This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/SDLTrQjkiw192HmXLpffrpBlDcs.roa File: SDLTrQjkiw192HmXLpffrpBlDcs.roa (raw, json) Hash identifier: BhXmkSXu3As8CiQ1UvxuCgeN4cbmIJZN7UIHsihXBW8= Subject key identifier: 48:32:D3:AD:08:E4:8B:0D:7D:D8:79:97:2E:97:DF:AE:90:65:0D:CB Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615 Certificate serial: 019B79ED2B1746D09B9D6D7F9FE7C53CDCB5 Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/SDLTrQjkiw192HmXLpffrpBlDcs.roa Signing time: Thu 01 Jan 2026 14:19:04 +0000 ROA not before: Thu 01 Jan 2026 14:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202072 IP address blocks: 185.45.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2b:17:46:d0:9b:9d:6d:7f:9f:e7:c5:3c:dc:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615 Validity Not Before: Jan 1 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4832d3ad08e48b0d7dd879972e97dfae90650dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0b:18:30:f6:b0:1b:28:d0:d0:e4:79:e3:35: e9:88:fd:fe:07:c0:5c:b0:5d:d8:21:8d:8e:8c:14: b4:47:a8:59:01:44:7b:c0:10:c1:68:6a:be:28:2c: 4b:b8:b8:6c:10:bb:57:0f:10:4c:f2:c9:b7:0e:05: d4:f9:68:3a:e1:d9:62:c7:1e:87:cf:1d:4c:43:5d: bc:f5:8f:67:98:f3:b8:17:3b:cb:57:a2:54:2e:76: 3d:8c:c8:a8:2c:c3:85:ec:99:57:a5:db:d7:2d:38: 65:aa:5e:6d:fc:33:75:99:fa:d5:77:c6:28:db:55: 4d:a3:26:76:07:78:77:0f:b6:e7:ca:34:f5:22:07: a5:58:fc:73:ab:35:98:2e:fb:02:a6:96:54:59:f5: 72:c6:3a:be:7c:ce:ff:06:3a:64:7e:ec:98:9d:51: 54:02:ec:38:da:e3:9e:83:99:4c:63:ad:af:ee:c5: 8d:73:8d:9c:d8:2e:98:c8:ad:e5:82:cf:79:44:9c: c9:f5:11:ad:8e:61:a2:7a:c8:cf:c2:d6:36:ec:72: d1:ff:4d:15:4a:e2:63:c5:41:bd:d3:4f:9c:33:a2: 52:77:7d:2e:a4:37:d9:16:b5:93:c8:ff:f8:ba:0f: 72:2e:14:30:04:6d:4a:9a:fb:45:86:e2:03:5d:66: bc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:32:D3:AD:08:E4:8B:0D:7D:D8:79:97:2E:97:DF:AE:90:65:0D:CB X509v3 Authority Key Identifier: keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/SDLTrQjkiw192HmXLpffrpBlDcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.44.0/22 Signature Algorithm: sha256WithRSAEncryption 81:49:dc:f3:cc:cb:3c:df:1c:6f:1a:07:9f:db:e4:65:43:52: 4e:69:73:4c:3a:f6:bf:dc:a4:b2:f5:fc:94:e9:16:00:c7:79: 0d:e5:7a:cf:e5:71:34:4d:04:99:aa:f3:62:11:b9:58:8c:96: da:d3:2d:30:fb:d3:f8:52:1c:83:6e:3f:9b:bd:69:e1:e5:d2: 48:d4:8c:e0:8d:a7:13:93:cc:ff:2f:24:a2:b7:60:cc:7d:07: 05:e9:74:04:a9:a2:f0:02:da:af:01:89:f2:77:d3:e6:b7:ce: 88:48:82:b8:26:ee:23:64:48:08:c6:f2:8c:43:89:97:83:05: d3:d0:ab:44:f2:7e:08:b6:dd:23:02:e5:3a:e6:96:1f:76:c1: 71:6e:3d:85:aa:91:df:c7:0a:ec:17:24:6b:2d:0c:38:65:4a: 29:83:3c:4b:15:0a:41:fc:dc:7e:ec:8f:d9:f4:49:63:2a:09: c0:6c:9c:68:09:af:1c:a8:80:5d:ef:fd:31:27:bc:9e:fc:dd: a7:24:e8:33:a3:8f:ce:ad:93:77:2c:df:cd:d3:e9:c7:e8:e1: 8c:dd:a1:4a:62:0e:13:cb:f5:3e:bf:cb:23:de:4f:83:40:3c: 89:1b:4d:8c:5d:30:e7:48:0e:78:a2:ec:0a:32:ab:cc:9b:da: 61:1f:cf:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SsXRtCbnW1/n+fFPNy1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOGY5YzAzZTc1N2YzZGI1MTRjYTM4ZDE1YWRhNDUxZmEy ZTk2MTUwHhcNMjYwMTAxMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODMyZDNhZDA4ZTQ4YjBkN2RkODc5OTcyZTk3ZGZhZTkwNjUwZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wsYMPawGyjQ0OR54zXpiP3+B8Bc sF3YIY2OjBS0R6hZAUR7wBDBaGq+KCxLuLhsELtXDxBM8sm3DgXU+Wg64dlixx6H zx1MQ1289Y9nmPO4FzvLV6JULnY9jMioLMOF7JlXpdvXLThlql5t/DN1mfrVd8Yo 21VNoyZ2B3h3D7bnyjT1IgelWPxzqzWYLvsCppZUWfVyxjq+fM7/BjpkfuyYnVFU Auw42uOeg5lMY62v7sWNc42c2C6YyK3lgs95RJzJ9RGtjmGiesjPwtY27HLR/00V SuJjxUG900+cM6JSd30upDfZFrWTyP/4ug9yLhQwBG1KmvtFhuIDXWa8OwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEgy060I5IsNfdh5ly6X366QZQ3LMB8GA1UdIwQY MBaAFL2PnAPnV/PbUUyjjRWtpFH6LpYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iODNlNDctYmMwNC00OTJkLTlhMDct ZWNkZDgxNzQwMDdhLzEvU0RMVHJRamtpdzE5MkhtWExwZmZycEJsRGNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9iODNlNDctYmMwNC00OTJkLTlhMDctZWNkZDgxNzQwMDdh LzEvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuS0sMA0G CSqGSIb3DQEBCwUAA4IBAQCBSdzzzMs83xxvGgef2+RlQ1JOaXNMOva/3KSy9fyU 6RYAx3kN5XrP5XE0TQSZqvNiEblYjJba0y0w+9P4UhyDbj+bvWnh5dJI1IzgjacT k8z/LySit2DMfQcF6XQEqaLwAtqvAYnyd9Pmt86ISIK4Ju4jZEgIxvKMQ4mXgwXT 0KtE8n4Itt0jAuU65pYfdsFxbj2FqpHfxwrsFyRrLQw4ZUopgzxLFQpB/Nx+7I/Z 9EljKgnAbJxoCa8cqIBd7/0xJ7ye/N2nJOgzo4/OrZN3LN/N0+nH6OGM3aFKYg4T y/U+v8sj3k+DQDyJG02MXTDnSA54ouwKMqvMm9phH8/6 -----END CERTIFICATE-----Generated at Fri Jan 9 18:09:22 2026 by rpki-client