This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa File: Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa (raw, json) Hash identifier: 8IHzguHfDhF9TOnq36/iF4YhTgkRtVGmhvaPUXHm58k= Subject key identifier: 4B:1F:DC:46:BD:47:2B:FF:72:C5:79:CC:3F:92:FC:52:99:4F:8E:71 Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa Certificate serial: 019B7AC8227DD225D6369FA43BED8C91A6E6 Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa Signing time: Thu 01 Jan 2026 18:18:14 +0000 ROA not before: Thu 01 Jan 2026 18:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45015 IP address blocks: 194.35.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:22:7d:d2:25:d6:36:9f:a4:3b:ed:8c:91:a6:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa Validity Not Before: Jan 1 18:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b1fdc46bd472bff72c579cc3f92fc52994f8e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:6f:11:e3:8f:c8:21:07:1d:a2:56:4c:67: 3f:94:3f:1f:8d:ae:7a:20:75:a7:8f:f1:00:ad:1e: ca:a4:b5:d4:6b:b9:62:c3:4a:9f:02:cb:13:85:9e: 0e:5c:cb:a9:a2:33:10:ee:5d:85:29:27:90:aa:55: 0a:fe:ec:51:7f:e3:e4:f4:7b:33:68:3a:9b:f2:a2: 0b:20:b9:d2:7e:d4:01:ab:b1:ba:ce:0c:7d:a0:9c: 53:d7:df:0c:d1:ab:8d:af:8a:e7:24:0c:5a:e9:6b: 94:37:dd:e5:0a:31:88:20:26:b1:f9:82:a0:47:5b: 01:a7:1c:75:8d:0d:fa:ec:d1:db:b9:69:9d:89:27: e5:34:63:f6:f6:22:c9:37:98:18:f5:99:5f:f9:e3: 22:08:ec:f1:d2:4d:53:18:9e:d1:8c:13:ef:a7:03: a4:92:f1:14:cf:06:54:ae:bf:db:43:41:53:f9:94: 26:59:f3:8c:c4:69:d6:b6:d5:c4:ba:b3:cc:fe:97: 0e:ae:4e:b2:a9:b9:f0:e5:a4:ab:25:51:f0:94:64: c6:13:a4:27:fb:e0:51:fd:9d:83:9b:b8:ed:71:65: c0:ae:60:c4:e9:a1:3c:8f:4c:17:83:c2:01:cd:34: 1e:7a:96:34:19:9f:ee:5e:94:6f:cc:01:15:01:e9: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1F:DC:46:BD:47:2B:FF:72:C5:79:CC:3F:92:FC:52:99:4F:8E:71 X509v3 Authority Key Identifier: keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.176.0/22 Signature Algorithm: sha256WithRSAEncryption 56:de:24:5f:a8:25:42:d5:d2:2e:7b:9b:cc:f1:7c:c4:e8:a0: 28:7f:96:e7:a5:32:58:25:1e:6d:1e:2e:0e:c6:25:17:e3:ee: 0d:30:20:89:14:40:66:2a:48:63:e9:c1:a7:e0:b1:46:75:77: 71:b7:25:f8:54:cf:ae:72:45:5e:ac:fa:2a:4d:a1:6c:ef:25: 3c:12:d7:bd:7b:3a:d2:23:e0:c0:af:03:e2:49:09:fc:87:30: de:06:6c:8a:ec:8e:ef:db:fb:69:27:ab:22:b1:67:81:09:b3: a0:33:cd:b9:62:b4:a0:f6:c5:37:79:76:79:bc:cd:30:38:1f: ff:18:73:22:2f:4f:af:16:7f:30:c9:b4:df:e5:c9:22:a0:fd: b9:f4:e1:01:55:77:69:45:1d:d9:45:01:ae:bd:c2:d5:97:ba: 8f:c4:f2:10:d4:1c:10:40:c8:ab:a7:46:9a:b8:bf:9d:3d:6a: fe:87:ae:e7:01:b2:2e:2f:ec:70:55:69:50:cd:1a:34:f4:9f: 6f:e7:0a:7b:1d:49:f9:9a:bd:cb:34:fa:99:35:91:34:d5:f7: 29:29:78:40:8b:0e:82:e5:de:62:fd:b4:64:a4:72:c7:46:2f: 44:2c:24:ec:94:21:4b:1a:dc:4b:68:ad:4c:21:1e:da:f5:c1: 1b:e7:d4:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yCJ90iXWNp+kO+2MkabmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZGU5N2VlZDRkOGU4NDVlYjlmOGU3ZmYzMjZlM2ZlNTI0 ODAwZmEwHhcNMjYwMTAxMTgxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjFmZGM0NmJkNDcyYmZmNzJjNTc5Y2MzZjkyZmM1Mjk5NGY4ZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsShvEeOPyCEHHaJWTGc/lD8fja56 IHWnj/EArR7KpLXUa7liw0qfAssThZ4OXMupojMQ7l2FKSeQqlUK/uxRf+Pk9Hsz aDqb8qILILnSftQBq7G6zgx9oJxT198M0auNr4rnJAxa6WuUN93lCjGIICax+YKg R1sBpxx1jQ367NHbuWmdiSflNGP29iLJN5gY9Zlf+eMiCOzx0k1TGJ7RjBPvpwOk kvEUzwZUrr/bQ0FT+ZQmWfOMxGnWttXEurPM/pcOrk6yqbnw5aSrJVHwlGTGE6Qn ++BR/Z2Dm7jtcWXArmDE6aE8j0wXg8IBzTQeepY0GZ/uXpRvzAEVAekqTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEsf3Ea9Ryv/csV5zD+S/FKZT45xMB8GA1UdIwQY MBaAFA/el+7U2OhF65+Of/Mm4/5SSAD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEt ZWYwMDE5OGI0MzQyLzEvU3hfY1JyMUhLXzl5eFhuTVA1TDhVcGxQam5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEtZWYwMDE5OGI0MzQy LzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwiOwMA0G CSqGSIb3DQEBCwUAA4IBAQBW3iRfqCVC1dIue5vM8XzE6KAof5bnpTJYJR5tHi4O xiUX4+4NMCCJFEBmKkhj6cGn4LFGdXdxtyX4VM+uckVerPoqTaFs7yU8Ete9ezrS I+DArwPiSQn8hzDeBmyK7I7v2/tpJ6sisWeBCbOgM825YrSg9sU3eXZ5vM0wOB// GHMiL0+vFn8wybTf5ckioP259OEBVXdpRR3ZRQGuvcLVl7qPxPIQ1BwQQMirp0aa uL+dPWr+h67nAbIuL+xwVWlQzRo09J9v5wp7HUn5mr3LNPqZNZE01fcpKXhAiw6C 5d5i/bRkpHLHRi9ELCTslCFLGtxLaK1MIR7a9cEb59SH -----END CERTIFICATE-----Generated at Fri Jan 9 07:53:51 2026 by rpki-client