This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/Sb27fx8W2Bv1m1pEAWpcbW-vK10.roa File: Sb27fx8W2Bv1m1pEAWpcbW-vK10.roa (raw, json) Hash identifier: ClUudBc4gF5lYIHf+aYM1gznaI2Os4gu/iEuZ8iqJzE= Subject key identifier: 49:BD:BB:7F:1F:16:D8:1B:F5:9B:5A:44:01:6A:5C:6D:6F:AF:2B:5D Certificate issuer: /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2 Certificate serial: 019B7AC883068324535CB56274103CC1071E Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/Sb27fx8W2Bv1m1pEAWpcbW-vK10.roa Signing time: Thu 01 Jan 2026 18:18:39 +0000 ROA not before: Thu 01 Jan 2026 18:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57130 IP address blocks: 91.230.240.0/24 maxlen: 24 91.230.241.0/24 maxlen: 24 194.9.22.0/24 maxlen: 24 194.9.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:83:06:83:24:53:5c:b5:62:74:10:3c:c1:07:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2 Validity Not Before: Jan 1 18:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49bdbb7f1f16d81bf59b5a44016a5c6d6faf2b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:15:0f:ab:a7:37:a3:94:b6:13:04:09:0d:4b: b7:de:b4:a2:1e:06:27:f8:06:32:0f:dc:db:19:d0: 57:e2:14:4e:a0:c5:32:c5:92:26:6e:ac:f3:f1:ba: d6:99:9d:e0:fa:03:94:f4:a5:a9:2e:74:d7:70:58: 0b:19:d4:ec:83:bf:94:90:76:84:62:bd:93:08:03: b8:b7:01:d6:66:cc:50:44:8c:84:5f:9b:75:bc:47: b8:d0:33:b6:22:71:e7:a7:94:c5:10:0c:ed:71:d9: 80:fd:0c:1e:43:4d:b7:6b:1e:f1:f6:55:20:4a:5c: bb:f1:9d:82:13:25:42:1c:07:39:e7:ea:91:40:98: 75:d1:21:f2:21:b6:dc:2f:10:68:14:cf:75:0e:91: 4a:94:5c:68:ac:b4:74:fd:fd:08:6d:6e:42:1b:da: d6:9f:a9:11:d5:66:18:61:5b:47:3a:5a:ff:35:6d: 8a:7b:73:e0:88:3e:14:56:90:aa:a1:1b:59:6d:01: 34:e3:2f:ad:72:1e:49:31:22:29:95:d4:77:09:fc: fa:51:0c:79:c1:91:23:f9:b8:ce:d3:04:80:b7:82: 09:61:27:a3:6d:b1:0a:d2:a2:be:1f:46:2f:a4:a3: cf:22:16:74:53:9f:fa:4c:f8:ef:d8:4e:8f:a0:21: e2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BD:BB:7F:1F:16:D8:1B:F5:9B:5A:44:01:6A:5C:6D:6F:AF:2B:5D X509v3 Authority Key Identifier: keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/Sb27fx8W2Bv1m1pEAWpcbW-vK10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.240.0/23 194.9.22.0/23 Signature Algorithm: sha256WithRSAEncryption 44:d1:96:b4:ea:b9:13:c9:2d:07:2d:4a:79:af:e8:02:1e:54: 67:0f:97:1a:e0:30:2d:cd:7f:9d:72:d1:9f:2f:7a:20:15:7d: 3a:a7:e7:14:68:68:92:49:e4:21:05:c2:5f:ed:f0:cf:2c:ea: 85:0a:f7:4f:76:00:ec:51:06:28:fa:21:87:04:0b:aa:88:bf: ea:60:d4:72:84:82:9c:40:67:c5:00:56:2c:3e:50:13:e9:80: 39:35:a1:d0:b7:67:b2:a6:fb:c4:db:02:8c:50:b8:5c:87:3f: 32:39:70:66:34:b1:7c:27:62:fd:bd:7d:c5:98:a2:6a:32:c5: 5c:01:86:36:05:b2:43:7c:8f:a6:6a:2f:0c:83:7d:a6:3e:d0: 26:b2:b8:c3:b1:43:22:9d:de:3b:f1:5d:ab:e1:74:e5:cf:3c: 7f:38:71:e2:3c:09:1f:d4:0e:a8:5c:1f:52:45:58:f4:b1:6b: f9:56:fc:2a:3d:ae:01:6e:e6:a6:16:21:7e:de:9c:0c:e5:04: 1e:b0:49:68:53:26:00:a9:16:96:ce:88:d2:d9:a4:72:cf:e5: 59:a9:8b:84:0b:00:ee:06:3e:b6:ce:e9:32:7e:9f:b6:b4:8a: 0a:7e:97:3e:c5:27:77:45:47:25:a4:a8:c2:59:e9:21:16:04: ac:52:47:be -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yIMGgyRTXLVidBA8wQceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzY2UwNjlkZmM1YjYwODg3NmQ2NDI0YTMyZTc4M2E5OGE5 MmVmZjIwHhcNMjYwMTAxMTgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWJkYmI3ZjFmMTZkODFiZjU5YjVhNDQwMTZhNWM2ZDZmYWYyYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xUPq6c3o5S2EwQJDUu33rSiHgYn +AYyD9zbGdBX4hROoMUyxZImbqzz8brWmZ3g+gOU9KWpLnTXcFgLGdTsg7+UkHaE Yr2TCAO4twHWZsxQRIyEX5t1vEe40DO2InHnp5TFEAztcdmA/QweQ023ax7x9lUg Sly78Z2CEyVCHAc55+qRQJh10SHyIbbcLxBoFM91DpFKlFxorLR0/f0IbW5CG9rW n6kR1WYYYVtHOlr/NW2Ke3PgiD4UVpCqoRtZbQE04y+tch5JMSIpldR3Cfz6UQx5 wZEj+bjO0wSAt4IJYSejbbEK0qK+H0YvpKPPIhZ0U5/6TPjv2E6PoCHiSQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEm9u38fFtgb9ZtaRAFqXG1vrytdMB8GA1UdIwQY MBaAFOPOBp38W2CIdtZCSjLng6mKku/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81NWFlMmQtMzdhMi00ZjY3LTk1MTYt OTA4MTU0NWY1NjkxLzEvU2IyN2Z4OFcyQnYxbTFwRUFXcGNiVy12SzEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81NWFlMmQtMzdhMi00ZjY3LTk1MTYtOTA4MTU0NWY1Njkx LzEvNDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+bwAwQB wgkWMA0GCSqGSIb3DQEBCwUAA4IBAQBE0Za06rkTyS0HLUp5r+gCHlRnD5ca4DAt zX+dctGfL3ogFX06p+cUaGiSSeQhBcJf7fDPLOqFCvdPdgDsUQYo+iGHBAuqiL/q YNRyhIKcQGfFAFYsPlAT6YA5NaHQt2eypvvE2wKMULhchz8yOXBmNLF8J2L9vX3F mKJqMsVcAYY2BbJDfI+mai8Mg32mPtAmsrjDsUMind478V2r4XTlzzx/OHHiPAkf 1A6oXB9SRVj0sWv5VvwqPa4BbuamFiF+3pwM5QQesEloUyYAqRaWzojS2aRyz+VZ qYuECwDuBj62zukyfp+2tIoKfpc+xSd3RUclpKjCWekhFgSsUke+ -----END CERTIFICATE-----Generated at Mon Jan 12 01:33:31 2026 by rpki-client