This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/SnZyrIF6RABx6JSbJPFXyEaoM4o.roa File: SnZyrIF6RABx6JSbJPFXyEaoM4o.roa (raw, json) Hash identifier: 5p3rhTPu7aykKsYkOURaS1avQK2tbYJAoNaTXCxX5Rs= Subject key identifier: 4A:76:72:AC:81:7A:44:00:71:E8:94:9B:24:F1:57:C8:46:A8:33:8A Certificate issuer: /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced Certificate serial: 019B7EA71EAB97F513573D8B37C1D5D59CF6 Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/SnZyrIF6RABx6JSbJPFXyEaoM4o.roa Signing time: Fri 02 Jan 2026 12:20:40 +0000 ROA not before: Fri 02 Jan 2026 12:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196791 IP address blocks: 46.172.112.0/20 maxlen: 20 193.169.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1e:ab:97:f5:13:57:3d:8b:37:c1:d5:d5:9c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced Validity Not Before: Jan 2 12:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a7672ac817a440071e8949b24f157c846a8338a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:0d:b6:82:76:84:27:4d:0f:a5:e2:66:e3: ba:e1:76:33:70:9f:58:92:93:7a:e0:db:0d:62:65: 97:55:66:ea:ef:8b:44:29:58:1d:b9:e4:12:29:18: d7:12:27:f3:ea:e7:4b:84:6c:66:cf:2a:7a:b0:e6: 80:b1:b1:79:f2:f2:08:a9:1f:e0:9e:f8:a2:5c:43: b8:cc:5a:3e:d6:dd:61:3b:aa:52:22:d0:5e:58:85: 20:67:33:03:13:2b:f4:35:83:b8:99:60:6d:ba:a8: 6d:22:f2:b7:15:71:53:03:e5:fb:38:31:00:b3:72: 25:b3:ff:4c:5c:33:66:de:00:ca:82:46:93:88:73: fd:18:cd:43:37:8b:6c:a9:ca:5d:07:61:f1:28:f3: 90:11:cb:6e:e7:85:8c:d3:55:a3:05:47:37:6c:73: c4:b5:20:ad:9b:c1:21:ba:f9:72:84:b8:54:9a:7f: bc:5c:e8:40:3d:38:2a:89:25:6a:7e:f6:62:81:02: aa:3e:fd:3b:b9:d7:07:f9:53:cf:9f:7f:60:5a:58: b6:85:bb:ac:88:70:6e:5d:3b:a3:c7:5c:b2:fd:c0: 11:19:55:72:66:32:49:e7:f4:4c:ed:1b:e4:e3:74: 91:da:d2:51:88:b9:fe:7b:f6:76:d5:58:b5:14:7b: 6c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:76:72:AC:81:7A:44:00:71:E8:94:9B:24:F1:57:C8:46:A8:33:8A X509v3 Authority Key Identifier: keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/SnZyrIF6RABx6JSbJPFXyEaoM4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.172.112.0/20 193.169.60.0/23 Signature Algorithm: sha256WithRSAEncryption 70:cb:f6:96:cf:71:89:ed:7b:30:09:20:e2:39:36:95:ef:87: 8d:99:85:66:5a:80:bb:ad:e3:e7:74:24:a6:06:d7:76:b1:4a: 71:0c:73:38:8a:ac:80:56:c7:79:eb:e0:ad:85:9a:6b:24:5f: 86:2f:91:ab:4f:12:b3:3a:9b:9b:d1:96:77:67:6e:c8:c1:e6: af:07:36:82:99:8b:ac:f8:6a:0c:f9:8b:85:61:5d:81:7e:68: 9a:74:6f:47:ec:3d:c4:42:04:00:75:44:a1:be:4d:d1:5b:d9: 04:5a:5f:42:7c:c5:d7:81:f5:4b:a2:32:93:2d:6d:e9:0b:f1: 63:82:4a:22:ed:0e:08:89:95:d2:e5:2b:aa:b4:b3:35:53:66: ac:33:29:42:02:b7:9e:07:49:8d:58:85:a2:ff:ef:aa:04:98: a1:98:56:d3:59:e1:3a:fa:7a:e3:25:d2:7c:5a:2f:e6:b1:69: 28:f7:8d:29:23:4b:1e:a0:ec:2a:51:71:d1:bc:ae:22:d4:86: 97:16:91:93:97:df:db:ce:ee:55:9c:58:61:5a:38:11:cc:6b: f5:bb:a8:d2:c9:25:01:e7:eb:0a:81:7d:cc:e8:9c:ba:ea:8c: f8:d4:ed:6e:9f:5f:ef:91:e5:8f:36:07:7e:f1:5f:ee:4c:2c: 45:50:0c:e2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+px6rl/UTVz2LN8HV1Zz2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOGM1OWVhYzk2ODQ4MzRjYjk3Y2MyYWQ4NThkNWM3NGRj ZjZjZWQwHhcNMjYwMTAyMTIyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTc2NzJhYzgxN2E0NDAwNzFlODk0OWIyNGYxNTdjODQ2YTgzMzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshsNtoJ2hCdND6XiZuO64XYzcJ9Y kpN64NsNYmWXVWbq74tEKVgdueQSKRjXEifz6udLhGxmzyp6sOaAsbF58vIIqR/g nviiXEO4zFo+1t1hO6pSItBeWIUgZzMDEyv0NYO4mWBtuqhtIvK3FXFTA+X7ODEA s3Ils/9MXDNm3gDKgkaTiHP9GM1DN4tsqcpdB2HxKPOQEctu54WM01WjBUc3bHPE tSCtm8EhuvlyhLhUmn+8XOhAPTgqiSVqfvZigQKqPv07udcH+VPPn39gWli2hbus iHBuXTujx1yy/cARGVVyZjJJ5/RM7Rvk43SR2tJRiLn+e/Z21Vi1FHtsmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEp2cqyBekQAceiUmyTxV8hGqDOKMB8GA1UdIwQY MBaAFEuMWerJaEg0y5fMKthY1cdNz2ztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEt MDE5YTA1Y2U1ZTdhLzEvU25aeXJJRjZSQUJ4NkpTYkpQRlh5RWFvTTRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEtMDE5YTA1Y2U1ZTdh LzEvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELqxwAwQB wak8MA0GCSqGSIb3DQEBCwUAA4IBAQBwy/aWz3GJ7XswCSDiOTaV74eNmYVmWoC7 rePndCSmBtd2sUpxDHM4iqyAVsd56+CthZprJF+GL5GrTxKzOpub0ZZ3Z27Iweav BzaCmYus+GoM+YuFYV2BfmiadG9H7D3EQgQAdUShvk3RW9kEWl9CfMXXgfVLojKT LW3pC/Fjgkoi7Q4IiZXS5SuqtLM1U2asMylCAreeB0mNWIWi/++qBJihmFbTWeE6 +nrjJdJ8Wi/msWko940pI0seoOwqUXHRvK4i1IaXFpGTl9/bzu5VnFhhWjgRzGv1 u6jSySUB5+sKgX3M6Jy66oz41O1un1/vkeWPNgd+8V/uTCxFUAzi -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:15 2026 by rpki-client