This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/sncS8S2NsUSvaykCM37LNBlWYeU.roa
File: sncS8S2NsUSvaykCM37LNBlWYeU.roa (raw, json)
Hash identifier: qh0is7RUGO8WSotkmc+90Ufb2ZAu2P4HHEPVCF4ovi4=
Subject key identifier: B2:77:12:F1:2D:8D:B1:44:AF:6B:29:02:33:7E:CB:34:19:56:61:E5
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 019B7F16037B8317D48266409D44F6060326
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/sncS8S2NsUSvaykCM37LNBlWYeU.roa
Signing time: Fri 02 Jan 2026 14:21:47 +0000
ROA not before: Fri 02 Jan 2026 14:21:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34305
IP address blocks: 85.12.26.0/24 maxlen: 24
85.12.27.0/24 maxlen: 24
85.12.28.0/22 maxlen: 24
85.12.32.0/20 maxlen: 20
85.12.48.0/21 maxlen: 21
85.12.58.0/23 maxlen: 24
85.12.60.0/22 maxlen: 22
91.148.208.0/20 maxlen: 20
185.91.28.0/24 maxlen: 24
193.138.220.0/24 maxlen: 24
195.200.84.0/24 maxlen: 24
195.200.85.0/24 maxlen: 24
2a01:788::/32 maxlen: 48
2a01:788:4::/48 maxlen: 48
2a01:788:1000::/48 maxlen: 48
2a01:788:aaaa::/48 maxlen: 48
2a01:788:aaab::/48 maxlen: 48
2a01:788:aaac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 14:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:16:03:7b:83:17:d4:82:66:40:9d:44:f6:06:03:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Jan 2 14:21:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b27712f12d8db144af6b2902337ecb34195661e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4a:5f:30:1d:6b:ed:07:d5:b3:72:37:7c:96:
6b:fa:07:c5:ea:81:4e:aa:dc:a8:2d:3a:7e:69:b8:
4a:b5:dc:ad:87:a5:7b:48:dd:14:b8:50:56:71:a5:
cd:c4:06:c1:9e:f7:d9:11:e8:cc:54:e8:21:08:57:
a2:ee:dd:5e:8b:27:e4:f9:2b:5a:f4:27:60:52:05:
6f:3b:9e:e8:d7:f6:f0:38:f7:ee:bd:a5:5d:fd:05:
05:9c:46:f0:a5:83:5d:71:2f:fd:78:20:35:18:49:
74:23:9f:4e:f1:bf:62:ca:a9:93:36:9f:ec:14:fb:
18:7b:18:dd:24:59:5a:3e:60:e5:a3:e2:20:06:73:
6a:e8:ab:a2:a9:71:06:96:4d:31:34:4a:cd:23:ab:
a7:45:d2:2f:40:84:c6:36:fa:e8:75:cc:a2:a3:52:
b1:6a:09:97:51:c5:7c:ff:a0:cc:4e:cb:8d:64:e3:
c6:e6:b7:96:77:a1:63:a9:00:98:25:e3:42:0b:ee:
c6:54:b4:98:92:a2:6d:49:ae:ae:28:50:3f:a0:b7:
a2:b8:56:0a:4e:52:16:37:1e:c5:f5:43:40:e6:9f:
23:70:33:40:c9:12:71:cb:17:b1:a8:ed:d9:13:4a:
ca:61:55:d6:d1:56:81:77:df:a0:06:12:65:1c:80:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:77:12:F1:2D:8D:B1:44:AF:6B:29:02:33:7E:CB:34:19:56:61:E5
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/sncS8S2NsUSvaykCM37LNBlWYeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.12.26.0-85.12.55.255
85.12.58.0-85.12.63.255
91.148.208.0/20
185.91.28.0/24
193.138.220.0/24
195.200.84.0/23
IPv6:
2a01:788::/32
Signature Algorithm: sha256WithRSAEncryption
5a:6f:d1:7c:68:f2:4d:5e:3f:7b:64:cb:67:63:c0:2e:39:c4:
35:57:41:67:e1:d5:5c:df:86:fe:c8:7d:c9:64:14:fa:96:53:
aa:8e:87:5b:57:0e:5e:55:71:3d:5d:0e:b0:05:7f:32:e2:4b:
0b:da:aa:93:d6:a6:ec:8b:9b:9b:3b:99:65:5e:69:f0:c2:f8:
ed:74:86:64:dc:4d:a4:ad:24:02:58:b6:f3:47:2e:5f:df:08:
38:f1:22:17:3c:02:ff:62:b8:bd:3d:b9:f4:a9:b6:7c:ab:86:
b9:63:83:2c:8c:0b:1f:e6:90:49:c4:5e:28:b7:37:ff:05:b9:
fb:1f:ac:b8:dd:6b:63:93:cb:fa:57:2d:ac:e0:d0:b5:5e:11:
c6:55:4f:37:29:83:12:68:0d:40:33:a3:a9:d6:55:7d:b4:d1:
c3:53:90:94:bb:62:e6:ad:3a:74:f7:9c:a6:59:47:5c:46:26:
8e:fe:b7:98:0c:09:3f:27:ca:ff:cf:40:74:ea:ec:b2:89:c2:
04:b2:cd:ff:41:ce:67:2b:bb:16:13:4c:76:5e:70:06:fa:0a:
88:61:f6:4f:88:4a:e5:c3:52:bd:c8:af:41:9b:60:92:cf:62:
2a:79:b3:13:41:16:c5:b3:5f:2b:90:1e:1d:47:99:82:7c:d5:
48:c8:fe:51
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgISAZt/FgN7gxfUgmZAnUT2BgMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNDhjZjE0NmI0YzczZDI3NDA5NmQ3MDU3MDhkMjRiNzI5
MzI5ZjgwHhcNMjYwMTAyMTQyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjc3MTJmMTJkOGRiMTQ0YWY2YjI5MDIzMzdlY2IzNDE5NTY2MWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEpfMB1r7QfVs3I3fJZr+gfF6oFO
qtyoLTp+abhKtdyth6V7SN0UuFBWcaXNxAbBnvfZEejMVOghCFei7t1eiyfk+Sta
9CdgUgVvO57o1/bwOPfuvaVd/QUFnEbwpYNdcS/9eCA1GEl0I59O8b9iyqmTNp/s
FPsYexjdJFlaPmDlo+IgBnNq6KuiqXEGlk0xNErNI6unRdIvQITGNvrodcyio1Kx
agmXUcV8/6DMTsuNZOPG5reWd6FjqQCYJeNCC+7GVLSYkqJtSa6uKFA/oLeiuFYK
TlIWNx7F9UNA5p8jcDNAyRJxyxexqO3ZE0rKYVXW0VaBd9+gBhJlHIBUfQIDAQAB
o4ICRjCCAkIwHQYDVR0OBBYEFLJ3EvEtjbFEr2spAjN+yzQZVmHlMB8GA1UdIwQY
MBaAFEtIzxRrTHPSdAltcFcI0ktykyn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMt
NjRhNmEwNWI5OTA1LzEvc25jUzhTMk5zVVN2YXlrQ00zN0xOQmxXWWVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMtNjRhNmEwNWI5OTA1
LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzA6BAIAATA0MAwDBAFVDBoD
BANVDDAwDAMEAVUMOgMEBlUMAAMEBFuU0AMEALlbHAMEAMGK3AMEAcPIVDANBAIA
AjAHAwUAKgEHiDANBgkqhkiG9w0BAQsFAAOCAQEAWm/RfGjyTV4/e2TLZ2PALjnE
NVdBZ+HVXN+G/sh9yWQU+pZTqo6HW1cOXlVxPV0OsAV/MuJLC9qqk9am7IubmzuZ
ZV5p8ML47XSGZNxNpK0kAli280cuX98IOPEiFzwC/2K4vT259Km2fKuGuWODLIwL
H+aQScReKLc3/wW5+x+suN1rY5PL+lctrODQtV4RxlVPNymDEmgNQDOjqdZVfbTR
w1OQlLti5q06dPecpllHXEYmjv63mAwJPyfK/89AdOrssonCBLLN/0HOZyu7FhNM
dl5wBvoKiGH2T4hK5cNSvcivQZtgks9iKnmzE0EWxbNfK5AeHUeZgnzVSMj+UQ==
-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:34 2026 by rpki-client