This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/SLrQ1knzFhgHD__1U04Q5GQJX3U.roa File: SLrQ1knzFhgHD__1U04Q5GQJX3U.roa (raw, json) Hash identifier: AVeAooocOWwYiMM4BHVrd1TGE917Rw4KZCVXlSQ+oDM= Subject key identifier: 48:BA:D0:D6:49:F3:16:18:07:0F:FF:F5:53:4E:10:E4:64:09:5F:75 Certificate issuer: /CN=76d44d97653a06d846b2443535b83e8cbc39d928 Certificate serial: 019B7C8061F16BAEBBF90363F2D93568EB8D Authority key identifier: 76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/SLrQ1knzFhgHD__1U04Q5GQJX3U.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 194.15.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:61:f1:6b:ae:bb:f9:03:63:f2:d9:35:68:eb:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76d44d97653a06d846b2443535b83e8cbc39d928 Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48bad0d649f31618070ffff5534e10e464095f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:35:29:84:62:5d:f7:ee:c8:5a:84:8e:a2:5a: 21:e0:ae:24:09:fb:5e:62:b5:a0:a7:41:57:35:95: 13:9a:5e:63:9f:79:d5:85:14:21:58:e0:28:32:20: 58:7a:52:df:6c:aa:2b:1a:93:98:00:1d:b8:f1:39: e1:39:67:3e:7a:59:d3:83:07:c6:bb:7f:5a:c4:e8: 4c:4b:2e:0a:8e:20:4a:d0:b2:ea:54:e0:6a:4f:99: 3e:e5:31:3e:c7:7d:22:3a:cd:8a:2d:cb:cf:17:9a: 62:d3:b8:07:53:27:c7:bd:23:11:ac:75:c8:8f:13: 80:1d:c4:73:5d:f1:19:02:e3:d7:f1:e9:fb:ad:5f: b6:91:fb:ab:ba:78:a5:58:94:38:f1:02:52:40:0b: 82:c1:f8:22:73:88:bc:f2:6c:6e:97:e3:b7:82:87: a0:03:12:4c:93:7e:fd:69:96:d3:7b:cf:95:06:a6: 55:fa:38:40:1d:c9:71:bf:6c:7f:c7:2c:23:ed:79: 61:b3:95:98:d5:e6:18:d7:79:4b:ce:d5:0f:5d:a3: 46:b7:85:14:49:25:92:0a:52:06:77:16:47:fe:e0: 7f:47:bb:d9:4b:9b:ce:96:9c:57:57:15:23:b5:cc: 78:26:10:7a:2f:9c:fc:d0:79:34:7c:f6:46:e6:f2: bc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BA:D0:D6:49:F3:16:18:07:0F:FF:F5:53:4E:10:E4:64:09:5F:75 X509v3 Authority Key Identifier: keyid:76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/SLrQ1knzFhgHD__1U04Q5GQJX3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.209.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:83:d7:48:18:bd:14:a8:35:d5:8b:e2:55:05:5b:8c:a8:9c: c4:c3:87:67:cb:bb:8e:dd:1a:05:d5:7f:28:be:72:3f:74:13: d8:b7:80:78:7a:21:5d:3b:2c:ce:ca:1d:1f:e7:db:2d:85:34: 49:2f:a9:88:48:fb:6a:fb:ee:76:36:86:e8:4a:5a:1c:d3:be: 91:5e:47:17:3a:6e:2a:14:b5:b7:13:d0:0c:24:c1:3e:46:e4: 5f:b3:04:04:00:44:ce:38:9a:30:4d:da:81:4b:72:78:43:57: 7e:76:75:1e:87:37:25:18:90:a7:61:0b:2c:12:68:3e:96:5d: 85:30:b0:12:e8:01:c5:6e:45:f8:b8:55:4e:9b:e8:df:6f:c3: 44:5a:64:c1:8c:8a:f8:65:5a:75:c0:df:01:8b:d5:f3:fd:67: b9:4d:92:ad:dd:48:87:af:b0:e1:a6:b1:66:e5:59:69:9e:40: d8:ea:7a:55:c7:5c:26:51:43:5d:a8:40:2a:15:f3:47:8a:27: 35:8e:44:68:f5:6f:34:46:d0:52:42:a5:87:9e:fc:0c:d5:d0: 68:aa:9e:19:8b:c9:b1:fe:91:1e:39:1c:2b:f2:55:38:a3:54: b9:49:62:f4:73:f0:a1:69:9c:b9:2d:09:af:d7:f8:d0:89:4d: dc:e6:fd:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGHxa667+QNj8tk1aOuNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZDQ0ZDk3NjUzYTA2ZDg0NmIyNDQzNTM1YjgzZThjYmMz OWQ5MjgwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGJhZDBkNjQ5ZjMxNjE4MDcwZmZmZjU1MzRlMTBlNDY0MDk1Zjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDUphGJd9+7IWoSOoloh4K4kCfte YrWgp0FXNZUTml5jn3nVhRQhWOAoMiBYelLfbKorGpOYAB248TnhOWc+elnTgwfG u39axOhMSy4KjiBK0LLqVOBqT5k+5TE+x30iOs2KLcvPF5pi07gHUyfHvSMRrHXI jxOAHcRzXfEZAuPX8en7rV+2kfurunilWJQ48QJSQAuCwfgic4i88mxul+O3goeg AxJMk379aZbTe8+VBqZV+jhAHclxv2x/xywj7Xlhs5WY1eYY13lLztUPXaNGt4UU SSWSClIGdxZH/uB/R7vZS5vOlpxXVxUjtcx4JhB6L5z80Hk0fPZG5vK86wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEi60NZJ8xYYBw//9VNOEORkCV91MB8GA1UdIwQY MBaAFHbUTZdlOgbYRrJENTW4Poy8OdkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHRSTmwyVTZCdGhHc2tRMU5iZy1qTHc1MlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi82YTMwNjktYWQzYy00Mzg4LWIxZTgt MGMyN2FkYjc1Y2RmLzEvU0xyUTFrbnpGaGdIRF9fMVUwNFE1R1FKWDNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi82YTMwNjktYWQzYy00Mzg4LWIxZTgtMGMyN2FkYjc1Y2Rm LzEvZHRSTmwyVTZCdGhHc2tRMU5iZy1qTHc1MlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg/RMA0G CSqGSIb3DQEBCwUAA4IBAQCPg9dIGL0UqDXVi+JVBVuMqJzEw4dny7uO3RoF1X8o vnI/dBPYt4B4eiFdOyzOyh0f59sthTRJL6mISPtq++52NoboSloc076RXkcXOm4q FLW3E9AMJME+RuRfswQEAETOOJowTdqBS3J4Q1d+dnUehzclGJCnYQssEmg+ll2F MLAS6AHFbkX4uFVOm+jfb8NEWmTBjIr4ZVp1wN8Bi9Xz/We5TZKt3UiHr7DhprFm 5VlpnkDY6npVx1wmUUNdqEAqFfNHiic1jkRo9W80RtBSQqWHnvwM1dBoqp4Zi8mx /pEeORwr8lU4o1S5SWL0c/ChaZy5LQmv1/jQiU3c5v2v -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:18 2026 by rpki-client