This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa File: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (raw, json) Hash identifier: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE= Subject key identifier: 4A:67:72:BE:D1:BF:62:BE:09:5C:42:42:4D:5A:8D:3A:C2:CA:0B:12 Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E389D40EA6B0C4268F5838AC5610D14 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa Signing time: Fri 02 Jan 2026 10:19:58 +0000 ROA not before: Fri 02 Jan 2026 10:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200093 IP address blocks: 83.125.24.0/24 maxlen: 24 83.125.32.0/22 maxlen: 22 83.125.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9d:40:ea:6b:0c:42:68:f5:83:8a:c5:61:0d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a6772bed1bf62be095c42424d5a8d3ac2ca0b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:10:a3:5d:22:6c:ef:56:0a:4b:51:3d:31:a1: 3b:07:a2:55:73:3f:2b:c8:66:51:d5:50:1c:83:0f: 70:f5:49:4d:cd:9d:f9:49:c2:e2:f3:97:a1:0a:80: 31:a9:c4:14:7c:b3:e8:a2:5a:ce:f1:18:56:db:46: 87:eb:12:a6:33:41:65:93:ee:a8:05:81:2c:d0:0a: 80:8a:ff:52:87:ff:12:0c:99:32:a0:f0:4f:4c:df: ea:0e:5a:10:28:b7:62:4f:bf:11:ab:8d:d4:b7:0f: fd:0f:2d:6a:25:f0:ab:ad:53:21:97:65:7e:fb:3c: 2d:85:5a:4a:61:af:1f:4f:73:5e:47:64:ae:fc:cf: 1a:09:f9:d0:bd:ae:82:64:0e:5f:66:17:6c:fa:98: 4c:fe:0f:b8:e8:af:2b:e4:e2:6f:19:b2:2f:8b:2d: 19:2d:f3:36:50:97:6f:0b:68:d4:89:ea:d8:27:ec: ca:4d:81:6b:9f:8a:fa:51:b6:aa:18:d8:eb:02:4b: c1:ac:2a:03:8c:f9:a0:eb:87:51:6b:e7:34:d6:5a: 04:73:6b:28:39:70:76:54:f9:ba:e0:da:44:92:b2: 27:ca:2f:df:98:49:d4:fd:40:89:b5:8b:7c:7e:c0: 73:0a:65:8e:ce:11:aa:bf:7a:cb:b9:c4:7c:65:04: b4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:67:72:BE:D1:BF:62:BE:09:5C:42:42:4D:5A:8D:3A:C2:CA:0B:12 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.125.24.0/24 83.125.32.0/22 83.125.118.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:8d:f6:37:16:24:d6:db:fc:0f:25:af:59:c3:70:83:54:9c: 68:30:15:ab:2b:fc:cc:ec:14:74:36:e7:24:fb:21:ee:6b:93: 8f:8d:52:62:3b:93:cc:96:7b:4e:0e:e0:95:d5:3e:16:9f:1b: 40:2b:c5:8d:72:00:4f:67:94:d3:2b:1d:4d:fa:f6:c3:f9:61: fa:c6:78:c6:1d:4f:42:ab:56:dc:c8:55:55:87:cd:d1:9b:a6: 93:a4:20:cc:7f:0e:cf:ef:b6:d4:b3:75:33:14:55:1f:ba:02: d1:c7:ce:83:00:f2:51:cf:4c:a3:8f:a6:ef:01:08:ea:66:e9: b9:3c:23:15:e6:08:51:03:e9:ed:91:d2:70:ce:f2:8b:d4:40: 13:a7:a5:6d:8f:31:b7:76:32:55:d5:7b:d7:98:0e:6d:21:1d: 0e:26:3c:b8:c1:a8:4c:2c:1a:4d:42:bf:fe:86:13:1e:d4:b8: da:c3:85:20:dd:9d:96:49:79:c9:07:d4:23:cf:6d:64:9e:40: 42:35:4f:18:9f:ef:ee:68:04:1f:85:2b:86:b9:75:39:38:d7: 13:56:f7:23:42:f0:15:3b:d2:c7:72:fd:e1:2f:59:81:66:92: 2d:5c:11:d3:e8:27:43:9f:68:8a:45:19:00:94:66:9f:b6:a5: 67:ec:eb:13 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OJ1A6msMQmj1g4rFYQ0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTY3NzJiZWQxYmY2MmJlMDk1YzQyNDI0ZDVhOGQzYWMyY2EwYjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBCjXSJs71YKS1E9MaE7B6JVcz8r yGZR1VAcgw9w9UlNzZ35ScLi85ehCoAxqcQUfLPoolrO8RhW20aH6xKmM0Flk+6o BYEs0AqAiv9Sh/8SDJkyoPBPTN/qDloQKLdiT78Rq43Utw/9Dy1qJfCrrVMhl2V+ +zwthVpKYa8fT3NeR2Su/M8aCfnQva6CZA5fZhds+phM/g+46K8r5OJvGbIviy0Z LfM2UJdvC2jUierYJ+zKTYFrn4r6UbaqGNjrAkvBrCoDjPmg64dRa+c01loEc2so OXB2VPm64NpEkrInyi/fmEnU/UCJtYt8fsBzCmWOzhGqv3rLucR8ZQS0OQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEpncr7Rv2K+CVxCQk1ajTrCygsSMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvU21keXZ0R19ZcjRKWEVKQ1RWcU5Pc0xLQ3hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU30YAwQC U30gAwQBU312MA0GCSqGSIb3DQEBCwUAA4IBAQA/jfY3FiTW2/wPJa9Zw3CDVJxo MBWrK/zM7BR0Nuck+yHua5OPjVJiO5PMlntODuCV1T4WnxtAK8WNcgBPZ5TTKx1N +vbD+WH6xnjGHU9Cq1bcyFVVh83Rm6aTpCDMfw7P77bUs3UzFFUfugLRx86DAPJR z0yjj6bvAQjqZum5PCMV5ghRA+ntkdJwzvKL1EATp6VtjzG3djJV1XvXmA5tIR0O Jjy4wahMLBpNQr/+hhMe1Ljaw4Ug3Z2WSXnJB9Qjz21knkBCNU8Yn+/uaAQfhSuG uXU5ONcTVvcjQvAVO9LHcv3hL1mBZpItXBHT6CdDn2iKRRkAlGaftqVn7OsT -----END CERTIFICATE-----Generated at Thu Feb 5 13:55:52 2026 by rpki-client