This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/slcKhaxRxeaCpF6VHXmttdYmZB0.roa File: slcKhaxRxeaCpF6VHXmttdYmZB0.roa (raw, json) Hash identifier: J3V/eHX3Ccj83lCQrs3uEZ0s/c+0ECGpX2QVgnPgtrc= Subject key identifier: B2:57:0A:85:AC:51:C5:E6:82:A4:5E:95:1D:79:AD:B5:D6:26:64:1D Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c Certificate serial: 019B76EB8D631002767294BDDCDA5FC9E690 Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/slcKhaxRxeaCpF6VHXmttdYmZB0.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203020 IP address blocks: 45.250.64.0/22 maxlen: 32 91.132.114.0/23 maxlen: 32 103.240.180.0/22 maxlen: 32 185.232.45.0/24 maxlen: 32 193.28.182.0/24 maxlen: 32 193.28.191.0/24 maxlen: 32 193.28.202.0/24 maxlen: 32 193.28.237.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8d:63:10:02:76:72:94:bd:dc:da:5f:c9:e6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2570a85ac51c5e682a45e951d79adb5d626641d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:05:2b:cc:9d:7e:6b:87:99:3b:88:ce:68:44: 4d:81:1e:24:26:c5:41:2b:62:c3:ef:6b:9b:70:c8: 8d:28:05:4a:da:e2:19:af:23:7a:84:04:c9:8a:00: 3b:a6:95:e1:cd:c1:a8:77:c9:ff:5f:b3:7b:11:10: a2:28:01:96:5d:d6:4f:6b:1d:d6:55:9a:b6:83:73: 09:5e:df:d2:21:ed:11:73:af:0e:b2:a7:83:07:95: 2c:0b:1d:bc:03:3b:5b:2b:b5:64:de:4d:18:c8:7f: 72:61:9f:b0:3f:fd:e6:08:41:6b:1f:05:0d:e6:74: f7:3c:0b:d4:a9:e1:3d:1f:c4:b8:7c:b4:b2:f2:ef: f6:68:6d:d4:89:01:24:98:66:42:a8:2e:1e:8e:4b: 14:46:e6:79:ff:36:9d:e2:7f:d2:14:87:fb:10:fc: 72:65:44:e3:1f:35:4f:26:0b:fe:ff:2d:a4:c4:b0: 4b:3d:42:df:16:12:91:f9:2d:24:60:1f:61:f5:42: 3f:3f:64:22:0e:95:0a:18:ef:76:19:50:06:14:29: 6f:e1:b8:ac:96:69:a0:b6:6f:e4:ee:ea:40:3b:bf: ce:26:36:00:92:39:ee:69:fd:5a:99:f5:2f:10:07: 88:3c:a6:69:01:e8:77:be:13:88:d9:cf:0b:dc:fc: ad:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:57:0A:85:AC:51:C5:E6:82:A4:5E:95:1D:79:AD:B5:D6:26:64:1D X509v3 Authority Key Identifier: keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/slcKhaxRxeaCpF6VHXmttdYmZB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.250.64.0/22 91.132.114.0/23 103.240.180.0/22 185.232.45.0/24 193.28.182.0/24 193.28.191.0/24 193.28.202.0/24 193.28.237.0/24 Signature Algorithm: sha256WithRSAEncryption 60:9a:47:ce:2a:0b:7e:16:68:24:a8:bc:ec:fe:b3:c9:3a:67: 80:b4:14:ca:ac:2e:84:14:12:5f:3c:4f:76:4a:8a:9b:71:ca: 94:ed:86:6f:28:28:81:7f:2b:98:ff:17:0f:c9:62:f2:b7:79: 3d:57:dd:11:9f:14:a4:e5:0a:73:88:79:cc:78:54:28:cf:7e: ff:b3:7a:74:69:d1:02:b7:83:36:0a:85:64:cd:88:a9:07:af: 14:a0:31:af:bb:a0:f6:10:a7:b1:68:08:a2:d8:a5:45:e6:9a: 26:92:ec:38:87:f8:a0:90:b8:08:57:08:b8:2f:80:43:b6:20: c6:21:d1:b2:b7:34:96:bc:d6:96:fd:ae:da:34:f2:de:62:5a: 69:21:df:0c:93:db:18:8f:35:9f:1b:78:5f:e0:7c:20:94:71: 44:6d:28:41:ec:cc:50:11:44:21:fe:0e:b6:05:99:f0:55:92: 72:74:2f:ee:bf:18:17:ad:94:34:93:66:f5:17:37:ab:78:15: 48:52:35:3c:c4:aa:79:c4:b3:40:51:c0:31:10:ad:6d:8c:89: 69:74:45:85:fb:18:f6:1b:73:af:46:21:93:19:92:ea:22:8c: a5:05:e9:f2:d1:90:d1:d0:28:b5:22:10:b2:2e:a6:39:6a:80: 26:e9:9e:ae -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt2641jEAJ2cpS93NpfyeaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDNhMmNhZjI5ODAxOWZiZDY2ODYyMTUxNmM4YzZlMWQx MGU4M2MwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjU3MGE4NWFjNTFjNWU2ODJhNDVlOTUxZDc5YWRiNWQ2MjY2NDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwUrzJ1+a4eZO4jOaERNgR4kJsVB K2LD72ubcMiNKAVK2uIZryN6hATJigA7ppXhzcGod8n/X7N7ERCiKAGWXdZPax3W VZq2g3MJXt/SIe0Rc68OsqeDB5UsCx28AztbK7Vk3k0YyH9yYZ+wP/3mCEFrHwUN 5nT3PAvUqeE9H8S4fLSy8u/2aG3UiQEkmGZCqC4ejksURuZ5/zad4n/SFIf7EPxy ZUTjHzVPJgv+/y2kxLBLPULfFhKR+S0kYB9h9UI/P2QiDpUKGO92GVAGFClv4bis lmmgtm/k7upAO7/OJjYAkjnuaf1amfUvEAeIPKZpAeh3vhOI2c8L3PytKwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFLJXCoWsUcXmgqRelR15rbXWJmQdMB8GA1UdIwQY MBaAFGwDosrymAGfvWaGIVFsjG4dEOg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDkt ZmMzN2ZiMGNkNDNiLzEvc2xjS2hheFJ4ZWFDcEY2VkhYbXR0ZFltWkIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDktZmMzN2ZiMGNkNDNi LzEvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCLfpAAwQB W4RyAwQCZ/C0AwQAuegtAwQAwRy2AwQAwRy/AwQAwRzKAwQAwRztMA0GCSqGSIb3 DQEBCwUAA4IBAQBgmkfOKgt+FmgkqLzs/rPJOmeAtBTKrC6EFBJfPE92SoqbccqU 7YZvKCiBfyuY/xcPyWLyt3k9V90RnxSk5QpziHnMeFQoz37/s3p0adECt4M2CoVk zYipB68UoDGvu6D2EKexaAii2KVF5pomkuw4h/igkLgIVwi4L4BDtiDGIdGytzSW vNaW/a7aNPLeYlppId8Mk9sYjzWfG3hf4HwglHFEbShB7MxQEUQh/g62BZnwVZJy dC/uvxgXrZQ0k2b1FzereBVIUjU8xKp5xLNAUcAxEK1tjIlpdEWF+xj2G3OvRiGT GZLqIoylBeny0ZDR0Ci1IhCyLqY5aoAm6Z6u -----END CERTIFICATE-----Generated at Sun Jan 18 10:46:45 2026 by rpki-client