This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/SiiyX2N_VudkW_kgHjDWb96Midc.roa File: SiiyX2N_VudkW_kgHjDWb96Midc.roa (raw, json) Hash identifier: VBfDCyR0GjOaXAtcZCDfH6SSSVgHl3aLvPMUM1TIr7o= Subject key identifier: 4A:28:B2:5F:63:7F:56:E7:64:5B:F9:20:1E:30:D6:6F:DE:8C:89:D7 Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf Certificate serial: 019B7AC90A963BC6CA1047BD2C8F8591050C Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/SiiyX2N_VudkW_kgHjDWb96Midc.roa Signing time: Thu 01 Jan 2026 18:19:14 +0000 ROA not before: Thu 01 Jan 2026 18:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 195.88.246.0/24 maxlen: 24 195.88.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:0a:96:3b:c6:ca:10:47:bd:2c:8f:85:91:05:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf Validity Not Before: Jan 1 18:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a28b25f637f56e7645bf9201e30d66fde8c89d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:79:0a:07:c3:92:70:98:35:77:97:45:70:35: 10:db:ab:b5:e3:c3:1d:50:13:53:8a:5c:4a:b4:f7: ad:65:5a:e5:c0:3b:fc:60:0c:60:9f:9a:24:bc:e6: f5:23:b4:85:e2:b3:cb:ab:7f:f3:a3:4e:e6:d5:9a: 38:db:64:5d:f9:80:08:2c:89:43:3c:c4:84:ac:63: e6:02:79:ac:0d:8f:f6:cf:3b:ad:c5:bb:63:46:94: 70:6c:2e:e0:91:e7:b9:c8:ca:56:33:c7:0c:59:98: ad:fe:e4:d5:f5:ed:03:5f:ce:75:f9:41:c9:92:4f: 52:69:70:c8:a3:53:9b:38:2e:01:f7:c2:6c:f3:93: 38:13:64:d6:5b:39:25:96:75:03:a6:4e:6b:25:75: 42:7c:d4:03:18:fa:dd:cd:54:47:f4:ad:c2:95:06: b9:b3:34:b3:63:35:dd:b9:1d:f9:22:06:1e:43:69: 5b:7b:97:fd:c3:5c:d2:3b:7f:a1:21:4a:fe:9f:75: 70:6a:90:c5:56:7d:1e:7b:1f:8e:94:b6:77:db:1f: c9:a0:40:07:fd:57:74:bc:ef:e7:9e:2b:14:0f:8e: fb:a3:94:5f:ec:60:6f:ce:d2:0e:5a:01:aa:fc:cc: be:9f:51:82:29:30:d3:c4:72:4a:55:1d:8c:0e:6e: 2f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:28:B2:5F:63:7F:56:E7:64:5B:F9:20:1E:30:D6:6F:DE:8C:89:D7 X509v3 Authority Key Identifier: keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/SiiyX2N_VudkW_kgHjDWb96Midc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.246.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:ad:8b:ac:a3:08:b6:b3:c5:e0:24:6a:84:25:bd:16:53:71: 88:65:7e:51:e4:a7:e6:06:6c:2d:32:61:61:4b:e9:2d:40:66: 41:d8:fb:26:39:f5:ff:93:84:f0:a1:34:9c:be:2a:a6:00:4e: 37:c7:3d:a7:8f:ae:21:16:3d:8e:7b:69:c5:dd:9b:20:41:27: 99:2b:c1:fc:71:c1:f4:d2:42:81:89:f2:7f:a8:2d:ce:a3:b3: 8f:b7:28:51:ce:3f:f4:03:68:7f:dc:71:9b:38:80:30:b7:ab: 5e:77:52:e6:7f:cc:e8:a1:05:a9:b9:d9:e5:5f:12:6a:db:aa: a4:7d:17:ac:e6:38:5d:d8:67:f7:30:a8:38:15:7b:ab:c8:4d: 5c:b6:c8:6d:db:eb:3e:41:17:02:f2:8d:e8:8c:ca:bd:79:4c: 2c:7d:8f:dc:9e:12:4a:94:9f:80:02:8f:5a:7f:2f:e7:33:12: 86:05:8b:36:af:05:41:ce:4a:d8:17:d5:78:01:6d:40:6f:58: 0a:6e:53:65:e4:6f:17:7a:df:ee:5d:1d:3c:72:cb:9d:0f:0f: 3a:27:22:f8:16:6c:2f:b9:ee:a9:2f:e4:b5:32:e6:79:25:62: 45:6c:fc:dc:76:68:04:52:50:37:8e:12:4b:c2:e1:14:da:79: be:64:f5:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yQqWO8bKEEe9LI+FkQUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MzhkNzcyNmE1ZjFmMzNkYTE1ZDg3ZTVjOGIwZTQ4ZjUw MjgxYmYwHhcNMjYwMTAxMTgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTI4YjI1ZjYzN2Y1NmU3NjQ1YmY5MjAxZTMwZDY2ZmRlOGM4OWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHkKB8OScJg1d5dFcDUQ26u148Md UBNTilxKtPetZVrlwDv8YAxgn5okvOb1I7SF4rPLq3/zo07m1Zo422Rd+YAILIlD PMSErGPmAnmsDY/2zzutxbtjRpRwbC7gkee5yMpWM8cMWZit/uTV9e0DX851+UHJ kk9SaXDIo1ObOC4B98Js85M4E2TWWzkllnUDpk5rJXVCfNQDGPrdzVRH9K3ClQa5 szSzYzXduR35IgYeQ2lbe5f9w1zSO3+hIUr+n3VwapDFVn0eex+OlLZ32x/JoEAH /Vd0vO/nnisUD477o5Rf7GBvztIOWgGq/My+n1GCKTDTxHJKVR2MDm4v1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEoosl9jf1bnZFv5IB4w1m/ejInXMB8GA1UdIwQY MBaAFNU413JqXx8z2hXYflyLDkj1AoG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80M2M0NTEtZTRlOS00ODU5LWI5ODUt MmQ5ZGY0ZWY1ZjUwLzEvU2lpeVgyTl9WdWRrV19rZ0hqRFdiOTZNaWRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80M2M0NTEtZTRlOS00ODU5LWI5ODUtMmQ5ZGY0ZWY1ZjUw LzEvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1j2MA0G CSqGSIb3DQEBCwUAA4IBAQAtrYusowi2s8XgJGqEJb0WU3GIZX5R5KfmBmwtMmFh S+ktQGZB2PsmOfX/k4TwoTScviqmAE43xz2nj64hFj2Oe2nF3ZsgQSeZK8H8ccH0 0kKBifJ/qC3Oo7OPtyhRzj/0A2h/3HGbOIAwt6ted1Lmf8zooQWpudnlXxJq26qk fRes5jhd2Gf3MKg4FXuryE1ctsht2+s+QRcC8o3ojMq9eUwsfY/cnhJKlJ+AAo9a fy/nMxKGBYs2rwVBzkrYF9V4AW1Ab1gKblNl5G8Xet/uXR08csudDw86JyL4Fmwv ue6pL+S1MuZ5JWJFbPzcdmgEUlA3jhJLwuEU2nm+ZPVh -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:17 2026 by rpki-client