This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/sSmC3l_jggPTfMI9spsiTTTpA4c.roa File: sSmC3l_jggPTfMI9spsiTTTpA4c.roa (raw, json) Hash identifier: IzFAashhzt5rpauY61tYv7v02lVoWpZ44U6DK+IV5qM= Subject key identifier: B1:29:82:DE:5F:E3:82:03:D3:7C:C2:3D:B2:9B:22:4D:34:E9:03:87 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1323D18744FE5C7FB6FF67AFABA0FE Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/sSmC3l_jggPTfMI9spsiTTTpA4c.roa Signing time: Fri 02 Jan 2026 00:19:47 +0000 ROA not before: Fri 02 Jan 2026 00:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43160 IP address blocks: 185.244.229.0/24 maxlen: 24 185.244.230.0/24 maxlen: 24 185.244.231.0/24 maxlen: 24 185.246.13.0/24 maxlen: 24 185.246.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:23:d1:87:44:fe:5c:7f:b6:ff:67:af:ab:a0:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b12982de5fe38203d37cc23db29b224d34e90387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:31:be:d6:a0:1a:13:72:44:5f:bc:9f:2b:8b: a8:b4:df:15:6b:12:e5:61:90:1b:8e:72:cc:ef:02: 97:97:41:b8:e4:7d:2b:d6:09:dc:1e:73:d4:78:52: f8:7e:fa:f8:0f:2c:76:81:01:cc:f6:74:e7:18:2e: a3:d1:73:f0:db:b6:8f:1d:36:89:d9:84:20:9e:01: 40:03:dd:43:61:8e:ea:f3:e9:45:05:06:13:5a:86: a6:86:ba:ea:4a:ba:d9:5f:b9:c3:a8:d8:7d:e0:05: af:d4:ca:7c:bb:4a:a7:8b:1b:e3:3f:51:69:cb:1d: 36:91:d6:45:0c:4a:f5:fd:0a:7e:1f:5f:ce:7c:51: 9e:98:4c:83:e8:d9:e1:2f:3e:95:56:aa:a6:34:0d: 73:e1:5f:08:4d:53:26:72:ba:55:80:a9:32:61:86: 56:d0:51:cc:ce:2e:1f:13:58:d1:c9:02:c3:aa:ca: 6b:b9:9a:33:d7:d7:68:25:1e:c6:17:28:56:ea:f2: aa:c9:65:2d:97:d1:b9:f0:7c:ab:d4:bd:6d:c2:f2: c0:f6:c2:4a:f3:94:aa:d3:8e:df:98:d0:5f:d3:b4: 88:8b:c9:85:4b:17:ce:bb:0b:6a:03:bd:2e:99:f5: 1a:ce:2c:29:f5:29:22:32:9a:a2:9e:33:35:77:a9: ca:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:29:82:DE:5F:E3:82:03:D3:7C:C2:3D:B2:9B:22:4D:34:E9:03:87 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/sSmC3l_jggPTfMI9spsiTTTpA4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.229.0-185.244.231.255 185.246.13.0/24 185.246.15.0/24 Signature Algorithm: sha256WithRSAEncryption 23:b0:a1:5e:14:27:34:2d:72:e6:7b:02:d0:1d:2a:89:4b:60: d4:69:1e:fa:aa:10:71:a1:97:0b:1c:a7:30:f9:4f:27:e3:93: da:76:0e:cf:03:73:ba:62:e3:5e:44:8f:53:af:ff:af:18:46: ff:b4:7a:f0:33:34:d4:b4:dc:b9:46:a8:9c:a9:39:05:28:db: a4:f2:bf:ac:c8:8a:72:44:b3:2c:48:00:bf:1d:73:dc:55:bb: 51:92:5a:9a:33:57:42:3e:3e:17:2d:c6:37:45:15:29:bd:6b: b5:a3:95:90:ed:b2:89:ae:63:ee:9d:85:a7:d6:6d:66:39:75: a5:ce:01:b3:2a:a3:09:e3:c8:2c:f3:d7:af:29:08:49:f0:4f: 73:87:95:51:0c:d4:8a:dd:62:b0:cf:43:4c:bf:14:89:53:76: 73:08:12:03:9a:35:bd:9d:5f:38:19:fa:dd:3d:17:e2:c4:02: a2:c1:e5:d6:73:48:34:dd:1c:b8:7f:84:24:8b:38:0d:d0:09: 85:f7:62:c8:12:8a:57:68:d1:02:81:f0:3a:4a:5f:0c:76:5f: 97:31:dd:15:b0:a7:69:82:62:8b:71:c9:23:42:60:af:30:37: 70:7d:34:89:71:4e:4c:11:a1:63:89:06:84:c5:8f:cc:3d:f4: e1:a1:58:02 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt8EyPRh0T+XH+2/2evq6D+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTI5ODJkZTVmZTM4MjAzZDM3Y2MyM2RiMjliMjI0ZDM0ZTkwMzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DG+1qAaE3JEX7yfK4uotN8VaxLl YZAbjnLM7wKXl0G45H0r1gncHnPUeFL4fvr4Dyx2gQHM9nTnGC6j0XPw27aPHTaJ 2YQgngFAA91DYY7q8+lFBQYTWoamhrrqSrrZX7nDqNh94AWv1Mp8u0qnixvjP1Fp yx02kdZFDEr1/Qp+H1/OfFGemEyD6NnhLz6VVqqmNA1z4V8ITVMmcrpVgKkyYYZW 0FHMzi4fE1jRyQLDqspruZoz19doJR7GFyhW6vKqyWUtl9G58Hyr1L1twvLA9sJK 85Sq047fmNBf07SIi8mFSxfOuwtqA70umfUaziwp9SkiMpqinjM1d6nKgQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFLEpgt5f44ID03zCPbKbIk006QOHMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvc1NtQzNsX2pnZ1BUZk1JOXNwc2lUVFRwQTRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAC59OUD BAO59OADBAC59g0DBAC59g8wDQYJKoZIhvcNAQELBQADggEBACOwoV4UJzQtcuZ7 AtAdKolLYNRpHvqqEHGhlwscpzD5Tyfjk9p2Ds8Dc7pi415Ej1Ov/68YRv+0evAz NNS03LlGqJypOQUo26Tyv6zIinJEsyxIAL8dc9xVu1GSWpozV0I+PhctxjdFFSm9 a7WjlZDtsomuY+6dhafWbWY5daXOAbMqownjyCzz168pCEnwT3OHlVEM1IrdYrDP Q0y/FIlTdnMIEgOaNb2dXzgZ+t09F+LEAqLB5dZzSDTdHLh/hCSLOA3QCYX3YsgS ildo0QKB8DpKXwx2X5cx3RWwp2mCYotxySNCYK8wN3B9NIlxTkwRoWOJBoTFj8w9 9OGhWAI= -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:23 2026 by rpki-client