This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/SbmHVzvJLZyr_oPkt5P1usWrh6Q.roa File: SbmHVzvJLZyr_oPkt5P1usWrh6Q.roa (raw, json) Hash identifier: +6pflE25NuOpLZJ9n8zoa9cmzK6oT49Q5ARbBS4vrXQ= Subject key identifier: 49:B9:87:57:3B:C9:2D:9C:AB:FE:83:E4:B7:93:F5:BA:C5:AB:87:A4 Certificate issuer: /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2 Certificate serial: 019B7CECD4181B926DA902EA4280EDA06112 Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/SbmHVzvJLZyr_oPkt5P1usWrh6Q.roa Signing time: Fri 02 Jan 2026 04:17:34 +0000 ROA not before: Fri 02 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209620 IP address blocks: 193.58.88.0/22 maxlen: 24 193.58.91.0/24 maxlen: 24 194.55.240.0/22 maxlen: 24 2a0c:94c0::/29 maxlen: 48 2a0c:cbc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:d4:18:1b:92:6d:a9:02:ea:42:80:ed:a0:61:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2 Validity Not Before: Jan 2 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49b987573bc92d9cabfe83e4b793f5bac5ab87a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:64:a5:0f:8e:66:29:e6:a9:eb:68:d4:b1:35: 02:45:d7:e3:0c:a6:39:86:51:5c:db:f0:d4:4d:a6: fe:c6:36:c2:1d:b0:de:f0:67:08:3e:7e:8d:7b:57: d0:0b:04:d1:65:76:33:e1:38:90:53:01:9c:b7:6f: 22:87:b6:a1:c2:95:64:f5:3a:29:cd:5e:3e:c4:5f: 29:a1:db:dc:f1:94:b7:c5:df:67:1f:8c:72:8a:13: 15:7e:81:6c:b9:bd:56:a3:98:39:45:8f:18:6a:a9: 54:03:29:e8:0b:57:39:64:6b:39:90:f4:a7:64:00: c2:dd:1a:17:de:85:c6:4d:77:93:82:3e:94:ca:0b: dc:84:1c:90:5a:c6:cc:76:e6:58:fa:d7:3d:81:d9: f5:86:0b:c0:e4:a8:83:bb:76:ca:2e:e2:d7:d5:a4: ce:6c:3b:7f:89:15:30:d9:3b:b5:13:f3:b0:0f:fb: 16:6b:18:36:a7:8d:98:f7:76:85:e3:d5:26:0e:e2: a8:65:56:6f:e7:04:ec:31:cb:0f:3f:67:89:cb:7f: 77:8d:b4:d4:d9:94:b2:a5:c6:cc:c2:db:07:cf:5d: bd:f0:23:2c:2a:33:56:6d:ab:a4:82:cc:8b:6f:db: 7f:52:97:6b:31:d0:55:37:77:31:03:0a:03:98:a0: 22:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B9:87:57:3B:C9:2D:9C:AB:FE:83:E4:B7:93:F5:BA:C5:AB:87:A4 X509v3 Authority Key Identifier: keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/SbmHVzvJLZyr_oPkt5P1usWrh6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.58.88.0/22 194.55.240.0/22 IPv6: 2a0c:94c0::/29 2a0c:cbc0::/29 Signature Algorithm: sha256WithRSAEncryption 16:c5:55:ff:6d:2d:7c:2d:80:b3:f6:05:c9:06:22:8b:e5:30: a2:59:85:77:c7:97:63:aa:66:59:c6:3e:7f:4a:3d:14:87:97: c3:69:e5:d6:f9:e6:87:e5:a0:c9:e0:14:84:51:b3:65:b0:79: 81:9a:eb:0e:ba:b6:b7:44:c2:ed:3e:bd:3b:e6:60:93:6c:57: 20:8c:87:54:f9:e8:32:77:3a:07:78:bc:e9:bf:18:c0:ec:9f: 78:c2:bc:5a:16:d6:55:ec:4a:80:73:f1:17:de:7b:52:b6:89: 2a:4b:f0:53:ce:e4:04:41:8d:88:64:98:f0:d3:00:6d:48:22: 2e:12:ac:77:31:6a:68:2d:13:35:83:75:2d:b4:18:8e:31:39: 6c:0f:28:91:80:54:a7:77:d6:bc:a4:3c:66:04:ee:58:2e:b2: ad:e2:43:17:6e:d3:a4:1a:a1:b5:74:4c:c4:8a:35:69:fa:7a: 8d:de:1b:12:6b:b7:f3:8d:86:91:5a:81:31:fd:d0:1d:e3:8b: e3:24:06:fb:78:90:a0:23:9b:88:a6:a7:97:a5:36:95:81:8c: 14:46:75:c5:56:9a:f4:9b:84:3f:49:cd:22:99:e5:15:51:e5: b6:cf:1c:e9:1a:07:b7:80:91:c6:68:d3:0b:a2:e6:4a:e1:40: 9a:61:2a:13 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt87NQYG5JtqQLqQoDtoGESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MjNmZTZkYWQ4YWQ0ZmRhZWU2ZGQ2OTgzYzFlNTVjZGU4 NDgyYTIwHhcNMjYwMTAyMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWI5ODc1NzNiYzkyZDljYWJmZTgzZTRiNzkzZjViYWM1YWI4N2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWSlD45mKeap62jUsTUCRdfjDKY5 hlFc2/DUTab+xjbCHbDe8GcIPn6Ne1fQCwTRZXYz4TiQUwGct28ih7ahwpVk9Top zV4+xF8podvc8ZS3xd9nH4xyihMVfoFsub1Wo5g5RY8YaqlUAynoC1c5ZGs5kPSn ZADC3RoX3oXGTXeTgj6UygvchByQWsbMduZY+tc9gdn1hgvA5KiDu3bKLuLX1aTO bDt/iRUw2Tu1E/OwD/sWaxg2p42Y93aF49UmDuKoZVZv5wTsMcsPP2eJy393jbTU 2ZSypcbMwtsHz1298CMsKjNWbaukgsyLb9t/UpdrMdBVN3cxAwoDmKAiSQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEm5h1c7yS2cq/6D5LeT9brFq4ekMB8GA1UdIwQY MBaAFKgj/m2titT9rubdaYPB5VzehIKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wMzg1NjAtMjZkNi00NTVkLWE4ZjQt OWJmZGYyMjUxMjY3LzEvU2JtSFZ6dkpMWnlyX29Qa3Q1UDF1c1dyaDZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wMzg1NjAtMjZkNi00NTVkLWE4ZjQtOWJmZGYyMjUxMjY3 LzEvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCwTpYAwQC wjfwMBQEAgACMA4DBQMqDJTAAwUDKgzLwDANBgkqhkiG9w0BAQsFAAOCAQEAFsVV /20tfC2As/YFyQYii+UwolmFd8eXY6pmWcY+f0o9FIeXw2nl1vnmh+WgyeAUhFGz ZbB5gZrrDrq2t0TC7T69O+Zgk2xXIIyHVPnoMnc6B3i86b8YwOyfeMK8WhbWVexK gHPxF957UraJKkvwU87kBEGNiGSY8NMAbUgiLhKsdzFqaC0TNYN1LbQYjjE5bA8o kYBUp3fWvKQ8ZgTuWC6yreJDF27TpBqhtXRMxIo1afp6jd4bEmu3842GkVqBMf3Q HeOL4yQG+3iQoCObiKanl6U2lYGMFEZ1xVaa9JuEP0nNIpnlFVHlts8c6RoHt4CR xmjTC6LmSuFAmmEqEw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:40 2026 by rpki-client