This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SmgmEcIeMynnDGceAZo0suh0afQ.roa File: SmgmEcIeMynnDGceAZo0suh0afQ.roa (raw, json) Hash identifier: p1HjY9cesF1QAazI+ybUlHFr2oLoibfuLgBQosDT4xI= Subject key identifier: 4A:68:26:11:C2:1E:33:29:E7:0C:67:1E:01:9A:34:B2:E8:74:69:F4 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6CA4807BF79D54AD0F0D83FF7B78F Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SmgmEcIeMynnDGceAZo0suh0afQ.roa Signing time: Fri 02 Jan 2026 12:20:18 +0000 ROA not before: Fri 02 Jan 2026 12:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48646 IP address blocks: 2a0c:9a40:808a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ca:48:07:bf:79:d5:4a:d0:f0:d8:3f:f7:b7:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a682611c21e3329e70c671e019a34b2e87469f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5e:fb:94:e7:25:71:e1:34:c6:76:c4:58:6a: e3:d5:93:98:29:9b:ea:e1:f2:30:f2:7c:05:fb:71: ae:cf:12:c2:33:0a:75:5c:19:e3:2b:5d:2e:05:8e: 29:92:96:c7:e6:e3:3d:2f:56:1d:27:54:13:c6:89: 64:bf:36:72:50:d8:f9:11:76:37:c1:84:85:dc:ce: 0b:30:bd:4e:01:ea:38:65:b2:9b:ec:4e:cb:18:1e: 9b:76:eb:3b:94:12:4a:d0:aa:23:34:8a:20:31:c0: b1:db:ec:1c:1c:50:79:41:45:98:b8:7a:8f:80:6c: 14:6a:40:75:23:f6:cc:88:d2:85:be:7c:92:cc:dd: 6f:b4:75:16:04:0d:da:33:57:03:c9:12:91:a0:64: 75:52:a9:49:50:37:fa:9f:5f:34:8a:1c:ad:09:67: dd:98:f2:11:3a:45:38:84:14:42:1e:69:0a:36:b2: 4f:7d:ac:06:3a:cd:69:5a:37:4f:d9:15:94:96:69: 39:f5:cd:9c:dd:40:71:0e:4e:75:e2:05:3c:95:d4: eb:60:b9:0f:51:2b:c2:61:64:ec:7d:ba:10:45:c0: 78:ef:bb:88:c3:12:35:db:e2:eb:03:0d:b9:e8:31: 5e:94:7f:a0:45:36:e5:4b:f3:97:0d:31:be:46:80: 4d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:68:26:11:C2:1E:33:29:E7:0C:67:1E:01:9A:34:B2:E8:74:69:F4 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SmgmEcIeMynnDGceAZo0suh0afQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:808a::/48 Signature Algorithm: sha256WithRSAEncryption c5:b3:37:6d:67:02:ea:44:3b:a7:9b:87:6e:ef:5a:7f:4f:85: f6:b6:95:2b:96:f5:19:d6:18:78:c6:aa:fa:74:e1:d3:96:d2: b3:09:b0:34:49:44:3e:50:56:6b:58:8b:6f:74:55:f8:b8:42: 21:5f:8e:cd:b3:fc:9a:75:1e:45:fa:59:be:0a:8b:a4:31:8c: 36:67:a7:15:57:f1:88:40:3f:3c:d5:a7:f3:35:c2:06:83:f2: 37:ba:cd:3b:b1:c9:54:5d:e7:84:98:8f:e9:ea:f0:c6:e9:71: 33:47:f8:7c:80:48:be:db:b2:03:95:04:18:c2:41:59:52:d1: 7b:1f:f2:7c:f1:10:ca:f3:0d:02:d4:6c:26:ab:04:cf:72:fa: 73:65:4b:ba:c7:ec:d3:a5:76:1d:cd:72:0e:14:e3:fa:66:95: 28:ea:8b:a0:5b:3c:e2:39:39:86:c3:1d:25:21:7a:a7:22:0c: 83:37:1c:2c:90:da:c0:ff:09:f0:30:d6:5a:11:f8:52:4f:cc: 29:e6:fd:ce:53:f6:45:b0:b8:a9:c3:b9:cb:5f:dd:76:be:6a: 91:bb:96:ec:8a:77:a5:c2:08:85:e7:57:c9:a4:2f:58:c3:2a: e8:96:75:74:e6:d6:a2:b6:d4:54:ab:bc:70:20:c8:c6:40:67: 88:0e:1d:2c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pspIB7951UrQ8Ng/97ePMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTY4MjYxMWMyMWUzMzI5ZTcwYzY3MWUwMTlhMzRiMmU4NzQ2OWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx177lOclceE0xnbEWGrj1ZOYKZvq 4fIw8nwF+3GuzxLCMwp1XBnjK10uBY4pkpbH5uM9L1YdJ1QTxolkvzZyUNj5EXY3 wYSF3M4LML1OAeo4ZbKb7E7LGB6bdus7lBJK0KojNIogMcCx2+wcHFB5QUWYuHqP gGwUakB1I/bMiNKFvnySzN1vtHUWBA3aM1cDyRKRoGR1UqlJUDf6n180ihytCWfd mPIROkU4hBRCHmkKNrJPfawGOs1pWjdP2RWUlmk59c2c3UBxDk514gU8ldTrYLkP USvCYWTsfboQRcB477uIwxI12+LrAw256DFelH+gRTblS/OXDTG+RoBNvwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEpoJhHCHjMp5wxnHgGaNLLodGn0MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvU21nbUVjSWVNeW5uREdjZUFabzBzdWgwYWZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQICK MA0GCSqGSIb3DQEBCwUAA4IBAQDFszdtZwLqRDunm4du71p/T4X2tpUrlvUZ1hh4 xqr6dOHTltKzCbA0SUQ+UFZrWItvdFX4uEIhX47Ns/yadR5F+lm+CoukMYw2Z6cV V/GIQD881afzNcIGg/I3us07sclUXeeEmI/p6vDG6XEzR/h8gEi+27IDlQQYwkFZ UtF7H/J88RDK8w0C1GwmqwTPcvpzZUu6x+zTpXYdzXIOFOP6ZpUo6ougWzziOTmG wx0lIXqnIgyDNxwskNrA/wnwMNZaEfhST8wp5v3OU/ZFsLipw7nLX912vmqRu5bs inelwgiF51fJpC9YwyrolnV05taittRUq7xwIMjGQGeIDh0s -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:36 2026 by rpki-client