This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/smfmsIUF9u9g8NgIU5ofNUq_OII.roa File: smfmsIUF9u9g8NgIU5ofNUq_OII.roa (raw, json) Hash identifier: 4JsRlal2vIPYDa8QmogXl60LTzkl5mPgzweZiKuoNtI= Subject key identifier: B2:67:E6:B0:85:05:F6:EF:60:F0:D8:08:53:9A:1F:35:4A:BF:38:82 Certificate issuer: /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d Certificate serial: 019B797E7F20FC5B0A9F93944401F53DE4AD Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/smfmsIUF9u9g8NgIU5ofNUq_OII.roa Signing time: Thu 01 Jan 2026 12:18:11 +0000 ROA not before: Thu 01 Jan 2026 12:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211402 IP address blocks: 5.182.172.0/24 maxlen: 24 5.182.173.0/24 maxlen: 24 5.182.174.0/24 maxlen: 24 5.182.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:7f:20:fc:5b:0a:9f:93:94:44:01:f5:3d:e4:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d Validity Not Before: Jan 1 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b267e6b08505f6ef60f0d808539a1f354abf3882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:94:72:20:d5:7d:bc:59:d7:e1:d9:d6:a3:e5: d1:3b:d9:b6:a0:86:b1:c3:76:5f:71:ce:81:fe:e1: 4a:c3:06:8c:b1:4a:d5:fe:66:e3:75:ec:af:09:a2: fd:58:25:5f:40:80:4f:d7:cb:37:e2:ae:26:e1:39: 76:2b:0f:cf:a0:c7:5f:66:a6:a4:07:84:7d:2d:7c: b7:b6:35:b6:ad:a9:01:ff:15:17:ae:48:de:74:b8: 52:e9:0f:40:4f:3b:3f:01:0f:a2:a3:6f:d5:54:0a: e3:ea:5e:34:a4:ae:c0:2b:cc:37:d5:22:f5:57:27: 61:89:dc:f7:be:2d:72:5d:25:7e:d7:40:62:84:0b: 49:26:ea:2c:03:57:20:b2:47:b8:1d:99:92:a5:fc: ef:65:f5:f4:5c:81:1e:94:92:7a:cb:e3:21:98:89: 51:b1:bb:90:d1:59:0e:6c:de:d6:70:e0:ba:71:85: d4:2d:3e:26:42:ad:4c:bd:f1:43:e5:0a:3a:61:7d: 7f:80:1c:bc:b5:d0:e1:01:40:90:63:21:7e:d0:da: 80:af:f4:dd:ac:30:fc:93:2a:30:00:db:c8:a6:84: 23:75:0a:43:31:cb:26:15:f4:4a:4e:4c:e8:74:63: a7:c7:0a:17:0a:d5:b4:4d:f6:22:dd:65:24:b9:2d: 68:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:67:E6:B0:85:05:F6:EF:60:F0:D8:08:53:9A:1F:35:4A:BF:38:82 X509v3 Authority Key Identifier: keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/smfmsIUF9u9g8NgIU5ofNUq_OII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.172.0/22 Signature Algorithm: sha256WithRSAEncryption 94:8b:17:56:65:91:49:3b:c7:55:41:87:2d:ea:e3:b8:d7:90: f1:f1:0f:95:cf:8e:8b:5c:12:57:a2:8d:18:88:be:37:76:6a: e3:b7:82:9d:90:7e:1d:38:8f:d1:03:7d:17:3e:85:01:75:e1: de:04:3a:24:6e:93:97:81:c3:b7:7f:60:99:7c:05:c6:7e:9a: 00:d6:ba:58:b8:2d:5c:d0:b8:ce:b6:95:25:46:37:aa:c6:2f: a3:0d:ae:f3:dc:0e:d2:5e:97:a0:f9:1b:42:2c:6b:4b:7d:68: 8e:7b:9a:a0:11:fb:1f:45:44:51:c6:4d:f8:57:1e:ca:a6:5f: 1c:85:af:f8:5a:5f:ed:85:15:c2:f3:9e:3b:52:49:ee:bb:dd: 14:15:a7:85:71:99:de:40:b2:82:92:3e:bc:4c:a6:cd:80:cf: e1:0e:39:7d:3f:3e:77:24:6d:2d:3a:ea:71:e7:55:e3:c7:ba: e1:12:6a:34:d9:a5:81:d4:76:ca:7e:6d:c9:82:27:3c:c7:2b: 6f:07:c2:10:68:e4:11:b2:2f:11:94:76:bc:78:2f:11:19:cf: d1:09:48:25:89:a3:e4:19:1e:a9:d9:98:7a:a0:d6:f7:58:dd: e4:67:91:80:32:cc:5c:86:8e:b2:8f:22:4c:66:fa:fa:6a:53: 76:86:4d:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fn8g/FsKn5OURAH1PeStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNzQ1MGIyMzAxNzJlM2U4YWQzNTI4ODExMGVmOGFiZDI0 ZmY5MmQwHhcNMjYwMTAxMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjY3ZTZiMDg1MDVmNmVmNjBmMGQ4MDg1MzlhMWYzNTRhYmYzODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pRyINV9vFnX4dnWo+XRO9m2oIax w3Zfcc6B/uFKwwaMsUrV/mbjdeyvCaL9WCVfQIBP18s34q4m4Tl2Kw/PoMdfZqak B4R9LXy3tjW2rakB/xUXrkjedLhS6Q9ATzs/AQ+io2/VVArj6l40pK7AK8w31SL1 Vydhidz3vi1yXSV+10BihAtJJuosA1cgske4HZmSpfzvZfX0XIEelJJ6y+MhmIlR sbuQ0VkObN7WcOC6cYXULT4mQq1MvfFD5Qo6YX1/gBy8tdDhAUCQYyF+0NqAr/Td rDD8kyowANvIpoQjdQpDMcsmFfRKTkzodGOnxwoXCtW0TfYi3WUkuS1o7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLJn5rCFBfbvYPDYCFOaHzVKvziCMB8GA1UdIwQY MBaAFO50ULIwFy4+itNSiBEO+KvST/ktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN25SUXNqQVhMajZLMDFLSUVRNzRxOUpQLVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZTI1N2UtZGY2NC00NjY4LTg2M2It ZjRkZWE4NjkyOWFlLzEvc21mbXNJVUY5dTlnOE5nSVU1b2ZOVXFfT0lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yZTI1N2UtZGY2NC00NjY4LTg2M2ItZjRkZWE4NjkyOWFl LzEvN25SUXNqQVhMajZLMDFLSUVRNzRxOUpQLVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbasMA0G CSqGSIb3DQEBCwUAA4IBAQCUixdWZZFJO8dVQYct6uO415Dx8Q+Vz46LXBJXoo0Y iL43dmrjt4KdkH4dOI/RA30XPoUBdeHeBDokbpOXgcO3f2CZfAXGfpoA1rpYuC1c 0LjOtpUlRjeqxi+jDa7z3A7SXpeg+RtCLGtLfWiOe5qgEfsfRURRxk34Vx7Kpl8c ha/4Wl/thRXC8547Uknuu90UFaeFcZneQLKCkj68TKbNgM/hDjl9Pz53JG0tOupx 51Xjx7rhEmo02aWB1HbKfm3Jgic8xytvB8IQaOQRsi8RlHa8eC8RGc/RCUgliaPk GR6p2Zh6oNb3WN3kZ5GAMsxcho6yjyJMZvr6alN2hk3s -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:56 2026 by rpki-client