This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/saj_qBpPco6gxYRqM34-ExE_Mdc.roa File: saj_qBpPco6gxYRqM34-ExE_Mdc.roa (raw, json) Hash identifier: VcjPn5zIsUbUvLdgii6LzfC0gf7xOcEytz9+BqUntpU= Subject key identifier: B1:A8:FF:A8:1A:4F:72:8E:A0:C5:84:6A:33:7E:3E:13:11:3F:31:D7 Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e Certificate serial: 019B77593192F0E181864F514EBAC5617E50 Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/saj_qBpPco6gxYRqM34-ExE_Mdc.roa Signing time: Thu 01 Jan 2026 02:18:12 +0000 ROA not before: Thu 01 Jan 2026 02:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212140 IP address blocks: 185.226.96.0/24 maxlen: 24 193.56.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:31:92:f0:e1:81:86:4f:51:4e:ba:c5:61:7e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e Validity Not Before: Jan 1 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1a8ffa81a4f728ea0c5846a337e3e13113f31d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:01:51:f3:cd:45:10:a8:82:b8:07:4d:48:c7: b4:b6:5f:ab:f7:c1:41:fc:8f:d6:ed:7f:11:da:84: dd:08:1b:85:f6:52:4b:cc:e8:37:df:d5:b9:4b:04: 9a:69:09:80:d5:00:f5:3b:7f:fd:c4:57:9a:39:25: 26:32:7d:4d:be:12:0c:8e:03:df:71:94:ea:aa:9c: 65:49:6e:76:95:2f:d4:90:1e:05:8c:06:85:cb:57: 2e:da:a3:dc:eb:7e:f2:5a:1d:54:56:7b:55:82:5d: de:15:fa:9c:dd:b2:e2:c9:3c:fb:37:f1:82:28:04: 8f:38:34:b5:b7:cc:e8:b2:35:be:4b:0a:cf:4a:33: e0:a8:5c:45:b8:d1:5f:1a:a6:19:25:fc:d9:cf:36: 25:50:e4:64:fe:f0:fd:6e:b7:fb:6a:0f:f1:7e:7e: 77:22:1f:71:f1:cc:3a:34:80:2e:b3:1f:b2:a8:5a: 61:7c:64:9c:7f:9d:15:34:06:d8:5d:66:cd:0f:93: 49:95:48:1a:3c:67:7f:aa:c0:95:a6:48:2b:59:6c: ba:c1:62:1b:76:6e:f1:fa:ea:e0:af:7b:eb:88:75: 93:b7:90:8a:fe:7d:6d:a6:65:89:67:fc:44:50:8a: 5b:9f:d5:91:e3:22:51:92:60:51:c4:01:ab:5f:d6: 3d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A8:FF:A8:1A:4F:72:8E:A0:C5:84:6A:33:7E:3E:13:11:3F:31:D7 X509v3 Authority Key Identifier: keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/saj_qBpPco6gxYRqM34-ExE_Mdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.96.0/24 193.56.103.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:db:9f:41:22:f0:21:9a:f0:2f:3b:e7:98:c7:fa:ec:a1:7c: 56:13:02:ab:b9:c6:1a:30:e4:dd:8a:7a:88:76:40:b0:6c:ef: a4:57:24:72:2b:87:99:19:91:32:a3:7e:f9:78:5c:19:cc:b0: 68:e2:27:27:24:8d:d5:04:ef:e1:51:0b:77:35:58:69:89:1f: 0b:b3:e9:df:31:3a:ac:69:15:eb:68:f2:63:03:1e:c8:d7:1d: af:4f:9a:ea:6c:23:67:14:ec:31:ea:5b:11:e2:29:e5:db:50: 78:fa:d7:bb:0f:db:d2:80:97:9d:cb:fa:b9:b9:31:f5:12:00: 41:94:d1:fc:3a:fd:f5:e2:d3:ad:fc:2c:dd:e4:81:0e:7d:e8: 19:7f:fc:7e:16:39:41:b4:af:f4:0c:d1:e3:b1:da:47:d9:2c: 11:b1:c6:75:09:9e:3f:ce:42:9a:c4:f8:5b:c0:56:6f:2d:03: ff:73:be:13:2c:bd:51:b0:7e:4d:8e:4f:50:56:5f:ea:9b:47: 13:05:ac:c0:f9:ac:d9:83:74:7e:0f:a8:92:da:e0:82:03:02: 2b:26:5b:9e:cd:09:5d:7d:17:a1:eb:c4:be:4c:c8:b4:b1:8c: 61:22:da:e5:db:04:ee:8b:29:0e:eb:b3:61:91:0c:fb:2e:97: 71:34:bb:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WTGS8OGBhk9RTrrFYX5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNzZmYzVjOTAxMGI0MTExOWNhNjhkYzZiOTk1MGJhNWZm NzMyN2UwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWE4ZmZhODFhNGY3MjhlYTBjNTg0NmEzMzdlM2UxMzExM2YzMWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgFR881FEKiCuAdNSMe0tl+r98FB /I/W7X8R2oTdCBuF9lJLzOg339W5SwSaaQmA1QD1O3/9xFeaOSUmMn1NvhIMjgPf cZTqqpxlSW52lS/UkB4FjAaFy1cu2qPc637yWh1UVntVgl3eFfqc3bLiyTz7N/GC KASPODS1t8zosjW+SwrPSjPgqFxFuNFfGqYZJfzZzzYlUORk/vD9brf7ag/xfn53 Ih9x8cw6NIAusx+yqFphfGScf50VNAbYXWbND5NJlUgaPGd/qsCVpkgrWWy6wWIb dm7x+urgr3vriHWTt5CK/n1tpmWJZ/xEUIpbn9WR4yJRkmBRxAGrX9Y9wwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLGo/6gaT3KOoMWEajN+PhMRPzHXMB8GA1UdIwQY MBaAFDp2/FyQELQRGcpo3GuZULpf9zJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2Qt YmRmYTdjNGY4YjBhLzEvc2FqX3FCcFBjbzZneFlScU0zNC1FeEVfTWRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2QtYmRmYTdjNGY4YjBh LzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueJgAwQA wThnMA0GCSqGSIb3DQEBCwUAA4IBAQAb259BIvAhmvAvO+eYx/rsoXxWEwKrucYa MOTdinqIdkCwbO+kVyRyK4eZGZEyo375eFwZzLBo4icnJI3VBO/hUQt3NVhpiR8L s+nfMTqsaRXraPJjAx7I1x2vT5rqbCNnFOwx6lsR4inl21B4+te7D9vSgJedy/q5 uTH1EgBBlNH8Ov314tOt/Czd5IEOfegZf/x+FjlBtK/0DNHjsdpH2SwRscZ1CZ4/ zkKaxPhbwFZvLQP/c74TLL1RsH5Njk9QVl/qm0cTBazA+azZg3R+D6iS2uCCAwIr JluezQldfReh68S+TMi0sYxhItrl2wTuiykO67NhkQz7LpdxNLux -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:56 2026 by rpki-client