This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SU-cWbMRaO8UE6ihjK_xiltPYLo.roa File: SU-cWbMRaO8UE6ihjK_xiltPYLo.roa (raw, json) Hash identifier: VF5ebDN18piMuzqmX6XGzy6WgjnQjSuCYZi03/2AOIA= Subject key identifier: 49:4F:9C:59:B3:11:68:EF:14:13:A8:A1:8C:AF:F1:8A:5B:4F:60:BA Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA548DF85BBE901CC2402FDD8173DE4 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SU-cWbMRaO8UE6ihjK_xiltPYLo.roa Signing time: Thu 01 Jan 2026 22:19:48 +0000 ROA not before: Thu 01 Jan 2026 22:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 194.5.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:48:df:85:bb:e9:01:cc:24:02:fd:d8:17:3d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=494f9c59b31168ef1413a8a18caff18a5b4f60ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c3:4e:09:da:66:49:2a:db:03:1b:67:08:ef: 5a:7e:7d:ed:c0:18:77:37:f2:0a:05:0e:fb:8f:36: 55:07:22:ea:10:b5:73:0f:fc:6c:6f:19:f4:0e:c2: fd:b6:13:f2:4c:21:0f:02:a8:35:c9:e2:c1:db:00: 8a:a8:1c:74:65:93:e1:99:d7:c6:cc:4e:1e:05:33: 39:f5:63:a4:fc:e3:13:98:36:ae:57:05:8b:02:63: 0a:21:d5:71:2d:d6:d3:91:4e:13:81:40:73:62:db: 4b:46:aa:e5:a4:df:b2:cc:e8:60:3b:78:89:20:c9: bd:aa:a1:79:24:d8:82:72:9b:23:dd:81:60:ac:5d: fc:0e:2c:87:05:5d:66:29:24:8d:a7:14:b9:e8:0f: 37:ff:70:06:23:93:8d:e3:45:35:5c:43:22:10:97: 00:bf:22:52:56:b1:3c:80:04:03:77:12:32:ca:60: 28:21:72:6c:94:41:fb:08:6e:7a:64:3f:6a:86:30: a5:79:6f:43:3d:d5:c3:44:52:06:43:31:5a:27:51: 7e:44:1f:a6:f8:2f:62:12:36:17:43:15:05:2a:ed: fb:ce:e6:68:0f:dc:ea:93:18:a2:ca:de:71:cd:ab: 55:b2:5f:04:33:1b:83:17:37:25:cf:ef:66:85:2c: 38:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4F:9C:59:B3:11:68:EF:14:13:A8:A1:8C:AF:F1:8A:5B:4F:60:BA X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SU-cWbMRaO8UE6ihjK_xiltPYLo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.49.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:8c:49:6b:2e:71:33:a3:bd:7c:53:e5:55:8c:ca:0b:4f:9e: 9e:46:dd:51:0a:b6:ae:86:ce:2e:a3:5f:1e:0b:9d:92:f8:09: 78:25:17:24:d7:3a:11:25:b7:2f:0a:50:b6:bf:9e:f3:8a:36: a7:38:93:c5:44:8a:8c:53:39:35:13:e7:42:0c:61:5d:8d:a8: 55:8f:a3:6c:93:01:63:e1:32:c3:4b:fc:e2:1a:3e:cc:32:03: 7c:5d:3d:95:a0:9f:59:f4:f0:95:6d:72:87:db:b2:da:4c:e5: 1d:4d:e4:46:73:09:9f:75:c0:a6:3f:0c:07:b4:72:96:27:23: ed:ae:c7:b2:7f:cc:01:64:05:97:cf:3a:5b:40:19:d5:86:81: 88:e7:fd:52:3b:c4:1f:b6:a9:4b:2e:2f:c2:85:4b:df:02:5a: 0b:e6:68:d0:71:96:ce:69:25:cb:18:7a:b5:18:3c:3d:c2:ee: bd:6f:0f:63:6f:6b:a4:e6:fb:5c:bb:8a:ff:d0:e3:29:ba:68: 48:00:7e:50:4a:1a:0e:b5:d1:1f:e1:d2:b7:d7:26:14:b8:87: 32:67:3c:ad:c1:f9:05:39:fd:0e:d0:57:3c:d2:9e:4f:72:6c: 22:8f:86:6c:12:2e:fd:c2:14:f1:f7:45:59:fb:d9:4f:1d:08: 1f:39:8e:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUjfhbvpAcwkAv3YFz3kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTRmOWM1OWIzMTE2OGVmMTQxM2E4YTE4Y2FmZjE4YTViNGY2MGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8NOCdpmSSrbAxtnCO9afn3twBh3 N/IKBQ77jzZVByLqELVzD/xsbxn0DsL9thPyTCEPAqg1yeLB2wCKqBx0ZZPhmdfG zE4eBTM59WOk/OMTmDauVwWLAmMKIdVxLdbTkU4TgUBzYttLRqrlpN+yzOhgO3iJ IMm9qqF5JNiCcpsj3YFgrF38DiyHBV1mKSSNpxS56A83/3AGI5ON40U1XEMiEJcA vyJSVrE8gAQDdxIyymAoIXJslEH7CG56ZD9qhjCleW9DPdXDRFIGQzFaJ1F+RB+m +C9iEjYXQxUFKu37zuZoD9zqkxiiyt5xzatVsl8EMxuDFzclz+9mhSw4twIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFElPnFmzEWjvFBOooYyv8YpbT2C6MB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvU1UtY1diTVJhTzhVRTZpaGpLX3hpbHRQWUxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgUxMA0G CSqGSIb3DQEBCwUAA4IBAQArjElrLnEzo718U+VVjMoLT56eRt1RCrauhs4uo18e C52S+Al4JRck1zoRJbcvClC2v57zijanOJPFRIqMUzk1E+dCDGFdjahVj6NskwFj 4TLDS/ziGj7MMgN8XT2VoJ9Z9PCVbXKH27LaTOUdTeRGcwmfdcCmPwwHtHKWJyPt rseyf8wBZAWXzzpbQBnVhoGI5/1SO8QftqlLLi/ChUvfAloL5mjQcZbOaSXLGHq1 GDw9wu69bw9jb2uk5vtcu4r/0OMpumhIAH5QShoOtdEf4dK31yYUuIcyZzytwfkF Of0O0Fc80p5Pcmwij4ZsEi79whTx90VZ+9lPHQgfOY6j -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:18 2026 by rpki-client