This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/SmLI4SmTecXNrl07lfbd5xd21lo.roa File: SmLI4SmTecXNrl07lfbd5xd21lo.roa (raw, json) Hash identifier: vFi3IJw/jL8mIUo7W9BhOmCtQalvVRWxm4SWl+O6Y4o= Subject key identifier: 4A:62:C8:E1:29:93:79:C5:CD:AE:5D:3B:95:F6:DD:E7:17:76:D6:5A Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Certificate serial: 019BBBBB178F5CE7DF2BAFFB749D5BCE7ED2 Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/SmLI4SmTecXNrl07lfbd5xd21lo.roa Signing time: Wed 14 Jan 2026 08:59:19 +0000 ROA not before: Wed 14 Jan 2026 08:59:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206150 IP address blocks: 158.173.48.0/24 maxlen: 24 158.173.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 08:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:bb:17:8f:5c:e7:df:2b:af:fb:74:9d:5b:ce:7e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Validity Not Before: Jan 14 08:59:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a62c8e1299379c5cdae5d3b95f6dde71776d65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:44:2f:8e:43:84:d9:b6:1f:6f:db:5c:2e: 32:68:f9:45:c5:d0:09:d3:51:50:04:4d:e9:88:28: 80:9a:18:92:8a:a1:a0:fc:e5:47:d2:20:1d:27:12: 51:7e:a4:f5:42:75:25:6f:f1:13:6c:23:b0:59:f3: 8d:98:b8:bf:9a:2c:b4:24:61:68:cc:19:fb:87:89: 00:3a:e8:89:af:74:4e:ca:91:97:d6:8d:3c:a7:d0: 70:96:72:b3:77:6e:78:a4:33:70:0e:40:24:8f:d4: e9:9f:cf:3c:7e:c0:b9:ef:31:63:27:80:0b:54:72: a3:98:78:b8:d7:f4:23:ab:ff:f3:4b:57:67:d5:83: 19:0f:fd:c4:a3:8f:9c:3a:08:a9:7c:a5:21:44:13: b6:01:06:ae:95:78:8c:0f:23:32:ca:8f:ff:b1:31: fc:45:d7:9a:7e:39:36:a5:a5:bd:e0:40:f8:b5:75: 8d:c4:75:c7:62:9e:34:7e:3d:0f:97:84:0d:6c:50: 4d:45:81:43:81:9e:c4:58:e8:ed:37:53:2e:32:a3: 06:45:5f:ca:f8:3b:64:5c:ae:bf:ce:91:a4:61:59: d8:e6:6f:12:ea:9d:bf:d8:4c:22:5a:c1:36:76:8d: ef:fb:d5:dc:57:12:b7:64:fc:05:ca:85:ad:90:b6: e1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:62:C8:E1:29:93:79:C5:CD:AE:5D:3B:95:F6:DD:E7:17:76:D6:5A X509v3 Authority Key Identifier: keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/SmLI4SmTecXNrl07lfbd5xd21lo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.48.0/24 158.173.50.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:f7:9a:6a:d0:ee:01:65:57:05:f5:5d:b3:fe:64:a0:18:a8: 50:a5:a1:3b:05:1c:22:6a:19:29:02:cc:2f:13:e5:6a:fc:e6: bd:ff:e6:a0:ff:56:09:34:39:1a:3a:0f:ca:aa:00:c7:b1:33: 91:4f:86:47:94:9d:b2:c5:6f:c9:b7:c4:97:4d:18:90:44:fe: 49:75:36:2a:26:41:9f:3f:13:19:c1:ad:7c:dc:bf:19:68:71: 65:cd:da:1b:f3:47:ef:7a:d7:74:41:64:49:ce:c7:13:21:1b: 4e:40:64:07:d5:ef:b7:70:29:56:3a:a8:e6:0f:d1:bb:47:fd: 46:e5:07:26:bd:a1:a5:e9:1b:81:d5:6e:d8:7a:86:ec:27:d1: 70:7a:b4:fd:d0:fb:95:3b:25:d8:fc:b9:13:8b:9d:b4:6a:f4: c6:b2:fd:a8:9c:57:13:31:a4:54:7e:0e:1b:7d:32:2e:e1:97: 88:4e:3e:ce:b9:4c:36:52:33:f5:00:06:7e:34:a6:25:66:b6: 52:44:2a:70:43:d5:54:16:73:58:6e:00:fe:1b:22:e2:30:3f: 81:5c:77:18:6a:b8:2d:0d:3a:9c:3f:7c:79:7a:fd:54:45:94: f1:56:cc:69:bf:bb:09:cc:4d:c2:82:2a:0b:91:e1:66:80:d2: ec:9a:11:b5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZu7uxePXOffK6/7dJ1bzn7SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh NDA4MjMwHhcNMjYwMTE0MDg1OTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTYyYzhlMTI5OTM3OWM1Y2RhZTVkM2I5NWY2ZGRlNzE3NzZkNjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr1EL45DhNm2H2/bXC4yaPlFxdAJ 01FQBE3piCiAmhiSiqGg/OVH0iAdJxJRfqT1QnUlb/ETbCOwWfONmLi/miy0JGFo zBn7h4kAOuiJr3ROypGX1o08p9BwlnKzd254pDNwDkAkj9Tpn888fsC57zFjJ4AL VHKjmHi41/Qjq//zS1dn1YMZD/3Eo4+cOgipfKUhRBO2AQaulXiMDyMyyo//sTH8 Rdeafjk2paW94ED4tXWNxHXHYp40fj0Pl4QNbFBNRYFDgZ7EWOjtN1MuMqMGRV/K +DtkXK6/zpGkYVnY5m8S6p2/2EwiWsE2do3v+9XcVxK3ZPwFyoWtkLbhnQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEpiyOEpk3nFza5dO5X23ecXdtZaMB8GA1UdIwQY MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt ZDJjZDI2YjY5ZGYxLzEvU21MSTRTbVRlY1hOcmwwN2xmYmQ1eGQyMWxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnq0wAwQA nq0yMA0GCSqGSIb3DQEBCwUAA4IBAQAu95pq0O4BZVcF9V2z/mSgGKhQpaE7BRwi ahkpAswvE+Vq/Oa9/+ag/1YJNDkaOg/KqgDHsTORT4ZHlJ2yxW/Jt8SXTRiQRP5J dTYqJkGfPxMZwa183L8ZaHFlzdob80fvetd0QWRJzscTIRtOQGQH1e+3cClWOqjm D9G7R/1G5QcmvaGl6RuB1W7YeobsJ9FwerT90PuVOyXY/LkTi520avTGsv2onFcT MaRUfg4bfTIu4ZeITj7OuUw2UjP1AAZ+NKYlZrZSRCpwQ9VUFnNYbgD+GyLiMD+B XHcYargtDTqcP3x5ev1URZTxVsxpv7sJzE3CgioLkeFmgNLsmhG1 -----END CERTIFICATE-----Generated at Fri Jan 23 13:57:22 2026 by rpki-client