This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/SjIFpOv8CU5TAe5BOSptvm-t2X8.roa File: SjIFpOv8CU5TAe5BOSptvm-t2X8.roa (raw, json) Hash identifier: noG1uYmKn+lp5DHEKlchBRM5lgdWGa4N1VmV9ta3T+w= Subject key identifier: 4A:32:05:A4:EB:FC:09:4E:53:01:EE:41:39:2A:6D:BE:6F:AD:D9:7F Certificate issuer: /CN=a2d08cdc6a430ef0da8829917256b6ad8d0a36f9 Certificate serial: 019B79ECBCB940F3508E241D6B216787D805 Authority key identifier: A2:D0:8C:DC:6A:43:0E:F0:DA:88:29:91:72:56:B6:AD:8D:0A:36:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/SjIFpOv8CU5TAe5BOSptvm-t2X8.roa Signing time: Thu 01 Jan 2026 14:18:36 +0000 ROA not before: Thu 01 Jan 2026 14:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60652 IP address blocks: 195.137.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bc:b9:40:f3:50:8e:24:1d:6b:21:67:87:d8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d08cdc6a430ef0da8829917256b6ad8d0a36f9 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a3205a4ebfc094e5301ee41392a6dbe6fadd97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:44:e3:5a:25:47:cd:aa:5a:25:8e:3c:11:32: 0a:95:cd:99:96:8f:7d:89:fe:a4:a1:98:15:91:a1: 71:9d:ee:be:d3:97:6b:ee:84:fc:9e:73:9d:d4:26: 8b:55:59:d6:50:60:c1:78:e2:2f:70:a4:b4:cb:be: 06:d4:0b:24:a2:8a:99:92:1f:17:cf:c6:ae:85:7a: 7d:d3:2f:6a:06:f2:c1:eb:ad:e6:19:bf:b9:19:18: 2c:fe:7e:a2:bf:f3:2a:08:67:cb:08:a9:05:ac:0f: 4b:4d:1b:d5:4d:1a:2c:6a:7c:2a:dd:43:00:9b:75: 78:e0:e4:93:35:30:32:4a:4b:38:ab:96:41:69:58: b8:d3:66:29:ef:cd:58:8a:4b:22:47:2c:87:51:44: 77:e9:56:66:60:6d:1b:47:7c:85:43:f8:fa:54:23: 13:a4:f6:78:20:76:10:1c:29:4c:3a:23:60:f8:98: b9:a4:3e:0b:81:95:0b:73:55:c3:d0:13:e2:46:f4: 04:dc:97:f9:29:26:b1:40:2c:86:c5:8b:ee:4a:a8: 29:1f:fa:6e:70:a8:fc:a3:f8:59:15:eb:6d:6b:87: 1f:5c:98:d4:47:2c:10:71:ed:13:76:2a:e6:04:d1: 14:e8:b7:2e:6c:da:7e:c2:1e:df:1b:6f:54:90:a6: 94:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:32:05:A4:EB:FC:09:4E:53:01:EE:41:39:2A:6D:BE:6F:AD:D9:7F X509v3 Authority Key Identifier: keyid:A2:D0:8C:DC:6A:43:0E:F0:DA:88:29:91:72:56:B6:AD:8D:0A:36:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/SjIFpOv8CU5TAe5BOSptvm-t2X8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.137.230.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:b4:0a:63:e1:6e:5e:5d:ce:75:7c:72:b3:16:02:c1:38:c9: d4:3f:1b:d1:07:ee:45:0f:9d:91:bb:d3:ce:9a:90:dd:34:76: 86:ab:fe:4a:c9:4f:39:a4:66:47:2a:05:b0:59:0f:d9:56:87: 30:26:12:ea:8e:9a:98:9d:15:ff:fe:6b:5e:19:94:47:1b:01: 2d:a3:8e:15:50:b7:ce:20:42:39:c4:23:ca:14:1b:8a:b9:29: 05:25:5c:d7:ed:f4:d8:ad:ce:37:3c:0f:e3:4b:3b:7e:68:78: 46:fd:3f:24:58:09:87:02:00:18:e9:7a:dd:50:cb:b4:84:5e: 59:1e:4b:26:e1:f1:de:ec:26:62:41:2f:e7:d2:27:11:19:69: 7a:7c:cc:17:17:c9:bf:ed:83:31:15:87:e3:ab:75:b1:9e:c5: 06:2c:24:7c:6c:30:e4:ee:ca:ee:12:9d:e1:9d:90:15:a1:81: f2:b1:53:25:58:ff:25:14:fc:59:10:27:9b:aa:6a:95:1c:ab: fe:07:3e:e4:07:9e:b9:da:77:4a:0d:0b:06:6b:35:92:a6:f0: 87:47:20:0b:51:99:4e:18:8d:45:fb:a9:26:c3:3f:1c:66:74: 92:59:04:c1:45:05:20:19:0b:5a:a4:ad:f3:89:3d:ec:d6:ed: b6:7d:02:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Ly5QPNQjiQdayFnh9gFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDA4Y2RjNmE0MzBlZjBkYTg4Mjk5MTcyNTZiNmFkOGQw YTM2ZjkwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTMyMDVhNGViZmMwOTRlNTMwMWVlNDEzOTJhNmRiZTZmYWRkOTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ETjWiVHzapaJY48ETIKlc2Zlo99 if6koZgVkaFxne6+05dr7oT8nnOd1CaLVVnWUGDBeOIvcKS0y74G1AskooqZkh8X z8auhXp90y9qBvLB663mGb+5GRgs/n6iv/MqCGfLCKkFrA9LTRvVTRosanwq3UMA m3V44OSTNTAySks4q5ZBaVi402Yp781YiksiRyyHUUR36VZmYG0bR3yFQ/j6VCMT pPZ4IHYQHClMOiNg+Ji5pD4LgZULc1XD0BPiRvQE3Jf5KSaxQCyGxYvuSqgpH/pu cKj8o/hZFetta4cfXJjURywQce0TdirmBNEU6LcubNp+wh7fG29UkKaUjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEoyBaTr/AlOUwHuQTkqbb5vrdl/MB8GA1UdIwQY MBaAFKLQjNxqQw7w2ogpkXJWtq2NCjb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RDTTNHcEREdkRhaUNtUmNsYTJyWTBLTnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iYzE5Y2MtMGY1My00ZDEwLWFmOTMt ZGMwMWExOWIyODU2LzEvU2pJRnBPdjhDVTVUQWU1Qk9TcHR2bS10Mlg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9iYzE5Y2MtMGY1My00ZDEwLWFmOTMtZGMwMWExOWIyODU2 LzEvb3RDTTNHcEREdkRhaUNtUmNsYTJyWTBLTnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4nmMA0G CSqGSIb3DQEBCwUAA4IBAQArtApj4W5eXc51fHKzFgLBOMnUPxvRB+5FD52Ru9PO mpDdNHaGq/5KyU85pGZHKgWwWQ/ZVocwJhLqjpqYnRX//mteGZRHGwEto44VULfO IEI5xCPKFBuKuSkFJVzX7fTYrc43PA/jSzt+aHhG/T8kWAmHAgAY6XrdUMu0hF5Z Hksm4fHe7CZiQS/n0icRGWl6fMwXF8m/7YMxFYfjq3WxnsUGLCR8bDDk7sruEp3h nZAVoYHysVMlWP8lFPxZECebqmqVHKv+Bz7kB5652ndKDQsGazWSpvCHRyALUZlO GI1F+6kmwz8cZnSSWQTBRQUgGQtapK3ziT3s1u22fQKy -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:39 2026 by rpki-client