This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/SCLX0yMUDK_0tO4v6NxcoovzWj8.roa File: SCLX0yMUDK_0tO4v6NxcoovzWj8.roa (raw, json) Hash identifier: 9dBLmpKDLrwgh9sSkk5HAo/xRWDF0x1027A7nhDZK08= Subject key identifier: 48:22:D7:D3:23:14:0C:AF:F4:B4:EE:2F:E8:DC:5C:A2:8B:F3:5A:3F Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019B7910F36C9B4513122C89438312A842A5 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/SCLX0yMUDK_0tO4v6NxcoovzWj8.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61388 IP address blocks: 158.172.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f3:6c:9b:45:13:12:2c:89:43:83:12:a8:42:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4822d7d323140caff4b4ee2fe8dc5ca28bf35a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:94:bc:15:37:ec:76:1b:d3:d3:4b:a8:27:9f: 2b:43:6d:13:fd:61:64:fd:f4:d4:03:1e:b7:3d:66: 8a:1e:3e:45:25:11:1f:52:8c:c0:35:60:f7:d3:2e: de:a4:8b:86:64:07:f5:6c:6c:fa:1c:f1:56:c8:1b: 46:a2:90:64:94:e1:7a:e9:3e:eb:b8:01:fc:af:e3: c5:a3:48:2a:ad:8b:8e:38:85:76:d5:ef:1f:e6:b7: 1b:68:8e:c2:4a:32:22:7e:ef:97:07:6b:34:06:af: 22:b5:c1:12:0e:a7:80:2f:78:5c:2f:75:5a:35:e0: b2:e2:9a:6c:00:4b:69:b4:0b:24:4d:bb:f6:e1:d9: 7f:3f:cb:8e:ee:f3:c5:db:ad:ed:b2:33:90:69:aa: ec:a7:e1:2e:c6:14:b6:a0:f5:08:a5:5f:6e:f3:63: 90:c1:9d:28:bb:ae:90:8e:9c:fa:a0:17:0c:3b:73: f1:d7:24:a1:c3:f7:a1:46:13:b7:5f:f2:31:3b:75: eb:08:62:62:36:44:84:33:89:e3:da:5c:08:ad:31: 37:12:32:5b:7f:6e:65:d5:f4:57:c6:ee:13:68:3d: 06:61:6d:8f:39:18:bd:fe:23:50:37:17:b2:ec:84: 9e:b3:01:3a:5a:1b:12:43:d1:50:d1:c0:ed:db:aa: 6e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:22:D7:D3:23:14:0C:AF:F4:B4:EE:2F:E8:DC:5C:A2:8B:F3:5A:3F X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/SCLX0yMUDK_0tO4v6NxcoovzWj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.172.96.0/24 Signature Algorithm: sha256WithRSAEncryption 25:4e:b4:16:d6:1d:83:58:9e:21:24:49:10:92:ee:f3:dd:c7: 67:d9:ce:45:ef:62:ae:88:fa:28:9b:48:c8:e9:ea:cc:d9:3e: dd:af:38:fd:36:c2:0b:ae:1e:f0:98:cd:c0:f3:7c:41:e4:b4: a0:4a:b4:a1:ec:bd:c7:16:4d:0b:eb:3d:5b:da:ca:64:5f:08: 2d:17:a5:f2:55:c5:cb:c7:ff:87:61:0c:91:13:35:82:44:b3: b6:db:b7:8c:17:ea:36:63:a9:e1:48:22:76:e6:56:8e:f9:ea: 13:56:81:7e:04:64:2d:3e:4e:c1:cb:f3:5b:0f:82:1b:18:d3: 5b:8f:d4:21:bd:1f:05:7e:fc:a1:e6:df:50:0f:7e:50:1c:fc: 99:3d:e6:3f:f5:79:5e:a6:ff:76:5a:7b:e7:66:55:d9:b3:79: 64:e3:eb:46:89:b3:83:83:da:7b:4b:33:c8:bb:b8:32:15:c2: b2:36:fa:41:33:bf:1f:c9:da:b3:0d:47:ad:8e:91:39:1e:0f: be:f9:e9:2c:43:4c:90:43:f0:fe:a6:60:f5:6e:c7:f5:dc:b8: d9:f4:d1:c8:6f:ab:e5:f7:48:8c:33:fe:b7:e9:fa:37:b5:69: 38:fe:80:50:c6:4b:c9:55:f9:1b:77:8c:ca:3c:d2:e2:76:f4: 26:a6:67:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPNsm0UTEiyJQ4MSqEKlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODIyZDdkMzIzMTQwY2FmZjRiNGVlMmZlOGRjNWNhMjhiZjM1YTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZS8FTfsdhvT00uoJ58rQ20T/WFk /fTUAx63PWaKHj5FJREfUozANWD30y7epIuGZAf1bGz6HPFWyBtGopBklOF66T7r uAH8r+PFo0gqrYuOOIV21e8f5rcbaI7CSjIifu+XB2s0Bq8itcESDqeAL3hcL3Va NeCy4ppsAEtptAskTbv24dl/P8uO7vPF263tsjOQaarsp+EuxhS2oPUIpV9u82OQ wZ0ou66Qjpz6oBcMO3Px1yShw/ehRhO3X/IxO3XrCGJiNkSEM4nj2lwIrTE3EjJb f25l1fRXxu4TaD0GYW2PORi9/iNQNxey7ISeswE6WhsSQ9FQ0cDt26pu2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEgi19MjFAyv9LTuL+jcXKKL81o/MB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvU0NMWDB5TVVES18wdE80djZOeGNvb3Z6V2o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnqxgMA0G CSqGSIb3DQEBCwUAA4IBAQAlTrQW1h2DWJ4hJEkQku7z3cdn2c5F72KuiPoom0jI 6erM2T7drzj9NsILrh7wmM3A83xB5LSgSrSh7L3HFk0L6z1b2spkXwgtF6XyVcXL x/+HYQyREzWCRLO227eMF+o2Y6nhSCJ25laO+eoTVoF+BGQtPk7By/NbD4IbGNNb j9QhvR8Ffvyh5t9QD35QHPyZPeY/9Xlepv92WnvnZlXZs3lk4+tGibODg9p7SzPI u7gyFcKyNvpBM78fydqzDUetjpE5Hg+++eksQ0yQQ/D+pmD1bsf13LjZ9NHIb6vl 90iMM/636fo3tWk4/oBQxkvJVfkbd4zKPNLidvQmpmcO -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:31 2026 by rpki-client