This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/svmsZH4j3FCzPSNp-bJETBP8qzs.roa File: svmsZH4j3FCzPSNp-bJETBP8qzs.roa (raw, json) Hash identifier: enOf8GhkIm48YbUB7aWnRSzpdWjW5NG5zxx4fZ/PPB4= Subject key identifier: B2:F9:AC:64:7E:23:DC:50:B3:3D:23:69:F9:B2:44:4C:13:FC:AB:3B Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95 Certificate serial: 019B7F81F9CE40BD24D6D848E0E0739CAD16 Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/svmsZH4j3FCzPSNp-bJETBP8qzs.roa Signing time: Fri 02 Jan 2026 16:19:42 +0000 ROA not before: Fri 02 Jan 2026 16:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44932 IP address blocks: 91.228.132.0/23 maxlen: 24 91.228.132.0/24 maxlen: 24 91.228.133.0/24 maxlen: 24 91.229.46.0/23 maxlen: 24 91.229.46.0/24 maxlen: 24 91.229.47.0/24 maxlen: 24 185.80.198.0/23 maxlen: 24 185.80.198.0/24 maxlen: 24 185.80.199.0/24 maxlen: 24 185.147.176.0/22 maxlen: 24 185.147.176.0/24 maxlen: 24 185.147.177.0/24 maxlen: 24 185.147.178.0/24 maxlen: 24 185.147.179.0/24 maxlen: 24 188.209.116.0/22 maxlen: 24 188.209.116.0/24 maxlen: 24 188.209.117.0/24 maxlen: 24 188.209.118.0/24 maxlen: 24 188.209.119.0/24 maxlen: 24 2a0b:1fc0::/29 maxlen: 48 2a0b:1fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 19:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:f9:ce:40:bd:24:d6:d8:48:e0:e0:73:9c:ad:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95 Validity Not Before: Jan 2 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2f9ac647e23dc50b33d2369f9b2444c13fcab3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4b:58:c4:25:df:0a:1c:aa:20:49:ae:8f:99: bf:ba:bb:bb:e6:fc:1e:3b:f0:78:76:18:b7:6d:ab: e9:4d:e1:7b:c8:6d:f1:fd:60:2d:ac:5e:ef:d2:1f: 73:0f:70:0e:77:0c:b4:75:9b:1b:ce:e0:c7:4a:7f: e4:4b:18:4e:1b:c3:fa:69:18:e9:9e:85:bf:be:7a: 93:58:1b:3f:12:58:23:e7:09:b4:46:82:34:74:ad: 0f:d3:75:35:7f:88:67:8b:fa:02:f3:60:5c:4e:0b: ef:9f:4e:97:47:bf:e4:10:0d:80:0c:e9:f6:f4:ec: dd:c2:c6:f7:0a:4a:a1:67:86:73:e2:1a:a7:50:cf: f0:6d:57:b9:a8:f2:f5:4a:bf:dd:f7:54:1a:69:54: 0a:60:b5:51:57:8c:0b:4f:47:8c:3a:4e:40:0b:06: 4e:b4:4b:a5:10:01:91:6f:af:ff:4b:9e:3d:2a:49: 55:57:bf:45:9c:43:03:f8:19:a7:e0:bf:31:d7:b8: d2:bf:bc:43:4e:fe:53:62:20:db:cf:de:08:c4:ed: 00:5e:27:0d:af:87:31:b1:dd:72:48:fc:eb:b5:4f: 17:fa:13:bd:ee:81:31:9c:d7:d9:ee:70:5c:10:e5: 62:77:cd:e5:2a:f6:2c:dd:d7:c7:90:81:48:aa:a6: 72:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F9:AC:64:7E:23:DC:50:B3:3D:23:69:F9:B2:44:4C:13:FC:AB:3B X509v3 Authority Key Identifier: keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/svmsZH4j3FCzPSNp-bJETBP8qzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.132.0/23 91.229.46.0/23 185.80.198.0/23 185.147.176.0/22 188.209.116.0/22 IPv6: 2a0b:1fc0::/29 Signature Algorithm: sha256WithRSAEncryption 17:13:1a:03:2b:f8:c2:4d:48:96:b9:09:2b:a8:11:83:8b:ca: a0:43:d5:6a:f2:7e:0c:10:fe:0a:39:5f:ab:1f:54:5b:cd:f9: 3a:8b:53:68:25:86:9f:33:41:d4:c7:e3:32:4a:40:a2:80:77: ae:90:7d:b8:4a:05:0c:ae:01:2b:95:42:03:1e:02:b0:65:f2: 0d:f5:b8:f5:83:38:c4:07:d6:a4:d1:a0:e4:ba:7b:4a:55:63: c2:ea:19:fc:70:1e:0b:2a:5f:82:93:0f:8d:0b:ad:49:95:ae: 50:71:20:9b:ca:79:56:66:e5:0c:27:c1:87:0d:81:5f:e3:5a: 3c:d8:12:d3:33:2f:40:54:c9:3b:31:e7:94:3d:54:81:64:47: 51:7c:ed:58:b3:42:d6:90:69:f1:6f:e7:63:3c:42:d3:1b:80: d1:e2:1c:9d:9e:80:b0:e1:f7:00:d2:35:52:87:49:97:b1:ae: 07:4b:5d:86:bd:8b:1d:ce:31:9b:6f:04:34:6d:c3:99:6c:5c: a6:0d:de:f7:cf:ad:c6:3f:ba:d7:78:c7:f4:5e:ba:30:4a:a3: 39:68:c9:7a:a6:6c:a8:2f:8f:fa:f2:2f:7f:9f:fe:53:36:75: 22:3a:5f:b1:a4:4e:6e:5b:0b:01:4e:96:ec:54:14:27:3f:99: 2b:e4:bf:64 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt/gfnOQL0k1thI4OBznK0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYzNhMDYyY2I5NmQ5YTNmMjFhOGIyZGE4NDhmODFjNmY3 M2JmOTUwHhcNMjYwMTAyMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmY5YWM2NDdlMjNkYzUwYjMzZDIzNjlmOWIyNDQ0YzEzZmNhYjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUtYxCXfChyqIEmuj5m/uru75vwe O/B4dhi3bavpTeF7yG3x/WAtrF7v0h9zD3AOdwy0dZsbzuDHSn/kSxhOG8P6aRjp noW/vnqTWBs/Elgj5wm0RoI0dK0P03U1f4hni/oC82BcTgvvn06XR7/kEA2ADOn2 9Ozdwsb3CkqhZ4Zz4hqnUM/wbVe5qPL1Sr/d91QaaVQKYLVRV4wLT0eMOk5ACwZO tEulEAGRb6//S549KklVV79FnEMD+Bmn4L8x17jSv7xDTv5TYiDbz94IxO0AXicN r4cxsd1ySPzrtU8X+hO97oExnNfZ7nBcEOVid83lKvYs3dfHkIFIqqZyWwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFLL5rGR+I9xQsz0jafmyREwT/Ks7MB8GA1UdIwQY MBaAFE7DoGLLltmj8hqLLahI+Bxvc7+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWIt ZjU2N2MzZTlmNWZmLzEvc3Ztc1pINGozRkN6UFNOcC1iSkVUQlA4cXpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWItZjU2N2MzZTlmNWZm LzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBW+SEAwQB W+UuAwQBuVDGAwQCuZOwAwQCvNF0MA0EAgACMAcDBQMqCx/AMA0GCSqGSIb3DQEB CwUAA4IBAQAXExoDK/jCTUiWuQkrqBGDi8qgQ9Vq8n4MEP4KOV+rH1Rbzfk6i1No JYafM0HUx+MySkCigHeukH24SgUMrgErlUIDHgKwZfIN9bj1gzjEB9ak0aDkuntK VWPC6hn8cB4LKl+Ckw+NC61Jla5QcSCbynlWZuUMJ8GHDYFf41o82BLTMy9AVMk7 MeeUPVSBZEdRfO1Ys0LWkGnxb+djPELTG4DR4hydnoCw4fcA0jVSh0mXsa4HS12G vYsdzjGbbwQ0bcOZbFymDd73z63GP7rXeMf0XrowSqM5aMl6pmyoL4/68i9/n/5T NnUiOl+xpE5uWwsBTpbsVBQnP5kr5L9k -----END CERTIFICATE-----Generated at Wed Feb 4 03:45:15 2026 by rpki-client