This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/SyWTiReTZTnBDg5JyysBSj2Ylo4.roa File: SyWTiReTZTnBDg5JyysBSj2Ylo4.roa (raw, json) Hash identifier: fZ2UZHiHpOuYHZzSoYWZDivGjx4cM7k5nd9px5ySpG0= Subject key identifier: 4B:25:93:89:17:93:65:39:C1:0E:0E:49:CB:2B:01:4A:3D:98:96:8E Certificate issuer: /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7 Certificate serial: 019B7EA44115B452DC1A99D5CD1FEBC6414B Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/SyWTiReTZTnBDg5JyysBSj2Ylo4.roa Signing time: Fri 02 Jan 2026 12:17:32 +0000 ROA not before: Fri 02 Jan 2026 12:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201225 IP address blocks: 185.236.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 12:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:41:15:b4:52:dc:1a:99:d5:cd:1f:eb:c6:41:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7 Validity Not Before: Jan 2 12:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b25938917936539c10e0e49cb2b014a3d98968e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:35:48:1b:6a:9c:ad:6e:28:6f:b4:43:78:d8: 55:c8:3a:89:cd:5d:0c:9a:d2:ef:1f:10:c4:ba:0f: e3:8f:a6:ae:c2:9b:6a:cf:cc:b3:dd:23:7f:92:7a: d8:4b:62:21:3f:bd:8b:a4:53:37:d8:88:60:7a:66: 22:b2:42:e1:7c:dd:91:24:62:ff:cc:36:95:21:f1: c0:d9:9b:8b:48:f6:2d:e4:2a:be:d2:26:f8:42:36: 8a:32:70:7b:54:16:63:6b:86:d3:37:b0:60:b0:1a: fd:9d:76:50:0d:c2:5f:bf:49:5f:66:d0:28:1c:af: b9:23:c9:03:95:93:b9:4a:0e:f1:42:9c:4d:41:33: 8c:35:e5:5b:9b:56:9f:0e:d8:22:0c:63:cb:24:8d: f7:8f:d1:cf:ec:5d:4e:fb:80:12:fb:2b:c1:0d:13: 2b:4a:f2:42:f5:89:f9:61:08:ae:00:35:6a:3b:4d: 39:30:06:ce:04:0a:c1:29:ad:30:9c:46:9a:7c:40: d5:ca:66:6e:58:cc:7b:8e:e7:5d:50:a4:90:7d:ed: 4a:e1:ab:82:ea:6f:67:cc:86:98:b6:a0:a9:46:9e: 02:91:55:82:8f:20:e9:da:ad:c8:97:3f:d6:be:dd: e4:60:4d:a0:ed:ad:b9:3d:d6:43:77:6e:46:eb:7d: 72:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:25:93:89:17:93:65:39:C1:0E:0E:49:CB:2B:01:4A:3D:98:96:8E X509v3 Authority Key Identifier: keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/SyWTiReTZTnBDg5JyysBSj2Ylo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.180.0/24 Signature Algorithm: sha256WithRSAEncryption 47:54:89:7f:8d:7d:a9:45:7a:09:16:1d:b6:cf:b0:bc:85:d4: be:b5:9f:40:22:3e:4b:e9:f2:f0:39:49:e6:dd:4a:2c:d6:2a: e4:89:91:e7:b2:7a:a0:a6:77:1c:a5:91:a0:1c:9f:d5:d1:33: b2:13:e9:ec:23:09:87:4e:a8:fd:8c:19:a8:72:a1:6a:67:e4: eb:45:71:cd:59:b8:77:d1:27:0e:38:50:21:aa:b5:54:43:80: fe:5c:b7:15:1d:16:f0:4e:d9:78:10:eb:87:94:64:cc:76:cb: 3b:31:39:16:5a:9f:33:65:8e:5e:46:19:44:04:41:ab:bc:2c: ae:d3:6e:25:32:8b:e5:0a:46:37:22:d4:83:6c:70:16:66:0a: 0e:1f:e7:d8:62:15:0b:e6:a2:09:9c:58:02:e4:4f:f4:dc:9f: ce:29:df:73:cc:44:12:9a:24:49:ea:1c:02:2d:4b:2a:7d:d7: c6:57:5c:30:51:ab:76:8b:bb:77:15:0b:5c:a7:ca:ad:12:43: 73:c0:db:0b:0a:9d:fa:f9:d6:1a:d8:8e:84:29:1c:a2:ae:21: 2d:f6:39:db:25:4f:85:2e:3f:60:61:3c:cb:43:dc:b5:ed:6c: ad:99:bc:c7:92:09:a2:40:00:23:da:30:34:be:9a:53:32:67: 12:d0:6c:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pEEVtFLcGpnVzR/rxkFLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOWVkOTkxZWU2YmM0YmI0OGE4Yjc1MDExZDA0ODE5MTdl MGYzZjcwHhcNMjYwMTAyMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjI1OTM4OTE3OTM2NTM5YzEwZTBlNDljYjJiMDE0YTNkOTg5NjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTVIG2qcrW4ob7RDeNhVyDqJzV0M mtLvHxDEug/jj6auwptqz8yz3SN/knrYS2IhP72LpFM32IhgemYiskLhfN2RJGL/ zDaVIfHA2ZuLSPYt5Cq+0ib4QjaKMnB7VBZja4bTN7BgsBr9nXZQDcJfv0lfZtAo HK+5I8kDlZO5Sg7xQpxNQTOMNeVbm1afDtgiDGPLJI33j9HP7F1O+4AS+yvBDRMr SvJC9Yn5YQiuADVqO005MAbOBArBKa0wnEaafEDVymZuWMx7juddUKSQfe1K4auC 6m9nzIaYtqCpRp4CkVWCjyDp2q3Ilz/Wvt3kYE2g7a25PdZDd25G631yeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEslk4kXk2U5wQ4OScsrAUo9mJaOMB8GA1UdIwQY MBaAFF6e2ZHua8S7SKi3UBHQSBkX4PP3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHA3WmtlNXJ4THRJcUxkUUVkQklHUmZnOF9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OWU0MjYtOTBjYy00NTg2LTkwZjQt NmNkYmMyMTIyNzQ5LzEvU3lXVGlSZVRaVG5CRGc1Snl5c0JTajJZbG80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi80OWU0MjYtOTBjYy00NTg2LTkwZjQtNmNkYmMyMTIyNzQ5 LzEvWHA3WmtlNXJ4THRJcUxkUUVkQklHUmZnOF9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuey0MA0G CSqGSIb3DQEBCwUAA4IBAQBHVIl/jX2pRXoJFh22z7C8hdS+tZ9AIj5L6fLwOUnm 3Uos1irkiZHnsnqgpnccpZGgHJ/V0TOyE+nsIwmHTqj9jBmocqFqZ+TrRXHNWbh3 0ScOOFAhqrVUQ4D+XLcVHRbwTtl4EOuHlGTMdss7MTkWWp8zZY5eRhlEBEGrvCyu 024lMovlCkY3ItSDbHAWZgoOH+fYYhUL5qIJnFgC5E/03J/OKd9zzEQSmiRJ6hwC LUsqfdfGV1wwUat2i7t3FQtcp8qtEkNzwNsLCp36+dYa2I6EKRyiriEt9jnbJU+F Lj9gYTzLQ9y17WytmbzHkgmiQAAj2jA0vppTMmcS0Gz6 -----END CERTIFICATE-----Generated at Sun Jan 11 20:35:08 2026 by rpki-client