This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SNvPp8muDimnjz1AFGC7YSEDO70.roa File: SNvPp8muDimnjz1AFGC7YSEDO70.roa (raw, json) Hash identifier: 42DHYzfdyCUQBQLcE9nma2YT7My+vfJsMn843xAmI5M= Subject key identifier: 48:DB:CF:A7:C9:AE:0E:29:A7:8F:3D:40:14:60:BB:61:21:03:3B:BD Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C80341D0131928EFAC12151009C69F4 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SNvPp8muDimnjz1AFGC7YSEDO70.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398395 IP address blocks: 2.58.200.0/24 maxlen: 24 45.67.87.0/24 maxlen: 24 45.134.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:34:1d:01:31:92:8e:fa:c1:21:51:00:9c:69:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48dbcfa7c9ae0e29a78f3d401460bb6121033bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c8:dc:77:00:e7:51:73:d6:36:53:64:3f:89: f3:38:cb:c3:2c:0d:27:99:c0:87:57:0c:dc:70:b9: 6a:f4:95:79:f4:02:be:69:eb:53:34:4e:a8:7b:80: 34:5b:34:9a:24:74:98:17:a7:24:86:82:9c:74:44: f9:30:3c:bf:99:83:0b:d9:40:91:25:86:6a:8e:26: eb:1f:03:fa:55:1b:3a:52:72:13:49:c5:4a:60:83: a3:05:d6:ca:ee:db:8a:97:b2:41:5d:aa:51:06:d0: 0f:53:db:25:0b:1c:24:6a:ce:cd:f3:4f:b9:81:df: ec:b9:0c:a8:c0:83:5c:d2:16:f8:20:a7:02:4c:a5: be:45:db:dc:7f:6d:00:e1:55:3b:2f:38:b6:fd:f0: fb:ff:c3:5f:46:cb:06:42:de:c5:42:89:a8:06:13: ed:e1:42:d9:eb:fe:32:41:75:12:c7:f8:b3:15:03: 27:6a:8f:7b:71:8f:21:27:40:1f:30:cf:49:96:26: 62:ab:ce:68:5e:dc:b4:a2:35:5d:98:99:93:14:ea: d4:90:1f:91:cf:33:9e:6f:3d:34:37:12:cc:d6:cb: 86:a4:6f:18:e7:79:61:8a:cd:b0:fc:81:3b:d6:38: 9a:ec:1b:e3:96:05:4c:99:35:8a:59:d3:19:90:41: b1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DB:CF:A7:C9:AE:0E:29:A7:8F:3D:40:14:60:BB:61:21:03:3B:BD X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SNvPp8muDimnjz1AFGC7YSEDO70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.200.0/24 45.67.87.0/24 45.134.110.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:d1:ef:14:b5:c5:46:f6:2c:34:21:99:e8:30:e4:a7:38:07: bc:58:63:b7:03:16:1e:75:d0:2b:11:c7:61:74:2e:57:81:5c: 1c:6b:29:3f:10:2f:61:c0:01:ed:c8:73:3f:55:68:ee:21:8c: 5f:df:8a:39:56:75:29:eb:87:61:26:2d:08:7c:e8:70:ca:e2: 8b:2c:f4:c1:9b:a5:2c:c3:4f:50:ee:4f:3c:a5:29:34:07:11: 8a:1a:09:ea:8d:b5:7e:b7:01:e3:ca:e7:4f:79:ea:ab:4f:80: dd:76:ad:5f:fa:9f:80:4f:cc:13:4e:b6:bf:15:7e:e9:4d:b7: 6a:9b:8a:56:6f:7c:b5:90:ed:a3:16:7a:0c:34:78:df:94:59: 14:10:29:03:5d:6d:6d:14:7e:50:69:69:26:02:d5:6c:49:36: 99:6b:d7:07:64:18:bf:47:f7:12:c2:3e:1c:0d:ce:98:dd:5c: 9f:be:b3:18:20:88:40:68:b3:23:d6:a9:67:d9:38:c8:a5:66: 2b:64:c9:5b:45:3d:82:ec:1e:97:31:0e:f4:a9:c9:f3:8a:c5: 0b:27:3e:c5:02:5a:76:f5:f0:ce:b8:46:18:9d:8d:7e:52:3a: 43:1e:bf:c5:38:7e:a2:0c:2c:01:0c:b0:09:65:38:aa:0d:fb: 6e:5f:04:af -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gDQdATGSjvrBIVEAnGn0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGRiY2ZhN2M5YWUwZTI5YTc4ZjNkNDAxNDYwYmI2MTIxMDMzYmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsjcdwDnUXPWNlNkP4nzOMvDLA0n mcCHVwzccLlq9JV59AK+aetTNE6oe4A0WzSaJHSYF6ckhoKcdET5MDy/mYML2UCR JYZqjibrHwP6VRs6UnITScVKYIOjBdbK7tuKl7JBXapRBtAPU9slCxwkas7N80+5 gd/suQyowINc0hb4IKcCTKW+Rdvcf20A4VU7Lzi2/fD7/8NfRssGQt7FQomoBhPt 4ULZ6/4yQXUSx/izFQMnao97cY8hJ0AfMM9JliZiq85oXty0ojVdmJmTFOrUkB+R zzOebz00NxLM1suGpG8Y53lhis2w/IE71jia7BvjlgVMmTWKWdMZkEGxMwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEjbz6fJrg4pp489QBRgu2EhAzu9MB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvU052UHA4bXVEaW1uanoxQUZHQzdZU0VETzcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAAjrIAwQA LUNXAwQALYZuMA0GCSqGSIb3DQEBCwUAA4IBAQBt0e8UtcVG9iw0IZnoMOSnOAe8 WGO3AxYeddArEcdhdC5XgVwcayk/EC9hwAHtyHM/VWjuIYxf34o5VnUp64dhJi0I fOhwyuKLLPTBm6Usw09Q7k88pSk0BxGKGgnqjbV+twHjyudPeeqrT4Dddq1f+p+A T8wTTra/FX7pTbdqm4pWb3y1kO2jFnoMNHjflFkUECkDXW1tFH5QaWkmAtVsSTaZ a9cHZBi/R/cSwj4cDc6Y3VyfvrMYIIhAaLMj1qln2TjIpWYrZMlbRT2C7B6XMQ70 qcnzisULJz7FAlp29fDOuEYYnY1+UjpDHr/FOH6iDCwBDLAJZTiqDftuXwSv -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:01 2026 by rpki-client