This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SpToab_8A9gX0RS6rgxUjQRbWzk.roa File: SpToab_8A9gX0RS6rgxUjQRbWzk.roa (raw, json) Hash identifier: Ysclrdp6CislMOB+k+g/9QI4vJXBDP9Uui0fEFBPxcI= Subject key identifier: 4A:94:E8:69:BF:FC:03:D8:17:D1:14:BA:AE:0C:54:8D:04:5B:5B:39 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B791084A62E38A219E89076CC903A1372 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SpToab_8A9gX0RS6rgxUjQRbWzk.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 2a12:bec0:230::/44 maxlen: 48 2a12:bec0:5df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:84:a6:2e:38:a2:19:e8:90:76:cc:90:3a:13:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a94e869bffc03d817d114baae0c548d045b5b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2b:a8:40:34:d2:6f:04:5b:4f:1e:b5:66:a1: 7c:67:3b:03:0d:36:87:d6:9f:c3:f4:e5:21:1b:25: 92:39:64:de:e8:6f:63:d5:6b:ad:e3:5c:49:7e:c0: 1f:df:3d:66:21:42:f8:82:8e:1e:0f:70:5f:b2:1b: 7a:00:8c:48:c5:85:b4:a3:a6:5a:6d:b8:2d:f3:90: 3a:ef:d2:8b:65:07:01:bb:ba:7d:26:75:73:d9:88: 23:e5:65:7a:65:15:30:c6:aa:4f:0a:a2:11:59:b6: e2:99:43:94:99:02:8f:34:13:3f:77:8a:75:2a:c9: 22:27:b8:73:8b:c2:eb:68:0e:b6:d6:ba:67:19:f4: c5:f2:2c:de:11:19:b1:ca:21:8c:95:99:66:91:a1: 7c:7d:a9:a1:71:a8:45:02:7f:a6:fc:76:ea:1c:91: 66:59:f0:6d:e3:3a:63:8b:78:33:82:ac:f0:2a:b0: 4b:22:91:ac:92:e5:70:8f:3e:c6:c7:49:ac:0f:17: 55:0b:2e:43:6e:d2:83:9c:e3:8d:09:7a:00:5a:0c: 89:cb:ea:96:f3:e0:3f:64:83:60:26:a6:c1:df:ec: 2f:af:72:2e:e6:8a:61:5e:6d:10:a0:b7:15:95:81: 3b:64:73:33:50:f4:2e:ae:dd:96:21:15:b9:15:26: ea:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:94:E8:69:BF:FC:03:D8:17:D1:14:BA:AE:0C:54:8D:04:5B:5B:39 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SpToab_8A9gX0RS6rgxUjQRbWzk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:230::/44 2a12:bec0:5df::/48 Signature Algorithm: sha256WithRSAEncryption 12:8b:15:59:42:a0:82:13:e3:a2:c7:95:f6:74:68:52:82:78: 53:51:6c:81:ad:0e:78:ff:37:22:42:3a:04:fc:aa:a7:9b:6c: e8:15:47:5a:b3:87:5f:de:ff:44:2e:8f:66:06:88:2b:52:35: 35:5c:a6:42:11:43:24:e6:80:36:5e:a4:5f:4c:60:a1:eb:0c: 3b:24:e1:df:be:bc:12:82:2b:5e:7f:0b:90:b7:a6:23:0c:e8: 73:35:99:e8:e5:76:91:17:ee:94:71:33:f1:ef:ad:ac:e3:fa: 57:bc:26:20:30:9b:59:99:b6:e9:1e:22:be:94:8d:d6:fd:d0: 1d:9a:2a:cb:23:11:e9:d0:6c:73:49:a7:d3:f2:d9:cd:53:0e: 1d:4b:f5:09:95:a1:ce:9a:24:12:d8:76:0d:4b:21:9a:40:84: ca:09:3a:1a:f6:06:9f:c5:fd:66:77:e6:ce:18:13:ac:66:b2: 08:c2:89:b5:0e:2c:79:9b:35:ea:05:4f:29:4b:04:65:d8:e0: 71:a9:77:43:2b:59:0c:24:26:54:aa:06:63:fb:52:31:31:1d: 8a:0a:96:3c:00:ee:f6:60:be:53:be:64:1a:8e:f8:f8:25:b8: 64:90:72:31:b2:3f:fe:57:8b:fc:74:4f:6a:a4:49:ff:b9:4c: 13:8b:3e:e4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EISmLjiiGeiQdsyQOhNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTk0ZTg2OWJmZmMwM2Q4MTdkMTE0YmFhZTBjNTQ4ZDA0NWI1YjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviuoQDTSbwRbTx61ZqF8ZzsDDTaH 1p/D9OUhGyWSOWTe6G9j1Wut41xJfsAf3z1mIUL4go4eD3Bfsht6AIxIxYW0o6Za bbgt85A679KLZQcBu7p9JnVz2Ygj5WV6ZRUwxqpPCqIRWbbimUOUmQKPNBM/d4p1 KskiJ7hzi8LraA621rpnGfTF8izeERmxyiGMlZlmkaF8famhcahFAn+m/HbqHJFm WfBt4zpji3gzgqzwKrBLIpGskuVwjz7Gx0msDxdVCy5DbtKDnOONCXoAWgyJy+qW 8+A/ZINgJqbB3+wvr3Iu5ophXm0QoLcVlYE7ZHMzUPQurt2WIRW5FSbqnQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEqU6Gm//APYF9EUuq4MVI0EW1s5MB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvU3BUb2FiXzhBOWdYMFJTNnJneFVqUVJiV3prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhK+wAIw AwcAKhK+wAXfMA0GCSqGSIb3DQEBCwUAA4IBAQASixVZQqCCE+Oix5X2dGhSgnhT UWyBrQ54/zciQjoE/Kqnm2zoFUdas4df3v9ELo9mBogrUjU1XKZCEUMk5oA2XqRf TGCh6ww7JOHfvrwSgitefwuQt6YjDOhzNZno5XaRF+6UcTPx762s4/pXvCYgMJtZ mbbpHiK+lI3W/dAdmirLIxHp0GxzSafT8tnNUw4dS/UJlaHOmiQS2HYNSyGaQITK CToa9gafxf1md+bOGBOsZrIIwom1Dix5mzXqBU8pSwRl2OBxqXdDK1kMJCZUqgZj +1IxMR2KCpY8AO72YL5TvmQajvj4JbhkkHIxsj/+V4v8dE9qpEn/uUwTiz7k -----END CERTIFICATE-----Generated at Sat Jan 10 20:50:19 2026 by rpki-client