This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SbmHe7ki2lDdoYQdF7xC-A3Qc2w.roa File: SbmHe7ki2lDdoYQdF7xC-A3Qc2w.roa (raw, json) Hash identifier: SJSMFMOk3gEDRHb0S6HurknlOQbeUUnqWf9Vxo13BwU= Subject key identifier: 49:B9:87:7B:B9:22:DA:50:DD:A1:84:1D:17:BC:42:F8:0D:D0:73:6C Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82CC7F6610293D02C7D34FA3BE0CF7 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SbmHe7ki2lDdoYQdF7xC-A3Qc2w.roa Signing time: Fri 02 Jan 2026 16:20:37 +0000 ROA not before: Fri 02 Jan 2026 16:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206804 IP address blocks: 185.227.68.0/24 maxlen: 24 185.234.73.0/24 maxlen: 24 2a0b:b87:ffd6::/48 maxlen: 48 2a0b:b87:ffd7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:cc:7f:66:10:29:3d:02:c7:d3:4f:a3:be:0c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49b9877bb922da50dda1841d17bc42f80dd0736c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8e:d1:28:a9:9b:e3:31:4d:28:8b:41:6d:42: f3:1a:92:d8:54:87:9b:13:ac:9e:65:f5:d7:62:aa: 30:e1:46:e2:bd:4b:25:97:bb:26:ab:fa:d2:1c:6b: 39:f4:00:cc:84:05:66:fa:c7:d1:3c:cb:1d:c1:33: 7d:aa:02:40:93:0d:59:3a:32:e6:39:30:6b:b4:97: 35:fe:45:c9:63:35:c6:b5:92:94:e6:ff:4f:bd:c1: 46:a1:43:c4:c3:fb:d2:13:a7:a1:a3:4b:d6:3c:d0: 04:7f:62:be:78:9e:c1:d3:6c:ef:8a:fd:a4:dc:35: 3a:dd:41:d2:f8:3b:9f:ad:81:67:2d:0a:92:17:67: 89:39:57:e6:75:e4:b7:f0:a3:1e:e3:be:93:7a:7e: 7c:ca:e3:ee:ac:c1:69:6f:c5:61:0a:b2:4b:ac:73: cf:c0:5a:34:cf:ec:b0:cd:e6:1a:29:d6:0a:be:7a: 34:a5:3a:a3:cd:03:f6:00:ff:f0:51:e1:dc:34:62: cc:c5:d3:f8:4b:ee:c1:85:93:85:fe:9d:f6:c2:33: 2f:ad:c3:d0:1d:f3:2f:3d:b3:93:c0:2b:ab:72:d6: 0f:7c:bd:10:53:d8:e8:68:3a:41:8a:6e:58:cd:ae: d0:68:79:65:39:9d:66:e9:ac:58:38:33:74:10:31: 2a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B9:87:7B:B9:22:DA:50:DD:A1:84:1D:17:BC:42:F8:0D:D0:73:6C X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SbmHe7ki2lDdoYQdF7xC-A3Qc2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.227.68.0/24 185.234.73.0/24 IPv6: 2a0b:b87:ffd6::/47 Signature Algorithm: sha256WithRSAEncryption 43:74:52:30:61:5e:55:ac:ef:fe:a0:88:f4:1b:82:b6:19:e2: a3:6a:f5:e8:cb:d4:3d:26:f9:55:ff:9a:c6:6c:a8:95:0d:58: a7:9f:c2:c5:d9:46:c3:a3:3a:6f:23:5b:83:d0:46:cc:a3:d8: 59:6a:ec:55:77:a4:88:ae:63:64:77:e5:ed:b6:e6:6e:f6:cd: ad:75:c0:c8:c9:3c:a5:3a:30:24:4a:d5:2a:88:ac:a1:8f:7a: b0:5a:e8:5f:2f:47:b0:98:30:ea:e5:c3:0d:e3:4c:68:3f:ef: af:89:80:51:a0:67:18:33:6d:a0:aa:00:33:1e:d6:7e:cd:35: d6:4e:62:84:ac:f1:ae:c9:06:d4:29:af:2a:45:ff:01:6f:ee: 1d:d7:ab:b4:0b:8d:0a:06:ae:1c:9b:11:02:3b:de:bf:c9:6c: a5:72:86:d2:7f:14:7d:ee:04:ca:61:93:6d:5a:50:95:a2:9c: 2c:cd:80:a6:ec:47:cc:30:43:b3:26:21:dd:d4:a8:6b:17:33: 98:71:d4:01:44:70:69:26:d0:ca:bf:bc:a6:be:2c:73:22:6e: ed:6c:d6:39:cf:91:fa:56:3a:08:93:35:fd:00:2d:50:5e:cd: 47:8a:10:b9:b4:b6:12:dd:8a:e5:7f:b3:17:e7:6c:fc:09:e5: 59:b4:dd:92 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/gsx/ZhApPQLH00+jvgz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWI5ODc3YmI5MjJkYTUwZGRhMTg0MWQxN2JjNDJmODBkZDA3MzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI7RKKmb4zFNKItBbULzGpLYVIeb E6yeZfXXYqow4UbivUsll7smq/rSHGs59ADMhAVm+sfRPMsdwTN9qgJAkw1ZOjLm OTBrtJc1/kXJYzXGtZKU5v9PvcFGoUPEw/vSE6eho0vWPNAEf2K+eJ7B02zviv2k 3DU63UHS+DufrYFnLQqSF2eJOVfmdeS38KMe476Ten58yuPurMFpb8VhCrJLrHPP wFo0z+ywzeYaKdYKvno0pTqjzQP2AP/wUeHcNGLMxdP4S+7BhZOF/p32wjMvrcPQ HfMvPbOTwCurctYPfL0QU9joaDpBim5Yza7QaHllOZ1m6axYODN0EDEqMwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFEm5h3u5ItpQ3aGEHRe8QvgN0HNsMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvU2JtSGU3a2kybERkb1lRZEY3eEMtQTNRYzJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAueNEAwQA uepJMA8EAgACMAkDBwEqCwuH/9YwDQYJKoZIhvcNAQELBQADggEBAEN0UjBhXlWs 7/6giPQbgrYZ4qNq9ejL1D0m+VX/msZsqJUNWKefwsXZRsOjOm8jW4PQRsyj2Flq 7FV3pIiuY2R35e225m72za11wMjJPKU6MCRK1SqIrKGPerBa6F8vR7CYMOrlww3j TGg/76+JgFGgZxgzbaCqADMe1n7NNdZOYoSs8a7JBtQprypF/wFv7h3Xq7QLjQoG rhybEQI73r/JbKVyhtJ/FH3uBMphk21aUJWinCzNgKbsR8wwQ7MmId3UqGsXM5hx 1AFEcGkm0Mq/vKa+LHMibu1s1jnPkfpWOgiTNf0ALVBezUeKELm0thLdiuV/sxfn bPwJ5Vm03ZI= -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:00 2026 by rpki-client