This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/SBX2y6w-p7pXnDxmrWXHgVFjQfw.roa File: SBX2y6w-p7pXnDxmrWXHgVFjQfw.roa (raw, json) Hash identifier: FaCO6sn6sPvUgI+QSejot4qUi02cgrU5cArawOTH0ss= Subject key identifier: 48:15:F6:CB:AC:3E:A7:BA:57:9C:3C:66:AD:65:C7:81:51:63:41:FC Certificate issuer: /CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13 Certificate serial: 019B2660FF1F63D41CFEA5D267BC08B69259 Authority key identifier: A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/SBX2y6w-p7pXnDxmrWXHgVFjQfw.roa Signing time: Tue 16 Dec 2025 08:57:29 +0000 ROA not before: Tue 16 Dec 2025 08:57:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2914 IP address blocks: 185.174.144.0/22 maxlen: 22 185.174.145.0/24 maxlen: 24 185.174.147.0/24 maxlen: 24 194.247.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:60:ff:1f:63:d4:1c:fe:a5:d2:67:bc:08:b6:92:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13 Validity Not Before: Dec 16 08:57:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4815f6cbac3ea7ba579c3c66ad65c781516341fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:54:64:8f:6b:4f:9a:65:ec:19:40:a5:67:15: 19:a9:0f:76:04:2c:32:7d:60:c2:c7:5a:be:3e:fd: f3:b3:3e:19:5f:e8:78:59:b5:68:8d:ff:79:c2:b8: 95:8d:b6:d8:5e:1d:ea:62:80:ec:b5:eb:70:14:8f: f5:15:8f:c7:ed:1b:75:1c:ac:e1:d5:74:5e:83:ce: e0:8f:15:1b:c9:e2:ab:b3:17:61:3c:ea:05:46:b6: 97:44:1b:00:c6:26:54:d1:82:e5:bc:56:ac:e6:e1: 0c:05:07:26:a9:4b:bd:71:cc:0a:dc:91:b3:d1:64: 4b:24:b5:00:9b:5e:00:87:d0:b9:2d:cf:14:62:23: be:b9:ee:84:45:90:f7:88:e1:d6:b6:67:7a:44:fa: a7:27:55:b3:13:3d:28:3f:70:01:91:24:b8:33:b6: 33:58:22:7e:bf:7a:aa:ec:49:ce:df:47:df:e7:de: 80:43:f2:62:ae:49:3b:ad:d9:a0:ca:d9:5d:96:d3: 58:8a:d2:6f:33:68:51:29:57:6f:56:49:5f:94:e2: 5f:4a:ea:55:41:23:5c:b5:47:de:1d:54:cc:f8:29: a7:2b:8d:af:da:b2:b7:f7:5f:da:8a:6b:1b:f2:38: 74:d0:6b:35:e4:af:37:a1:ab:1b:49:6e:b1:18:b5: b8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:15:F6:CB:AC:3E:A7:BA:57:9C:3C:66:AD:65:C7:81:51:63:41:FC X509v3 Authority Key Identifier: keyid:A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/SBX2y6w-p7pXnDxmrWXHgVFjQfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.144.0/22 194.247.178.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:64:5b:68:ba:c7:a7:6e:cd:d7:86:e9:ba:1b:14:2a:3e:cc: c7:6c:d7:cd:03:94:c8:35:a2:b2:63:6b:15:c2:72:5c:51:28: 46:cf:4c:61:06:08:07:49:07:73:c4:1c:26:1f:e9:db:e4:b9: ad:06:1c:8b:f7:f1:c8:61:ca:1d:0f:45:67:cb:79:97:ec:03: cd:3e:2f:fe:8e:ba:f2:e8:fc:97:46:3c:53:98:37:a0:3e:e8: c4:1d:d5:a0:21:86:4f:94:f6:c4:9b:ac:99:a4:35:f8:cd:4c: 57:19:f6:7d:ea:2c:f2:45:81:30:f0:ab:ba:18:5b:a1:82:2c: f1:e8:d5:4b:01:ed:45:fa:cd:88:b3:a9:9a:3a:e5:b3:05:dc: fb:d7:81:b8:3b:02:70:23:7a:d6:29:cf:c6:5e:f7:55:70:06: 10:17:27:e0:a6:27:97:92:34:6c:d8:5a:d2:c6:fd:d3:13:23: 4c:61:3c:e6:b2:7f:53:a4:c8:6c:75:4b:55:95:00:79:66:b1: c1:1e:84:34:87:da:89:ea:2c:b8:a5:38:1d:43:7a:fa:da:00: 37:1b:66:d4:5e:df:96:86:6f:64:41:8f:b2:8f:2c:9a:87:ee: f0:17:c4:10:df:0e:5e:65:dc:4f:22:24:24:dc:d3:56:76:71: 00:46:58:96 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsmYP8fY9Qc/qXSZ7wItpJZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYWNjYTljNGZlOWJmOWVkZjNiYzZlNWNhYmM1MjgzOGQ5 M2NiMTMwHhcNMjUxMjE2MDg1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODE1ZjZjYmFjM2VhN2JhNTc5YzNjNjZhZDY1Yzc4MTUxNjM0MWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1Rkj2tPmmXsGUClZxUZqQ92BCwy fWDCx1q+Pv3zsz4ZX+h4WbVojf95wriVjbbYXh3qYoDstetwFI/1FY/H7Rt1HKzh 1XReg87gjxUbyeKrsxdhPOoFRraXRBsAxiZU0YLlvFas5uEMBQcmqUu9ccwK3JGz 0WRLJLUAm14Ah9C5Lc8UYiO+ue6ERZD3iOHWtmd6RPqnJ1WzEz0oP3ABkSS4M7Yz WCJ+v3qq7EnO30ff596AQ/Jirkk7rdmgytldltNYitJvM2hRKVdvVklflOJfSupV QSNctUfeHVTM+CmnK42v2rK391/aimsb8jh00Gs15K83oasbSW6xGLW4GQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEgV9susPqe6V5w8Zq1lx4FRY0H8MB8GA1UdIwQY MBaAFKCsypxP6b+e3zvG5cq8UoONk8sTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0t6S25FX3B2NTdmTzhibHlyeFNnNDJUeXhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83YjYxMTAtOGM0Yi00YWY2LWE3Y2Et MmVkZmUyNWJiNThhLzEvU0JYMnk2dy1wN3BYbkR4bXJXWEhnVkZqUWZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni83YjYxMTAtOGM0Yi00YWY2LWE3Y2EtMmVkZmUyNWJiNThh LzEvb0t6S25FX3B2NTdmTzhibHlyeFNnNDJUeXhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCua6QAwQB wveyMA0GCSqGSIb3DQEBCwUAA4IBAQB+ZFtousenbs3Xhum6GxQqPszHbNfNA5TI NaKyY2sVwnJcUShGz0xhBggHSQdzxBwmH+nb5LmtBhyL9/HIYcodD0Vny3mX7APN Pi/+jrry6PyXRjxTmDegPujEHdWgIYZPlPbEm6yZpDX4zUxXGfZ96izyRYEw8Ku6 GFuhgizx6NVLAe1F+s2Is6maOuWzBdz714G4OwJwI3rWKc/GXvdVcAYQFyfgpieX kjRs2FrSxv3TEyNMYTzmsn9TpMhsdUtVlQB5ZrHBHoQ0h9qJ6iy4pTgdQ3r62gA3 G2bUXt+Whm9kQY+yjyyah+7wF8QQ3w5eZdxPIiQk3NNWdnEARliW -----END CERTIFICATE-----Generated at Sat Dec 20 06:11:25 2025 by rpki-client