This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/p1SBAES1_gf6qDKrzWJOUPLiAnA.roa File: p1SBAES1_gf6qDKrzWJOUPLiAnA.roa (raw, json) Hash identifier: H/UDNhAVh0s/O2Wme8wDfM0n2+DjkR5j821NKKTliTk= Subject key identifier: A7:54:81:00:44:B5:FE:07:FA:A8:32:AB:CD:62:4E:50:F2:E2:02:70 Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d Certificate serial: 019B797E815C6C635A96B526E0FE88D9FEA8 Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/p1SBAES1_gf6qDKrzWJOUPLiAnA.roa Signing time: Thu 01 Jan 2026 12:18:12 +0000 ROA not before: Thu 01 Jan 2026 12:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 109.232.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:81:5c:6c:63:5a:96:b5:26:e0:fe:88:d9:fe:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d Validity Not Before: Jan 1 12:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a754810044b5fe07faa832abcd624e50f2e20270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a2:76:bd:0c:8b:97:b5:1f:77:e2:eb:c7:c5: 01:3e:74:27:c4:bd:36:f2:56:ca:cd:13:14:b4:89: 34:b6:59:c8:56:65:14:b5:3e:4a:2f:12:45:01:cf: 66:ea:3c:d0:8d:35:f3:0a:93:b6:c7:93:3b:7b:4b: 5a:ff:c4:5f:2a:bc:63:21:2c:f3:5d:43:1c:6c:bf: 3f:67:f1:67:77:a5:d6:48:c3:b2:57:c1:be:d6:34: a8:30:ca:b8:52:0d:40:24:fd:66:5a:82:af:ef:1d: 1a:a1:45:b8:0c:d9:43:9c:1e:a6:5f:0f:97:e1:97: 83:5e:51:f3:85:b0:73:b9:38:1e:e6:5c:c1:f6:12: 4d:8e:c3:3e:80:f7:1b:16:5e:d4:ba:11:34:e9:41: 8c:f4:6e:d1:c8:4e:e9:79:55:1a:3a:e5:6a:4e:e4: bf:c8:8a:4e:fb:12:29:3d:ae:fe:29:9a:15:ad:6b: af:e8:e7:55:27:36:5a:53:53:81:04:1f:51:d4:bd: 86:68:02:73:b4:73:44:6e:b6:fc:fa:88:56:c0:79: 46:8e:3d:0f:b7:8a:ac:a5:59:eb:2d:b8:38:df:43: 1b:c4:8c:8d:35:a5:71:87:6e:fd:12:b8:5c:e8:2b: 4d:a7:c8:61:f2:ec:be:b2:9d:31:24:4f:bd:f7:87: 8b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:54:81:00:44:B5:FE:07:FA:A8:32:AB:CD:62:4E:50:F2:E2:02:70 X509v3 Authority Key Identifier: keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/p1SBAES1_gf6qDKrzWJOUPLiAnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.232.88.0/21 Signature Algorithm: sha256WithRSAEncryption a2:1f:6b:d1:e4:d5:05:37:7d:ba:53:dd:f0:7e:24:01:4a:d4: e4:ab:4e:dd:d9:ff:2d:78:f7:58:b2:64:02:29:21:b8:25:47: 4f:04:a3:bd:62:55:73:69:bb:a0:c7:75:7e:6d:6f:b4:9f:fd: a2:10:f5:51:bc:59:b8:94:43:37:a7:8c:9e:4f:f1:f3:c5:23: d9:05:ce:65:72:b7:1f:68:51:f8:c4:1f:d7:94:b5:6b:42:c2: e5:0a:2e:cd:de:7b:1f:77:b5:47:e1:dc:5e:88:22:5a:2c:ce: 3f:b7:de:3f:ae:38:45:7e:f0:a6:29:3a:b7:59:a5:cd:ae:79: 2b:e9:c4:8d:78:3a:a1:b1:2f:53:48:92:39:0e:3f:89:f1:e8: 43:e0:0a:6e:c4:7c:75:c5:d9:4d:c2:e0:54:4b:d6:84:19:02: 46:6f:d7:3b:a1:7e:06:78:33:c6:2d:ca:7b:21:1b:e6:b2:d1: 59:a7:3e:c2:76:70:aa:c9:f1:c9:0a:56:62:20:35:d2:21:36: 86:2d:97:df:bf:10:f7:d0:bd:6f:89:67:5c:46:54:fb:99:7b: 62:45:39:8e:6e:e5:f1:a4:4c:32:7b:28:30:d4:e7:2f:f8:6c: 1b:8c:18:25:06:99:d6:14:09:62:c3:60:da:73:b7:c1:e7:ec: 9a:99:e5:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5foFcbGNalrUm4P6I2f6oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWEyZjA4M2Y0NzFkZmI5NTA3YjRjOTczY2I1YzNhY2Q0 OTc1OWQwHhcNMjYwMTAxMTIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzU0ODEwMDQ0YjVmZTA3ZmFhODMyYWJjZDYyNGU1MGYyZTIwMjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaJ2vQyLl7Ufd+Lrx8UBPnQnxL02 8lbKzRMUtIk0tlnIVmUUtT5KLxJFAc9m6jzQjTXzCpO2x5M7e0ta/8RfKrxjISzz XUMcbL8/Z/Fnd6XWSMOyV8G+1jSoMMq4Ug1AJP1mWoKv7x0aoUW4DNlDnB6mXw+X 4ZeDXlHzhbBzuTge5lzB9hJNjsM+gPcbFl7UuhE06UGM9G7RyE7peVUaOuVqTuS/ yIpO+xIpPa7+KZoVrWuv6OdVJzZaU1OBBB9R1L2GaAJztHNEbrb8+ohWwHlGjj0P t4qspVnrLbg430MbxIyNNaVxh279Erhc6CtNp8hh8uy+sp0xJE+994eLBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKdUgQBEtf4H+qgyq81iTlDy4gJwMB8GA1UdIwQY MBaAFB6aLwg/Rx37lQe0yXPLXDrNSXWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82Mjc3YTctMjkwZi00OTk0LWIyODYt MjVkNmU4NjEzZGM0LzEvcDFTQkFFUzFfZ2Y2cURLcnpXSk9VUExpQW5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC82Mjc3YTctMjkwZi00OTk0LWIyODYtMjVkNmU4NjEzZGM0 LzEvSHBvdkNEOUhIZnVWQjdUSmM4dGNPczFKZFowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbehYMA0G CSqGSIb3DQEBCwUAA4IBAQCiH2vR5NUFN326U93wfiQBStTkq07d2f8tePdYsmQC KSG4JUdPBKO9YlVzabugx3V+bW+0n/2iEPVRvFm4lEM3p4yeT/HzxSPZBc5lcrcf aFH4xB/XlLVrQsLlCi7N3nsfd7VH4dxeiCJaLM4/t94/rjhFfvCmKTq3WaXNrnkr 6cSNeDqhsS9TSJI5Dj+J8ehD4ApuxHx1xdlNwuBUS9aEGQJGb9c7oX4GeDPGLcp7 IRvmstFZpz7CdnCqyfHJClZiIDXSITaGLZffvxD30L1viWdcRlT7mXtiRTmObuXx pEwyeygw1Ocv+GwbjBglBpnWFAliw2Dac7fB5+yameUD -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:23 2026 by rpki-client