This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/cngSEETmst842JVqCMuJdzGT1YQ.roa File: cngSEETmst842JVqCMuJdzGT1YQ.roa (raw, json) Hash identifier: +hcoS9Ai/ANXECo9DMi3KQohP9rUHNrlLQnH58O1SI0= Subject key identifier: 72:78:12:10:44:E6:B2:DF:38:D8:95:6A:08:CB:89:77:31:93:D5:84 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019B79ED64B88C0B7A3AEEE9EC4586EE95D4 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/cngSEETmst842JVqCMuJdzGT1YQ.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 87.248.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:64:b8:8c:0b:7a:3a:ee:e9:ec:45:86:ee:95:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7278121044e6b2df38d8956a08cb89773193d584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a4:1f:97:05:53:a1:96:be:7d:03:89:21:8b: 99:f6:45:f3:de:b0:67:74:55:59:f0:dc:0f:b4:26: bb:f6:05:80:1e:e8:02:64:69:a0:66:8f:90:62:62: a2:8c:0c:73:db:b7:74:1d:cc:71:df:d4:03:46:73: 4b:61:e7:95:77:bd:34:bd:7f:0d:6e:6a:4b:67:78: 61:ab:38:a1:1e:3d:90:40:6f:67:20:db:f4:b4:d0: ee:34:8b:f8:30:09:d2:4b:26:ce:6e:bb:4e:16:7e: de:71:fb:ee:70:2b:a9:49:44:5c:ed:45:9b:fb:10: f0:54:6d:d0:85:1d:e6:34:9b:c7:79:0f:be:db:eb: 14:c0:41:33:81:e1:ae:c1:8d:26:3a:de:8e:39:d2: 88:10:de:d1:f8:aa:6a:e5:48:d4:d9:01:52:d0:d3: 4a:e9:61:e8:b0:69:62:5c:99:dd:ee:97:79:89:40: 36:7d:01:1b:5a:16:6c:61:6e:58:89:a6:f3:6c:0f: 44:b8:70:16:2b:21:e2:30:58:74:5b:21:79:b3:40: 50:18:1e:3b:27:e2:ad:bd:72:03:d9:05:c7:43:53: d1:30:88:8d:65:c5:fe:ca:58:44:fa:ae:69:10:6f: 56:95:3d:4c:7e:b6:51:e0:d4:3a:96:c9:27:17:10: 23:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:78:12:10:44:E6:B2:DF:38:D8:95:6A:08:CB:89:77:31:93:D5:84 X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/cngSEETmst842JVqCMuJdzGT1YQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.148.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:1f:c7:69:dd:2d:9b:8b:29:9e:a2:0c:d1:3b:3b:ee:9b:23: 2b:79:14:71:11:4b:25:b2:46:31:80:43:05:11:a9:4f:5a:24: 76:94:35:7e:7a:8f:5a:ac:9c:4b:7d:56:db:cd:fc:2f:cd:55: 56:93:e1:96:0f:92:ad:5e:53:d9:3a:bf:79:37:f5:7f:15:56: 68:87:36:06:9c:fd:51:a4:3e:d7:ca:98:16:4e:78:f1:f0:f2: f4:73:a7:8f:f7:7b:3c:05:76:50:c5:b1:7d:8c:83:de:8e:d5: 4b:f2:b3:6d:87:6b:b1:98:3c:00:1b:28:43:25:20:8d:71:de: e0:7b:20:49:f8:f0:e4:70:97:76:94:4d:63:86:27:2b:13:b4: 19:9d:df:99:be:03:0c:b1:e7:39:5a:64:d2:88:27:f1:04:50: 8c:69:38:f4:4a:6d:29:0d:ac:83:15:7b:d7:41:c7:e7:38:04: 28:0c:b2:01:f4:b7:2a:5d:a6:13:a9:a4:d0:72:11:5f:20:4c: ae:2f:7b:50:ef:c4:ae:8b:29:03:6b:a4:97:68:aa:2a:04:be: bc:48:65:28:1f:22:f3:58:e3:a4:45:ba:fe:67:86:02:89:db: 2c:df:90:06:3a:7d:59:b7:96:e9:5b:0e:4f:ab:ca:cb:58:9c: 6f:85:75:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WS4jAt6Ou7p7EWG7pXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mjc4MTIxMDQ0ZTZiMmRmMzhkODk1NmEwOGNiODk3NzMxOTNkNTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaQflwVToZa+fQOJIYuZ9kXz3rBn dFVZ8NwPtCa79gWAHugCZGmgZo+QYmKijAxz27d0Hcxx39QDRnNLYeeVd700vX8N bmpLZ3hhqzihHj2QQG9nINv0tNDuNIv4MAnSSybObrtOFn7ecfvucCupSURc7UWb +xDwVG3QhR3mNJvHeQ++2+sUwEEzgeGuwY0mOt6OOdKIEN7R+Kpq5UjU2QFS0NNK 6WHosGliXJnd7pd5iUA2fQEbWhZsYW5YiabzbA9EuHAWKyHiMFh0WyF5s0BQGB47 J+KtvXID2QXHQ1PRMIiNZcX+ylhE+q5pEG9WlT1MfrZR4NQ6lsknFxAj4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHJ4EhBE5rLfONiVagjLiXcxk9WEMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvY25nU0VFVG1zdDg0MkpWcUNNdUpkekdUMVlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iUMA0G CSqGSIb3DQEBCwUAA4IBAQCKH8dp3S2biymeogzROzvumyMreRRxEUslskYxgEMF EalPWiR2lDV+eo9arJxLfVbbzfwvzVVWk+GWD5KtXlPZOr95N/V/FVZohzYGnP1R pD7XypgWTnjx8PL0c6eP93s8BXZQxbF9jIPejtVL8rNth2uxmDwAGyhDJSCNcd7g eyBJ+PDkcJd2lE1jhicrE7QZnd+ZvgMMsec5WmTSiCfxBFCMaTj0Sm0pDayDFXvX QcfnOAQoDLIB9LcqXaYTqaTQchFfIEyuL3tQ78SuiykDa6SXaKoqBL68SGUoHyLz WOOkRbr+Z4YCidss35AGOn1Zt5bpWw5Pq8rLWJxvhXVk -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:35 2026 by rpki-client