This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/sl-nYt82qhzHyv-nkhEpEqMcJKY.roa File: sl-nYt82qhzHyv-nkhEpEqMcJKY.roa (raw, json) Hash identifier: q2Tif7W7uSE6r0l0RzQYoGnDEkiYUnvvVbum3TT4DDQ= Subject key identifier: B2:5F:A7:62:DF:36:AA:1C:C7:CA:FF:A7:92:11:29:12:A3:1C:24:A6 Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948 Certificate serial: 019B78350D19F6970F8B8BE8E2D0586E5806 Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/sl-nYt82qhzHyv-nkhEpEqMcJKY.roa Signing time: Thu 01 Jan 2026 06:18:21 +0000 ROA not before: Thu 01 Jan 2026 06:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43845 IP address blocks: 79.170.200.0/24 maxlen: 24 79.170.201.0/24 maxlen: 24 79.170.202.0/24 maxlen: 24 79.170.203.0/24 maxlen: 24 79.170.204.0/24 maxlen: 24 79.170.205.0/24 maxlen: 24 79.170.206.0/24 maxlen: 24 79.170.207.0/24 maxlen: 24 2a09:6c80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:0d:19:f6:97:0f:8b:8b:e8:e2:d0:58:6e:58:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948 Validity Not Before: Jan 1 06:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b25fa762df36aa1cc7caffa792112912a31c24a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d4:14:4a:ce:33:ec:40:35:d9:40:4f:c4:30: 29:96:ea:41:e1:05:ea:83:97:da:bf:31:30:e9:d4: 65:f9:42:e7:fe:09:61:14:1c:0b:15:92:03:6f:7b: 71:09:4c:b0:2c:ec:4b:09:f8:f0:35:d7:8e:5c:2d: ed:0c:24:86:75:ea:37:58:dc:09:c3:f4:74:99:12: 77:3a:f4:a5:93:24:40:a1:d2:a0:5b:a9:9e:fc:b4: c8:44:25:14:90:d5:f0:9c:3a:3c:89:2f:60:d8:98: 64:5d:c7:29:14:a7:69:a3:70:24:79:3c:0c:93:48: 66:29:35:32:e5:a0:ab:dc:00:f0:1c:ca:d0:20:1c: 9e:50:6b:93:68:c3:f1:d8:0f:2a:10:4b:0e:45:7b: 48:54:7c:e3:fe:47:df:8c:db:b7:48:91:6a:2f:e7: 86:03:a0:f9:35:77:cb:7c:be:aa:cf:df:fb:e3:1e: 02:5c:58:08:e2:97:92:2f:fd:4f:ff:66:e2:62:d1: d7:03:38:69:e3:eb:3b:ac:44:5b:99:04:fc:38:37: 4b:05:89:77:77:d4:67:86:d4:07:2a:e5:a1:82:dc: a5:7c:13:1e:a5:28:3a:a2:76:86:05:58:62:79:f9: e4:78:a2:03:e3:22:01:6c:77:1e:37:70:83:91:25: 0a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5F:A7:62:DF:36:AA:1C:C7:CA:FF:A7:92:11:29:12:A3:1C:24:A6 X509v3 Authority Key Identifier: keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/sl-nYt82qhzHyv-nkhEpEqMcJKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.170.200.0/21 IPv6: 2a09:6c80::/32 Signature Algorithm: sha256WithRSAEncryption 13:37:dd:73:1c:bc:23:be:c1:21:34:b3:37:b6:2f:d0:38:a9: 79:2b:6f:1f:a8:c9:5f:2d:9d:fe:bc:2d:d8:f6:3f:2f:be:2a: ec:48:11:73:4b:8b:89:4c:ca:47:f2:ca:62:86:76:6b:a9:8e: 6d:c4:09:2e:06:5c:19:0e:0b:41:54:ac:1f:d7:d4:fd:1a:0f: af:60:ca:79:71:6a:d1:71:6f:fb:fe:ad:7c:d9:cf:a0:c3:31: d8:db:20:86:81:cb:47:6f:4a:cf:f5:0d:8d:d4:a5:66:e0:8b: cf:4b:a2:34:f0:7c:d4:f5:e1:94:01:35:cb:4d:8f:0a:25:ba: fd:26:8f:00:70:3d:c2:c1:bf:2c:72:c1:1d:80:55:ef:8d:87: 8a:eb:0e:86:ca:2c:6c:6d:eb:c2:a5:cd:34:76:7c:26:af:ca: e9:e1:b5:92:e7:92:c0:e9:ef:77:fb:c5:38:93:2b:e1:a2:cf: 44:c9:b4:a8:62:b4:48:34:3b:ac:7e:d7:1e:7d:f6:16:05:a7: fd:a4:b2:46:9d:84:bf:49:4e:9b:26:29:a1:a5:35:e6:1c:ba: f5:82:72:76:66:70:3c:2f:f9:e5:e7:e7:e7:40:5d:11:02:99: 2d:a6:d8:65:ba:80:99:bd:94:92:f3:09:86:47:07:7f:50:dc: 4c:7d:5e:49 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NQ0Z9pcPi4vo4tBYblgGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlY2YzZjc1ZWY4MzA2YjZjNTkzYTQyM2NkYTE5ODZiZGUz ZGU5NDgwHhcNMjYwMTAxMDYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjVmYTc2MmRmMzZhYTFjYzdjYWZmYTc5MjExMjkxMmEzMWMyNGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytQUSs4z7EA12UBPxDAplupB4QXq g5favzEw6dRl+ULn/glhFBwLFZIDb3txCUywLOxLCfjwNdeOXC3tDCSGdeo3WNwJ w/R0mRJ3OvSlkyRAodKgW6me/LTIRCUUkNXwnDo8iS9g2JhkXccpFKdpo3AkeTwM k0hmKTUy5aCr3ADwHMrQIByeUGuTaMPx2A8qEEsORXtIVHzj/kffjNu3SJFqL+eG A6D5NXfLfL6qz9/74x4CXFgI4peSL/1P/2biYtHXAzhp4+s7rERbmQT8ODdLBYl3 d9RnhtQHKuWhgtylfBMepSg6onaGBVhiefnkeKID4yIBbHceN3CDkSUKywIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLJfp2LfNqocx8r/p5IRKRKjHCSmMB8GA1UdIwQY MBaAFO7PP3Xvgwa2xZOkI82hmGvePelIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEt MzViNTZjY2NhODQ5LzEvc2wtbll0ODJxaHpIeXYtbmtoRXBFcU1jSktZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEtMzViNTZjY2NhODQ5 LzEvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDT6rIMA0E AgACMAcDBQAqCWyAMA0GCSqGSIb3DQEBCwUAA4IBAQATN91zHLwjvsEhNLM3ti/Q OKl5K28fqMlfLZ3+vC3Y9j8vvirsSBFzS4uJTMpH8spihnZrqY5txAkuBlwZDgtB VKwf19T9Gg+vYMp5cWrRcW/7/q182c+gwzHY2yCGgctHb0rP9Q2N1KVm4IvPS6I0 8HzU9eGUATXLTY8KJbr9Jo8AcD3Cwb8scsEdgFXvjYeK6w6GyixsbevCpc00dnwm r8rp4bWS55LA6e93+8U4kyvhos9EybSoYrRINDusftceffYWBaf9pLJGnYS/SU6b JimhpTXmHLr1gnJ2ZnA8L/nl5+fnQF0RApktpthluoCZvZSS8wmGRwd/UNxMfV5J -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:03 2026 by rpki-client