This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/sMxOTjVn4KXClNAb6fWf4pqJRgs.roa File: sMxOTjVn4KXClNAb6fWf4pqJRgs.roa (raw, json) Hash identifier: iyqbK2oEVhsufsEC0hIm8ozABus8ItOBfYTwUIU0zqw= Subject key identifier: B0:CC:4E:4E:35:67:E0:A5:C2:94:D0:1B:E9:F5:9F:E2:9A:89:46:0B Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F853E532C75B392153416552AE2ECE8 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/sMxOTjVn4KXClNAb6fWf4pqJRgs.roa Signing time: Fri 02 Jan 2026 16:23:17 +0000 ROA not before: Fri 02 Jan 2026 16:23:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60127 IP address blocks: 185.147.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:3e:53:2c:75:b3:92:15:34:16:55:2a:e2:ec:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0cc4e4e3567e0a5c294d01be9f59fe29a89460b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3f:a3:38:61:bb:52:03:a4:d6:3e:04:a9:78: e8:b2:42:a6:a7:87:32:f9:ae:7f:37:ec:c7:f7:3f: 77:d5:3c:e4:7e:d8:d6:c3:64:08:29:05:fa:b3:ec: e7:7a:fd:b8:e4:ad:04:76:5a:32:b4:6c:1d:d1:b3: 9d:ff:6b:17:98:92:00:ff:6c:5a:e1:ee:e2:fd:c3: e7:f8:66:a9:a1:5c:3c:03:44:2f:fa:d0:bd:58:81: a4:21:ac:e1:17:8f:bb:8d:0b:3d:6a:56:74:60:31: f0:d3:ab:19:d6:10:45:80:7c:d3:59:bf:62:42:9e: ef:00:04:2c:7f:3c:51:b7:ae:a2:39:57:2a:69:27: 18:90:37:6a:e1:30:65:99:c0:f9:ef:d4:da:d4:e8: a1:1e:9c:ef:ce:4e:3a:99:b9:50:aa:4b:be:3a:e4: 82:ab:d9:d5:98:e7:47:69:ea:e2:a5:48:ec:2a:91: a0:96:8f:3d:8c:ae:57:8e:cc:de:9a:63:ff:70:ff: 38:0e:dd:ea:ba:18:f8:be:65:3f:57:9c:1e:71:bd: ff:25:3d:ca:8d:6e:2b:11:49:78:02:0a:ba:62:47: 24:19:f6:c1:c2:99:33:f6:03:2d:ae:33:47:68:03: 43:63:4c:30:ad:da:8c:36:19:89:41:5c:84:f6:81: a5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CC:4E:4E:35:67:E0:A5:C2:94:D0:1B:E9:F5:9F:E2:9A:89:46:0B X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/sMxOTjVn4KXClNAb6fWf4pqJRgs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.147.51.0/24 Signature Algorithm: sha256WithRSAEncryption 38:e6:5f:6f:61:45:87:ae:2a:cc:4b:18:1b:3b:49:e0:cf:3a: 43:1f:cf:da:44:51:18:7f:12:0e:1b:88:c9:65:d8:90:c0:65: e3:ca:3c:8e:8a:e8:bb:a4:cd:10:11:30:25:5f:7e:71:34:90: 2e:c1:dd:b6:e7:de:a6:33:b5:ac:e5:62:a9:2a:1a:68:a9:d8: 90:fa:78:af:3c:6a:18:6c:e6:f9:2b:1d:3c:11:65:87:1a:13: 68:db:1c:8f:9e:ff:52:b6:a2:3b:54:24:95:2f:ab:fe:b3:0d: ca:50:b5:ef:e6:60:c6:dc:84:1a:37:14:20:e4:6c:9f:65:75: 3d:db:17:53:de:c5:d5:77:3f:88:ec:d8:bb:fe:30:c2:1e:ff: 67:7e:2d:f5:1f:b8:20:b3:79:07:cd:05:87:46:0c:35:c3:7c: 91:22:e5:82:ab:84:cc:35:ca:a2:4f:92:ff:a6:41:95:77:f4: cf:7e:70:ca:0a:2d:8c:a8:18:d7:3c:27:3a:66:cf:bf:8b:85: 59:82:ab:37:38:0e:f4:bf:10:66:7f:00:42:92:78:98:65:9f: a8:ed:bd:12:98:2b:67:ff:b9:4f:3e:1d:b6:9d:12:d7:49:30: 46:84:2a:9e:90:90:f6:74:cd:1b:2c:f7:76:b2:ee:70:a4:96: 8b:4c:39:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hT5TLHWzkhU0FlUq4uzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGNjNGU0ZTM1NjdlMGE1YzI5NGQwMWJlOWY1OWZlMjlhODk0NjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj+jOGG7UgOk1j4EqXjoskKmp4cy +a5/N+zH9z931TzkftjWw2QIKQX6s+znev245K0EdloytGwd0bOd/2sXmJIA/2xa 4e7i/cPn+GapoVw8A0Qv+tC9WIGkIazhF4+7jQs9alZ0YDHw06sZ1hBFgHzTWb9i Qp7vAAQsfzxRt66iOVcqaScYkDdq4TBlmcD579Ta1OihHpzvzk46mblQqku+OuSC q9nVmOdHaeripUjsKpGglo89jK5XjszemmP/cP84Dt3quhj4vmU/V5wecb3/JT3K jW4rEUl4Agq6YkckGfbBwpkz9gMtrjNHaANDY0wwrdqMNhmJQVyE9oGl3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLDMTk41Z+ClwpTQG+n1n+KaiUYLMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvc014T1RqVm40S1hDbE5BYjZmV2Y0cHFKUmdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZMzMA0G CSqGSIb3DQEBCwUAA4IBAQA45l9vYUWHrirMSxgbO0ngzzpDH8/aRFEYfxIOG4jJ ZdiQwGXjyjyOiui7pM0QETAlX35xNJAuwd22596mM7Ws5WKpKhpoqdiQ+nivPGoY bOb5Kx08EWWHGhNo2xyPnv9StqI7VCSVL6v+sw3KULXv5mDG3IQaNxQg5GyfZXU9 2xdT3sXVdz+I7Ni7/jDCHv9nfi31H7ggs3kHzQWHRgw1w3yRIuWCq4TMNcqiT5L/ pkGVd/TPfnDKCi2MqBjXPCc6Zs+/i4VZgqs3OA70vxBmfwBCkniYZZ+o7b0SmCtn /7lPPh22nRLXSTBGhCqekJD2dM0bLPd2su5wpJaLTDnK -----END CERTIFICATE-----Generated at Sun Jan 25 19:58:56 2026 by rpki-client