This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/SxsTTQPpb002U8lLZRV6SRhekS0.roa File: SxsTTQPpb002U8lLZRV6SRhekS0.roa (raw, json) Hash identifier: W+v+QmlBcUbu1220skf3dGHkJEwkEM6pZN3F3mSoEjA= Subject key identifier: 4B:1B:13:4D:03:E9:6F:4D:36:53:C9:4B:65:15:7A:49:18:5E:91:2D Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019B7EA738019F4623E73BEDB651EB744F1C Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/SxsTTQPpb002U8lLZRV6SRhekS0.roa Signing time: Fri 02 Jan 2026 12:20:46 +0000 ROA not before: Fri 02 Jan 2026 12:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 45.151.61.0/24 maxlen: 24 81.17.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:38:01:9f:46:23:e7:3b:ed:b6:51:eb:74:4f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Jan 2 12:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b1b134d03e96f4d3653c94b65157a49185e912d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:12:7e:d8:22:04:e8:74:37:cd:07:50:06: d6:85:3a:8a:06:9b:69:cb:42:de:bd:ac:cb:4b:2e: c1:08:12:91:0a:b5:aa:9f:bd:6f:fc:30:d8:03:24: 48:d2:c9:83:86:ae:c5:46:7f:05:8b:a6:83:c4:13: 8f:4c:55:0a:56:4c:57:3d:66:e2:fd:16:bc:c8:19: 0a:f1:7a:e5:a4:59:ec:43:c1:2a:35:ae:ee:ed:d2: 91:3b:ef:dd:f3:21:fc:3c:b5:2c:84:59:32:8d:e9: 51:09:c4:77:64:0c:ad:16:20:ca:97:d9:30:42:66: 7e:bf:18:94:81:b6:87:f7:9a:d6:d1:5c:3f:1b:a3: 05:4b:d4:2b:2f:cd:4f:8e:ce:1e:93:b6:b3:1e:8c: 42:e2:bc:48:bd:47:31:1a:c7:c1:a1:70:35:20:cc: 29:06:a7:16:fa:6d:47:73:53:e1:30:56:9f:20:27: 07:06:78:77:f3:d7:03:c7:03:9d:16:7f:c8:50:98: 2f:01:ff:b5:48:d1:12:99:a2:79:90:ab:18:83:b9: 46:fc:66:e0:50:11:47:9f:c6:2b:b6:be:3d:0d:29: 8e:7d:ff:7c:36:27:73:60:fb:cc:64:05:55:9f:f0: ef:74:a9:d7:0a:71:eb:b6:72:7b:4a:3c:dc:55:37: 8f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1B:13:4D:03:E9:6F:4D:36:53:C9:4B:65:15:7A:49:18:5E:91:2D X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/SxsTTQPpb002U8lLZRV6SRhekS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.61.0/24 81.17.159.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:78:b1:f1:43:8b:29:46:85:e1:5f:01:8c:72:e9:f5:df:06: d7:1d:22:2b:61:72:9a:18:bd:82:78:fe:b7:8a:35:da:dc:2c: 59:0c:88:44:8c:90:e8:e4:ab:82:67:0d:a1:8a:77:e2:07:fa: dd:26:fb:bb:43:45:4f:7a:1e:d7:b2:a7:3a:5d:3e:29:5d:df: 75:b6:8d:51:ee:54:2f:e9:d9:e8:6a:e4:8c:06:59:e8:6b:b4: 1f:d8:30:75:96:a3:64:bb:cc:6e:76:16:8a:bb:35:b5:6c:59: f2:2f:89:ce:7d:e5:89:32:10:ac:04:4d:36:99:e8:98:77:49: 81:c7:70:4b:47:4c:de:63:69:83:08:46:08:8f:34:f3:eb:4e: ce:25:3b:37:61:72:b0:19:7a:a0:0c:ed:09:80:00:dc:96:18: f1:0e:3a:82:56:55:24:1b:84:a1:10:1d:c1:60:e2:e1:79:48: a7:1d:92:b9:96:fa:c4:3d:34:2c:b4:cf:12:da:85:57:8b:d6: 89:e5:f3:4a:f8:47:74:c3:a7:83:2e:76:a2:5d:87:a4:f6:87: 44:d6:a1:be:99:d4:06:4a:f1:4a:69:48:9e:e4:6d:5e:4d:2f: c5:d3:2b:c3:06:71:9d:d9:fd:ee:ec:3e:cf:ca:9d:9f:c1:82: 90:7d:c1:38 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pzgBn0Yj5zvttlHrdE8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwMTAyMTIyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjFiMTM0ZDAzZTk2ZjRkMzY1M2M5NGI2NTE1N2E0OTE4NWU5MTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz0SftgiBOh0N80HUAbWhTqKBptp y0LevazLSy7BCBKRCrWqn71v/DDYAyRI0smDhq7FRn8Fi6aDxBOPTFUKVkxXPWbi /Ra8yBkK8XrlpFnsQ8EqNa7u7dKRO+/d8yH8PLUshFkyjelRCcR3ZAytFiDKl9kw QmZ+vxiUgbaH95rW0Vw/G6MFS9QrL81Pjs4ek7azHoxC4rxIvUcxGsfBoXA1IMwp BqcW+m1Hc1PhMFafICcHBnh389cDxwOdFn/IUJgvAf+1SNESmaJ5kKsYg7lG/Gbg UBFHn8Yrtr49DSmOff98NidzYPvMZAVVn/DvdKnXCnHrtnJ7SjzcVTePoQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEsbE00D6W9NNlPJS2UVekkYXpEtMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvU3hzVFRRUHBiMDAyVThsTFpSVjZTUmhla1MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZc9AwQA URGfMA0GCSqGSIb3DQEBCwUAA4IBAQB8eLHxQ4spRoXhXwGMcun13wbXHSIrYXKa GL2CeP63ijXa3CxZDIhEjJDo5KuCZw2hinfiB/rdJvu7Q0VPeh7Xsqc6XT4pXd91 to1R7lQv6dnoauSMBlnoa7Qf2DB1lqNku8xudhaKuzW1bFnyL4nOfeWJMhCsBE02 meiYd0mBx3BLR0zeY2mDCEYIjzTz607OJTs3YXKwGXqgDO0JgADclhjxDjqCVlUk G4ShEB3BYOLheUinHZK5lvrEPTQstM8S2oVXi9aJ5fNK+Ed0w6eDLnaiXYek9odE 1qG+mdQGSvFKaUie5G1eTS/F0yvDBnGd2f3u7D7Pyp2fwYKQfcE4 -----END CERTIFICATE-----Generated at Wed Jan 21 14:10:55 2026 by rpki-client