This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/SSmgAsy_v63G0x0CvniY0MZUVuY.roa File: SSmgAsy_v63G0x0CvniY0MZUVuY.roa (raw, json) Hash identifier: yFieREh4VfCuVFIsv/snCcSsUAs9Ly0mjz5HTDRs6PQ= Subject key identifier: 49:29:A0:02:CC:BF:BF:AD:C6:D3:1D:02:BE:78:98:D0:C6:54:56:E6 Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019B7F1436F2DF8A7DB96284804A39560191 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/SSmgAsy_v63G0x0CvniY0MZUVuY.roa Signing time: Fri 02 Jan 2026 14:19:49 +0000 ROA not before: Fri 02 Jan 2026 14:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209630 IP address blocks: 91.92.41.0/24 maxlen: 24 93.152.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:36:f2:df:8a:7d:b9:62:84:80:4a:39:56:01:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Jan 2 14:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4929a002ccbfbfadc6d31d02be7898d0c65456e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:14:ed:0a:91:3f:56:29:8e:13:18:46:68:d4: 19:91:c3:6d:48:43:1a:30:17:15:44:9d:15:43:46: e8:9b:5f:03:43:bc:39:a2:4e:04:a2:da:14:34:e7: 17:cc:7c:ef:79:20:66:9a:b1:b2:d8:8d:2d:cb:80: b2:50:ed:01:69:f7:a4:26:85:ef:12:94:79:3b:d7: d6:5a:ab:33:c9:44:d0:44:ba:ce:1c:a8:67:40:54: a0:6a:a6:21:f7:4f:fe:64:a8:69:50:1d:10:5d:ad: 78:a9:78:9d:5d:d2:d9:e6:7d:f4:2f:50:8a:e7:c2: 47:59:f2:3a:d7:84:c3:df:28:f5:7d:5e:1c:27:9f: ea:2a:62:17:2b:00:48:fe:30:35:95:67:a7:b7:f4: 37:7f:bc:b1:a1:22:26:92:75:e5:05:7b:ce:c6:41: 53:fb:70:dd:99:2b:98:c0:f0:0b:bb:09:30:67:2a: 72:27:b0:b7:2f:64:6a:d9:ac:d8:d5:1e:6d:85:ef: 37:18:bf:31:c2:0c:af:dd:d8:c6:43:e1:f6:b0:7d: b3:81:ca:8b:53:68:f7:14:ee:e1:89:83:f5:99:ec: b8:ed:a4:47:15:31:c4:d9:d8:26:92:5b:51:13:9b: e6:75:6f:5c:78:92:e8:df:0b:5f:ab:0a:7d:b6:a5: 8c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:29:A0:02:CC:BF:BF:AD:C6:D3:1D:02:BE:78:98:D0:C6:54:56:E6 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/SSmgAsy_v63G0x0CvniY0MZUVuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.92.41.0/24 93.152.233.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:ec:66:a9:8b:47:7c:38:8c:f1:d8:c9:66:60:fd:4a:6a:a3: 5b:41:57:14:2f:41:41:96:67:2c:b0:03:42:ed:47:d3:f7:9e: 32:34:67:4d:57:2e:c6:a6:31:d4:1b:e8:e8:c0:9f:81:85:23: fc:61:8b:14:46:ac:ca:d8:fb:41:17:40:70:1f:55:42:c0:f0: c7:2d:e0:31:d8:66:27:87:8e:72:6c:33:ad:5f:d5:ac:a9:a3: 6f:a1:f4:4d:55:01:8c:be:0f:b3:31:64:a8:a1:a2:3b:9f:84: 66:49:79:ad:6c:75:c9:b7:70:85:4e:9f:c2:89:1e:48:05:cb: 16:5a:d5:67:db:da:43:19:18:a3:6a:95:0d:03:c0:08:f6:5f: 96:69:62:3d:34:85:9a:dc:9e:be:ee:93:c4:61:24:23:a6:b6: c7:07:eb:ba:17:7a:6d:e8:08:28:8a:34:5e:39:cb:2b:96:18: 10:18:6c:e5:25:98:ee:ef:57:07:0a:49:64:41:81:73:28:60: e0:8a:ea:ac:5c:f8:2c:c5:0c:50:fc:30:79:f6:24:f9:a0:af: d9:52:83:aa:d5:47:74:a9:5b:ce:1a:81:0e:e0:22:20:21:40: a4:3f:89:43:d5:73:36:08:d8:f4:98:63:7d:a6:59:27:e8:13: 26:62:59:d1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FDby34p9uWKEgEo5VgGRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjYwMTAyMTQxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTI5YTAwMmNjYmZiZmFkYzZkMzFkMDJiZTc4OThkMGM2NTQ1NmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RTtCpE/VimOExhGaNQZkcNtSEMa MBcVRJ0VQ0bom18DQ7w5ok4EotoUNOcXzHzveSBmmrGy2I0ty4CyUO0BafekJoXv EpR5O9fWWqszyUTQRLrOHKhnQFSgaqYh90/+ZKhpUB0QXa14qXidXdLZ5n30L1CK 58JHWfI614TD3yj1fV4cJ5/qKmIXKwBI/jA1lWent/Q3f7yxoSImknXlBXvOxkFT +3DdmSuYwPALuwkwZypyJ7C3L2Rq2azY1R5the83GL8xwgyv3djGQ+H2sH2zgcqL U2j3FO7hiYP1mey47aRHFTHE2dgmkltRE5vmdW9ceJLo3wtfqwp9tqWM8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEkpoALMv7+txtMdAr54mNDGVFbmMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvU1NtZ0FzeV92NjNHMHgwQ3ZuaVkwTVpVVnVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW1wpAwQA XZjpMA0GCSqGSIb3DQEBCwUAA4IBAQCe7Gapi0d8OIzx2MlmYP1KaqNbQVcUL0FB lmcssANC7UfT954yNGdNVy7GpjHUG+jowJ+BhSP8YYsURqzK2PtBF0BwH1VCwPDH LeAx2GYnh45ybDOtX9WsqaNvofRNVQGMvg+zMWSooaI7n4RmSXmtbHXJt3CFTp/C iR5IBcsWWtVn29pDGRijapUNA8AI9l+WaWI9NIWa3J6+7pPEYSQjprbHB+u6F3pt 6AgoijReOcsrlhgQGGzlJZju71cHCklkQYFzKGDgiuqsXPgsxQxQ/DB59iT5oK/Z UoOq1Ud0qVvOGoEO4CIgIUCkP4lD1XM2CNj0mGN9plkn6BMmYlnR -----END CERTIFICATE-----Generated at Fri Jan 23 09:23:22 2026 by rpki-client