This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/StgAPdXsLWXdyjwd0NgXnOpHgDM.roa File: StgAPdXsLWXdyjwd0NgXnOpHgDM.roa (raw, json) Hash identifier: CqI61wUJN0vtPYYBH79k6FeQKUdhcEdxzCN0wPzCxIY= Subject key identifier: 4A:D8:00:3D:D5:EC:2D:65:DD:CA:3C:1D:D0:D8:17:9C:EA:47:80:33 Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9 Certificate serial: 019B7E38F67F5203F7950A806C134832C079 Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/StgAPdXsLWXdyjwd0NgXnOpHgDM.roa Signing time: Fri 02 Jan 2026 10:20:20 +0000 ROA not before: Fri 02 Jan 2026 10:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57494 IP address blocks: 213.171.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 04:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f6:7f:52:03:f7:95:0a:80:6c:13:48:32:c0:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9 Validity Not Before: Jan 2 10:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ad8003dd5ec2d65ddca3c1dd0d8179cea478033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d8:6f:99:70:ee:cc:d1:50:fe:e1:be:4f:86: 25:a1:a1:7c:bf:d0:90:7b:67:4d:36:ca:6e:11:af: dd:54:77:12:1d:d1:a4:fa:c3:e9:e8:ee:64:67:19: 46:f6:f0:db:e3:f9:4f:71:57:d6:18:df:3b:00:77: fb:e9:94:59:3e:02:58:f3:c1:0f:5d:54:7c:bb:bc: f6:2e:d7:da:93:d5:ad:cf:e4:24:7e:48:5c:14:e2: 2a:00:fe:6e:22:2a:db:d9:d9:0d:31:03:7d:3c:7d: f4:b5:c0:1b:26:cd:f9:0f:95:f7:71:3a:75:7d:a0: 1f:ac:6f:96:31:96:11:eb:ef:47:4a:37:ca:53:52: cd:96:d0:cd:7e:1c:2f:56:33:36:66:1e:83:6c:b5: 9d:40:cc:dc:ae:a7:e6:a1:d4:6e:21:2a:39:31:c1: 1d:f3:3d:f1:9e:54:0a:c9:af:46:d2:62:41:bd:18: 89:82:71:ab:ba:da:2e:11:ab:6d:87:ad:ea:32:5b: e6:2e:ae:c0:c0:f9:19:5d:a2:2c:fe:3c:01:12:97: 8b:18:9c:b0:76:fc:93:8b:46:91:f2:31:58:db:5e: ea:26:92:6b:dc:98:bf:c0:81:d7:83:6a:21:60:0e: 0b:3c:05:69:04:fa:51:49:df:c9:6a:bf:4d:ad:64: 99:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D8:00:3D:D5:EC:2D:65:DD:CA:3C:1D:D0:D8:17:9C:EA:47:80:33 X509v3 Authority Key Identifier: keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/StgAPdXsLWXdyjwd0NgXnOpHgDM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.171.15.0/24 Signature Algorithm: sha256WithRSAEncryption 01:7d:a0:12:77:04:72:00:9c:5c:00:65:f1:5d:d1:b2:4c:19: d5:9b:58:0a:81:ca:a0:42:9a:c7:75:88:41:0a:fd:4b:8f:df: 89:11:ba:50:70:7d:fe:26:b2:fc:ff:e1:f3:b9:8f:02:da:ce: ba:ff:28:fd:f1:50:a6:d0:a6:e7:96:22:2a:a5:92:c2:45:c4: 95:4c:d5:b2:29:9b:80:66:54:65:af:ac:6e:23:5e:b1:e9:0e: fc:40:55:2b:ef:85:a4:40:f7:31:b7:93:bb:be:d9:70:7c:42: a4:47:cd:7b:43:0e:3e:99:de:80:01:80:78:9d:1e:1e:69:9e: e5:8e:0b:42:bc:b5:2c:2e:df:f2:16:ad:d3:25:28:ce:fa:73: 31:57:ac:9c:f8:e2:c5:c6:ba:0e:5e:20:9d:e9:68:0d:98:68: 14:ab:ff:54:48:80:3f:ec:e3:cd:00:18:b7:28:75:2f:14:fa: 04:b8:02:79:46:56:07:23:f5:71:8a:73:a1:d7:6d:84:c6:c4: 1f:f5:ff:ca:2b:6f:5f:5a:e9:e3:3d:87:b1:c4:f2:b0:b9:3d: c4:6b:7c:80:77:b6:e5:1a:7f:8b:9b:4d:a6:4b:a1:9d:75:f5: 51:f7:30:e8:6d:40:ad:4d:2f:d5:4e:0b:25:d3:e0:b5:00:23: 13:e6:a3:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OPZ/UgP3lQqAbBNIMsB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ODg2MDA3ZGExNzMwYjA3NzBkODYwNGRiNzNkMTJmZDI2 NGYzZjkwHhcNMjYwMTAyMTAyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWQ4MDAzZGQ1ZWMyZDY1ZGRjYTNjMWRkMGQ4MTc5Y2VhNDc4MDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1thvmXDuzNFQ/uG+T4YloaF8v9CQ e2dNNspuEa/dVHcSHdGk+sPp6O5kZxlG9vDb4/lPcVfWGN87AHf76ZRZPgJY88EP XVR8u7z2Ltfak9Wtz+QkfkhcFOIqAP5uIirb2dkNMQN9PH30tcAbJs35D5X3cTp1 faAfrG+WMZYR6+9HSjfKU1LNltDNfhwvVjM2Zh6DbLWdQMzcrqfmodRuISo5McEd 8z3xnlQKya9G0mJBvRiJgnGrutouEatth63qMlvmLq7AwPkZXaIs/jwBEpeLGJyw dvyTi0aR8jFY217qJpJr3Ji/wIHXg2ohYA4LPAVpBPpRSd/Jar9NrWSZwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFErYAD3V7C1l3co8HdDYF5zqR4AzMB8GA1UdIwQY MBaAFBiIYAfaFzCwdw2GBNtz0S/SZPP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTMzMjgtOTI0NS00MDNiLThhNGEt MTY5YzgzNmJkNmIwLzEvU3RnQVBkWHNMV1hkeWp3ZDBOZ1huT3BIZ0RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yOTMzMjgtOTI0NS00MDNiLThhNGEtMTY5YzgzNmJkNmIw LzEvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1asPMA0G CSqGSIb3DQEBCwUAA4IBAQABfaASdwRyAJxcAGXxXdGyTBnVm1gKgcqgQprHdYhB Cv1Lj9+JEbpQcH3+JrL8/+HzuY8C2s66/yj98VCm0KbnliIqpZLCRcSVTNWyKZuA ZlRlr6xuI16x6Q78QFUr74WkQPcxt5O7vtlwfEKkR817Qw4+md6AAYB4nR4eaZ7l jgtCvLUsLt/yFq3TJSjO+nMxV6yc+OLFxroOXiCd6WgNmGgUq/9USIA/7OPNABi3 KHUvFPoEuAJ5RlYHI/VxinOh122ExsQf9f/KK29fWunjPYexxPKwuT3Ea3yAd7bl Gn+Lm02mS6GddfVR9zDobUCtTS/VTgsl0+C1ACMT5qNB -----END CERTIFICATE-----Generated at Mon Jan 12 15:11:12 2026 by rpki-client