This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/SAEHlpuu2VHfT1gYOBIDmp8YrI0.roa File: SAEHlpuu2VHfT1gYOBIDmp8YrI0.roa (raw, json) Hash identifier: f+Ly+ugjS2e2LTdlARUIcZJrF9Q/kNyEBJzeeNxkntA= Subject key identifier: 48:01:07:96:9B:AE:D9:51:DF:4F:58:18:38:12:03:9A:9F:18:AC:8D Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48 Certificate serial: 019B7B35EDDAEA761ABFCD75EB9EA8D2C235 Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/SAEHlpuu2VHfT1gYOBIDmp8YrI0.roa Signing time: Thu 01 Jan 2026 20:18:10 +0000 ROA not before: Thu 01 Jan 2026 20:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.117.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ed:da:ea:76:1a:bf:cd:75:eb:9e:a8:d2:c2:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48 Validity Not Before: Jan 1 20:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=480107969baed951df4f58183812039a9f18ac8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:86:ad:51:80:bd:17:ed:f0:0d:02:1b:e2:f5: 67:eb:90:7f:12:7b:64:52:07:49:6b:20:42:ed:6b: 5d:91:ca:47:59:ad:07:db:b1:37:d9:65:31:44:54: da:90:52:93:f3:05:47:a1:1f:9a:62:f1:71:71:fc: c8:8e:f7:94:58:7a:29:ca:f0:f0:a9:36:84:b3:6d: 28:ba:cd:99:c7:63:2d:aa:f5:83:c1:be:c2:98:ea: 90:c5:8f:89:ae:66:82:a4:d3:cf:8e:bb:df:83:4d: 45:7a:e7:0c:7d:02:10:f6:e1:9f:b5:04:a7:0b:0d: 36:01:98:1b:71:01:7a:a6:ab:a0:3a:a0:5b:e2:69: 70:0c:93:e9:08:1d:e6:02:79:7a:9d:51:4c:cb:de: 9f:9d:c1:4f:ca:87:c4:bc:8a:db:69:76:a3:1b:91: f7:59:08:da:18:a3:8a:d3:b5:7c:bb:0a:67:a0:67: 26:7d:88:a9:cb:6e:3e:f6:14:52:80:3c:88:36:57: 2c:32:89:bb:3e:1e:aa:df:a7:b6:89:31:c1:92:f4: e3:db:c1:00:f7:89:db:7b:34:86:98:27:f2:23:51: 14:34:0c:82:c4:37:98:1f:a9:4f:76:26:9e:88:a3: 64:33:91:a3:72:fb:b0:b3:f0:af:24:18:44:25:7c: ba:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:01:07:96:9B:AE:D9:51:DF:4F:58:18:38:12:03:9A:9F:18:AC:8D X509v3 Authority Key Identifier: keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/SAEHlpuu2VHfT1gYOBIDmp8YrI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.61.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:65:c3:a4:bd:28:be:35:43:6f:23:8f:8b:76:ad:d5:37:58: 84:81:89:af:41:5f:fc:a1:66:28:06:04:2e:f2:57:b7:37:f1: f3:0c:87:09:42:19:16:9e:95:9a:b5:9a:fb:b2:fd:fc:e4:cd: 3b:4b:bc:c5:ff:89:7c:a4:36:ac:53:f7:b0:a0:3f:63:3f:d8: 75:8c:d9:3f:d5:70:09:92:c5:59:b2:e6:0d:d0:29:3b:cf:7b: dc:96:ec:be:74:78:56:fe:e7:1b:47:e6:98:11:3b:f5:93:7f: d0:db:b3:9d:2c:d9:39:64:0b:20:74:68:95:4a:41:20:e8:fa: 4c:31:e7:06:42:66:80:75:8b:7f:92:77:14:a3:cf:b6:a3:b0: bb:a7:b6:91:e6:b2:3d:72:5f:be:b8:ce:1a:a0:92:0f:7a:d1: 5d:50:6d:89:94:54:42:20:7b:cf:97:6b:bc:09:25:3a:6e:db: b5:58:2e:41:85:67:34:fc:94:cb:88:81:74:10:9f:7c:47:61: 53:d3:b5:0b:85:72:85:0a:49:e6:f5:98:54:37:c0:8a:10:d6: 46:39:f6:92:49:44:ab:37:62:12:9f:d2:17:d8:5c:d1:16:a6: 39:16:f4:be:d1:1d:06:cf:7d:fd:b1:ae:2a:94:52:d1:de:a4: 0c:85:7e:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ne3a6nYav811656o0sI1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOGZlMjQ2NTg0MzAzMWI3NzhiYjhkOGI3YmQzNWEwOTRm Y2NmNDgwHhcNMjYwMTAxMjAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODAxMDc5NjliYWVkOTUxZGY0ZjU4MTgzODEyMDM5YTlmMThhYzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoatUYC9F+3wDQIb4vVn65B/Entk UgdJayBC7WtdkcpHWa0H27E32WUxRFTakFKT8wVHoR+aYvFxcfzIjveUWHopyvDw qTaEs20ous2Zx2MtqvWDwb7CmOqQxY+JrmaCpNPPjrvfg01FeucMfQIQ9uGftQSn Cw02AZgbcQF6pqugOqBb4mlwDJPpCB3mAnl6nVFMy96fncFPyofEvIrbaXajG5H3 WQjaGKOK07V8uwpnoGcmfYipy24+9hRSgDyINlcsMom7Ph6q36e2iTHBkvTj28EA 94nbezSGmCfyI1EUNAyCxDeYH6lPdiaeiKNkM5Gjcvuws/CvJBhEJXy6fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEgBB5abrtlR309YGDgSA5qfGKyNMB8GA1UdIwQY MBaAFDuP4kZYQwMbd4u42Le9NaCU/M9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzRfaVJsaERBeHQzaTdqWXQ3MDFvSlQ4ejBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZjIwY2YtNGMzOS00NzA3LTg1N2Mt N2MzNTAwNmUwN2ExLzEvU0FFSGxwdXUyVkhmVDFnWU9CSURtcDhZckkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZjIwY2YtNGMzOS00NzA3LTg1N2MtN2MzNTAwNmUwN2Ex LzEvTzRfaVJsaERBeHQzaTdqWXQ3MDFvSlQ4ejBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXU9MA0G CSqGSIb3DQEBCwUAA4IBAQCeZcOkvSi+NUNvI4+Ldq3VN1iEgYmvQV/8oWYoBgQu 8le3N/HzDIcJQhkWnpWatZr7sv385M07S7zF/4l8pDasU/ewoD9jP9h1jNk/1XAJ ksVZsuYN0Ck7z3vcluy+dHhW/ucbR+aYETv1k3/Q27OdLNk5ZAsgdGiVSkEg6PpM MecGQmaAdYt/kncUo8+2o7C7p7aR5rI9cl++uM4aoJIPetFdUG2JlFRCIHvPl2u8 CSU6btu1WC5BhWc0/JTLiIF0EJ98R2FT07ULhXKFCknm9ZhUN8CKENZGOfaSSUSr N2ISn9IX2FzRFqY5FvS+0R0Gz339sa4qlFLR3qQMhX7l -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:23 2026 by rpki-client