This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/SPZIHZ1nwOirPUueqIueOsZbP7c.roa File: SPZIHZ1nwOirPUueqIueOsZbP7c.roa (raw, json) Hash identifier: GztLL/0AnN+izH0q58H6sv/AM0qZItd15ONB/WHq8y0= Subject key identifier: 48:F6:48:1D:9D:67:C0:E8:AB:3D:4B:9E:A8:8B:9E:3A:C6:5B:3F:B7 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83A876315C512A48CE51B3A8885406 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/SPZIHZ1nwOirPUueqIueOsZbP7c.roa Signing time: Fri 02 Jan 2026 16:21:33 +0000 ROA not before: Fri 02 Jan 2026 16:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62010 IP address blocks: 46.243.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:a8:76:31:5c:51:2a:48:ce:51:b3:a8:88:54:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48f6481d9d67c0e8ab3d4b9ea88b9e3ac65b3fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:85:0d:2c:48:f6:22:23:4c:d4:5b:b1:52:99: 35:a8:3c:a4:c6:3c:de:f8:c4:75:23:39:4d:c6:24: 63:12:c9:80:74:43:8e:9b:77:aa:fc:0d:d7:cb:68: ef:21:16:22:e6:83:24:9a:23:8d:9f:8f:d2:e6:53: 73:da:bf:0e:07:8b:13:f1:42:d8:bf:8e:f8:1f:50: ff:76:c3:53:77:c4:9d:82:e5:27:ef:70:f8:d9:9d: 8c:9b:1c:e8:28:d0:4e:74:8d:1a:3c:ad:45:85:19: ce:c6:0a:27:42:41:e3:29:5b:45:10:0b:52:4c:0f: 24:c8:e5:fc:6b:33:20:45:c6:92:dc:49:06:31:d2: 49:58:d2:6a:a3:16:81:96:8e:d3:c8:f5:2b:4b:ed: 2e:e3:12:7e:46:fd:99:3d:09:48:e7:66:28:2d:2b: b7:31:6f:2a:79:1a:76:ec:4c:9b:ab:da:a7:14:43: fe:ed:c4:a6:12:01:af:cd:39:69:31:46:be:02:15: 32:7e:cd:f3:be:23:7d:ce:04:51:5f:12:00:3a:92: 54:0a:3b:6b:23:d8:f5:c8:8b:ef:6b:9e:17:9b:95: a7:42:68:b7:ac:98:b0:49:3c:d1:a0:fa:1f:b9:3c: 0f:47:84:de:00:c8:8a:21:47:2e:b4:53:81:99:7d: 49:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F6:48:1D:9D:67:C0:E8:AB:3D:4B:9E:A8:8B:9E:3A:C6:5B:3F:B7 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/SPZIHZ1nwOirPUueqIueOsZbP7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.174.0/24 Signature Algorithm: sha256WithRSAEncryption 28:42:f1:4a:3e:69:cc:96:49:7d:ed:d2:5b:4f:ee:ee:88:41: 72:5c:9b:9f:79:1a:16:ae:67:65:0d:9c:b1:30:9c:10:a9:d9: f9:c0:85:6e:12:18:8a:53:7e:56:92:1c:ef:07:1c:12:0a:4e: ca:0c:00:3b:4e:b0:71:df:51:4e:07:df:3f:4b:dc:49:cc:dc: 61:88:c1:1c:a4:cb:75:67:d5:19:b4:d9:92:8c:f9:a8:9f:7a: 7f:89:f7:0e:f2:0c:23:6d:ed:91:a0:12:cc:97:da:2e:15:7e: 17:8c:34:c3:49:f4:a6:53:74:95:b2:be:b6:0b:dc:84:a5:57: 93:99:24:58:69:64:ff:43:da:71:f8:fe:a6:12:69:6d:78:4e: 80:a7:d6:af:c8:91:d5:c3:4a:0d:ff:eb:0c:6c:4e:88:ba:91: 64:6a:03:61:ee:cf:41:7e:fd:b2:17:62:d2:3f:75:d2:67:73: 72:13:0c:e6:64:fe:44:ac:a1:bd:fd:82:f1:fd:a1:14:5a:b7: f9:44:9a:6f:ee:b2:39:1c:70:d6:0c:b9:e5:9a:96:85:2a:15: 87:55:bb:84:91:5a:e2:c9:2f:57:31:d1:8d:6d:16:c4:3f:c0: aa:00:52:4c:7c:1d:b2:e3:53:b3:6f:07:8c:17:67:2f:6a:d1: e3:c2:30:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g6h2MVxRKkjOUbOoiFQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGY2NDgxZDlkNjdjMGU4YWIzZDRiOWVhODhiOWUzYWM2NWIzZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIUNLEj2IiNM1FuxUpk1qDykxjze +MR1IzlNxiRjEsmAdEOOm3eq/A3Xy2jvIRYi5oMkmiONn4/S5lNz2r8OB4sT8ULY v474H1D/dsNTd8SdguUn73D42Z2MmxzoKNBOdI0aPK1FhRnOxgonQkHjKVtFEAtS TA8kyOX8azMgRcaS3EkGMdJJWNJqoxaBlo7TyPUrS+0u4xJ+Rv2ZPQlI52YoLSu3 MW8qeRp27Eybq9qnFEP+7cSmEgGvzTlpMUa+AhUyfs3zviN9zgRRXxIAOpJUCjtr I9j1yIvva54Xm5WnQmi3rJiwSTzRoPofuTwPR4TeAMiKIUcutFOBmX1JfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEj2SB2dZ8Doqz1LnqiLnjrGWz+3MB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvU1BaSUhaMW53T2lyUFV1ZXFJdWVPc1piUDdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvOuMA0G CSqGSIb3DQEBCwUAA4IBAQAoQvFKPmnMlkl97dJbT+7uiEFyXJufeRoWrmdlDZyx MJwQqdn5wIVuEhiKU35WkhzvBxwSCk7KDAA7TrBx31FOB98/S9xJzNxhiMEcpMt1 Z9UZtNmSjPmon3p/ifcO8gwjbe2RoBLMl9ouFX4XjDTDSfSmU3SVsr62C9yEpVeT mSRYaWT/Q9px+P6mEmlteE6Ap9avyJHVw0oN/+sMbE6IupFkagNh7s9Bfv2yF2LS P3XSZ3NyEwzmZP5ErKG9/YLx/aEUWrf5RJpv7rI5HHDWDLnlmpaFKhWHVbuEkVri yS9XMdGNbRbEP8CqAFJMfB2y41OzbweMF2cvatHjwjDJ -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:24 2026 by rpki-client