This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/SMvrV_q6FpTcN2Km7DFHGz_ah38.roa File: SMvrV_q6FpTcN2Km7DFHGz_ah38.roa (raw, json) Hash identifier: DLS1sZMJxxJ83FcUskLp5aILzWMMLvYpm6JIL3dDAW8= Subject key identifier: 48:CB:EB:57:FA:BA:16:94:DC:37:62:A6:EC:31:47:1B:3F:DA:87:7F Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019B22A7EFE1153B73B9081E2208A785D26A Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/SMvrV_q6FpTcN2Km7DFHGz_ah38.roa Signing time: Mon 15 Dec 2025 15:36:29 +0000 ROA not before: Mon 15 Dec 2025 15:36:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 5.10.213.0/24 maxlen: 24 185.23.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:a7:ef:e1:15:3b:73:b9:08:1e:22:08:a7:85:d2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Dec 15 15:36:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=48cbeb57faba1694dc3762a6ec31471b3fda877f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9b:15:94:fa:6f:6c:41:55:a4:f9:3c:47:6a: a0:fb:fb:88:a5:cf:6e:b9:b7:74:8e:71:8c:ba:c0: 31:48:b1:fe:0d:61:0f:2e:db:2e:6b:c0:79:9a:58: 45:a7:a0:4d:0d:0c:f0:3d:6a:41:24:e5:45:e4:34: 08:fe:a2:86:be:72:34:9e:d2:42:f3:33:6c:8f:4a: e7:b2:7a:c7:07:9f:07:dc:12:3b:d3:63:9c:4f:91: 84:ae:73:09:79:fd:99:09:ac:24:9e:08:1f:27:68: fa:49:c2:af:2e:34:b6:e4:e9:62:0a:b3:8a:f7:0f: 75:10:77:a3:df:3c:f7:db:4e:75:f9:b7:85:62:00: 7c:82:13:f3:05:3b:2b:5d:a9:6d:45:a0:80:db:27: 55:bf:ba:1f:9c:52:6d:84:f3:a5:a4:19:04:b4:ee: bd:74:d8:f9:09:5d:fe:4e:e8:93:96:1c:64:c6:ed: aa:72:e7:ed:cf:b1:a9:e2:f8:00:79:36:28:a5:95: f4:d5:96:1b:7d:62:94:2e:95:58:32:23:4c:c9:59: cc:ed:a1:9e:2d:97:95:b1:2b:f2:a9:3c:e2:a8:c8: 15:6b:b0:88:22:11:ab:e0:09:9a:5b:9c:ab:85:23: 1a:d4:dc:42:c8:3e:1b:49:58:4c:4a:29:fe:39:c0: 9a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CB:EB:57:FA:BA:16:94:DC:37:62:A6:EC:31:47:1B:3F:DA:87:7F X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/SMvrV_q6FpTcN2Km7DFHGz_ah38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.213.0/24 185.23.239.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:9b:af:4f:b5:14:ec:86:03:92:3f:21:09:64:01:43:50:6b: 1f:5f:02:36:3d:61:f6:d2:e3:3c:36:40:cb:a2:a9:37:71:b2: a8:e9:84:2c:0e:f8:f4:31:5e:51:1e:85:80:0a:ec:fa:e7:f6: 86:05:94:10:4f:6c:1c:6b:30:79:db:67:05:83:3b:60:e7:83: 77:53:c3:18:ab:ff:be:0a:27:ec:9d:a1:f3:38:30:84:1e:2e: 61:3a:d5:a2:41:e5:82:05:4c:77:d6:2d:9a:21:26:c9:a2:c2: eb:aa:93:c2:1e:58:af:2a:47:2f:be:cb:81:08:62:27:88:e0: f9:b6:06:70:87:45:87:e6:73:31:04:ce:cf:5c:e5:6c:72:5d: 3d:c7:d5:22:ce:96:88:1d:9b:b2:28:74:61:a9:7d:e8:d3:9c: 05:eb:9b:46:11:6f:a8:94:be:28:da:89:3d:a3:da:b4:b6:eb: a1:59:fe:c6:86:06:4a:d4:77:7f:89:e9:61:21:6c:ae:db:7f: c2:44:e2:d6:b1:79:fb:c9:ba:de:86:67:c0:c6:c9:78:a8:f5: 7c:50:d6:d2:3e:65:d1:13:2f:d4:80:cd:cc:0c:af:4d:82:46: 89:74:6e:e8:b4:f6:4c:83:fb:b9:cc:3f:df:15:3a:7b:85:25: 9e:ef:1f:2a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsip+/hFTtzuQgeIginhdJqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjUxMjE1MTUzNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGNiZWI1N2ZhYmExNjk0ZGMzNzYyYTZlYzMxNDcxYjNmZGE4NzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5sVlPpvbEFVpPk8R2qg+/uIpc9u ubd0jnGMusAxSLH+DWEPLtsua8B5mlhFp6BNDQzwPWpBJOVF5DQI/qKGvnI0ntJC 8zNsj0rnsnrHB58H3BI702OcT5GErnMJef2ZCawknggfJ2j6ScKvLjS25OliCrOK 9w91EHej3zz32051+beFYgB8ghPzBTsrXaltRaCA2ydVv7ofnFJthPOlpBkEtO69 dNj5CV3+TuiTlhxkxu2qcuftz7Gp4vgAeTYopZX01ZYbfWKULpVYMiNMyVnM7aGe LZeVsSvyqTziqMgVa7CIIhGr4AmaW5yrhSMa1NxCyD4bSVhMSin+OcCaLwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEjL61f6uhaU3DdipuwxRxs/2od/MB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvU012clZfcTZGcFRjTjJLbTdERkhHel9haDM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABQrVAwQA uRfvMA0GCSqGSIb3DQEBCwUAA4IBAQArm69PtRTshgOSPyEJZAFDUGsfXwI2PWH2 0uM8NkDLoqk3cbKo6YQsDvj0MV5RHoWACuz65/aGBZQQT2wcazB522cFgztg54N3 U8MYq/++CifsnaHzODCEHi5hOtWiQeWCBUx31i2aISbJosLrqpPCHlivKkcvvsuB CGIniOD5tgZwh0WH5nMxBM7PXOVscl09x9UizpaIHZuyKHRhqX3o05wF65tGEW+o lL4o2ok9o9q0tuuhWf7GhgZK1Hd/ielhIWyu23/CROLWsXn7ybrehmfAxsl4qPV8 UNbSPmXREy/UgM3MDK9NgkaJdG7otPZMg/u5zD/fFTp7hSWe7x8q -----END CERTIFICATE-----Generated at Wed Dec 31 08:28:51 2025 by rpki-client