This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/sXgsa6T3NAB6i1KeqSDiFVhhP1s.roa File: sXgsa6T3NAB6i1KeqSDiFVhhP1s.roa (raw, json) Hash identifier: i+YZOhpBovqBdBfvkiV0CT/GOhT7cj7T2xeF57v5Yeo= Subject key identifier: B1:78:2C:6B:A4:F7:34:00:7A:8B:52:9E:A9:20:E2:15:58:61:3F:5B Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B7F81093976CDD8211ADD7C3EA2E39AFA Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/sXgsa6T3NAB6i1KeqSDiFVhhP1s.roa Signing time: Fri 02 Jan 2026 16:18:41 +0000 ROA not before: Fri 02 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 212.87.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:09:39:76:cd:d8:21:1a:dd:7c:3e:a2:e3:9a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 2 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1782c6ba4f734007a8b529ea920e21558613f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ed:52:c5:b2:b3:47:f3:e9:bc:97:75:bf:c1: 3c:38:53:f1:70:27:a4:86:9b:88:2e:bc:e6:b7:70: 67:71:83:02:41:18:83:02:5c:4b:16:17:ac:5f:88: 1e:24:96:42:34:dc:dc:f2:5a:c7:ca:6a:f7:9c:88: 33:3a:a7:66:7d:79:2b:7c:61:14:00:00:4e:03:13: db:a9:f5:12:23:d8:ed:e1:ca:97:bc:32:09:5e:d5: 18:b6:6b:cd:ea:0d:a7:b7:61:58:dd:9b:79:3a:86: ce:61:35:81:6f:8b:f8:c4:dd:f3:66:22:22:28:c9: 5d:b5:f4:aa:42:e6:fc:02:48:08:ef:05:b4:31:2f: 6c:af:c5:e8:0f:a8:c2:c8:b1:58:27:35:85:14:48: c5:d3:b0:f8:ed:79:12:39:aa:28:71:b3:5a:90:ba: e3:8e:94:d6:7e:e7:10:dc:42:fd:99:83:7f:a7:c3: 5a:03:67:68:4e:c2:3a:ea:d6:b5:7e:df:43:c1:9d: f9:43:84:90:69:98:c3:21:16:21:24:d4:ce:65:77: a5:ac:b9:11:29:10:72:4e:5e:9d:a7:7e:3e:6f:90: 04:2b:cb:bd:03:f7:00:95:fe:f5:55:99:7e:a6:b7: 5c:6f:6f:04:21:4b:e8:72:cc:fd:f4:49:12:d2:80: 7c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:78:2C:6B:A4:F7:34:00:7A:8B:52:9E:A9:20:E2:15:58:61:3F:5B X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/sXgsa6T3NAB6i1KeqSDiFVhhP1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.87.201.0/24 Signature Algorithm: sha256WithRSAEncryption 59:94:87:b4:a4:c4:d6:83:64:86:fe:d1:7d:93:2b:e7:16:03: 47:de:c8:c0:35:73:c4:84:8a:05:55:57:18:35:dc:6d:b8:06: ff:eb:06:c2:33:3c:f8:18:71:ad:37:d3:f5:9a:df:47:d6:33: bd:6f:ed:c1:79:ac:6e:bd:02:bc:b2:e2:3d:09:2e:b4:fa:9b: a5:a4:d8:d1:01:2d:d1:81:9b:b1:77:ea:cd:f2:7b:4e:db:d5: 8e:cc:2f:3e:ea:76:85:0e:de:5e:80:33:96:d8:33:f1:ec:1c: 1a:bc:30:16:00:70:8c:aa:f8:4c:48:b9:bc:f6:35:96:02:5c: af:39:35:55:7c:cd:cf:af:e4:65:34:5c:3e:99:99:79:cf:41: 6f:f6:ba:1a:1d:7d:2b:51:23:35:18:7e:ed:e9:c9:c2:e3:74: e6:dd:4d:9a:80:76:6e:5a:87:0a:e1:6b:a3:60:79:d1:5c:d9: b7:8f:a6:aa:60:7c:88:fc:31:da:eb:c1:19:3e:63:ba:56:0b: a4:1d:4b:63:b0:19:1a:da:57:a8:49:35:dd:b5:7f:33:75:28: 29:f9:e3:5f:3b:c7:43:db:e7:fd:fa:98:4d:18:d5:a3:d3:45: b1:59:06:3a:b4:c7:cd:76:8d:78:df:eb:00:c0:bd:f0:4c:d7: 25:b1:94:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gQk5ds3YIRrdfD6i45r6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTAyMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTc4MmM2YmE0ZjczNDAwN2E4YjUyOWVhOTIwZTIxNTU4NjEzZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve1SxbKzR/PpvJd1v8E8OFPxcCek hpuILrzmt3BncYMCQRiDAlxLFhesX4geJJZCNNzc8lrHymr3nIgzOqdmfXkrfGEU AABOAxPbqfUSI9jt4cqXvDIJXtUYtmvN6g2nt2FY3Zt5OobOYTWBb4v4xN3zZiIi KMldtfSqQub8AkgI7wW0MS9sr8XoD6jCyLFYJzWFFEjF07D47XkSOaoocbNakLrj jpTWfucQ3EL9mYN/p8NaA2doTsI66ta1ft9DwZ35Q4SQaZjDIRYhJNTOZXelrLkR KRByTl6dp34+b5AEK8u9A/cAlf71VZl+prdcb28EIUvocsz99EkS0oB8awIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLF4LGuk9zQAeotSnqkg4hVYYT9bMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvc1hnc2E2VDNOQUI2aTFLZXFTRGlGVmhoUDFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FfJMA0G CSqGSIb3DQEBCwUAA4IBAQBZlIe0pMTWg2SG/tF9kyvnFgNH3sjANXPEhIoFVVcY NdxtuAb/6wbCMzz4GHGtN9P1mt9H1jO9b+3BeaxuvQK8suI9CS60+pulpNjRAS3R gZuxd+rN8ntO29WOzC8+6naFDt5egDOW2DPx7BwavDAWAHCMqvhMSLm89jWWAlyv OTVVfM3Pr+RlNFw+mZl5z0Fv9roaHX0rUSM1GH7t6cnC43Tm3U2agHZuWocK4Wuj YHnRXNm3j6aqYHyI/DHa68EZPmO6VgukHUtjsBka2leoSTXdtX8zdSgp+eNfO8dD 2+f9+phNGNWj00WxWQY6tMfNdo143+sAwL3wTNclsZQ9 -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:50 2026 by rpki-client