This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/SP8ZFm--93L34rMKDZHfL8Eh_ro.roa File: SP8ZFm--93L34rMKDZHfL8Eh_ro.roa (raw, json) Hash identifier: cp6DWhPPeKxvKEzaDsnvDh3dMYI9vYEIXkFKulFhNyA= Subject key identifier: 48:FF:19:16:6F:BE:F7:72:F7:E2:B3:0A:0D:91:DF:2F:C1:21:FE:BA Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Certificate serial: 019B7C1217C3B9D3C4F7360320D93BBC8012 Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/SP8ZFm--93L34rMKDZHfL8Eh_ro.roa Signing time: Fri 02 Jan 2026 00:18:39 +0000 ROA not before: Fri 02 Jan 2026 00:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8605 IP address blocks: 5.179.0.0/20 maxlen: 20 5.179.16.0/21 maxlen: 21 5.179.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:17:c3:b9:d3:c4:f7:36:03:20:d9:3b:bc:80:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Validity Not Before: Jan 2 00:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48ff19166fbef772f7e2b30a0d91df2fc121feba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:f0:52:fb:aa:85:aa:b8:38:9a:76:f3:15: 9c:74:ef:3f:25:e8:4f:e4:9e:6d:45:a8:a8:57:f2: 21:3d:25:c2:71:05:a2:f7:3a:51:e0:08:0c:a4:84: 93:e9:3a:98:ed:a7:4a:b7:6a:98:a8:ac:1d:8d:3a: 98:8a:52:18:4f:a3:fc:76:0a:ae:a8:b5:f4:72:47: a4:ad:dc:12:83:e6:c7:07:e4:a5:d6:7f:7e:df:e5: f6:22:53:d1:02:09:eb:f9:37:1e:73:8c:25:6e:6b: 5f:00:06:62:91:7a:07:7d:f5:85:b1:d7:8e:5c:c0: 27:a1:fb:e2:87:1c:7a:3c:e7:79:e9:21:4f:4c:02: 3b:f8:0a:a9:0c:e2:50:c4:73:a0:ca:6a:d2:82:e2: d3:5f:08:c2:c5:19:88:79:0c:60:01:3f:c3:93:33: 53:0a:f3:0b:5d:13:16:5f:f7:21:c6:6e:ca:90:1d: 46:13:8e:3c:3e:aa:54:ca:3e:75:f2:39:f0:d0:ea: df:31:65:38:b9:1e:d6:ae:e5:ae:7b:bb:4e:a8:4b: 1c:9f:09:9b:6a:11:eb:cc:e4:b3:e5:bd:a6:2a:ae: 2d:df:a1:b8:08:1f:dd:c1:40:db:1d:3b:72:3e:e1: d9:bb:89:d2:e8:7c:1e:c9:59:17:8c:df:3d:3a:cc: be:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FF:19:16:6F:BE:F7:72:F7:E2:B3:0A:0D:91:DF:2F:C1:21:FE:BA X509v3 Authority Key Identifier: keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/SP8ZFm--93L34rMKDZHfL8Eh_ro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.179.0.0-5.179.27.255 Signature Algorithm: sha256WithRSAEncryption 9b:f6:a4:01:91:d1:f7:ef:6e:30:88:ce:8c:31:51:f7:c5:a2: df:ea:5b:91:b2:03:ce:38:2a:23:22:61:c0:d2:a1:af:77:76: 2d:7a:b2:c0:0e:16:e7:1a:09:d6:07:24:32:de:b4:f1:81:c6: 27:31:2f:4b:3d:aa:d8:21:d8:be:86:85:2c:ea:4f:fd:a6:1f: 9c:16:33:ae:8e:48:d0:98:d7:d4:f0:75:55:c6:ae:97:0b:0b: a3:0c:0a:c2:9e:c7:8d:ec:28:f5:cd:c9:a7:97:76:a2:c0:b4: c3:3a:c6:29:96:92:68:ad:86:11:a0:31:8d:5e:91:00:6c:0a: 90:b0:6e:f3:9a:6f:21:0c:5f:6e:64:1f:be:1e:ca:b7:4b:94: 57:b0:f6:58:ae:d5:5d:f6:73:c6:6f:94:70:10:3c:51:3b:13: 6f:c0:2c:15:f2:65:f1:52:6a:0e:5e:3a:d7:0f:d4:70:33:5e: 1b:fe:4d:d8:31:2e:46:c5:36:e5:d3:3b:50:74:ac:f1:0f:52: de:aa:40:6d:02:d6:3e:11:31:63:fa:40:4f:02:15:90:74:fb: 30:33:b7:66:43:6a:df:f6:f6:df:f4:ea:b1:67:ee:ef:a6:f2: 6c:12:00:36:11:f6:3a:8d:86:72:be:4c:f4:04:8f:68:47:20: e9:7e:1c:dd -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt8EhfDudPE9zYDINk7vIASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMGIyNGE3NDBmMmU2MTYzMjA1MGFkYzE0NmMxZWU2YTNl Njg2YzUwHhcNMjYwMTAyMDAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGZmMTkxNjZmYmVmNzcyZjdlMmIzMGEwZDkxZGYyZmMxMjFmZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxDwUvuqhaq4OJp28xWcdO8/JehP 5J5tRaioV/IhPSXCcQWi9zpR4AgMpIST6TqY7adKt2qYqKwdjTqYilIYT6P8dgqu qLX0ckekrdwSg+bHB+Sl1n9+3+X2IlPRAgnr+Tcec4wlbmtfAAZikXoHffWFsdeO XMAnofvihxx6POd56SFPTAI7+AqpDOJQxHOgymrSguLTXwjCxRmIeQxgAT/DkzNT CvMLXRMWX/chxm7KkB1GE448PqpUyj518jnw0OrfMWU4uR7WruWue7tOqEscnwmb ahHrzOSz5b2mKq4t36G4CB/dwUDbHTtyPuHZu4nS6HweyVkXjN89Osy+HQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFEj/GRZvvvdy9+KzCg2R3y/BIf66MB8GA1UdIwQY MBaAFDILJKdA8uYWMgUK3BRsHuaj5obFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYt OTQ5MTRmNWRkYjNjLzEvU1A4WkZtLS05M0wzNHJNS0RaSGZMOEVoX3JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYtOTQ5MTRmNWRkYjNj LzEvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwAFswME AgWzGDANBgkqhkiG9w0BAQsFAAOCAQEAm/akAZHR9+9uMIjOjDFR98Wi3+pbkbID zjgqIyJhwNKhr3d2LXqywA4W5xoJ1gckMt608YHGJzEvSz2q2CHYvoaFLOpP/aYf nBYzro5I0JjX1PB1VcaulwsLowwKwp7Hjewo9c3Jp5d2osC0wzrGKZaSaK2GEaAx jV6RAGwKkLBu85pvIQxfbmQfvh7Kt0uUV7D2WK7VXfZzxm+UcBA8UTsTb8AsFfJl 8VJqDl461w/UcDNeG/5N2DEuRsU25dM7UHSs8Q9S3qpAbQLWPhExY/pATwIVkHT7 MDO3ZkNq3/b23/TqsWfu76bybBIANhH2Oo2Gcr5M9ASPaEcg6X4c3Q== -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:06 2026 by rpki-client