This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/S_tLV9_She3waG7M2izvf7HlMJ8.roa File: S_tLV9_She3waG7M2izvf7HlMJ8.roa (raw, json) Hash identifier: iUEnRYETftUNOszX6uMBrcFcM0915oRns4IcWhRXgdk= Subject key identifier: 4B:FB:4B:57:DF:D2:85:ED:F0:68:6E:CC:DA:2C:EF:7F:B1:E5:30:9F Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1376A6EFCBF1B340A6DB2339E87CFF Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/S_tLV9_She3waG7M2izvf7HlMJ8.roa Signing time: Fri 02 Jan 2026 00:20:08 +0000 ROA not before: Fri 02 Jan 2026 00:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60721 IP address blocks: 185.194.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:76:a6:ef:cb:f1:b3:40:a6:db:23:39:e8:7c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bfb4b57dfd285edf0686eccda2cef7fb1e5309f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b6:7a:0f:35:89:20:4e:49:85:bd:a5:0f:61: 60:e0:46:64:d7:b2:d5:11:a1:9b:6f:52:4b:48:ab: 08:84:e3:02:f6:de:90:13:f2:0e:9b:a3:af:9b:e8: 99:a2:c5:2a:b0:74:c6:e4:1b:ea:85:3e:61:ea:05: 4d:47:0a:91:7c:90:dc:d1:fc:27:b8:ee:9f:0b:6d: d2:e4:43:5e:e5:6a:46:49:54:55:d8:67:9b:59:3a: be:52:29:c5:fa:8c:78:d3:71:50:ec:00:47:88:3f: e8:33:3e:94:ab:04:7e:69:0e:5c:5b:bc:cf:16:a9: 1e:00:9d:d9:f2:c1:a6:98:6f:bd:99:17:80:d3:fd: 4c:37:1f:ca:59:47:8f:1b:eb:b6:a5:4a:5f:b6:6b: 4a:ed:7f:9c:bd:1d:d6:51:2f:fb:d5:18:a0:44:c6: 0a:3d:17:a8:4e:a8:e9:1d:e2:93:56:9c:a8:2b:48: ce:6b:af:66:92:ec:ce:8c:9d:d2:43:50:bc:cd:8c: d7:96:02:e6:a6:b2:71:52:63:fc:78:34:7d:6b:99: 4b:2c:79:df:ba:f0:55:be:f4:f1:78:e4:fc:05:71: c3:ce:2d:c2:7a:35:cc:60:9f:d4:ac:1e:3d:52:fe: 68:56:74:ea:65:6d:01:c0:4f:27:1f:ae:b4:6c:d0: f2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FB:4B:57:DF:D2:85:ED:F0:68:6E:CC:DA:2C:EF:7F:B1:E5:30:9F X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/S_tLV9_She3waG7M2izvf7HlMJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.28.0/24 Signature Algorithm: sha256WithRSAEncryption a0:7e:af:c4:59:45:27:3a:e5:9c:04:83:15:7e:c6:be:36:22: be:77:8b:0d:24:b4:33:e8:27:a5:9b:f8:2b:46:3b:6f:b5:1d: 91:7e:f9:7a:f1:bd:83:ae:85:01:29:8c:07:18:b1:d3:dd:e8: 61:6c:3f:27:21:9d:c0:11:07:39:d8:e0:e2:a4:06:de:1b:26: be:34:6f:76:99:b4:ae:0a:72:61:17:67:d9:b3:c6:d4:a9:46: 89:6b:4e:34:70:79:36:a2:27:88:8b:8c:b9:12:f7:d1:a1:5d: 4f:fd:ec:21:c5:44:21:2d:26:3a:be:be:98:04:07:29:32:ff: 4e:74:59:56:73:bf:51:35:b3:85:cd:f0:fc:b3:a9:55:09:80: 28:c6:fa:d0:1a:a0:d4:7c:0d:1f:bc:b0:8a:ff:b7:82:83:1d: 18:d9:41:57:08:66:04:5c:43:40:fe:07:ad:12:62:0e:be:7c: 34:f6:ef:be:08:6f:ab:31:67:cc:b8:58:9a:09:f3:d4:ca:8e: ad:ff:0a:dc:00:1c:9c:35:bb:e8:e6:1d:18:27:4e:da:c9:6f: ad:9a:ca:40:66:6b:e3:f9:2e:09:63:44:ce:58:a7:17:39:79: a1:8b:27:06:8d:12:8a:c0:5a:02:c6:81:e3:b2:8c:03:9f:5f: 53:1f:a1:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E3am78vxs0Cm2yM56Hz/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmZiNGI1N2RmZDI4NWVkZjA2ODZlY2NkYTJjZWY3ZmIxZTUzMDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bZ6DzWJIE5Jhb2lD2Fg4EZk17LV EaGbb1JLSKsIhOMC9t6QE/IOm6Ovm+iZosUqsHTG5BvqhT5h6gVNRwqRfJDc0fwn uO6fC23S5ENe5WpGSVRV2GebWTq+UinF+ox403FQ7ABHiD/oMz6UqwR+aQ5cW7zP FqkeAJ3Z8sGmmG+9mReA0/1MNx/KWUePG+u2pUpftmtK7X+cvR3WUS/71RigRMYK PReoTqjpHeKTVpyoK0jOa69mkuzOjJ3SQ1C8zYzXlgLmprJxUmP8eDR9a5lLLHnf uvBVvvTxeOT8BXHDzi3CejXMYJ/UrB49Uv5oVnTqZW0BwE8nH660bNDyGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEv7S1ff0oXt8GhuzNos73+x5TCfMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvU190TFY5X1NoZTN3YUc3TTJpenZmN0hsTUo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucIcMA0G CSqGSIb3DQEBCwUAA4IBAQCgfq/EWUUnOuWcBIMVfsa+NiK+d4sNJLQz6Celm/gr RjtvtR2Rfvl68b2DroUBKYwHGLHT3ehhbD8nIZ3AEQc52ODipAbeGya+NG92mbSu CnJhF2fZs8bUqUaJa040cHk2oieIi4y5EvfRoV1P/ewhxUQhLSY6vr6YBAcpMv9O dFlWc79RNbOFzfD8s6lVCYAoxvrQGqDUfA0fvLCK/7eCgx0Y2UFXCGYEXENA/get EmIOvnw09u++CG+rMWfMuFiaCfPUyo6t/wrcABycNbvo5h0YJ07ayW+tmspAZmvj +S4JY0TOWKcXOXmhiycGjRKKwFoCxoHjsowDn19TH6E+ -----END CERTIFICATE-----Generated at Fri Jan 2 09:04:33 2026 by rpki-client