This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/sct50ors-JAGFuKrDKCEczrCwZg.roa File: sct50ors-JAGFuKrDKCEczrCwZg.roa (raw, json) Hash identifier: 4H40k4wD5tya3FMuPK36WamPaWB4B0t6QhSmDBo+9DI= Subject key identifier: B1:CB:79:D2:8A:EC:F8:90:06:16:E2:AB:0C:A0:84:73:3A:C2:C1:98 Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9 Certificate serial: 019B78A23AC79EC2DA666F136D9ACE0AF1D4 Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/sct50ors-JAGFuKrDKCEczrCwZg.roa Signing time: Thu 01 Jan 2026 08:17:36 +0000 ROA not before: Thu 01 Jan 2026 08:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59455 IP address blocks: 46.17.208.0/21 maxlen: 22 185.23.52.0/22 maxlen: 24 185.33.192.0/22 maxlen: 22 185.148.88.0/22 maxlen: 22 2a04:2340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3a:c7:9e:c2:da:66:6f:13:6d:9a:ce:0a:f1:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9 Validity Not Before: Jan 1 08:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1cb79d28aecf8900616e2ab0ca084733ac2c198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e4:50:5f:06:c9:cb:48:5c:5b:f6:cc:e6:2c: 49:f7:5e:a5:14:e5:7e:0c:2f:4a:a1:a9:a2:90:53: d8:29:52:b3:c7:9e:d8:5b:72:74:8c:50:fc:e8:5e: 35:f5:8b:9e:14:e9:81:47:cd:cf:76:95:e1:fa:d0: b3:d0:22:23:a9:5d:aa:79:15:e7:e5:f1:0f:c2:8e: cc:4a:c7:2d:e5:c0:27:45:0f:28:45:9f:3f:05:42: 75:2a:f5:36:d7:9b:38:9f:75:76:1d:4a:70:b2:8f: 68:b3:ca:39:f3:c6:42:03:12:55:5a:e2:ee:78:3a: 56:b3:30:c5:d8:3c:de:22:a7:c5:ab:26:a9:7c:8a: 7d:74:12:72:8b:1a:00:af:1a:df:01:ce:bd:60:ae: fd:ca:60:71:90:1f:91:8e:fc:f9:31:30:3a:7d:50: 8f:20:b6:9e:de:8a:1c:e0:36:46:4c:95:95:22:46: ba:c4:09:f1:4a:fd:6b:cf:4c:52:1f:e5:ed:1f:3a: 48:ae:b7:d8:3e:33:8e:c4:ba:40:77:40:6e:62:d0: 2b:11:1f:3f:02:05:b3:4f:93:d9:d1:2c:e2:42:f3: 6f:06:6b:e5:3a:1a:fb:30:37:82:15:fc:6f:23:58: e4:6d:b7:b8:de:bc:a7:59:1e:e0:88:3c:af:ec:1a: c7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CB:79:D2:8A:EC:F8:90:06:16:E2:AB:0C:A0:84:73:3A:C2:C1:98 X509v3 Authority Key Identifier: keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/sct50ors-JAGFuKrDKCEczrCwZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.208.0/21 185.23.52.0/22 185.33.192.0/22 185.148.88.0/22 IPv6: 2a04:2340::/29 Signature Algorithm: sha256WithRSAEncryption 4c:30:67:aa:9b:a2:c4:a3:db:f6:47:09:70:b3:58:56:8e:1a: 9a:01:c3:f1:60:22:20:41:3f:2b:83:84:a5:8c:06:8a:f0:f0: ca:19:02:a7:10:54:bb:80:6d:72:bc:e0:41:bd:bd:64:23:5a: 71:0f:32:28:0c:13:7d:82:31:d2:05:91:bd:4b:f5:90:b7:9a: b2:10:2b:6e:18:d9:e6:5c:6f:45:c1:be:4f:f8:b8:fd:cb:51: 87:ac:79:dc:62:43:eb:7b:38:93:b9:47:b6:46:d5:28:27:23: 7b:cb:1d:af:5d:32:c3:7b:c5:1f:b6:64:09:58:44:3c:6d:5d: 39:70:67:09:f6:88:66:11:68:da:bf:e4:c5:1e:e8:05:ba:ed: 0a:ae:e4:3d:ce:d9:90:23:7d:00:5a:d5:1d:21:6a:9c:74:22: 7a:41:06:9e:bf:ed:b5:d0:d4:62:dd:63:85:3b:60:53:83:a7: 69:81:d3:63:ba:74:76:af:8c:c4:d1:52:24:f4:bb:af:9e:26: 78:0a:ab:c9:61:2a:11:ed:33:85:80:de:7f:85:3a:81:0a:fd: ca:b0:f6:48:4a:a0:4c:d4:69:93:f7:f0:61:34:91:23:51:0c: 27:88:22:aa:d6:b4:4f:32:45:08:c0:d9:ac:9a:88:62:37:c0: 6a:d3:23:23 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4ojrHnsLaZm8TbZrOCvHUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmYwMGRmZjgwNjMyMzFiZDk5Njc2ODk5ZWFiZWFiYTMz YmM1ZDkwHhcNMjYwMTAxMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWNiNzlkMjhhZWNmODkwMDYxNmUyYWIwY2EwODQ3MzNhYzJjMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eRQXwbJy0hcW/bM5ixJ916lFOV+ DC9KoamikFPYKVKzx57YW3J0jFD86F419YueFOmBR83PdpXh+tCz0CIjqV2qeRXn 5fEPwo7MSsct5cAnRQ8oRZ8/BUJ1KvU215s4n3V2HUpwso9os8o588ZCAxJVWuLu eDpWszDF2DzeIqfFqyapfIp9dBJyixoArxrfAc69YK79ymBxkB+Rjvz5MTA6fVCP ILae3ooc4DZGTJWVIka6xAnxSv1rz0xSH+XtHzpIrrfYPjOOxLpAd0BuYtArER8/ AgWzT5PZ0SziQvNvBmvlOhr7MDeCFfxvI1jkbbe43rynWR7giDyv7BrHBwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFLHLedKK7PiQBhbiqwyghHM6wsGYMB8GA1UdIwQY MBaAFBS/AN/4BjIxvZlnaJnqvqujO8XZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgt YmQyZTc3Y2Q0NzkzLzEvc2N0NTBvcnMtSkFHRnVLckRLQ0VjenJDd1pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgtYmQyZTc3Y2Q0Nzkz LzEvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLhHQAwQC uRc0AwQCuSHAAwQCuZRYMA0EAgACMAcDBQMqBCNAMA0GCSqGSIb3DQEBCwUAA4IB AQBMMGeqm6LEo9v2Rwlws1hWjhqaAcPxYCIgQT8rg4SljAaK8PDKGQKnEFS7gG1y vOBBvb1kI1pxDzIoDBN9gjHSBZG9S/WQt5qyECtuGNnmXG9Fwb5P+Lj9y1GHrHnc YkPreziTuUe2RtUoJyN7yx2vXTLDe8UftmQJWEQ8bV05cGcJ9ohmEWjav+TFHugF uu0KruQ9ztmQI30AWtUdIWqcdCJ6QQaev+210NRi3WOFO2BTg6dpgdNjunR2r4zE 0VIk9LuvniZ4CqvJYSoR7TOFgN5/hTqBCv3KsPZISqBM1GmT9/BhNJEjUQwniCKq 1rRPMkUIwNmsmohiN8Bq0yMj -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:31 2026 by rpki-client