This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/SiLu5OANnXtEnRetQfH1ZWFpQsU.roa File: SiLu5OANnXtEnRetQfH1ZWFpQsU.roa (raw, json) Hash identifier: jrPIIfPO8oeco1J59fYkCNOB0H2CsAYo7rB8pSDwKoQ= Subject key identifier: 4A:22:EE:E4:E0:0D:9D:7B:44:9D:17:AD:41:F1:F5:65:61:69:42:C5 Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d Certificate serial: 019B7B3647446D5A55718BA814049FB93340 Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/SiLu5OANnXtEnRetQfH1ZWFpQsU.roa Signing time: Thu 01 Jan 2026 20:18:33 +0000 ROA not before: Thu 01 Jan 2026 20:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1273 IP address blocks: 193.33.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:47:44:6d:5a:55:71:8b:a8:14:04:9f:b9:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d Validity Not Before: Jan 1 20:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a22eee4e00d9d7b449d17ad41f1f565616942c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d7:de:72:5f:f6:b8:95:10:c8:02:f4:41:40: 89:8b:4f:a5:95:70:30:21:ae:57:f9:e6:99:16:32: ca:99:9d:1b:7a:f2:7f:98:83:6e:cb:db:c4:70:7f: bb:95:3a:f4:bf:d5:12:b2:b9:24:b8:70:49:d7:8a: f5:93:9f:a1:1e:bb:02:84:89:b5:e9:c5:63:0b:2e: e9:4e:76:c5:60:e7:38:42:29:5d:5b:53:ad:7a:6d: 27:86:47:24:60:ce:4f:75:48:f3:a1:f1:0c:e6:db: 05:9a:27:6b:ea:f4:e4:f3:89:ec:79:d4:7f:34:a8: 31:f9:e9:3b:b8:17:45:d6:3e:47:72:94:cc:53:d9: 91:eb:c6:ff:8f:0e:02:b7:bb:68:67:b5:e8:33:8d: 62:2c:c1:b8:97:ff:3b:c0:6d:f6:62:e3:a2:54:62: 24:83:56:ce:64:e4:81:d5:7b:5f:37:4a:fa:c2:48: ae:59:33:0d:9a:88:d0:c0:85:78:89:86:90:99:d8: 77:06:26:07:97:8c:18:b7:2b:fb:f6:cf:64:1c:2c: f7:29:9f:df:8f:9a:03:65:c0:ea:32:62:c2:4d:31: 85:f1:c9:ac:b7:21:87:24:3b:56:c3:02:d4:47:a2: a3:a9:6b:78:1f:04:30:6a:1f:db:3f:35:0c:8e:06: f8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:22:EE:E4:E0:0D:9D:7B:44:9D:17:AD:41:F1:F5:65:61:69:42:C5 X509v3 Authority Key Identifier: keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/SiLu5OANnXtEnRetQfH1ZWFpQsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.108.0/24 Signature Algorithm: sha256WithRSAEncryption 70:0c:73:5d:36:a0:eb:96:1e:cf:10:c4:56:9b:00:92:56:02: f0:55:40:c0:3a:31:c0:b4:1f:41:02:34:f1:f0:1d:50:2b:da: 44:44:48:57:33:0c:d9:55:77:56:b1:3f:9b:23:0e:a0:14:ee: 8b:78:bf:1b:aa:42:fe:b6:fa:ec:da:1b:d4:3b:2b:21:e2:b6: 53:b7:f6:3a:e7:51:8d:b0:1c:ce:c1:b5:fb:83:f8:fd:be:b7: 1b:36:9a:c4:ee:e9:0c:34:fb:7a:81:10:49:8e:46:5d:f0:b2: 2f:bd:4c:03:e3:29:fd:a2:93:4f:ae:ce:37:9f:95:06:58:f4: ea:56:67:47:a3:19:84:27:30:d6:78:ab:93:64:88:c6:0a:73: 38:6f:f0:52:9a:11:4d:47:2e:63:63:7b:db:19:91:6a:52:9f: 62:77:f0:7d:f3:37:8b:cc:6c:7b:77:bd:90:2a:05:9a:0d:8e: 42:7b:ee:ec:8e:02:c2:80:15:e2:3b:10:ba:a6:e0:75:85:e6: 5a:e8:b1:c1:18:1a:82:42:57:cc:60:0e:97:1b:5b:4b:0d:99: 5d:2f:3b:ce:63:a5:bf:e4:9a:f3:3a:f5:d3:c0:2e:49:c9:a7: a2:63:f1:6b:51:0f:39:cd:36:a8:39:93:6d:ef:91:a7:6f:51: 95:21:b5:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NkdEbVpVcYuoFASfuTNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNGUxZWE2NTI4N2EyNGUyMGM2NjNiNTE2MWMxNTEzZjAw YzhhOGQwHhcNMjYwMTAxMjAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTIyZWVlNGUwMGQ5ZDdiNDQ5ZDE3YWQ0MWYxZjU2NTYxNjk0MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9fecl/2uJUQyAL0QUCJi0+llXAw Ia5X+eaZFjLKmZ0bevJ/mINuy9vEcH+7lTr0v9USsrkkuHBJ14r1k5+hHrsChIm1 6cVjCy7pTnbFYOc4QildW1Otem0nhkckYM5PdUjzofEM5tsFmidr6vTk84nsedR/ NKgx+ek7uBdF1j5HcpTMU9mR68b/jw4Ct7toZ7XoM41iLMG4l/87wG32YuOiVGIk g1bOZOSB1XtfN0r6wkiuWTMNmojQwIV4iYaQmdh3BiYHl4wYtyv79s9kHCz3KZ/f j5oDZcDqMmLCTTGF8cmstyGHJDtWwwLUR6KjqWt4HwQwah/bPzUMjgb4FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEoi7uTgDZ17RJ0XrUHx9WVhaULFMB8GA1UdIwQY MBaAFO9OHqZSh6JOIMZjtRYcFRPwDIqNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzA0ZXBsS0hvazRneG1PMUZod1ZFX0FNaW8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hNTJjZWItYzhjOC00MjM2LWEwMzct NjBhNTc0M2U2ZTFmLzEvU2lMdTVPQU5uWHRFblJldFFmSDFaV0ZwUXNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9hNTJjZWItYzhjOC00MjM2LWEwMzctNjBhNTc0M2U2ZTFm LzEvNzA0ZXBsS0hvazRneG1PMUZod1ZFX0FNaW8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSFsMA0G CSqGSIb3DQEBCwUAA4IBAQBwDHNdNqDrlh7PEMRWmwCSVgLwVUDAOjHAtB9BAjTx 8B1QK9pEREhXMwzZVXdWsT+bIw6gFO6LeL8bqkL+tvrs2hvUOysh4rZTt/Y651GN sBzOwbX7g/j9vrcbNprE7ukMNPt6gRBJjkZd8LIvvUwD4yn9opNPrs43n5UGWPTq VmdHoxmEJzDWeKuTZIjGCnM4b/BSmhFNRy5jY3vbGZFqUp9id/B98zeLzGx7d72Q KgWaDY5Ce+7sjgLCgBXiOxC6puB1heZa6LHBGBqCQlfMYA6XG1tLDZldLzvOY6W/ 5JrzOvXTwC5JyaeiY/FrUQ85zTaoOZNt75Gnb1GVIbX7 -----END CERTIFICATE-----Generated at Mon Jan 26 18:19:16 2026 by rpki-client