fb: 3b:86:e8:f7:d5:ae:70:29:7c:10:38:54:9c:cd:39:4e:f9:06: c9:c9:1a:ef:c5:4d:82:22:95:30:ca:6b:c9:94:ce:00:cf:d3: 88:c6:f6:d9:05:e7:33:92:4d:10:b5:72:0c:61:59:11:61:2a: 7c:15:7a:c4:b6:72:8f:9f:a1:ec:fb:a0:ad:7a:c0:1d:ed:0e: 1d:59:7a:90:17:50:78:6b:9f:1f:7c:f5:3a:b7:04:1d:ac:db: 2b:73:a3:5a:6a:b5:e5:09:82:d7:f3:9d:86:56:0d:e6:8a:8f: e9:a9:11:b7:a2:38:ba:38:fe:bf:6c:b9:32:bc:b5:c2:1e:07: 71:e3:bb:44:46:49:e7:e7:24:7f:15:a2:04:bf:c2:2e:31:1e: 89:fb:97:f6:1c:dd:23:74:57:ad:67:48:53:f1:7f:45:81:e0: 1a:27:bc:c5 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZva/+iqC7pxi4wMS+dHiO6sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTIwMTA0MjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTI0N2UyZTg5M2MyMTU2OWJhNzU4OTU1NWJmZmM0YjgwN2ZlMGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL32stBNd8DXppmuXZoSG5+xvLvy OsHSoupFBFauVhtgQwUlx41xjTe8X8PDdQCYC/jMlOgBgWYsSynugDGGQEExtB7y G+RlZkYtc8hem/JkKPTbtI7KyUd78q2y9gqVICcNZsI58/gC9b61bAnQ0AOXQP00 XLfKFk+3zuLs8veCk2UUbHNql9q+SgCb47uItIiBooyurtucF/klZ27ufxJXkLCT vJJaTvR6AYKAlCblV6NbePSuJdvqzK5pEea+C+Grw+BkFtIfHtGMllSoYOQE/K+W 5rR+pBGd8ZN2nZwf3gMpL4njVJViKTRhxMhTKGoXuV0RFTQCgEO34uKXwwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFLEkfi6JPCFWm6dYlVW//EuAf+DeMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvc1NSLUxvazhJVmFicDFpVlZiXzhTNEJfNE40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG0BggrBgEFBQcBBwEB/wSBpDCBoTCBjQQCAAEwgYYDBAAf OcgwDAMEAh86tAMEAh86wAMEAB867wMEAh87VAMEAR87WgMEAF63lwMEAF63ngME AF63pAMEAF63pjAMAwQBXreuAwQAXrewAwQBXre0AwQA2TwPAwQA2TwZMAwDBAXZ PKADBAPZPLADBALZPLwwDAMEBNk80AMEAtk86AMEANk87TAPBAIAAjAJAwcAKhRu QAABMA0GCSqGSIb3DQEBCwUAA4IBAQCgXaEy16qseoS0zGMPHQC8WtydXjFSdycn nzD9FJtkunphCBeVPk3pt6pMN8DvsGMLwkqSOXrakRnESA3LFqOOj8AEuBUuuTZi uHUjhY9luRU4IBur5WPVGPs7huj31a5wKXwQOFSczTlO+QbJyRrvxU2CIpUwymvJ lM4Az9OIxvbZBeczkk0QtXIMYVkRYSp8FXrEtnKPn6Hs+6CtesAd7Q4dWXqQF1B4 a58ffPU6twQdrNsrc6NaarXlCYLX852GVg3mio/pqRG3oji6OP6/bLkyvLXCHgdx 47tERknn5yR/FaIEv8IuMR6J+5f2HN0jdFetZ0hT8X9FgeAaJ7zF -----END CERTIFICATE-----Generated at Tue Jan 20 20:32:19 2026 by rpki-client