This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/SV_A5OMf5Dv_YVGf3i03i121qDE.roa File: SV_A5OMf5Dv_YVGf3i03i121qDE.roa (raw, json) Hash identifier: Yx1VNJorHPI+3bEwTwwZMtNZ1vpLF6jyHjPFF9j0vFs= Subject key identifier: 49:5F:C0:E4:E3:1F:E4:3B:FF:61:51:9F:DE:2D:37:8B:5D:B5:A8:31 Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8 Certificate serial: 019B7C8070830BD3CEEA243845BF0CA075FC Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/SV_A5OMf5Dv_YVGf3i03i121qDE.roa Signing time: Fri 02 Jan 2026 02:19:10 +0000 ROA not before: Fri 02 Jan 2026 02:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206061 IP address blocks: 185.24.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:70:83:0b:d3:ce:ea:24:38:45:bf:0c:a0:75:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8 Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=495fc0e4e31fe43bff61519fde2d378b5db5a831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d9:0b:90:2e:e9:22:87:63:ad:26:6d:aa:b7: 77:a6:28:75:f6:c5:38:5a:65:8f:41:b1:72:31:e1: 1a:55:af:6d:a0:3f:30:62:19:a0:ac:fa:30:d2:69: c9:a6:db:f3:ad:08:32:86:23:4b:d4:33:c4:8a:69: 9a:3e:63:e8:44:b6:89:94:67:3b:92:f4:e8:2c:56: a2:9e:fe:f8:db:d7:6c:2d:fc:62:29:8a:37:6e:d8: 8c:f8:1d:0d:89:b5:37:24:b1:39:4a:eb:4c:19:69: 88:46:05:b5:fd:9b:4f:70:77:50:54:a9:5f:22:4b: 9b:59:b1:67:39:ce:82:1e:53:b4:6f:cb:0f:c3:67: 6a:41:d1:30:70:00:d2:38:7c:2c:53:20:1e:85:1d: ff:e9:ae:4f:6a:09:c9:0f:95:01:ec:a5:e8:86:1b: 15:79:7c:35:03:70:14:ff:d0:6b:93:11:2b:73:60: 13:0c:53:d1:2e:74:65:7c:06:ca:0c:c0:77:5b:41: b4:2d:b8:36:14:43:77:88:42:8c:74:42:d9:26:f7: d2:f1:ac:45:15:20:90:5d:b9:23:be:e0:71:93:89: 58:bb:49:89:2c:a9:5a:2c:53:8f:17:8f:e5:de:b6: a6:37:27:3f:02:2c:03:2b:15:3b:76:17:65:13:0e: 51:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5F:C0:E4:E3:1F:E4:3B:FF:61:51:9F:DE:2D:37:8B:5D:B5:A8:31 X509v3 Authority Key Identifier: keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/SV_A5OMf5Dv_YVGf3i03i121qDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.24.217.0/24 Signature Algorithm: sha256WithRSAEncryption 91:3c:a7:d7:16:2b:c4:c4:5f:d3:f3:3f:c3:51:bf:b4:4f:6c: d1:bb:60:16:16:d3:13:01:4c:0c:25:5f:3b:5f:5f:9b:14:65: 2a:7e:2c:5d:89:8b:49:eb:15:d5:5a:86:ee:2a:69:7d:cd:06: 2e:4f:8c:6e:fb:fc:95:ec:cb:f4:25:8a:3b:ee:b6:f5:1f:fc: 9e:b1:0b:1f:4c:2b:3c:81:ef:d4:10:20:54:c8:bd:46:f0:36: f2:3a:3d:6d:9e:c5:25:fd:4e:64:a9:f3:a3:e8:cb:7b:a0:ef: 8c:c7:6c:fb:5f:b6:83:56:ba:c2:c9:79:96:cf:10:e0:d9:a4: d1:63:12:ad:ad:54:86:1d:35:85:0d:83:3e:1f:ce:76:f0:90: 48:3b:09:2b:9f:e7:50:f2:02:d0:77:1c:3d:de:6f:31:6b:1e: 82:6c:08:1f:c5:2e:54:ce:78:c5:48:06:60:cc:b4:e9:14:99: 6a:2c:f3:d4:9e:b1:98:f3:e5:b5:e9:d7:e8:82:d3:55:27:c1: 1c:11:8a:8b:cd:a2:2a:0e:54:9b:98:87:ff:d8:f5:b0:97:fb: 96:23:a6:83:01:c0:62:7a:73:6c:cf:83:32:f2:54:45:2c:7f: 37:f8:1f:dc:5e:af:6a:c3:d6:35:71:c0:42:8f:3d:0f:3e:e6: 23:a7:e6:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHCDC9PO6iQ4Rb8MoHX8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjhmN2EzOTFiN2IxNjQ5ZWQ0OTAzNDgyZDNlOTMxZWQz NGUzZDgwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTVmYzBlNGUzMWZlNDNiZmY2MTUxOWZkZTJkMzc4YjVkYjVhODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktkLkC7pIodjrSZtqrd3pih19sU4 WmWPQbFyMeEaVa9toD8wYhmgrPow0mnJptvzrQgyhiNL1DPEimmaPmPoRLaJlGc7 kvToLFainv7429dsLfxiKYo3btiM+B0NibU3JLE5SutMGWmIRgW1/ZtPcHdQVKlf IkubWbFnOc6CHlO0b8sPw2dqQdEwcADSOHwsUyAehR3/6a5PagnJD5UB7KXohhsV eXw1A3AU/9BrkxErc2ATDFPRLnRlfAbKDMB3W0G0Lbg2FEN3iEKMdELZJvfS8axF FSCQXbkjvuBxk4lYu0mJLKlaLFOPF4/l3ramNyc/AiwDKxU7dhdlEw5RmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFElfwOTjH+Q7/2FRn94tN4tdtagxMB8GA1UdIwQY MBaAFM1o96ORt7FkntSQNILT6THtNOPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84YjA1YmYtMzNmMS00YjViLTg4YTQt MTY3M2FkOGM0MDEyLzEvU1ZfQTVPTWY1RHZfWVZHZjNpMDNpMTIxcURFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS84YjA1YmYtMzNmMS00YjViLTg4YTQtMTY3M2FkOGM0MDEy LzEveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRjZMA0G CSqGSIb3DQEBCwUAA4IBAQCRPKfXFivExF/T8z/DUb+0T2zRu2AWFtMTAUwMJV87 X1+bFGUqfixdiYtJ6xXVWobuKml9zQYuT4xu+/yV7Mv0JYo77rb1H/yesQsfTCs8 ge/UECBUyL1G8DbyOj1tnsUl/U5kqfOj6Mt7oO+Mx2z7X7aDVrrCyXmWzxDg2aTR YxKtrVSGHTWFDYM+H8528JBIOwkrn+dQ8gLQdxw93m8xax6CbAgfxS5UznjFSAZg zLTpFJlqLPPUnrGY8+W16dfogtNVJ8EcEYqLzaIqDlSbmIf/2PWwl/uWI6aDAcBi enNsz4My8lRFLH83+B/cXq9qw9Y1ccBCjz0PPuYjp+bz -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:45 2026 by rpki-client