This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/ScJK2ivQIxsBlhkpxe_Fy41_8xc.roa File: ScJK2ivQIxsBlhkpxe_Fy41_8xc.roa (raw, json) Hash identifier: TSQwrA/vSc9MyjbkX9qzVifKTyWOKyvXJf3qefMx3B4= Subject key identifier: 49:C2:4A:DA:2B:D0:23:1B:01:96:19:29:C5:EF:C5:CB:8D:7F:F3:17 Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6 Certificate serial: 019B7A5A5A965B4259B3951AED77214FCD10 Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/ScJK2ivQIxsBlhkpxe_Fy41_8xc.roa Signing time: Thu 01 Jan 2026 16:18:20 +0000 ROA not before: Thu 01 Jan 2026 16:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29605 IP address blocks: 185.207.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:5a:96:5b:42:59:b3:95:1a:ed:77:21:4f:cd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6 Validity Not Before: Jan 1 16:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49c24ada2bd0231b01961929c5efc5cb8d7ff317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:70:4a:87:a2:38:9f:30:13:a9:45:33:f2:19: d4:d7:b4:32:7f:3a:d9:4d:a7:38:7b:ec:8b:2a:70: cf:1d:3a:5e:a7:23:9d:c6:bb:97:39:1f:92:a5:e1: 91:b5:85:54:ec:13:8e:5d:d1:29:82:7a:b4:3f:0c: 83:c7:a3:25:2e:e0:96:50:70:a4:68:35:6d:d2:c4: e0:bb:7e:82:ed:c2:4d:39:8d:95:ba:15:a3:d6:0b: 70:db:cd:3f:2f:17:25:e4:33:85:73:9c:06:78:f6: 07:ea:7b:d5:af:90:c0:92:71:4e:a1:e5:c7:c8:e6: c0:25:43:7b:34:63:15:f2:47:35:54:82:a9:dc:18: 35:23:43:b2:e5:b7:8d:a9:f9:0e:bb:5e:71:e8:13: 47:2d:fc:55:54:a7:b5:15:16:20:4a:2d:ef:09:c7: 59:ae:cf:c4:b9:77:5a:88:8d:0e:e8:b4:b6:f8:30: 81:36:41:bd:41:59:74:48:28:7b:74:91:46:6e:10: 9d:55:a2:f6:32:67:22:d3:9f:8b:f8:a1:a4:35:6a: c4:00:cd:46:22:8e:6d:74:03:b1:20:3a:9c:b5:91: fa:16:ed:7e:0f:3d:41:74:d9:69:66:a9:e0:db:93: 68:39:29:76:79:40:39:be:2c:99:49:63:f3:bd:bc: 1a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C2:4A:DA:2B:D0:23:1B:01:96:19:29:C5:EF:C5:CB:8D:7F:F3:17 X509v3 Authority Key Identifier: keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/ScJK2ivQIxsBlhkpxe_Fy41_8xc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.44.0/23 Signature Algorithm: sha256WithRSAEncryption 96:a7:95:40:f2:9b:57:e8:7b:70:a9:f2:fd:ea:12:70:13:24: 83:30:bf:c6:65:97:52:7c:4b:6b:ed:0d:e9:f5:f5:46:da:4e: fa:93:78:24:00:82:f2:22:22:11:58:90:93:3e:56:5e:f2:cb: 9d:65:e5:88:c1:3c:08:0c:c7:15:80:70:84:bb:dc:48:d2:95: d9:4a:c2:a7:0a:2f:34:d9:11:ce:21:00:25:9d:34:6b:7d:90: 61:a2:00:2b:4a:ff:fd:18:d6:c3:03:cb:3f:78:1d:f5:49:a4: b6:4d:c5:4c:f0:09:2a:33:09:81:76:88:5c:4f:fc:59:7a:0a: 3c:83:cc:71:71:37:1e:ee:39:63:15:34:6a:cb:6c:d7:39:c7: 08:66:d3:bc:5a:25:6d:94:8c:2d:60:43:bb:70:33:4a:92:7b: 2c:e5:ac:39:6e:dd:d7:b2:24:6b:f0:b5:5f:f6:7d:d2:5f:05: ee:5f:58:8e:8e:b6:9d:10:56:51:06:52:2d:42:d5:4b:ea:37: 39:d4:4a:05:ee:04:17:15:cb:70:bf:82:d4:c5:be:be:11:99: 09:57:f0:8f:bf:a4:18:2e:33:1d:6b:fc:69:2e:46:b6:1a:cf: 0e:83:8c:85:09:d2:4a:a1:96:52:b4:06:7e:70:7d:10:99:86: 31:59:1d:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WlqWW0JZs5Ua7XchT80QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzM0ZjgzNzNiZTdmZmIxYTM1ZWIzODg2MDU2NWJjM2M0 NTFiZTYwHhcNMjYwMTAxMTYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWMyNGFkYTJiZDAyMzFiMDE5NjE5MjljNWVmYzVjYjhkN2ZmMzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nBKh6I4nzATqUUz8hnU17QyfzrZ Tac4e+yLKnDPHTpepyOdxruXOR+SpeGRtYVU7BOOXdEpgnq0PwyDx6MlLuCWUHCk aDVt0sTgu36C7cJNOY2VuhWj1gtw280/Lxcl5DOFc5wGePYH6nvVr5DAknFOoeXH yObAJUN7NGMV8kc1VIKp3Bg1I0Oy5beNqfkOu15x6BNHLfxVVKe1FRYgSi3vCcdZ rs/EuXdaiI0O6LS2+DCBNkG9QVl0SCh7dJFGbhCdVaL2Mmci05+L+KGkNWrEAM1G Io5tdAOxIDqctZH6Fu1+Dz1BdNlpZqng25NoOSl2eUA5viyZSWPzvbwauwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEnCStor0CMbAZYZKcXvxcuNf/MXMB8GA1UdIwQY MBaAFALDT4Nzvn/7GjXrOIYFZbw8RRvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yZjVhMWQtZjk0YS00YmIwLWEwMTQt ZTQ1MWI1OTA3ZWE0LzEvU2NKSzJpdlFJeHNCbGhrcHhlX0Z5NDFfOHhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8yZjVhMWQtZjk0YS00YmIwLWEwMTQtZTQ1MWI1OTA3ZWE0 LzEvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuc8sMA0G CSqGSIb3DQEBCwUAA4IBAQCWp5VA8ptX6HtwqfL96hJwEySDML/GZZdSfEtr7Q3p 9fVG2k76k3gkAILyIiIRWJCTPlZe8sudZeWIwTwIDMcVgHCEu9xI0pXZSsKnCi80 2RHOIQAlnTRrfZBhogArSv/9GNbDA8s/eB31SaS2TcVM8AkqMwmBdohcT/xZego8 g8xxcTce7jljFTRqy2zXOccIZtO8WiVtlIwtYEO7cDNKknss5aw5bt3XsiRr8LVf 9n3SXwXuX1iOjradEFZRBlItQtVL6jc51EoF7gQXFctwv4LUxb6+EZkJV/CPv6QY LjMda/xpLka2Gs8Og4yFCdJKoZZStAZ+cH0QmYYxWR0J -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:26 2026 by rpki-client