This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/SCwYEksLc5pIHj0oq0DzbDwyJAg.roa File: SCwYEksLc5pIHj0oq0DzbDwyJAg.roa (raw, json) Hash identifier: fOZQNI/tC5DxhiQsazq5IbDEzwvFrMwOKbJ6WnLNRTg= Subject key identifier: 48:2C:18:12:4B:0B:73:9A:48:1E:3D:28:AB:40:F3:6C:3C:32:24:08 Certificate issuer: /CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63 Certificate serial: 019B79EC036522EBE04B40C94C9FE69E74FC Authority key identifier: BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/SCwYEksLc5pIHj0oq0DzbDwyJAg.roa Signing time: Thu 01 Jan 2026 14:17:48 +0000 ROA not before: Thu 01 Jan 2026 14:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213065 IP address blocks: 145.84.0.0/24 maxlen: 24 145.84.1.0/24 maxlen: 24 145.84.2.0/24 maxlen: 24 145.84.3.0/24 maxlen: 24 145.84.10.0/24 maxlen: 24 145.84.11.0/24 maxlen: 24 145.84.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:03:65:22:eb:e0:4b:40:c9:4c:9f:e6:9e:74:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63 Validity Not Before: Jan 1 14:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=482c18124b0b739a481e3d28ab40f36c3c322408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d8:0e:d1:e2:40:7d:83:70:09:a3:83:50:9a: df:c0:d8:62:4d:7a:89:11:5e:53:47:24:24:33:05: c4:4b:bf:88:2d:2a:63:c3:f3:30:1e:c5:84:9f:68: 22:42:64:8f:00:c1:fe:9d:37:98:ff:d4:bf:2e:ff: 97:e8:9e:5a:45:e1:dc:3e:70:69:6d:01:02:69:4f: 59:43:30:d9:31:7b:eb:3b:35:8f:71:e1:36:9a:1a: 24:ec:ee:07:22:67:79:b8:f5:19:b9:2b:11:94:2f: ac:20:ea:b4:ee:86:b9:f7:7e:23:60:0d:00:6d:6a: db:33:80:a8:14:61:f5:08:cf:d7:3c:df:06:ca:f3: 87:65:76:13:c5:ff:1a:01:b9:62:ac:91:b1:80:a3: 38:8d:97:af:6f:c6:0f:ef:49:09:5f:4d:78:db:09: 5d:b0:ac:cf:05:a0:e9:cd:61:89:3e:06:43:f5:43: 47:b5:4f:1f:98:b3:3a:1b:37:56:2b:0a:43:4c:d2: 56:fa:57:09:8c:41:1c:86:cc:c1:48:dc:7a:5c:5b: 57:9b:ab:f9:01:a1:c1:45:df:84:13:42:7d:d4:ca: 9f:93:82:d1:f1:d4:1d:c2:d5:0c:11:34:2f:f3:c4: 9b:50:1f:a6:89:01:82:57:a8:e5:3a:56:73:bf:16: 42:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2C:18:12:4B:0B:73:9A:48:1E:3D:28:AB:40:F3:6C:3C:32:24:08 X509v3 Authority Key Identifier: keyid:BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/SCwYEksLc5pIHj0oq0DzbDwyJAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.84.0.0/22 145.84.10.0/23 145.84.24.0/23 Signature Algorithm: sha256WithRSAEncryption cf:04:c2:99:b2:e1:bd:79:4c:cf:1e:d1:84:64:55:0e:b9:7a: d1:73:0c:91:0f:74:51:27:dc:64:b1:3c:68:52:97:75:56:1b: f2:70:14:81:f7:60:64:a2:05:18:ae:75:77:98:2a:83:e3:84: d8:86:a5:d5:50:42:09:1a:dd:71:f6:1f:e1:87:3a:40:28:8d: 9e:1c:28:af:00:19:73:73:4b:4f:e7:d8:b0:3a:0b:f7:8d:3d: 9d:f9:48:02:a3:e9:ca:12:30:1b:73:a0:dd:ef:62:8c:bd:1e: 0b:44:0b:91:77:ce:e7:1a:34:85:f9:ca:db:41:db:b2:3c:46: 0c:68:05:96:c6:d2:42:96:7b:0d:61:80:56:ba:dd:40:23:d1: cd:56:46:d6:9b:80:6c:9d:b8:f7:9d:0e:30:1d:c5:63:46:93: 6b:23:af:9d:af:92:48:be:1c:29:32:2c:ff:da:03:d2:1c:70: fe:bf:b3:0f:55:97:50:ab:3f:8a:2a:96:7d:fa:53:eb:52:85: 21:9b:c1:92:18:ad:db:e1:e7:bf:e4:d0:04:e9:a7:c8:69:c5: 87:2c:d2:ff:58:9a:9c:e4:dd:77:b4:1a:e7:a5:c3:3e:e1:a6: f8:ce:dd:bb:49:09:86:83:76:92:44:b8:36:20:9f:3e:0c:32: ef:45:95:c0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57ANlIuvgS0DJTJ/mnnT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMGRjMTQ0OTMxNmI2NTY3YzNlMWUzNzRiODJlZDg5MmI1 ZDBmNjMwHhcNMjYwMTAxMTQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODJjMTgxMjRiMGI3MzlhNDgxZTNkMjhhYjQwZjM2YzNjMzIyNDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndgO0eJAfYNwCaODUJrfwNhiTXqJ EV5TRyQkMwXES7+ILSpjw/MwHsWEn2giQmSPAMH+nTeY/9S/Lv+X6J5aReHcPnBp bQECaU9ZQzDZMXvrOzWPceE2mhok7O4HImd5uPUZuSsRlC+sIOq07oa5934jYA0A bWrbM4CoFGH1CM/XPN8GyvOHZXYTxf8aAblirJGxgKM4jZevb8YP70kJX0142wld sKzPBaDpzWGJPgZD9UNHtU8fmLM6GzdWKwpDTNJW+lcJjEEchszBSNx6XFtXm6v5 AaHBRd+EE0J91Mqfk4LR8dQdwtUMETQv88SbUB+miQGCV6jlOlZzvxZCNQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEgsGBJLC3OaSB49KKtA82w8MiQIMB8GA1UdIwQY MBaAFL8NwUSTFrZWfD4eN0uC7YkrXQ9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnczQlJKTVd0bFo4UGg0M1M0THRpU3RkRDJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNjZlNjItOTQ5OC00NmUwLWExNGMt NTc1NWIyZjEwNDE4LzEvU0N3WUVrc0xjNXBJSGowb3EwRHpiRHd5SkFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yNjZlNjItOTQ5OC00NmUwLWExNGMtNTc1NWIyZjEwNDE4 LzEvdnczQlJKTVd0bFo4UGg0M1M0THRpU3RkRDJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCkVQAAwQB kVQKAwQBkVQYMA0GCSqGSIb3DQEBCwUAA4IBAQDPBMKZsuG9eUzPHtGEZFUOuXrR cwyRD3RRJ9xksTxoUpd1VhvycBSB92BkogUYrnV3mCqD44TYhqXVUEIJGt1x9h/h hzpAKI2eHCivABlzc0tP59iwOgv3jT2d+UgCo+nKEjAbc6Dd72KMvR4LRAuRd87n GjSF+crbQduyPEYMaAWWxtJClnsNYYBWut1AI9HNVkbWm4Bsnbj3nQ4wHcVjRpNr I6+dr5JIvhwpMiz/2gPSHHD+v7MPVZdQqz+KKpZ9+lPrUoUhm8GSGK3b4ee/5NAE 6afIacWHLNL/WJqc5N13tBrnpcM+4ab4zt27SQmGg3aSRLg2IJ8+DDLvRZXA -----END CERTIFICATE-----Generated at Tue Jan 20 07:48:41 2026 by rpki-client