This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/sfmJbUZjOF9ZmOGBjeFTlVAjkiM.roa File: sfmJbUZjOF9ZmOGBjeFTlVAjkiM.roa (raw, json) Hash identifier: SJvy+b4frEQGMy5gxf3VawAH0CiFxMKXegFK+YmGabE= Subject key identifier: B1:F9:89:6D:46:63:38:5F:59:98:E1:81:8D:E1:53:95:50:23:92:23 Certificate issuer: /CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5 Certificate serial: 019B7CECF91F5806A49AF418A96B4E4288FF Authority key identifier: 61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/sfmJbUZjOF9ZmOGBjeFTlVAjkiM.roa Signing time: Fri 02 Jan 2026 04:17:43 +0000 ROA not before: Fri 02 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13308 IP address blocks: 195.42.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f9:1f:58:06:a4:9a:f4:18:a9:6b:4e:42:88:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5 Validity Not Before: Jan 2 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1f9896d4663385f5998e1818de1539550239223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:ef:db:bb:93:2b:e3:87:54:c5:81:44:a0: e4:39:37:cc:3e:01:f1:42:46:44:0a:54:ea:97:f0: 03:75:c1:98:88:fc:2e:82:74:4f:37:63:c9:e3:42: 76:81:31:cb:36:82:48:18:fd:ea:61:68:69:e2:24: a9:bf:a8:0e:5b:03:e3:1c:61:0d:bf:6e:d4:15:f1: 7f:0c:ec:96:68:71:d3:7e:f9:05:e7:f0:e4:80:88: 87:11:1b:0e:6a:62:0c:3a:d0:95:58:2a:f1:a0:eb: 57:e7:b2:b3:11:4a:bb:fa:b8:dc:75:62:9e:82:a8: 7a:b6:2f:0c:ce:ec:6c:00:be:c1:37:b0:57:70:ad: c3:c8:cd:96:24:e1:4a:46:b9:79:c7:b3:9f:d7:14: 58:4f:2c:be:c8:e6:03:50:99:48:c6:0e:42:75:82: 5d:fd:f9:69:68:b5:7a:79:37:f7:8e:4a:a7:4f:7a: 45:cd:f8:92:c4:8a:67:3a:d6:f2:82:3e:70:b0:da: 2c:0e:1f:7a:25:a9:c5:51:c8:88:a1:8e:da:a5:90: 96:13:8f:0c:f6:aa:a5:b7:4e:42:4a:4c:cf:0b:15: 7f:9e:4f:ba:cc:64:9d:9c:27:90:ce:9c:f3:ad:33: f2:bd:44:9f:4d:5b:c0:46:ba:9a:21:a5:63:80:46: 2b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F9:89:6D:46:63:38:5F:59:98:E1:81:8D:E1:53:95:50:23:92:23 X509v3 Authority Key Identifier: keyid:61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/sfmJbUZjOF9ZmOGBjeFTlVAjkiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.42.110.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:d5:e6:ac:7c:41:39:42:8a:7a:13:15:1f:b0:8a:0f:c1:c1: e6:b5:45:4c:b1:13:8c:95:c9:8d:c3:81:24:dc:2e:3d:28:15: 6d:d3:d9:bd:7d:53:bd:74:df:65:81:7d:4b:15:37:9e:6e:b7: f5:5b:09:95:25:a6:7f:c5:03:17:8c:9f:02:45:3a:28:c8:48: f1:8e:c6:1d:80:07:84:aa:5e:2a:88:79:21:66:03:ff:a0:62: 80:4d:e2:1e:39:33:6b:b0:f3:f1:c0:34:c6:11:4e:5f:d5:00: f9:fc:a3:f8:43:8e:0f:14:3c:51:12:fa:ac:e9:8e:67:86:0b: d3:43:2b:78:37:26:80:70:cf:da:e6:00:1c:41:da:80:3f:df: 79:5a:f8:ad:21:2e:d4:6d:c3:87:91:7b:b1:13:ff:03:5e:22: b1:b9:64:cc:b3:87:20:74:dc:0a:9f:ce:8e:90:e1:75:30:64: b3:c2:03:35:fe:68:32:c5:04:9f:a7:b8:d8:c9:17:f7:3c:a4: 71:63:11:00:95:74:f7:34:9b:86:d2:df:3d:b9:86:c6:82:ea: 9b:50:62:e8:33:66:67:dc:fd:a0:90:e5:b7:ba:cd:ea:1d:ef: 70:c9:09:00:c1:3c:5c:17:b1:d8:19:7c:2d:d0:fa:3e:1b:57: 02:aa:b6:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87PkfWAakmvQYqWtOQoj/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYWU5Y2ZhMmQ2NWI0MTU0MmQzN2VlZmYxZDFjNmMzODdh YWExYjUwHhcNMjYwMTAyMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWY5ODk2ZDQ2NjMzODVmNTk5OGUxODE4ZGUxNTM5NTUwMjM5MjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXnv27uTK+OHVMWBRKDkOTfMPgHx QkZEClTql/ADdcGYiPwugnRPN2PJ40J2gTHLNoJIGP3qYWhp4iSpv6gOWwPjHGEN v27UFfF/DOyWaHHTfvkF5/DkgIiHERsOamIMOtCVWCrxoOtX57KzEUq7+rjcdWKe gqh6ti8MzuxsAL7BN7BXcK3DyM2WJOFKRrl5x7Of1xRYTyy+yOYDUJlIxg5CdYJd /flpaLV6eTf3jkqnT3pFzfiSxIpnOtbygj5wsNosDh96JanFUciIoY7apZCWE48M 9qqlt05CSkzPCxV/nk+6zGSdnCeQzpzzrTPyvUSfTVvARrqaIaVjgEYrXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLH5iW1GYzhfWZjhgY3hU5VQI5IjMB8GA1UdIwQY MBaAFGGunPotZbQVQtN+7/HRxsOHqqG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWE2Yy1pMWx0QlZDMDM3djhkSEd3NGVxb2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yNTU1NzYtMjQ4Yi00YjAxLWEwZWEt ZTkyOGVmNjQwZGY4LzEvc2ZtSmJVWmpPRjlabU9HQmplRlRsVkFqa2lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yNTU1NzYtMjQ4Yi00YjAxLWEwZWEtZTkyOGVmNjQwZGY4 LzEvWWE2Yy1pMWx0QlZDMDM3djhkSEd3NGVxb2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwypuMA0G CSqGSIb3DQEBCwUAA4IBAQAc1easfEE5Qop6ExUfsIoPwcHmtUVMsROMlcmNw4Ek 3C49KBVt09m9fVO9dN9lgX1LFTeebrf1WwmVJaZ/xQMXjJ8CRTooyEjxjsYdgAeE ql4qiHkhZgP/oGKATeIeOTNrsPPxwDTGEU5f1QD5/KP4Q44PFDxREvqs6Y5nhgvT Qyt4NyaAcM/a5gAcQdqAP995WvitIS7UbcOHkXuxE/8DXiKxuWTMs4cgdNwKn86O kOF1MGSzwgM1/mgyxQSfp7jYyRf3PKRxYxEAlXT3NJuG0t89uYbGguqbUGLoM2Zn 3P2gkOW3us3qHe9wyQkAwTxcF7HYGXwt0Po+G1cCqrYN -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:36 2026 by rpki-client