This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/SAugkdRYnSv4ry8bG61AtXCsozo.roa File: SAugkdRYnSv4ry8bG61AtXCsozo.roa (raw, json) Hash identifier: sEeAFM3bNI/ojfTwt1bUnazn3tLdAyJRyAzUqk6sRNU= Subject key identifier: 48:0B:A0:91:D4:58:9D:2B:F8:AF:2F:1B:1B:AD:40:B5:70:AC:A3:3A Certificate issuer: /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9 Certificate serial: 019B7B354ADE41D29D84F434BBAF60D1B280 Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/SAugkdRYnSv4ry8bG61AtXCsozo.roa Signing time: Thu 01 Jan 2026 20:17:28 +0000 ROA not before: Thu 01 Jan 2026 20:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208154 IP address blocks: 185.75.192.0/22 maxlen: 22 2a03:4ca0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 06:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:4a:de:41:d2:9d:84:f4:34:bb:af:60:d1:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9 Validity Not Before: Jan 1 20:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=480ba091d4589d2bf8af2f1b1bad40b570aca33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:c5:79:9c:03:4f:6f:15:36:90:b5:3d:7a: 12:33:67:89:a0:a8:37:66:23:32:2b:dd:11:6a:8d: 63:48:02:50:b5:05:2e:58:2f:82:0f:51:e1:1b:f2: 58:fa:a8:54:cc:e2:22:56:c0:aa:94:07:09:8e:ab: a4:84:e2:8f:57:82:ab:37:e2:af:0d:ae:84:70:f0: ed:54:2d:43:eb:0b:dc:55:6f:76:e0:38:d0:64:ab: 92:b8:55:fd:36:58:aa:34:3b:08:52:5b:97:20:b4: fc:ee:70:fe:98:36:38:0a:02:77:7f:cb:ba:2d:e0: 74:95:fb:6d:a8:50:12:3b:3f:2a:b3:ab:83:f8:de: 2d:d0:20:55:2c:24:2b:a0:d9:a5:8c:5f:f1:3f:47: 91:d6:42:83:d5:a9:b5:a2:0b:b8:55:32:3e:29:e7: 2f:e4:dd:52:66:97:42:41:f3:f8:eb:09:29:72:3e: 3f:2b:92:97:44:f6:9e:ff:20:16:7b:16:bc:1c:14: bd:45:dc:25:41:b7:02:cb:6e:fe:21:c7:b0:82:bb: 89:33:72:23:03:53:57:a9:78:60:9b:0b:17:72:59: 84:bf:56:ea:ca:66:4c:51:2e:d5:6b:96:66:0e:51: 6c:27:c0:81:e4:64:ea:60:bd:4e:34:6c:61:c8:3b: 1a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0B:A0:91:D4:58:9D:2B:F8:AF:2F:1B:1B:AD:40:B5:70:AC:A3:3A X509v3 Authority Key Identifier: keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/SAugkdRYnSv4ry8bG61AtXCsozo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.192.0/22 IPv6: 2a03:4ca0::/32 Signature Algorithm: sha256WithRSAEncryption 50:d2:ea:c5:25:7f:b3:52:d0:c0:d1:46:53:07:2e:c9:bc:33: d3:84:9a:8c:92:75:ce:8a:8b:10:5c:bb:4b:57:b5:57:76:4c: a0:7d:9e:0a:41:97:8c:5d:52:e5:ea:a3:9d:00:92:d9:40:4a: 2d:d5:69:11:8d:bf:6a:98:0d:36:6f:25:4a:25:c8:7e:8a:66: 2e:9e:25:bb:8c:95:7b:a1:73:09:ea:d7:a0:cb:29:be:85:41: b4:3a:26:ae:b4:58:39:e6:02:e7:45:1a:8a:22:ed:c7:84:9f: d3:d7:c6:11:6b:ac:89:ad:4f:f3:93:ec:f7:86:68:b2:c4:fa: 48:04:ed:b6:2b:06:f9:53:86:32:c3:3e:c9:46:56:eb:db:b7: 0d:34:6d:52:08:f5:a4:49:59:ae:98:7f:bd:51:7a:18:27:c2: 1f:0f:da:6f:27:62:d2:d7:98:ac:01:65:e4:4a:c5:cd:78:21: 1b:3a:72:bc:f3:65:a0:75:80:34:0b:27:69:49:3e:80:6a:3b: f2:60:d7:8a:50:b1:d2:7a:53:ca:5a:c8:69:a4:bb:53:a9:47: 06:73:ae:46:75:0d:ed:de:3f:4a:e5:bf:2f:d3:76:9b:cc:dd: 8d:5e:1f:fe:5f:f4:70:6c:74:8e:67:5f:07:c9:93:8d:1d:6d: 80:b4:77:ab -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NUreQdKdhPQ0u69g0bKAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOWUwYWZlYmY1NGE0ZDIxOGFmYmFlZDU0MzA3NzFiYmY3 Nzc3YTkwHhcNMjYwMTAxMjAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODBiYTA5MWQ0NTg5ZDJiZjhhZjJmMWIxYmFkNDBiNTcwYWNhMzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtDFeZwDT28VNpC1PXoSM2eJoKg3 ZiMyK90Rao1jSAJQtQUuWC+CD1HhG/JY+qhUzOIiVsCqlAcJjqukhOKPV4KrN+Kv Da6EcPDtVC1D6wvcVW924DjQZKuSuFX9NliqNDsIUluXILT87nD+mDY4CgJ3f8u6 LeB0lfttqFASOz8qs6uD+N4t0CBVLCQroNmljF/xP0eR1kKD1am1ogu4VTI+Kecv 5N1SZpdCQfP46wkpcj4/K5KXRPae/yAWexa8HBS9RdwlQbcCy27+IcewgruJM3Ij A1NXqXhgmwsXclmEv1bqymZMUS7Va5ZmDlFsJ8CB5GTqYL1ONGxhyDsa8QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEgLoJHUWJ0r+K8vGxutQLVwrKM6MB8GA1UdIwQY MBaAFA6eCv6/VKTSGK+67VQwdxu/d3epMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYt M2VmNTk0ZTZjNjk2LzEvU0F1Z2tkUlluU3Y0cnk4Ykc2MUF0WENzb3pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYtM2VmNTk0ZTZjNjk2 LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuUvAMA0E AgACMAcDBQAqA0ygMA0GCSqGSIb3DQEBCwUAA4IBAQBQ0urFJX+zUtDA0UZTBy7J vDPThJqMknXOiosQXLtLV7VXdkygfZ4KQZeMXVLl6qOdAJLZQEot1WkRjb9qmA02 byVKJch+imYuniW7jJV7oXMJ6tegyym+hUG0OiautFg55gLnRRqKIu3HhJ/T18YR a6yJrU/zk+z3hmiyxPpIBO22Kwb5U4Yywz7JRlbr27cNNG1SCPWkSVmumH+9UXoY J8IfD9pvJ2LS15isAWXkSsXNeCEbOnK882WgdYA0CydpST6AajvyYNeKULHSelPK WshppLtTqUcGc65GdQ3t3j9K5b8v03abzN2NXh/+X/RwbHSOZ18HyZONHW2AtHer -----END CERTIFICATE-----Generated at Sat Jan 3 12:48:47 2026 by rpki-client