This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/sdzS0oCftjlUBF_x6Se_monNeYk.roa File: sdzS0oCftjlUBF_x6Se_monNeYk.roa (raw, json) Hash identifier: WoH/tQiUE8dkOdaeguscSVlQ0r0KBSj1gMZzcaTJ6DM= Subject key identifier: B1:DC:D2:D2:80:9F:B6:39:54:04:5F:F1:E9:27:BF:9A:89:CD:79:89 Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8 Certificate serial: 019B7F83EAE0CD580E27290DEC99BED14CF7 Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/sdzS0oCftjlUBF_x6Se_monNeYk.roa Signing time: Fri 02 Jan 2026 16:21:50 +0000 ROA not before: Fri 02 Jan 2026 16:21:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15685 IP address blocks: 185.95.117.0/24 maxlen: 24 185.95.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:ea:e0:cd:58:0e:27:29:0d:ec:99:be:d1:4c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8 Validity Not Before: Jan 2 16:21:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1dcd2d2809fb63954045ff1e927bf9a89cd7989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:12:15:3c:8f:71:42:8c:00:0c:57:83:a8:18: 3f:2c:51:ce:0d:ee:a5:fc:31:2b:ed:6e:77:ae:d2: 2a:f6:1f:5c:87:1d:ca:29:87:3a:40:24:69:57:6d: ea:99:79:2e:12:d4:a8:4d:03:29:50:6b:cf:7a:e8: 48:39:72:32:fd:e4:0b:26:fb:d3:43:bf:34:37:88: f0:5b:b7:eb:c2:74:02:75:d9:5c:90:1d:01:b9:47: a3:58:20:3e:51:7b:74:3a:e3:ac:3b:d0:53:31:42: b6:a3:f2:4e:28:37:26:ca:37:66:09:65:d9:91:8d: 3f:17:28:76:3b:f2:4d:30:1e:bd:8d:93:87:6e:ef: 27:82:07:fa:6d:bb:19:dd:07:ff:e6:5d:b4:4e:e7: 23:8b:76:88:66:10:83:7d:4d:7c:1f:93:d8:8b:a6: e1:f9:df:6a:91:59:a0:c8:92:97:95:7f:ce:66:22: 32:9b:c6:c3:72:96:de:71:f6:37:9e:c0:bf:81:59: dd:a6:55:a0:9d:fe:9f:b6:c0:22:f2:70:51:fa:2d: 4c:3f:5b:4b:2f:3a:73:12:ad:59:2a:ac:ea:e9:44: fb:f7:c8:55:f4:21:a4:83:be:83:c7:18:12:05:56: 19:32:cc:95:d3:7d:88:60:3c:91:6a:a6:14:32:8f: 4a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DC:D2:D2:80:9F:B6:39:54:04:5F:F1:E9:27:BF:9A:89:CD:79:89 X509v3 Authority Key Identifier: keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/sdzS0oCftjlUBF_x6Se_monNeYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.95.117.0-185.95.119.255 Signature Algorithm: sha256WithRSAEncryption 92:53:10:c5:8c:6f:9f:db:a6:0c:ae:9e:c2:fc:75:73:16:f4: f6:b0:e8:ab:dd:f6:29:31:39:c8:0b:75:33:47:09:76:31:35: a1:72:36:18:8d:62:54:97:ab:b6:4a:91:a6:af:e7:40:be:db: 51:27:89:d1:69:0a:4a:6b:ba:9d:24:49:af:35:01:17:f1:bb: 6d:92:31:3c:c3:39:3d:c8:06:5b:17:cb:db:29:63:4a:c4:12: 91:25:00:87:00:d8:d9:74:00:38:f2:76:58:e8:1d:31:2f:a7: 7e:11:f9:cc:79:d6:5c:f3:3c:8c:97:5b:57:5a:48:42:42:6c: 69:73:ba:e6:28:4b:35:4d:3d:64:02:42:83:4c:e1:bc:5b:7b: a9:3b:71:96:a4:2e:9a:ed:24:d3:d0:d7:d9:1a:87:81:b5:25: 3b:c8:d7:ce:7f:aa:83:ca:f0:74:fb:62:4d:54:b2:2a:c8:c4: e1:c9:03:bf:87:8c:8c:6a:52:1d:ab:e9:19:5c:da:86:bf:5e: b9:4e:13:5d:32:df:57:ca:ea:ce:cd:37:90:18:21:e9:15:03: de:6f:a1:69:8a:88:14:b4:a3:d8:28:87:3b:78:56:fe:3d:12: 7d:16:3d:62:55:26:c6:27:c1:e5:93:df:31:78:3e:3e:00:31: 39:bc:c8:ee -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/g+rgzVgOJykN7Jm+0Uz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMzdjNzBmMWM2N2VjYTE3NzVhNzA5YzkyMzVkNmEyZjU1 NTE2YjgwHhcNMjYwMTAyMTYyMTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWRjZDJkMjgwOWZiNjM5NTQwNDVmZjFlOTI3YmY5YTg5Y2Q3OTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxIVPI9xQowADFeDqBg/LFHODe6l /DEr7W53rtIq9h9chx3KKYc6QCRpV23qmXkuEtSoTQMpUGvPeuhIOXIy/eQLJvvT Q780N4jwW7frwnQCddlckB0BuUejWCA+UXt0OuOsO9BTMUK2o/JOKDcmyjdmCWXZ kY0/Fyh2O/JNMB69jZOHbu8nggf6bbsZ3Qf/5l20Tucji3aIZhCDfU18H5PYi6bh +d9qkVmgyJKXlX/OZiIym8bDcpbecfY3nsC/gVndplWgnf6ftsAi8nBR+i1MP1tL LzpzEq1ZKqzq6UT798hV9CGkg76DxxgSBVYZMsyV032IYDyRaqYUMo9KuQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLHc0tKAn7Y5VARf8eknv5qJzXmJMB8GA1UdIwQY MBaAFL43xw8cZ+yhd1pwnJI11qL1VRa4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85NzM0MzEtNWFlNC00NTIxLTk0NTQt YzhlYjA4Y2U5MDg5LzEvc2R6UzBvQ2Z0amxVQkZfeDZTZV9tb25OZVlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS85NzM0MzEtNWFlNC00NTIxLTk0NTQtYzhlYjA4Y2U5MDg5 LzEvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5X3UD BAO5X3AwDQYJKoZIhvcNAQELBQADggEBAJJTEMWMb5/bpgyunsL8dXMW9Paw6Kvd 9ikxOcgLdTNHCXYxNaFyNhiNYlSXq7ZKkaav50C+21EnidFpCkprup0kSa81ARfx u22SMTzDOT3IBlsXy9spY0rEEpElAIcA2Nl0ADjydljoHTEvp34R+cx51lzzPIyX W1daSEJCbGlzuuYoSzVNPWQCQoNM4bxbe6k7cZakLprtJNPQ19kah4G1JTvI185/ qoPK8HT7Yk1UsirIxOHJA7+HjIxqUh2r6Rlc2oa/XrlOE10y31fK6s7NN5AYIekV A95voWmKiBS0o9gohzt4Vv49En0WPWJVJsYnweWT3zF4Pj4AMTm8yO4= -----END CERTIFICATE-----Generated at Sat Jan 3 04:13:13 2026 by rpki-client