This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/sVAfKvrvvhMbIUsWh385vVnIquc.roa File: sVAfKvrvvhMbIUsWh385vVnIquc.roa (raw, json) Hash identifier: M9eQGOQqKf4XTtZds1m1OGeYS0UwjPbRi7yLdnFl6LQ= Subject key identifier: B1:50:1F:2A:FA:EF:BE:13:1B:21:4B:16:87:7F:39:BD:59:C8:AA:E7 Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda Certificate serial: 019B78A300F08E6045632B157CBD4EF013AC Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/sVAfKvrvvhMbIUsWh385vVnIquc.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 94.128.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:00:f0:8e:60:45:63:2b:15:7c:bd:4e:f0:13:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1501f2afaefbe131b214b16877f39bd59c8aae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3b:e2:f4:95:35:8c:7c:0b:d0:23:9c:29:89: 98:b1:91:80:77:7d:0c:dc:59:17:f8:59:b9:1d:20: be:a1:a3:0b:ba:cc:9c:08:dd:e5:1c:a2:e2:73:4a: 7b:93:3c:c6:94:f3:05:81:da:08:79:a0:02:96:6c: 11:7f:44:94:4f:79:2f:40:32:16:05:4f:ac:c2:06: 4c:ec:3a:46:56:6f:99:60:19:82:6f:b7:53:21:c8: c6:fe:53:5e:7f:15:71:a5:dc:fe:9f:e2:6b:d3:a6: 89:f8:39:f1:78:81:67:ab:98:b2:95:80:74:4b:d0: f5:b7:62:fa:70:4e:b9:7a:90:30:99:15:cb:bf:97: 79:73:a4:96:d0:db:6c:0c:93:43:ed:3e:53:b6:1e: 01:c9:aa:be:b0:06:d7:e4:1f:80:a4:a9:eb:54:44: 70:b7:89:f0:ab:3b:fb:e7:e1:11:b6:ff:17:1d:ab: 77:4e:3d:37:86:5e:72:ce:19:d8:65:89:05:9d:3f: e6:15:f6:78:3a:1c:50:49:8e:fc:5b:7e:c8:14:45: 89:c9:85:8c:70:57:f6:0a:06:03:16:95:b2:85:9f: 26:ec:90:f3:4c:52:57:8f:61:7d:ff:25:c3:3b:ca: 83:bf:28:7d:d8:90:b7:13:9a:73:66:a3:ac:f7:af: 23:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:50:1F:2A:FA:EF:BE:13:1B:21:4B:16:87:7F:39:BD:59:C8:AA:E7 X509v3 Authority Key Identifier: keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/sVAfKvrvvhMbIUsWh385vVnIquc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.128.1.0/24 Signature Algorithm: sha256WithRSAEncryption b7:df:29:c3:f1:cc:f6:f3:d3:a6:2e:1c:00:2b:48:e1:ec:2b: c7:67:1e:ab:de:54:a2:bd:6f:e1:05:b5:5b:2d:44:be:07:fd: 2e:1d:69:16:9b:4f:6a:89:77:b4:af:e2:18:ac:ba:e3:11:b6: 39:65:1d:37:c1:f9:b6:c7:aa:7d:1f:ff:91:84:a5:a9:c5:a4: ed:49:6a:4d:a6:f1:c2:e7:8b:1e:f4:ca:9a:dd:58:3b:a0:fe: c9:d2:c3:f0:a4:d1:96:3c:28:92:7c:99:7a:da:cc:1a:ef:7c: b6:f7:48:19:4d:55:b1:8f:3d:95:ab:13:f0:c2:5f:00:6d:8f: aa:9e:8a:b3:a6:82:84:6e:eb:36:0d:bc:bc:66:45:9a:76:27: 10:13:b1:ab:a0:6d:87:ab:ae:34:95:a2:3e:fb:e8:ae:e0:35: f1:43:d9:50:8b:92:04:5b:57:8e:fb:eb:c8:1a:c5:a4:f8:3e: 62:b6:7b:33:78:31:fa:ef:0f:82:ac:e5:06:87:03:b0:d2:5f: db:7d:02:e2:50:07:b2:f4:17:bb:7a:b4:a9:60:11:e6:26:4d: 53:98:6c:82:ec:f9:af:57:02:72:fe:c9:7c:0f:10:ca:fa:0e: 71:81:ed:c8:09:0d:f7:2e:4c:39:5f:5e:29:c8:9b:ee:d5:1d: f1:11:f0:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4owDwjmBFYysVfL1O8BOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDZiZjFmZjgxNmJlMGJhNGM2MjE3MTIzNDIzMzBhOWZh ZDhiZGEwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTUwMWYyYWZhZWZiZTEzMWIyMTRiMTY4NzdmMzliZDU5YzhhYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDvi9JU1jHwL0COcKYmYsZGAd30M 3FkX+Fm5HSC+oaMLusycCN3lHKLic0p7kzzGlPMFgdoIeaAClmwRf0SUT3kvQDIW BU+swgZM7DpGVm+ZYBmCb7dTIcjG/lNefxVxpdz+n+Jr06aJ+DnxeIFnq5iylYB0 S9D1t2L6cE65epAwmRXLv5d5c6SW0NtsDJND7T5Tth4Byaq+sAbX5B+ApKnrVERw t4nwqzv75+ERtv8XHat3Tj03hl5yzhnYZYkFnT/mFfZ4OhxQSY78W37IFEWJyYWM cFf2CgYDFpWyhZ8m7JDzTFJXj2F9/yXDO8qDvyh92JC3E5pzZqOs968jlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLFQHyr6774TGyFLFod/Ob1ZyKrnMB8GA1UdIwQY MBaAFF5Gvx/4Fr4LpMYhcSNCMwqfrYvaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jOGNmNTYtYzQ4Yy00ZTYyLTk4ZWUt YjhkYjE1YjUzMWEyLzEvc1ZBZkt2cnZ2aE1iSVVzV2gzODV2Vm5JcXVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jOGNmNTYtYzQ4Yy00ZTYyLTk4ZWUtYjhkYjE1YjUzMWEy LzEvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXoABMA0G CSqGSIb3DQEBCwUAA4IBAQC33ynD8cz289OmLhwAK0jh7CvHZx6r3lSivW/hBbVb LUS+B/0uHWkWm09qiXe0r+IYrLrjEbY5ZR03wfm2x6p9H/+RhKWpxaTtSWpNpvHC 54se9Mqa3Vg7oP7J0sPwpNGWPCiSfJl62swa73y290gZTVWxjz2VqxPwwl8AbY+q noqzpoKEbus2Dby8ZkWadicQE7GroG2Hq640laI+++iu4DXxQ9lQi5IEW1eO++vI GsWk+D5itnszeDH67w+CrOUGhwOw0l/bfQLiUAey9Be7erSpYBHmJk1TmGyC7Pmv VwJy/sl8DxDK+g5xge3ICQ33Lkw5X14pyJvu1R3xEfBT -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:50 2026 by rpki-client