This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/spphO4hOBArOq2uvlMH_udCd6UY.roa File: spphO4hOBArOq2uvlMH_udCd6UY.roa (raw, json) Hash identifier: lnnK0oGEj0iFi7KFhOVFgJ9Aw/tzmzgnPmc7SqloDLU= Subject key identifier: B2:9A:61:3B:88:4E:04:0A:CE:AB:6B:AF:94:C1:FF:B9:D0:9D:E9:46 Certificate issuer: /CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8 Certificate serial: 019B7E37BE2CFB5024738531CB5BF366C64D Authority key identifier: D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/spphO4hOBArOq2uvlMH_udCd6UY.roa Signing time: Fri 02 Jan 2026 10:19:00 +0000 ROA not before: Fri 02 Jan 2026 10:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200742 IP address blocks: 185.97.124.0/22 maxlen: 22 185.97.124.0/24 maxlen: 24 185.97.125.0/24 maxlen: 24 185.97.126.0/24 maxlen: 24 185.97.127.0/24 maxlen: 24 2a06:600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:be:2c:fb:50:24:73:85:31:cb:5b:f3:66:c6:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8 Validity Not Before: Jan 2 10:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b29a613b884e040aceab6baf94c1ffb9d09de946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:76:d1:86:26:25:53:bb:d2:82:5f:db:3f: 43:61:76:10:41:34:84:9b:e3:13:81:24:a6:bc:1a: 19:f3:99:63:3c:07:f8:a4:9b:18:d1:21:49:5e:b4: 5c:90:a4:d7:7d:f3:99:8a:07:2f:db:6b:31:13:12: 84:99:ec:bd:f8:f3:75:b7:cb:1e:58:56:6b:85:dc: cb:da:32:e1:22:bf:b5:2f:33:4d:c2:e5:96:b3:17: 77:b9:e6:91:78:ed:6c:b6:0d:b7:a1:41:30:7d:e0: fb:d5:72:c4:9b:26:01:ac:33:b9:3a:88:08:9a:fa: 3e:a1:4d:ce:fa:f7:3b:d4:6b:56:11:9a:47:5e:6a: 51:2a:f1:29:c8:f3:4a:2d:6f:63:79:95:d3:8d:89: 8e:5d:6e:60:09:a3:c6:ea:de:43:17:07:67:af:ed: e9:6b:e2:1d:0d:2d:ac:44:a6:cf:6e:7a:2c:ed:7b: 84:88:83:d1:a6:d6:66:a4:d7:1d:c4:42:56:44:1f: a1:6c:87:c4:43:9f:20:c0:3a:64:c9:ae:e1:fb:50: 30:a8:c8:6a:19:8e:19:fe:25:40:6c:bf:f8:1a:ef: 21:96:d7:81:8d:ca:ff:dd:c4:5b:e8:7f:19:03:c9: ea:33:48:9a:9e:15:e9:6f:fb:da:2e:09:6c:4e:21: 37:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9A:61:3B:88:4E:04:0A:CE:AB:6B:AF:94:C1:FF:B9:D0:9D:E9:46 X509v3 Authority Key Identifier: keyid:D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/spphO4hOBArOq2uvlMH_udCd6UY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.124.0/22 IPv6: 2a06:600::/29 Signature Algorithm: sha256WithRSAEncryption 16:e2:3b:da:ce:46:ab:7c:6d:6a:15:56:02:b5:fd:2c:b7:ae: ee:5a:a5:ad:03:b9:67:e8:e6:f7:ec:54:9e:e7:42:63:b8:ae: 26:b5:c8:b4:49:56:6c:87:b0:46:49:ad:df:a3:cf:1c:6f:c8: d0:6e:44:53:d9:f1:9c:81:85:79:c6:a1:15:31:3b:7c:03:d8: d0:2b:1b:b3:15:2f:64:87:68:52:60:cf:80:f5:20:00:ca:15: 0d:09:1c:16:67:2b:9b:9e:13:eb:e2:1d:e1:dd:74:29:3a:ef: 3d:d7:cb:bc:20:7f:8d:44:a1:f5:b0:7f:80:3e:c5:41:ef:23: b0:4e:54:99:eb:b0:a1:98:d5:7c:02:c7:33:03:a4:51:f8:d8: 4b:33:68:23:52:87:8c:dc:90:18:8f:37:96:4a:ba:cb:f0:ff: 1b:8c:0e:7c:7e:d2:ec:ab:55:05:11:d6:a2:35:ff:5b:01:34: ad:10:c6:3f:9e:16:7b:e1:39:76:3a:30:86:10:09:e0:d3:db: 5e:4f:cd:e4:4f:9f:6f:a6:c0:2f:f8:42:df:9c:d5:6a:d0:e7: 20:da:a9:e5:44:a7:8e:a0:94:6e:8a:b2:35:fb:2e:1b:33:c0: dc:4d:77:b0:0a:e1:a1:f5:d5:18:78:9c:43:74:44:6b:d9:fe: 3f:6f:15:68 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+N74s+1Akc4Uxy1vzZsZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMGM4OGQ4MmQyZmFjODIyMDNkNDJhMjQyZDZlYjc2M2Qx M2JiZjgwHhcNMjYwMTAyMTAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjlhNjEzYjg4NGUwNDBhY2VhYjZiYWY5NGMxZmZiOWQwOWRlOTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfh20YYmJVO70oJf2z9DYXYQQTSE m+MTgSSmvBoZ85ljPAf4pJsY0SFJXrRckKTXffOZigcv22sxExKEmey9+PN1t8se WFZrhdzL2jLhIr+1LzNNwuWWsxd3ueaReO1stg23oUEwfeD71XLEmyYBrDO5OogI mvo+oU3O+vc71GtWEZpHXmpRKvEpyPNKLW9jeZXTjYmOXW5gCaPG6t5DFwdnr+3p a+IdDS2sRKbPbnos7XuEiIPRptZmpNcdxEJWRB+hbIfEQ58gwDpkya7h+1AwqMhq GY4Z/iVAbL/4Gu8hlteBjcr/3cRb6H8ZA8nqM0ianhXpb/vaLglsTiE3kwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLKaYTuITgQKzqtrr5TB/7nQnelGMB8GA1UdIwQY MBaAFNEMiNgtL6yCID1CokLW63Y9E7v4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFF5STJDMHZySUlnUFVLaVF0YnJkajBUdV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS84ZWQwMTgtMDhmMy00Nzc3LTlkZDQt ZGUyNDVhZjRmYWNiLzEvc3BwaE80aE9CQXJPcTJ1dmxNSF91ZENkNlVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS84ZWQwMTgtMDhmMy00Nzc3LTlkZDQtZGUyNDVhZjRmYWNi LzEvMFF5STJDMHZySUlnUFVLaVF0YnJkajBUdV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWF8MA0E AgACMAcDBQMqBgYAMA0GCSqGSIb3DQEBCwUAA4IBAQAW4jvazkarfG1qFVYCtf0s t67uWqWtA7ln6Ob37FSe50JjuK4mtci0SVZsh7BGSa3fo88cb8jQbkRT2fGcgYV5 xqEVMTt8A9jQKxuzFS9kh2hSYM+A9SAAyhUNCRwWZyubnhPr4h3h3XQpOu8918u8 IH+NRKH1sH+APsVB7yOwTlSZ67ChmNV8AsczA6RR+NhLM2gjUoeM3JAYjzeWSrrL 8P8bjA58ftLsq1UFEdaiNf9bATStEMY/nhZ74Tl2OjCGEAng09teT83kT59vpsAv +ELfnNVq0Ocg2qnlRKeOoJRuirI1+y4bM8DcTXewCuGh9dUYeJxDdERr2f4/bxVo -----END CERTIFICATE-----Generated at Tue Feb 10 05:55:07 2026 by rpki-client