This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/SxljHk2cGiaCqx7oBYorH1FyNLM.roa File: SxljHk2cGiaCqx7oBYorH1FyNLM.roa (raw, json) Hash identifier: X0K5Gb0sXyJIajhaLNptLUdlUrzJv1KHea1ZlF2NI+c= Subject key identifier: 4B:19:63:1E:4D:9C:1A:26:82:AB:1E:E8:05:8A:2B:1F:51:72:34:B3 Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5 Certificate serial: 019B7F155151F9BA2554DAC7D1D89AA2F7DE Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/SxljHk2cGiaCqx7oBYorH1FyNLM.roa Signing time: Fri 02 Jan 2026 14:21:02 +0000 ROA not before: Fri 02 Jan 2026 14:21:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25491 IP address blocks: 185.104.244.0/24 maxlen: 24 185.104.245.0/24 maxlen: 24 185.104.246.0/24 maxlen: 24 185.104.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:51:51:f9:ba:25:54:da:c7:d1:d8:9a:a2:f7:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5 Validity Not Before: Jan 2 14:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b19631e4d9c1a2682ab1ee8058a2b1f517234b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:ea:1b:05:88:59:fa:b4:78:5f:5d:bd:58: 33:62:ea:64:f4:38:e3:38:cf:cb:2d:4a:dd:9d:2b: 21:e2:11:ea:0c:91:4c:4f:13:35:86:dc:af:76:5c: 98:24:3f:9d:81:09:f6:ce:b4:1d:17:83:94:b1:2c: fa:13:78:b4:c0:e6:34:20:ab:1c:46:5a:04:db:87: cf:e8:f6:3b:e8:5a:8c:b5:8b:be:fd:8a:b2:f1:a0: e9:00:6b:40:4c:c3:51:19:86:bf:88:af:5e:88:85: 23:35:81:42:50:91:09:d4:46:78:60:55:af:5e:a1: 4e:6b:6f:38:43:84:dc:3f:5c:71:a6:4f:c2:09:7b: 3c:85:56:8a:e6:11:23:c3:3c:3d:1f:1c:f0:3a:54: 3a:ec:a7:12:9f:d0:ef:2d:72:fc:96:a5:b6:fb:9a: e2:e9:fb:ce:c7:24:98:98:63:00:21:d5:7d:96:78: 18:1f:79:32:42:67:02:c1:ad:0b:98:90:04:69:3e: 3d:55:7d:87:df:6a:fe:00:fb:b3:6a:4d:f2:dd:99: 21:f4:73:1c:6c:54:78:b8:2a:b3:fb:ee:b1:41:45: ae:34:39:e9:9a:85:11:b4:d5:92:34:b9:80:82:9a: fe:ea:14:fb:a5:55:b5:03:8d:32:1c:5e:a7:8e:30: ca:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:19:63:1E:4D:9C:1A:26:82:AB:1E:E8:05:8A:2B:1F:51:72:34:B3 X509v3 Authority Key Identifier: keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/SxljHk2cGiaCqx7oBYorH1FyNLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.244.0/22 Signature Algorithm: sha256WithRSAEncryption 21:25:49:1a:06:a3:ad:16:1e:e8:01:e1:f2:96:3a:b4:a3:01: fd:1c:0c:5d:0b:b1:e7:6f:a3:6f:db:96:16:dd:9c:87:1f:53: b2:b7:7b:ef:cd:26:a9:f2:f2:d2:f6:f5:b7:94:88:66:2e:ed: ba:8d:8c:5c:4f:39:64:89:51:0e:15:64:d2:23:09:50:3a:ac: c8:36:89:b9:36:d6:5a:52:37:81:2a:97:a1:40:e5:56:ba:f3: 43:81:6f:07:8e:77:f5:2f:0f:b9:b2:9d:9d:30:31:fc:9b:76: b0:5f:4f:a3:1e:df:8b:a6:0f:83:99:fc:22:2b:cf:41:9e:a6: 49:8a:dd:38:13:da:d7:c2:3e:57:30:4c:1d:a3:5d:f0:e3:9d: a2:e5:a3:5c:bb:ba:85:d9:09:81:28:13:3c:95:47:53:ac:a7: de:69:0c:11:11:e1:cb:37:fe:3c:9e:e6:42:f9:6f:98:72:5d: 0e:05:4a:89:fa:a9:ec:96:f3:5b:c3:4a:19:dc:7d:39:24:d8: a6:42:dd:ff:ac:66:5e:5d:ab:26:23:1d:37:8d:d9:fc:bf:87: 1a:23:14:cd:9a:44:09:2e:6f:e1:ce:c5:0f:4a:3d:15:d2:40: 24:cd:c7:5d:5d:97:af:67:ef:d5:d3:36:39:04:53:0d:dd:8a: 00:4f:60:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FVFR+bolVNrH0diaovfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZDI3ZmVhM2JhYTNlZjY4MGU4ZjdhMDdhNWYxOTRhYzQ5 ODkyYTUwHhcNMjYwMTAyMTQyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjE5NjMxZTRkOWMxYTI2ODJhYjFlZTgwNThhMmIxZjUxNzIzNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD/qGwWIWfq0eF9dvVgzYupk9Djj OM/LLUrdnSsh4hHqDJFMTxM1htyvdlyYJD+dgQn2zrQdF4OUsSz6E3i0wOY0IKsc RloE24fP6PY76FqMtYu+/Yqy8aDpAGtATMNRGYa/iK9eiIUjNYFCUJEJ1EZ4YFWv XqFOa284Q4TcP1xxpk/CCXs8hVaK5hEjwzw9HxzwOlQ67KcSn9DvLXL8lqW2+5ri 6fvOxySYmGMAIdV9lngYH3kyQmcCwa0LmJAEaT49VX2H32r+APuzak3y3Zkh9HMc bFR4uCqz++6xQUWuNDnpmoURtNWSNLmAgpr+6hT7pVW1A40yHF6njjDKSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEsZYx5NnBomgqse6AWKKx9RcjSzMB8GA1UdIwQY MBaAFAzSf+o7qj72gOj3oHpfGUrEmJKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYt YTYwZjEzMTk4ZDVkLzEvU3hsakhrMmNHaWFDcXg3b0JZb3JIMUZ5TkxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYtYTYwZjEzMTk4ZDVk LzEvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWj0MA0G CSqGSIb3DQEBCwUAA4IBAQAhJUkaBqOtFh7oAeHyljq0owH9HAxdC7Hnb6Nv25YW 3ZyHH1Oyt3vvzSap8vLS9vW3lIhmLu26jYxcTzlkiVEOFWTSIwlQOqzINom5NtZa UjeBKpehQOVWuvNDgW8Hjnf1Lw+5sp2dMDH8m3awX0+jHt+Lpg+DmfwiK89BnqZJ it04E9rXwj5XMEwdo13w452i5aNcu7qF2QmBKBM8lUdTrKfeaQwREeHLN/48nuZC +W+Ycl0OBUqJ+qnslvNbw0oZ3H05JNimQt3/rGZeXasmIx03jdn8v4caIxTNmkQJ Lm/hzsUPSj0V0kAkzcddXZevZ+/V0zY5BFMN3YoAT2AO -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:57 2026 by rpki-client