This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/ix-SbgJ0KZNB1myeWrVVRoU9yZc.roa File: ix-SbgJ0KZNB1myeWrVVRoU9yZc.roa (raw, json) Hash identifier: i2bHi3g/koF19f8fYSJRGS021J2WcS0NKuTpTsc6lFo= Subject key identifier: 8B:1F:92:6E:02:74:29:93:41:D6:6C:9E:5A:B5:55:46:85:3D:C9:97 Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413 Certificate serial: 019B30E4A622BC03A1D7DB4582B831F658D1 Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/ix-SbgJ0KZNB1myeWrVVRoU9yZc.roa Signing time: Thu 18 Dec 2025 09:57:29 +0000 ROA not before: Thu 18 Dec 2025 09:57:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 1299 IP address blocks: 62.26.0.0/15 maxlen: 24 62.144.0.0/16 maxlen: 24 62.246.0.0/16 maxlen: 24 79.140.176.0/20 maxlen: 24 80.83.96.0/20 maxlen: 24 185.210.52.0/23 maxlen: 24 194.112.16.0/20 maxlen: 24 194.112.16.0/22 maxlen: 24 194.112.24.0/21 maxlen: 24 195.52.0.0/16 maxlen: 24 195.78.160.0/19 maxlen: 24 195.185.0.0/16 maxlen: 24 212.172.0.0/16 maxlen: 24 2001:4090::/32 maxlen: 48 2001:4091::/32 maxlen: 48 2a01:5c8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e4:a6:22:bc:03:a1:d7:db:45:82:b8:31:f6:58:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413 Validity Not Before: Dec 18 09:57:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8b1f926e0274299341d66c9e5ab55546853dc997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bc:ae:fb:5f:e4:78:1d:85:99:6d:3c:80:47: 8e:3e:a1:86:79:70:e7:d4:04:a5:6b:37:38:5a:c1: 00:91:0e:be:da:a3:90:60:59:9e:65:78:d0:04:9c: f9:dc:be:00:b3:c8:31:92:28:83:a9:cb:54:4a:24: ea:2d:31:0d:f8:e7:a7:74:90:57:c3:5b:10:0c:1f: 57:b7:d9:7a:ed:21:05:b5:72:79:b4:33:4f:da:2a: d6:26:6e:23:99:38:c6:e5:12:e7:47:54:ad:33:91: 22:fd:3f:a1:57:5d:3a:39:01:bf:c3:b5:ac:48:7e: 1f:14:e0:bf:41:17:5c:53:67:00:31:1d:c0:13:49: dc:44:dd:56:35:e7:8f:ed:91:1d:61:c7:7b:d0:5a: ad:a7:22:3c:47:42:82:e2:3d:a1:ae:ca:7c:af:00: 9e:13:22:74:cd:b2:4c:c5:35:8b:75:47:18:3d:0a: 02:63:92:0a:af:c7:b2:81:b5:f9:0d:78:0a:5d:41: 5c:79:45:59:c1:ea:30:90:a9:dd:54:41:d8:26:3d: 82:ab:4b:d7:ce:91:cc:f0:3b:17:42:d9:f2:03:83: 68:f7:b7:c6:be:0c:ce:dd:0c:97:2b:67:c9:a1:9e: 8b:fd:78:b4:08:9f:6b:c8:3e:bb:34:81:ec:1f:10: 9f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1F:92:6E:02:74:29:93:41:D6:6C:9E:5A:B5:55:46:85:3D:C9:97 X509v3 Authority Key Identifier: keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/ix-SbgJ0KZNB1myeWrVVRoU9yZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.26.0.0/15 62.144.0.0/16 62.246.0.0/16 79.140.176.0/20 80.83.96.0/20 185.210.52.0/23 194.112.16.0/20 195.52.0.0/16 195.78.160.0/19 195.185.0.0/16 212.172.0.0/16 IPv6: 2001:4090::/31 2a01:5c8::/32 Signature Algorithm: sha256WithRSAEncryption 4e:ed:e1:74:cf:04:ff:79:3b:55:86:4f:ad:f5:c1:31:56:73: 53:25:3b:17:c3:99:a9:d8:d9:92:58:18:44:4e:b2:2c:db:81: 94:47:ef:9e:89:c3:df:d3:e6:6e:27:5f:97:f8:69:2f:1c:9e: 13:c9:80:dc:a6:47:9b:08:5f:fb:ba:d6:42:bc:96:74:62:81: 98:b3:4b:66:9c:71:f0:04:dd:3e:74:d7:51:ec:92:ed:51:59: 53:10:a0:d2:97:ac:a0:f1:54:9e:d2:39:1d:37:42:95:60:1d: 9e:56:fc:15:67:14:71:45:70:5a:b0:f8:52:0e:56:42:06:7e: 96:6d:0f:02:e2:79:77:e4:02:c6:48:fb:8a:50:58:60:17:e5: 62:e1:c7:0a:fa:22:06:fe:a4:e1:48:df:08:fd:a0:96:30:67: a3:d1:6c:1e:78:46:43:d6:8b:1a:32:d3:8d:7c:dd:ab:83:b5: 50:3f:94:ab:94:d3:59:fa:02:62:45:52:7a:88:a1:3a:6d:2c: a7:84:74:ed:70:16:ba:07:bd:83:64:9a:ac:44:e8:1c:74:33: ef:e3:19:04:ed:96:b4:ff:84:36:62:10:2c:d5:77:d0:47:cb: 85:d7:a4:42:22:0d:a0:75:09:54:e4:83:60:31:a4:60:8a:de: 57:b8:0d:9d -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZsw5KYivAOh19tFgrgx9ljRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMWQ3MmFjMDgyNmUwOWJjMGQxN2RkZWU4YmE4N2Q5NzMx ZGQ0MTMwHhcNMjUxMjE4MDk1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjFmOTI2ZTAyNzQyOTkzNDFkNjZjOWU1YWI1NTU0Njg1M2RjOTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbyu+1/keB2FmW08gEeOPqGGeXDn 1ASlazc4WsEAkQ6+2qOQYFmeZXjQBJz53L4As8gxkiiDqctUSiTqLTEN+OendJBX w1sQDB9Xt9l67SEFtXJ5tDNP2irWJm4jmTjG5RLnR1StM5Ei/T+hV106OQG/w7Ws SH4fFOC/QRdcU2cAMR3AE0ncRN1WNeeP7ZEdYcd70FqtpyI8R0KC4j2hrsp8rwCe EyJ0zbJMxTWLdUcYPQoCY5IKr8eygbX5DXgKXUFceUVZweowkKndVEHYJj2Cq0vX zpHM8DsXQtnyA4No97fGvgzO3QyXK2fJoZ6L/Xi0CJ9ryD67NIHsHxCfqQIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFIsfkm4CdCmTQdZsnlq1VUaFPcmXMB8GA1UdIwQY MBaAFAodcqwIJuCbwNF93ui6h9lzHdQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTct OTU4MTEyYTQ4OWE0LzEvaXgtU2JnSjBLWk5CMW15ZVdyVlZSb1U5eVpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTctOTU4MTEyYTQ4OWE0 LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBCBAIAATA8AwMBPhoDAwA+ kAMDAD72AwQET4ywAwQEUFNgAwQBudI0AwQEwnAQAwMAwzQDBAXDTqADAwDDuQMD ANSsMBQEAgACMA4DBQEgAUCQAwUAKgEFyDANBgkqhkiG9w0BAQsFAAOCAQEATu3h dM8E/3k7VYZPrfXBMVZzUyU7F8OZqdjZklgYRE6yLNuBlEfvnonD39Pmbidfl/hp LxyeE8mA3KZHmwhf+7rWQryWdGKBmLNLZpxx8ATdPnTXUeyS7VFZUxCg0pesoPFU ntI5HTdClWAdnlb8FWcUcUVwWrD4Ug5WQgZ+lm0PAuJ5d+QCxkj7ilBYYBflYuHH CvoiBv6k4UjfCP2gljBno9FsHnhGQ9aLGjLTjXzdq4O1UD+Uq5TTWfoCYkVSeoih Om0sp4R07XAWuge9g2SarEToHHQz7+MZBO2WtP+ENmIQLNV30EfLhdekQiINoHUJ VOSDYDGkYIreV7gNnQ== -----END CERTIFICATE-----Generated at Sat Dec 20 05:42:48 2025 by rpki-client