This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/Sp-Rp44m3Zt8RuuF6n5097S4ock.roa File: Sp-Rp44m3Zt8RuuF6n5097S4ock.roa (raw, json) Hash identifier: Lz4ywdxNN6CBi6o+N2fbgHtT/99fDk01I1Om7/73lR4= Subject key identifier: 4A:9F:91:A7:8E:26:DD:9B:7C:46:EB:85:EA:7E:74:F7:B4:B8:A1:C9 Certificate issuer: /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089 Certificate serial: 019B7A5B9C81A75CC7C3AE14191A33EA784A Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/Sp-Rp44m3Zt8RuuF6n5097S4ock.roa Signing time: Thu 01 Jan 2026 16:19:42 +0000 ROA not before: Thu 01 Jan 2026 16:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201606 IP address blocks: 185.69.80.0/22 maxlen: 22 185.69.80.0/24 maxlen: 24 185.69.81.0/24 maxlen: 24 185.69.82.0/24 maxlen: 24 185.69.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9c:81:a7:5c:c7:c3:ae:14:19:1a:33:ea:78:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089 Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a9f91a78e26dd9b7c46eb85ea7e74f7b4b8a1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:76:b9:7e:92:ca:fb:8d:02:bf:3c:84:ad:49: 42:a9:8b:db:69:dc:6f:c5:d8:53:87:85:98:24:a4: c2:11:da:30:54:a8:f9:10:f6:bd:37:b7:25:d4:42: f9:15:96:07:4d:73:45:a1:41:27:16:5b:28:5d:c0: c9:92:90:85:44:76:ac:85:82:23:14:19:6b:7b:45: 4e:89:ff:cc:b2:e9:b5:97:26:95:9f:6e:03:21:5e: fc:e4:7c:67:97:df:83:e9:eb:2b:72:77:e9:f5:f8: e2:75:92:38:33:e9:9f:a7:55:f7:6b:2a:21:d7:ad: eb:58:bc:2d:81:de:de:e0:45:6c:da:ba:dd:c7:24: 21:a2:58:3d:04:c9:d8:d0:a2:ed:71:42:3e:5c:19: be:cf:32:e4:eb:0a:c9:9d:ec:7a:d8:25:66:84:ff: e3:a7:5a:83:2e:64:95:94:31:ac:4a:1d:3b:60:00: 49:99:dc:6a:3d:32:28:b3:88:91:92:a5:e3:ea:c7: c2:8e:0b:70:28:e8:d3:e1:f6:bf:25:e8:ce:2c:72: c3:f5:da:51:22:68:b0:c9:41:81:95:dc:27:08:88: 29:7b:73:51:e4:85:8e:f0:3c:50:40:90:4a:9a:77: e3:26:94:b9:34:f0:19:e3:db:88:2e:07:c4:66:3a: 59:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9F:91:A7:8E:26:DD:9B:7C:46:EB:85:EA:7E:74:F7:B4:B8:A1:C9 X509v3 Authority Key Identifier: keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/Sp-Rp44m3Zt8RuuF6n5097S4ock.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.80.0/22 Signature Algorithm: sha256WithRSAEncryption 01:c9:4f:fe:d8:c8:e7:b6:c3:33:34:9c:d3:d6:fc:c0:00:4d: d5:5e:0f:43:c3:ea:be:8b:20:54:65:c6:7a:3a:53:78:72:b9: b9:b0:83:ec:e5:a8:68:a9:7f:8a:23:4d:7f:13:7f:27:80:93: 19:6e:d1:47:eb:a5:3b:46:29:a2:05:82:72:7e:04:2a:7a:94: eb:f0:13:23:af:15:a7:da:df:97:71:da:d6:50:19:0f:9e:9b: bd:cb:d4:1e:c7:a0:f1:18:30:b8:58:74:c2:ec:0e:b6:48:a5: e8:58:95:d0:6f:f5:3e:99:dc:00:6e:ff:1a:dc:9f:68:7f:2c: b3:60:25:63:fb:ed:6b:0c:b4:b6:7f:3b:3a:b0:21:9d:79:d4: 6f:f9:15:fb:22:1b:2a:b6:7e:f8:21:3d:1e:98:8c:3d:28:63: 37:80:64:b2:37:9b:b5:02:cf:53:dd:b9:20:f1:d2:e4:00:40: 90:ad:aa:a5:48:46:f2:90:34:1f:ed:50:6a:68:f7:31:9f:6b: fa:4e:c1:e7:19:ca:10:a2:1e:8b:b3:0f:83:3c:d5:fc:89:a6: 6f:03:1d:bc:0c:70:cb:60:b9:d2:02:67:3b:a0:56:00:9e:9d: bb:f2:1c:d6:6d:a0:4f:e9:58:91:b0:77:c7:dc:c2:d8:90:72: 50:66:a4:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5yBp1zHw64UGRoz6nhKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNzE3OWVmZjVlMGU2N2QwMzM3YWE4OTEyZjk1YTY4N2Zk NDQwODkwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTlmOTFhNzhlMjZkZDliN2M0NmViODVlYTdlNzRmN2I0YjhhMWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3a5fpLK+40CvzyErUlCqYvbadxv xdhTh4WYJKTCEdowVKj5EPa9N7cl1EL5FZYHTXNFoUEnFlsoXcDJkpCFRHashYIj FBlre0VOif/Msum1lyaVn24DIV785Hxnl9+D6esrcnfp9fjidZI4M+mfp1X3ayoh 163rWLwtgd7e4EVs2rrdxyQholg9BMnY0KLtcUI+XBm+zzLk6wrJnex62CVmhP/j p1qDLmSVlDGsSh07YABJmdxqPTIos4iRkqXj6sfCjgtwKOjT4fa/JejOLHLD9dpR ImiwyUGBldwnCIgpe3NR5IWO8DxQQJBKmnfjJpS5NPAZ49uILgfEZjpZ9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEqfkaeOJt2bfEbrhep+dPe0uKHJMB8GA1UdIwQY MBaAFF9xee/14OZ9AzeqiRL5Wmh/1ECJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jNDRkOTMtMTY5NS00YWIxLTkxNDIt NDI5NmQ3YWJkM2QxLzEvU3AtUnA0NG0zWnQ4UnV1RjZuNTA5N1M0b2NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jNDRkOTMtMTY5NS00YWIxLTkxNDItNDI5NmQ3YWJkM2Qx LzEvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUVQMA0G CSqGSIb3DQEBCwUAA4IBAQAByU/+2MjntsMzNJzT1vzAAE3VXg9Dw+q+iyBUZcZ6 OlN4crm5sIPs5ahoqX+KI01/E38ngJMZbtFH66U7RimiBYJyfgQqepTr8BMjrxWn 2t+XcdrWUBkPnpu9y9Qex6DxGDC4WHTC7A62SKXoWJXQb/U+mdwAbv8a3J9ofyyz YCVj++1rDLS2fzs6sCGdedRv+RX7Ihsqtn74IT0emIw9KGM3gGSyN5u1As9T3bkg 8dLkAECQraqlSEbykDQf7VBqaPcxn2v6TsHnGcoQoh6Lsw+DPNX8iaZvAx28DHDL YLnSAmc7oFYAnp278hzWbaBP6ViRsHfH3MLYkHJQZqQQ -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:14 2026 by rpki-client