This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/Sx1AZyZNXuEGoNr9PO42FqDiT7Q.roa File: Sx1AZyZNXuEGoNr9PO42FqDiT7Q.roa (raw, json) Hash identifier: 8wlOpl9I3kUIsbJRrryWImMsldEoUdxyFReND45Qt30= Subject key identifier: 4B:1D:40:67:26:4D:5E:E1:06:A0:DA:FD:3C:EE:36:16:A0:E2:4F:B4 Certificate issuer: /CN=ead799026094d60516b527d842b6166805668e9e Certificate serial: 019B7F1545EE55A9CB1B91FDC7BAA984175D Authority key identifier: EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/Sx1AZyZNXuEGoNr9PO42FqDiT7Q.roa Signing time: Fri 02 Jan 2026 14:20:59 +0000 ROA not before: Fri 02 Jan 2026 14:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202 IP address blocks: 159.101.128.0/21 maxlen: 21 159.101.236.0/22 maxlen: 22 159.101.240.0/22 maxlen: 22 159.101.252.0/23 maxlen: 23 159.101.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.mft rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:45:ee:55:a9:cb:1b:91:fd:c7:ba:a9:84:17:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ead799026094d60516b527d842b6166805668e9e Validity Not Before: Jan 2 14:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b1d4067264d5ee106a0dafd3cee3616a0e24fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:e2:f2:02:65:36:63:7a:28:a6:39:5a:14: dc:ca:90:ff:f0:f0:d4:63:8a:c7:31:38:db:49:72: 21:46:94:1d:21:73:37:a3:70:85:69:d9:d0:44:58: e1:12:63:3e:a6:08:c4:71:e1:a6:a0:a6:1c:a9:40: 6e:cb:15:a5:21:f4:9f:d8:b6:01:94:c7:2a:2d:76: 48:a9:47:9a:0a:ea:aa:07:e2:fb:63:22:be:2d:c3: 34:c5:a4:4b:ff:68:b7:7c:67:08:a7:18:46:fd:e2: d1:c2:83:38:7f:8b:14:a9:b1:1b:87:ae:37:3d:7b: 39:cd:d1:1e:a4:92:06:e5:a7:f2:45:f1:07:d3:b5: 01:77:33:f7:b1:82:f2:84:39:0f:2c:c2:52:d1:53: 4b:c9:a0:4b:ca:42:43:27:70:b8:24:0b:8b:3c:a5: 24:ca:86:47:26:11:96:e5:35:62:3a:1f:46:96:81: ed:db:bf:1a:59:1a:6e:d2:54:74:14:ce:a2:19:b7: a8:3b:5a:43:47:38:76:3b:35:79:14:64:00:4e:c0: b3:2a:11:73:74:24:df:9e:6d:c4:53:ac:e4:58:03: f4:fc:27:b8:81:03:5b:c8:fa:b4:37:09:d0:fa:48: 10:13:97:fe:0e:de:14:20:75:fa:5d:16:64:1f:e2: 0a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1D:40:67:26:4D:5E:E1:06:A0:DA:FD:3C:EE:36:16:A0:E2:4F:B4 X509v3 Authority Key Identifier: keyid:EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/Sx1AZyZNXuEGoNr9PO42FqDiT7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.101.128.0/21 159.101.236.0-159.101.243.255 159.101.252.0/22 Signature Algorithm: sha256WithRSAEncryption e2:35:ef:d4:25:d4:d4:c0:28:d6:be:fa:31:a0:d0:95:cf:5d: fc:b8:5f:cd:50:a7:f1:15:dd:d0:c0:ae:dd:18:38:02:ab:53: f8:6c:88:41:12:35:b6:4f:4a:72:76:6a:4e:52:9a:53:ae:64: fb:eb:9e:4f:ca:bf:cb:72:1b:f5:82:e6:75:0d:c0:99:94:3d: 8f:0f:d8:ef:ce:e5:4e:e3:9e:47:e1:94:2d:e2:50:15:0a:88: 26:25:79:90:12:c3:85:da:78:d3:26:de:b7:76:a9:62:8a:e8: 3f:59:4c:b9:f7:e0:01:60:44:67:ab:59:91:7b:bd:fc:29:a3: cf:be:92:8e:05:38:85:66:e9:21:ba:f1:c3:b1:2c:5a:4f:4a: 88:6b:57:75:c3:5e:5a:4f:da:c0:41:79:6f:f7:8d:d5:bd:7b: a5:f5:07:41:28:45:84:b2:58:57:14:ce:49:77:88:3c:1a:42: e2:fc:48:52:ca:32:33:02:c9:e6:94:47:21:bb:14:6d:cc:5c: b2:b1:e8:e8:16:ee:83:62:f1:2f:cb:be:50:93:24:26:05:67: 81:56:59:ec:d8:8e:9b:6f:62:03:10:91:59:46:43:c7:38:26: 27:e6:f2:2c:29:2a:ed:77:b0:a8:5b:07:11:22:2d:55:5b:df: b1:99:72:71 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/FUXuVanLG5H9x7qphBddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhZDc5OTAyNjA5NGQ2MDUxNmI1MjdkODQyYjYxNjY4MDU2 NjhlOWUwHhcNMjYwMTAyMTQyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjFkNDA2NzI2NGQ1ZWUxMDZhMGRhZmQzY2VlMzYxNmEwZTI0ZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCXi8gJlNmN6KKY5WhTcypD/8PDU Y4rHMTjbSXIhRpQdIXM3o3CFadnQRFjhEmM+pgjEceGmoKYcqUBuyxWlIfSf2LYB lMcqLXZIqUeaCuqqB+L7YyK+LcM0xaRL/2i3fGcIpxhG/eLRwoM4f4sUqbEbh643 PXs5zdEepJIG5afyRfEH07UBdzP3sYLyhDkPLMJS0VNLyaBLykJDJ3C4JAuLPKUk yoZHJhGW5TViOh9GloHt278aWRpu0lR0FM6iGbeoO1pDRzh2OzV5FGQATsCzKhFz dCTfnm3EU6zkWAP0/Ce4gQNbyPq0NwnQ+kgQE5f+Dt4UIHX6XRZkH+IK3wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFEsdQGcmTV7hBqDa/TzuNhag4k+0MB8GA1UdIwQY MBaAFOrXmQJglNYFFrUn2EK2FmgFZo6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnRlWkFtQ1UxZ1VXdFNmWVFyWVdhQVZtanA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xOTg3MGYtODY2Yy00NDIwLWFkMDgt MzBjOWUyMDJlOTk1LzEvU3gxQVp5Wk5YdUVHb05yOVBPNDJGcURpVDdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xOTg3MGYtODY2Yy00NDIwLWFkMDgtMzBjOWUyMDJlOTk1 LzEvNnRlWkFtQ1UxZ1VXdFNmWVFyWVdhQVZtanA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQDn2WAMAwD BAKfZewDBAKfZfADBAKfZfwwDQYJKoZIhvcNAQELBQADggEBAOI179Ql1NTAKNa+ +jGg0JXPXfy4X81Qp/EV3dDArt0YOAKrU/hsiEESNbZPSnJ2ak5SmlOuZPvrnk/K v8tyG/WC5nUNwJmUPY8P2O/O5U7jnkfhlC3iUBUKiCYleZASw4XaeNMm3rd2qWKK 6D9ZTLn34AFgRGerWZF7vfwpo8++ko4FOIVm6SG68cOxLFpPSohrV3XDXlpP2sBB eW/3jdW9e6X1B0EoRYSyWFcUzkl3iDwaQuL8SFLKMjMCyeaURyG7FG3MXLKx6OgW 7oNi8S/LvlCTJCYFZ4FWWezYjptvYgMQkVlGQ8c4Jifm8iwpKu13sKhbBxEiLVVb 37GZcnE= -----END CERTIFICATE-----Generated at Tue Jan 20 23:14:22 2026 by rpki-client