This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SmlNzI88-0THFyQeWLiGo0efyc8.roa File: SmlNzI88-0THFyQeWLiGo0efyc8.roa (raw, json) Hash identifier: 4ZZ4qfIYunbhlBtsddxTq3X69w3p5sQhd+2D6d3mDcc= Subject key identifier: 4A:69:4D:CC:8F:3C:FB:44:C7:17:24:1E:58:B8:86:A3:47:9F:C9:CF Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019C1E7E7CBF8764374DDAA2E63485D7E8FB Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SmlNzI88-0THFyQeWLiGo0efyc8.roa Signing time: Mon 02 Feb 2026 13:15:31 +0000 ROA not before: Mon 02 Feb 2026 13:15:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44828 IP address blocks: 87.121.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:7e:7c:bf:87:64:37:4d:da:a2:e6:34:85:d7:e8:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Feb 2 13:15:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a694dcc8f3cfb44c717241e58b886a3479fc9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:46:96:24:f4:4d:9c:0e:62:2e:66:68:97:de: 1d:e8:db:4d:c0:70:15:c8:64:e9:93:ab:f0:1f:4f: fe:2c:66:61:95:1d:c9:f4:06:19:59:3c:ca:03:91: 48:64:68:31:94:1e:34:d2:29:5f:c8:59:91:8b:20: fa:9f:2a:2b:25:c4:95:a9:18:39:14:71:93:d4:74: 5e:46:c8:9a:20:fc:79:af:d4:ad:c1:d1:d9:31:84: c1:bc:1b:5f:56:96:df:f1:7a:fb:90:d7:d2:f6:11: 69:f9:68:84:43:17:6a:c4:4b:db:32:9c:49:03:2f: 0e:04:61:56:c9:d8:c0:84:c4:fa:5e:b1:97:9e:71: cc:d3:b1:a8:96:bf:1e:8b:11:b1:ad:8d:31:46:ed: ca:fe:77:0c:83:ca:a5:db:36:9c:11:75:f3:cc:b4: 70:30:53:52:8b:b2:91:2e:19:23:5e:d7:5e:45:74: 90:e9:b2:fc:20:16:02:7a:5c:9c:0a:2c:4c:91:42: 5f:c8:1c:ca:90:84:5f:96:e4:da:8b:e5:f7:57:52: 74:11:04:81:8b:c5:6c:89:f4:9b:91:18:07:55:df: 6d:95:7c:7c:5b:49:a1:13:e8:d1:dc:3a:49:13:6d: b1:fb:ee:88:a6:92:32:87:88:43:0e:b8:e5:fd:8f: ab:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:69:4D:CC:8F:3C:FB:44:C7:17:24:1E:58:B8:86:A3:47:9F:C9:CF X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SmlNzI88-0THFyQeWLiGo0efyc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.133.0/24 Signature Algorithm: sha256WithRSAEncryption 74:1c:80:8d:08:08:ec:12:77:24:f3:64:00:73:27:c5:f0:06: 4b:dc:02:af:d5:f7:a9:55:a5:46:04:88:b2:2f:c8:1c:98:c6: b4:55:d3:c1:f9:42:af:03:8d:8e:4e:3d:63:81:94:91:36:09: da:09:43:88:0b:59:7c:e2:7e:91:3f:b0:dc:89:95:fb:d9:c7: 9e:0e:c1:6c:c9:79:48:b8:b6:23:85:b5:47:f6:61:fc:02:17: 25:71:95:2b:ab:18:07:57:d8:9e:5f:6c:10:a5:58:0f:32:66: da:cf:4b:98:52:9f:8c:96:6f:96:31:91:b3:00:af:fd:61:83: 93:69:2f:d4:75:ae:f8:f0:b8:77:6e:2b:8e:d6:b4:3f:5e:85: 93:3f:91:03:f5:0e:33:22:ce:57:e9:db:4f:61:9b:ea:58:b5: 62:1e:29:fc:e2:7f:96:37:c0:cb:80:20:0b:03:4e:f4:22:5c: bb:b6:8d:fd:22:d4:9c:1d:34:88:6b:c7:60:06:12:b9:dc:16: 2b:a1:b3:b4:5d:36:e0:dc:4b:f0:74:98:73:be:47:78:a0:c7: 43:67:8b:40:43:d5:ea:46:56:e2:41:f2:40:85:d7:5e:0e:24: 1c:02:b9:b9:db:ff:9f:dd:6b:7b:f7:59:25:3a:f2:2b:35:fc: bb:8d:d1:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwefny/h2Q3Tdqi5jSF1+j7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMjAyMTMxNTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTY5NGRjYzhmM2NmYjQ0YzcxNzI0MWU1OGI4ODZhMzQ3OWZjOWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UaWJPRNnA5iLmZol94d6NtNwHAV yGTpk6vwH0/+LGZhlR3J9AYZWTzKA5FIZGgxlB400ilfyFmRiyD6nyorJcSVqRg5 FHGT1HReRsiaIPx5r9StwdHZMYTBvBtfVpbf8Xr7kNfS9hFp+WiEQxdqxEvbMpxJ Ay8OBGFWydjAhMT6XrGXnnHM07Golr8eixGxrY0xRu3K/ncMg8ql2zacEXXzzLRw MFNSi7KRLhkjXtdeRXSQ6bL8IBYCelycCixMkUJfyBzKkIRfluTai+X3V1J0EQSB i8VsifSbkRgHVd9tlXx8W0mhE+jR3DpJE22x++6IppIyh4hDDrjl/Y+r3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEppTcyPPPtExxckHli4hqNHn8nPMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvU21sTnpJODgtMFRIRnlRZVdMaUdvMGVmeWM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3mFMA0G CSqGSIb3DQEBCwUAA4IBAQB0HICNCAjsEnck82QAcyfF8AZL3AKv1fepVaVGBIiy L8gcmMa0VdPB+UKvA42OTj1jgZSRNgnaCUOIC1l84n6RP7DciZX72ceeDsFsyXlI uLYjhbVH9mH8AhclcZUrqxgHV9ieX2wQpVgPMmbaz0uYUp+Mlm+WMZGzAK/9YYOT aS/Uda748Lh3biuO1rQ/XoWTP5ED9Q4zIs5X6dtPYZvqWLViHin84n+WN8DLgCAL A070Ily7to39ItScHTSIa8dgBhK53BYrobO0XTbg3EvwdJhzvkd4oMdDZ4tAQ9Xq RlbiQfJAhddeDiQcArm52/+f3Wt791klOvIrNfy7jdEc -----END CERTIFICATE-----Generated at Thu Feb 5 15:32:12 2026 by rpki-client