This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/SNRyT-psWpKwoGXfunZN_2dqMhE.roa File: SNRyT-psWpKwoGXfunZN_2dqMhE.roa (raw, json) Hash identifier: bm+f2jYvd0y98N9DxFt8D+iBDNL+FFbwvDEiyUs3DUA= Subject key identifier: 48:D4:72:4F:EA:6C:5A:92:B0:A0:65:DF:BA:76:4D:FF:67:6A:32:11 Certificate issuer: /CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c Certificate serial: 019B76EB99F317C1EFD28481BA0E80C8546C Authority key identifier: 1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/SNRyT-psWpKwoGXfunZN_2dqMhE.roa Signing time: Thu 01 Jan 2026 00:18:30 +0000 ROA not before: Thu 01 Jan 2026 00:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41495 IP address blocks: 46.227.200.0/21 maxlen: 24 185.134.196.0/22 maxlen: 24 2a01:9e00::/29 maxlen: 32 2a01:9e00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:99:f3:17:c1:ef:d2:84:81:ba:0e:80:c8:54:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c Validity Not Before: Jan 1 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48d4724fea6c5a92b0a065dfba764dff676a3211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e6:df:fe:c6:f2:0a:a3:46:8c:40:5e:d7:da: 64:1c:a8:97:fe:91:7f:3c:cd:74:10:d6:4e:19:79: 93:6b:90:3d:f8:1b:86:83:d6:b1:c5:62:68:23:28: a0:6c:12:41:f7:2f:3f:44:3e:e3:0c:62:e6:10:bd: d1:41:3b:33:f3:4d:e5:6a:3a:35:3e:35:7a:49:67: c9:4b:88:c0:c0:ba:99:b5:4b:43:b9:7e:b1:69:22: 70:74:5d:cf:0d:1e:33:1d:ea:d5:89:cc:97:a3:87: 2d:b5:7a:b4:0f:5f:78:87:98:be:38:b8:5c:4c:d4: f4:7e:60:34:a0:72:00:21:1c:5d:db:92:b6:c5:b8: 5d:42:6a:e0:44:ad:6f:da:28:2b:83:9d:56:dd:62: 01:0a:66:af:21:f2:69:aa:7c:d3:95:9e:d3:50:74: bc:e8:b5:3e:4a:24:58:f4:7c:a6:4f:4d:3c:06:14: 09:e6:2e:76:33:92:a4:7d:54:08:c8:74:de:5e:16: 61:61:f1:0d:f7:8b:5e:79:87:63:39:56:e9:12:c0: 7b:ba:c2:ba:25:a6:fb:13:78:2a:12:cd:ca:22:f1: f2:5e:0d:95:db:d5:b5:89:e5:eb:8d:54:72:dd:6d: 21:0b:0a:64:dd:18:1c:6b:87:3f:ed:a8:cd:98:9b: 5f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D4:72:4F:EA:6C:5A:92:B0:A0:65:DF:BA:76:4D:FF:67:6A:32:11 X509v3 Authority Key Identifier: keyid:1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/SNRyT-psWpKwoGXfunZN_2dqMhE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.200.0/21 185.134.196.0/22 IPv6: 2a01:9e00::/29 Signature Algorithm: sha256WithRSAEncryption 79:c7:cb:8f:45:c9:fe:75:4e:9b:7d:3c:bf:e1:16:34:8a:8e: 14:1c:8f:66:73:9b:c8:63:17:9e:0e:f1:d9:be:18:e3:90:15: 2c:98:ff:87:4a:7b:19:3c:46:e0:e8:6e:80:35:fc:19:eb:65: 0d:13:a5:03:0e:8f:e3:91:68:09:81:14:ea:46:56:ae:fb:cc: fe:6f:a9:38:6a:05:f5:a7:73:a5:5b:d1:8b:6d:9d:ec:7e:db: 1f:1c:fb:42:90:93:2a:b2:8f:ec:88:c4:0d:d9:99:f5:2a:2b: 1d:91:03:72:92:93:a0:26:b6:a8:ed:df:40:53:2d:d0:49:b3: d7:a4:27:0d:4e:c2:19:7d:e7:7b:cb:bf:db:d4:7b:9f:48:6a: 5d:a8:fc:b1:97:9e:db:e4:14:b3:86:6e:4e:5d:ca:32:e7:1f: 6c:f3:b8:7f:f5:67:e3:ae:26:f6:32:b9:83:de:4b:61:01:bc: dd:87:f3:f8:cd:ac:51:15:29:53:f2:79:ce:ca:02:db:46:d1: f7:65:0c:ca:17:5c:95:13:cf:6e:7d:93:9a:95:da:bc:6a:92: 3e:8d:c7:a5:ce:cf:cb:6e:2f:0f:c0:d2:96:07:04:fa:a2:3a: b7:9a:7c:be:6b:7b:cb:d1:26:8d:85:c9:86:0b:22:a0:43:c4: 77:32:a6:a1 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt265nzF8Hv0oSBug6AyFRsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTAyZGJlZTYyYzk4ZjAxZjIwZjQ3NzBkMTZhNDdmNzlh YmUzMmMwHhcNMjYwMTAxMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGQ0NzI0ZmVhNmM1YTkyYjBhMDY1ZGZiYTc2NGRmZjY3NmEzMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+bf/sbyCqNGjEBe19pkHKiX/pF/ PM10ENZOGXmTa5A9+BuGg9axxWJoIyigbBJB9y8/RD7jDGLmEL3RQTsz803lajo1 PjV6SWfJS4jAwLqZtUtDuX6xaSJwdF3PDR4zHerVicyXo4cttXq0D194h5i+OLhc TNT0fmA0oHIAIRxd25K2xbhdQmrgRK1v2igrg51W3WIBCmavIfJpqnzTlZ7TUHS8 6LU+SiRY9HymT008BhQJ5i52M5KkfVQIyHTeXhZhYfEN94teeYdjOVbpEsB7usK6 Jab7E3gqEs3KIvHyXg2V29W1ieXrjVRy3W0hCwpk3Rgca4c/7ajNmJtfOwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEjUck/qbFqSsKBl37p2Tf9najIRMB8GA1UdIwQY MBaAFB/gLb7mLJjwHyD0dw0WpH95q+MsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1BdHZ1WXNtUEFmSVBSM0RSYWtmM21yNHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9hMTJhMzAtZDYwZi00MDMyLTg4NjMt MjEyNTNlYTlmM2E0LzEvU05SeVQtcHNXcEt3b0dYZnVuWk5fMmRxTWhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9hMTJhMzAtZDYwZi00MDMyLTg4NjMtMjEyNTNlYTlmM2E0 LzEvSC1BdHZ1WXNtUEFmSVBSM0RSYWtmM21yNHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLuPIAwQC uYbEMA0EAgACMAcDBQMqAZ4AMA0GCSqGSIb3DQEBCwUAA4IBAQB5x8uPRcn+dU6b fTy/4RY0io4UHI9mc5vIYxeeDvHZvhjjkBUsmP+HSnsZPEbg6G6ANfwZ62UNE6UD Do/jkWgJgRTqRlau+8z+b6k4agX1p3OlW9GLbZ3sftsfHPtCkJMqso/siMQN2Zn1 KisdkQNykpOgJrao7d9AUy3QSbPXpCcNTsIZfed7y7/b1HufSGpdqPyxl57b5BSz hm5OXcoy5x9s87h/9Wfjrib2MrmD3kthAbzdh/P4zaxRFSlT8nnOygLbRtH3ZQzK F1yVE89ufZOaldq8apI+jcelzs/Lbi8PwNKWBwT6ojq3mny+a3vL0SaNhcmGCyKg Q8R3Mqah -----END CERTIFICATE-----Generated at Tue Jan 27 01:41:54 2026 by rpki-client