This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/SLoD8WlsE6Q2x9w7dRO-_5Gjieg.roa File: SLoD8WlsE6Q2x9w7dRO-_5Gjieg.roa (raw, json) Hash identifier: AakEz/uG7k8VdhJpZPmGVxjxcBRrnDPnuAQSdndF1BM= Subject key identifier: 48:BA:03:F1:69:6C:13:A4:36:C7:DC:3B:75:13:BE:FF:91:A3:89:E8 Certificate issuer: /CN=2e738cf32e6e4f940220f3b828f07b77e813d096 Certificate serial: 019B7F1513414FFB017AB0920EEE6A6C9969 Authority key identifier: 2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/SLoD8WlsE6Q2x9w7dRO-_5Gjieg.roa Signing time: Fri 02 Jan 2026 14:20:46 +0000 ROA not before: Fri 02 Jan 2026 14:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215337 IP address blocks: 193.177.246.0/24 maxlen: 24 212.102.104.0/24 maxlen: 24 2a0d:58c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:13:41:4f:fb:01:7a:b0:92:0e:ee:6a:6c:99:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e738cf32e6e4f940220f3b828f07b77e813d096 Validity Not Before: Jan 2 14:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48ba03f1696c13a436c7dc3b7513beff91a389e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a5:04:f7:ba:a5:75:3d:9e:60:5d:36:08:40: 24:fb:a4:05:45:9d:14:d5:2e:bd:c3:eb:4a:49:7f: c7:ef:8d:ff:a6:e2:dd:71:68:b5:5b:64:b5:98:db: 47:5f:a1:84:1f:bd:22:69:ef:ab:9f:86:cb:03:7e: 4f:f6:6c:5d:6b:c3:66:7a:8b:12:44:7b:70:b2:bd: de:f0:30:05:e8:78:46:e8:d3:8a:c5:b7:bc:e5:82: 2f:ae:be:fb:2d:6e:8d:58:c8:62:d1:e3:85:c2:0f: 04:1c:ed:9b:5d:ae:c1:e0:07:ee:36:54:43:ba:01: c3:f5:4c:0e:ca:ee:d3:89:f4:c6:38:a1:68:1b:38: cb:17:d0:f8:26:c8:d5:4c:d5:b9:30:95:d6:fe:42: a3:69:b8:aa:85:65:55:87:15:9a:a6:a8:2b:78:d0: 21:ac:00:de:b0:a3:68:c1:ca:d2:6f:27:2d:7e:ab: 40:a1:2d:04:d0:65:2d:6d:39:31:7c:4f:60:c8:e2: fa:c4:8b:1c:c6:db:b3:3a:7c:49:80:44:d6:27:4d: 1a:3a:e4:13:2d:28:ec:12:8b:2e:df:75:4d:cd:e4: e2:35:4f:93:09:17:0e:a5:3a:22:3b:4b:65:ad:75: dc:dc:e5:a7:41:ff:48:08:98:2b:34:8b:c2:34:cf: cc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BA:03:F1:69:6C:13:A4:36:C7:DC:3B:75:13:BE:FF:91:A3:89:E8 X509v3 Authority Key Identifier: keyid:2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/SLoD8WlsE6Q2x9w7dRO-_5Gjieg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.177.246.0/24 212.102.104.0/24 IPv6: 2a0d:58c0::/29 Signature Algorithm: sha256WithRSAEncryption 91:ab:ed:17:4b:05:79:d4:37:5f:73:f9:42:f6:f6:04:ec:5e: 91:9e:ab:96:4f:f8:c8:99:2d:bd:83:58:54:d0:72:e1:46:41: e9:f6:9b:45:4e:c3:73:8c:38:f1:67:c7:ed:30:df:0e:f8:13: fb:fe:98:4d:b7:6d:b3:7b:39:71:0d:00:25:2b:a2:26:00:33: b5:94:c0:d8:d4:9d:b1:46:92:25:23:58:a9:09:4d:56:af:19: ae:16:ea:28:d9:5f:96:1f:6d:51:18:c7:64:2b:05:07:c8:8a: bb:0b:f7:44:d5:04:a5:1c:62:e9:0c:79:2f:07:fa:67:4a:18: 6a:3c:3e:68:c7:34:b9:ac:cc:83:95:41:3e:11:34:e8:c9:fc: f9:ab:38:f1:e8:ff:11:66:cf:2c:2b:3f:6e:53:19:05:1d:6e: 79:05:17:70:18:87:60:38:72:25:bd:d0:eb:09:ad:e3:71:35: 3c:e1:da:59:f8:10:e8:cd:89:8c:de:fc:25:77:6a:7f:3b:b6: cc:07:04:69:b4:4d:29:94:8b:4f:c5:38:26:67:be:8e:ab:6d: cd:63:90:73:c5:86:93:ad:60:27:be:94:10:5b:b3:df:ff:5f: 5f:88:43:cf:cc:29:35:1d:84:ef:fe:94:a7:84:fa:a8:39:dd: 7d:df:01:01 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FRNBT/sBerCSDu5qbJlpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNzM4Y2YzMmU2ZTRmOTQwMjIwZjNiODI4ZjA3Yjc3ZTgx M2QwOTYwHhcNMjYwMTAyMTQyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGJhMDNmMTY5NmMxM2E0MzZjN2RjM2I3NTEzYmVmZjkxYTM4OWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aUE97qldT2eYF02CEAk+6QFRZ0U 1S69w+tKSX/H743/puLdcWi1W2S1mNtHX6GEH70iae+rn4bLA35P9mxda8NmeosS RHtwsr3e8DAF6HhG6NOKxbe85YIvrr77LW6NWMhi0eOFwg8EHO2bXa7B4AfuNlRD ugHD9UwOyu7TifTGOKFoGzjLF9D4JsjVTNW5MJXW/kKjabiqhWVVhxWapqgreNAh rADesKNowcrSbyctfqtAoS0E0GUtbTkxfE9gyOL6xIscxtuzOnxJgETWJ00aOuQT LSjsEosu33VNzeTiNU+TCRcOpToiO0tlrXXc3OWnQf9ICJgrNIvCNM/MUQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEi6A/FpbBOkNsfcO3UTvv+Ro4noMB8GA1UdIwQY MBaAFC5zjPMubk+UAiDzuCjwe3foE9CWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzct NWY2NTEwM2U2ZjcwLzEvU0xvRDhXbHNFNlEyeDl3N2RSTy1fNUdqaWVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzctNWY2NTEwM2U2Zjcw LzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAwbH2AwQA 1GZoMA0EAgACMAcDBQMqDVjAMA0GCSqGSIb3DQEBCwUAA4IBAQCRq+0XSwV51Ddf c/lC9vYE7F6RnquWT/jImS29g1hU0HLhRkHp9ptFTsNzjDjxZ8ftMN8O+BP7/phN t22zezlxDQAlK6ImADO1lMDY1J2xRpIlI1ipCU1WrxmuFuoo2V+WH21RGMdkKwUH yIq7C/dE1QSlHGLpDHkvB/pnShhqPD5oxzS5rMyDlUE+ETToyfz5qzjx6P8RZs8s Kz9uUxkFHW55BRdwGIdgOHIlvdDrCa3jcTU84dpZ+BDozYmM3vwld2p/O7bMBwRp tE0plItPxTgmZ76Oq23NY5BzxYaTrWAnvpQQW7Pf/19fiEPPzCk1HYTv/pSnhPqo Od193wEB -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:12 2026 by rpki-client