This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/SNXaMmatRq7Y2yZacERGh_Byx3c.roa File: SNXaMmatRq7Y2yZacERGh_Byx3c.roa (raw, json) Hash identifier: 1VfAG/PWe9ADh3l7lJxuP3CaKheNhNOZc9+mMKVHmsc= Subject key identifier: 48:D5:DA:32:66:AD:46:AE:D8:DB:26:5A:70:44:46:87:F0:72:C7:77 Certificate issuer: /CN=969ceda5bf37901fe9e44f73b5bf82b687b34572 Certificate serial: 019B77596BB3B116E380128499D6DE04CA0A Authority key identifier: 96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/SNXaMmatRq7Y2yZacERGh_Byx3c.roa Signing time: Thu 01 Jan 2026 02:18:27 +0000 ROA not before: Thu 01 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39662 IP address blocks: 87.239.120.0/21 maxlen: 24 87.239.121.0/24 maxlen: 24 93.190.96.0/21 maxlen: 24 93.190.102.0/23 maxlen: 23 2a00:13f0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6b:b3:b1:16:e3:80:12:84:99:d6:de:04:ca:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969ceda5bf37901fe9e44f73b5bf82b687b34572 Validity Not Before: Jan 1 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48d5da3266ad46aed8db265a70444687f072c777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:e8:c7:4c:09:e7:42:63:5b:63:58:0e:f8: 64:0b:5a:5f:0d:6d:73:51:90:b4:12:51:b1:d7:87: ae:b6:82:84:96:24:4b:09:85:dd:30:42:d9:02:1e: 36:22:67:c0:75:38:fa:42:71:1f:ce:15:70:39:99: d9:a8:f6:c5:9d:eb:23:1b:83:b3:b3:d2:e4:06:35: 34:08:17:29:0e:53:25:c8:62:ef:15:81:cc:e5:0e: 52:59:5c:d5:ab:f2:26:f6:2b:93:d8:40:f4:a5:2b: 2e:59:ef:3d:e2:9d:63:6b:f2:b1:04:71:6d:42:98: 24:c8:2a:64:10:26:f3:4b:bb:e6:2d:78:8e:ec:17: 4c:c9:68:64:62:52:e2:ec:7a:9c:b4:2a:f1:3e:fc: fd:32:d9:b8:e7:2c:37:21:c4:1f:5b:f2:02:3d:81: 1a:82:c2:37:00:9a:35:e8:1c:ba:5f:54:24:1f:a3: 0f:be:a6:aa:ac:ba:dd:9a:6c:b9:b5:9f:a8:5b:24: b0:00:3b:dc:b0:04:d5:90:28:f3:a5:1b:c7:ae:33: 4e:10:d8:ab:1c:47:9a:14:7f:44:12:44:89:84:ce: 75:d6:ff:dd:81:a5:a6:59:66:23:29:22:29:6c:a4: ab:7f:92:64:fe:9d:40:fd:2f:c8:20:64:1a:b2:c1: 95:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D5:DA:32:66:AD:46:AE:D8:DB:26:5A:70:44:46:87:F0:72:C7:77 X509v3 Authority Key Identifier: keyid:96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/SNXaMmatRq7Y2yZacERGh_Byx3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.239.120.0/21 93.190.96.0/21 IPv6: 2a00:13f0::/32 Signature Algorithm: sha256WithRSAEncryption 2a:18:9e:1f:8a:6f:66:e2:49:2e:be:a8:32:b5:2c:94:7f:84: 6d:92:2c:9a:68:32:3f:2a:98:48:a7:8f:5f:08:d1:50:2c:6a: 2a:68:22:e9:36:cd:30:da:99:07:6a:16:0a:30:8a:ff:fc:09: c2:49:3d:f3:1b:73:d5:5c:08:56:2b:90:b7:8e:eb:9b:a4:0d: 58:c8:7f:1a:6c:18:c6:be:1b:4b:60:35:49:ea:5c:e9:8a:ef: fa:64:ec:e6:46:1f:2c:f7:01:3d:70:d2:ab:3a:55:f2:d2:f4: fd:01:41:a2:6b:29:04:eb:2f:ed:63:39:e2:b6:38:ef:33:55: 7e:e8:32:94:15:4d:5c:b0:30:15:cd:37:ad:ee:dd:9e:50:d4: 2f:2f:15:8b:64:e5:c9:44:a7:df:57:68:0d:58:d0:1b:dc:de: 4f:37:e1:92:48:97:79:71:4b:47:78:a5:68:b3:3b:a3:42:21: ec:08:9d:4a:c1:74:9e:31:78:f2:4e:c2:32:5f:6f:e1:69:b6: 5f:d5:9d:30:32:ec:36:25:9a:30:6f:55:3e:e9:f4:8a:78:49: f4:72:53:69:f2:84:7b:c6:d5:c9:2e:da:d2:5e:c0:8e:d6:51: 2c:39:ed:98:d3:ea:2e:54:71:e1:87:f9:31:2b:2e:14:3d:10: de:c6:2f:5d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WWuzsRbjgBKEmdbeBMoKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OWNlZGE1YmYzNzkwMWZlOWU0NGY3M2I1YmY4MmI2ODdi MzQ1NzIwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGQ1ZGEzMjY2YWQ0NmFlZDhkYjI2NWE3MDQ0NDY4N2YwNzJjNzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5Pox0wJ50JjW2NYDvhkC1pfDW1z UZC0ElGx14eutoKEliRLCYXdMELZAh42ImfAdTj6QnEfzhVwOZnZqPbFnesjG4Oz s9LkBjU0CBcpDlMlyGLvFYHM5Q5SWVzVq/Im9iuT2ED0pSsuWe894p1ja/KxBHFt QpgkyCpkECbzS7vmLXiO7BdMyWhkYlLi7HqctCrxPvz9Mtm45yw3IcQfW/ICPYEa gsI3AJo16By6X1QkH6MPvqaqrLrdmmy5tZ+oWySwADvcsATVkCjzpRvHrjNOENir HEeaFH9EEkSJhM511v/dgaWmWWYjKSIpbKSrf5Jk/p1A/S/IIGQassGVDwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEjV2jJmrUau2NsmWnBERofwcsd3MB8GA1UdIwQY MBaAFJac7aW/N5Af6eRPc7W/graHs0VyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHB6dHBiODNrQl9wNUU5enRiLUN0b2V6UlhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81Y2ZmZDItYjU2OC00ZDU1LWExMjQt MjFmYzlhZmM4YWMxLzEvU05YYU1tYXRScTdZMnlaYWNFUkdoX0J5eDNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS81Y2ZmZDItYjU2OC00ZDU1LWExMjQtMjFmYzlhZmM4YWMx LzEvbHB6dHBiODNrQl9wNUU5enRiLUN0b2V6UlhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDV+94AwQD Xb5gMA0EAgACMAcDBQAqABPwMA0GCSqGSIb3DQEBCwUAA4IBAQAqGJ4fim9m4kku vqgytSyUf4RtkiyaaDI/KphIp49fCNFQLGoqaCLpNs0w2pkHahYKMIr//AnCST3z G3PVXAhWK5C3juubpA1YyH8abBjGvhtLYDVJ6lzpiu/6ZOzmRh8s9wE9cNKrOlXy 0vT9AUGiaykE6y/tYznitjjvM1V+6DKUFU1csDAVzTet7t2eUNQvLxWLZOXJRKff V2gNWNAb3N5PN+GSSJd5cUtHeKVoszujQiHsCJ1KwXSeMXjyTsIyX2/habZf1Z0w Muw2JZowb1U+6fSKeEn0clNp8oR7xtXJLtrSXsCO1lEsOe2Y0+ouVHHhh/kxKy4U PRDexi9d -----END CERTIFICATE-----Generated at Tue Jan 20 18:35:47 2026 by rpki-client