This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/sSAJGD3q9WywlcJzJJU8b9wkNnI.roa File: sSAJGD3q9WywlcJzJJU8b9wkNnI.roa (raw, json) Hash identifier: GScXqHaLC/DvIVFv4LbVlGQC4NvQYCtdCncZDyaINVM= Subject key identifier: B1:20:09:18:3D:EA:F5:6C:B0:95:C2:73:24:95:3C:6F:DC:24:36:72 Certificate issuer: /CN=ba60a4d874d9601c8142c352f80c56a43276cd47 Certificate serial: 019B7AC939EB84B2CDFCABD83B10D203D7F5 Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/sSAJGD3q9WywlcJzJJU8b9wkNnI.roa Signing time: Thu 01 Jan 2026 18:19:26 +0000 ROA not before: Thu 01 Jan 2026 18:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197537 IP address blocks: 2.58.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:39:eb:84:b2:cd:fc:ab:d8:3b:10:d2:03:d7:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47 Validity Not Before: Jan 1 18:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b12009183deaf56cb095c27324953c6fdc243672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e8:c3:c6:ba:55:46:d5:94:83:e0:68:48:a5: 5a:00:f2:63:60:e1:8c:79:9f:ea:51:22:81:19:5b: f1:b8:75:94:93:15:8d:f6:87:80:01:2b:83:eb:53: a0:f5:dd:46:29:05:82:c2:bb:f6:29:36:34:49:5a: 95:cc:21:4a:09:13:19:78:38:c5:0b:86:d7:6b:78: 44:54:02:a1:d5:d0:c6:5a:43:6b:7c:3c:2b:5f:a6: 81:bc:4a:b9:a0:b4:eb:64:9d:5b:79:ee:fc:c0:0b: f9:fa:11:3c:93:7c:43:7d:53:85:5b:f2:d0:a1:dc: e0:81:a8:c4:6e:18:ab:d6:24:9a:d6:c3:87:f0:b5: ba:70:bc:d3:14:1a:32:94:0d:3f:09:de:7a:1a:28: a3:ef:7d:4f:d5:9d:eb:ba:00:eb:4c:32:4b:87:f9: b9:2d:88:af:2e:4e:d7:de:f1:18:fe:52:0c:f9:fc: 47:a0:0e:39:a9:46:81:5b:6e:d0:da:b5:2f:9b:74: b8:85:9a:21:67:18:e8:93:98:44:44:bc:06:0d:5e: d7:f1:06:10:57:98:22:cf:fe:30:e3:a1:1c:d9:7f: b6:f3:ce:3c:1a:2d:39:e1:74:d4:95:cb:36:f8:d0: f9:82:cc:ff:a2:ce:e6:b4:0c:f2:a2:04:eb:60:7a: a1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:20:09:18:3D:EA:F5:6C:B0:95:C2:73:24:95:3C:6F:DC:24:36:72 X509v3 Authority Key Identifier: keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/sSAJGD3q9WywlcJzJJU8b9wkNnI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.115.0/24 Signature Algorithm: sha256WithRSAEncryption 36:7a:21:5c:6c:bb:d4:ec:68:73:2f:76:e9:42:65:32:93:ed: 51:3d:2c:2e:81:c0:61:b0:2b:93:3d:10:4b:6b:cd:56:8a:6a: 4c:93:38:df:cf:a5:9b:a7:a4:22:af:fa:c9:aa:98:26:e3:37: 38:70:15:61:4d:c6:43:f5:e6:79:4f:e2:02:f2:00:e2:e6:5b: 3a:46:34:1c:df:92:f2:c7:2c:5d:c6:d1:4a:a6:24:f1:ba:5f: 6d:0c:ae:28:2b:68:2b:f8:dc:2e:c7:1e:08:b1:57:26:dd:e2: 09:03:ca:9b:1d:b3:b2:63:50:16:b3:f7:be:3f:01:a1:a1:8c: c1:bc:64:a1:2f:cc:c7:c4:e5:41:b3:70:6f:89:a9:b5:45:b1: 71:f3:02:41:32:80:55:ba:7b:2c:ff:5d:0f:69:55:bf:81:ab: 76:02:80:d2:95:4f:ff:ec:0f:b4:7b:c0:1c:0e:fe:af:ab:a1: 8a:e9:bb:91:14:ca:3f:20:a5:be:40:d7:db:1f:26:9c:68:c1: 2a:40:51:d2:92:92:c4:08:f9:ee:4a:e5:94:0b:9f:30:d8:15: 99:9e:3a:0a:cf:9e:0b:86:da:77:a2:70:e3:c6:d9:6a:8d:77: bd:ce:6f:6c:00:47:43:36:37:b0:7b:5a:e1:2c:8a:da:f9:b4: eb:5b:20:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yTnrhLLN/KvYOxDSA9f1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjBhNGQ4NzRkOTYwMWM4MTQyYzM1MmY4MGM1NmE0MzI3 NmNkNDcwHhcNMjYwMTAxMTgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTIwMDkxODNkZWFmNTZjYjA5NWMyNzMyNDk1M2M2ZmRjMjQzNjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OjDxrpVRtWUg+BoSKVaAPJjYOGM eZ/qUSKBGVvxuHWUkxWN9oeAASuD61Og9d1GKQWCwrv2KTY0SVqVzCFKCRMZeDjF C4bXa3hEVAKh1dDGWkNrfDwrX6aBvEq5oLTrZJ1bee78wAv5+hE8k3xDfVOFW/LQ odzggajEbhir1iSa1sOH8LW6cLzTFBoylA0/Cd56Giij731P1Z3rugDrTDJLh/m5 LYivLk7X3vEY/lIM+fxHoA45qUaBW27Q2rUvm3S4hZohZxjok5hERLwGDV7X8QYQ V5giz/4w46Ec2X+28848Gi054XTUlcs2+ND5gsz/os7mtAzyogTrYHqhOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLEgCRg96vVssJXCcySVPG/cJDZyMB8GA1UdIwQY MBaAFLpgpNh02WAcgULDUvgMVqQyds1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1DazJIVFpZQnlCUXNOUy1BeFdwREoyelVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yOGNiNWMtMjk4Zi00ZDhiLTgxNWIt ZTVhMzc3OGJlM2FkLzEvc1NBSkdEM3E5V3l3bGNKekpKVThiOXdrTm5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yOGNiNWMtMjk4Zi00ZDhiLTgxNWItZTVhMzc3OGJlM2Fk LzEvdW1DazJIVFpZQnlCUXNOUy1BeFdwREoyelVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjpzMA0G CSqGSIb3DQEBCwUAA4IBAQA2eiFcbLvU7GhzL3bpQmUyk+1RPSwugcBhsCuTPRBL a81WimpMkzjfz6Wbp6Qir/rJqpgm4zc4cBVhTcZD9eZ5T+IC8gDi5ls6RjQc35Ly xyxdxtFKpiTxul9tDK4oK2gr+Nwuxx4IsVcm3eIJA8qbHbOyY1AWs/e+PwGhoYzB vGShL8zHxOVBs3Bviam1RbFx8wJBMoBVunss/10PaVW/gat2AoDSlU//7A+0e8Ac Dv6vq6GK6buRFMo/IKW+QNfbHyacaMEqQFHSkpLECPnuSuWUC58w2BWZnjoKz54L htp3onDjxtlqjXe9zm9sAEdDNjewe1rhLIra+bTrWyDv -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:42 2026 by rpki-client