This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/SiTvdADyt2fD0BmQero13SpoFlc.roa File: SiTvdADyt2fD0BmQero13SpoFlc.roa (raw, json) Hash identifier: Rvbprp9eKcxJ4n+nMPmN6bW/SfzHf4iedPaOjtazvI8= Subject key identifier: 4A:24:EF:74:00:F2:B7:67:C3:D0:19:90:7A:BA:35:DD:2A:68:16:57 Certificate issuer: /CN=2c128265b80991788d86e2262e9339038b4efa82 Certificate serial: 019B79ED40C849FBD52A6416A9B38D6375F4 Authority key identifier: 2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/SiTvdADyt2fD0BmQero13SpoFlc.roa Signing time: Thu 01 Jan 2026 14:19:10 +0000 ROA not before: Thu 01 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199449 IP address blocks: 185.16.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:40:c8:49:fb:d5:2a:64:16:a9:b3:8d:63:75:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c128265b80991788d86e2262e9339038b4efa82 Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a24ef7400f2b767c3d019907aba35dd2a681657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:a2:a0:79:07:5b:c7:1c:2b:c1:a7:95:4f: a6:8f:68:7a:18:5d:4f:a8:91:f9:c4:86:87:5e:26: cc:b4:48:4e:d0:bb:76:0f:fb:fd:5e:7d:28:29:fe: 5b:0c:71:cd:d1:ff:1e:4f:61:99:61:30:40:3b:c2: 27:27:e5:f7:cb:3d:22:cb:38:fa:0e:6a:fc:86:5e: e7:ed:02:15:d5:17:2e:88:6b:59:68:77:ec:77:d9: d9:e4:19:f3:4c:82:ac:5f:9e:d3:65:b7:2b:09:dc: c0:5c:26:0c:04:6e:68:03:8c:82:d5:24:ef:11:45: 6d:e1:47:8c:d3:46:70:7d:db:6e:c1:2d:42:73:a1: ff:33:83:c2:26:3c:40:fd:12:a9:1c:16:aa:81:f9: eb:6d:bd:1d:dd:74:99:37:13:50:21:63:ee:09:1b: 2d:50:4a:96:cf:99:da:ac:09:77:c5:fd:d4:b6:30: 7d:fd:2d:1b:e3:7c:bd:4e:17:68:a1:53:9e:af:3f: 85:46:67:bb:a6:f1:00:81:44:65:2c:5b:94:2e:a8: 3f:10:e3:2e:cd:c3:0e:12:71:c8:c8:33:5d:ed:8c: 4e:14:9d:32:86:74:6b:0e:06:8c:bb:92:36:71:c1: c0:15:50:00:10:ed:2d:5f:18:80:6e:0f:b1:ed:d6: d9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:24:EF:74:00:F2:B7:67:C3:D0:19:90:7A:BA:35:DD:2A:68:16:57 X509v3 Authority Key Identifier: keyid:2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/SiTvdADyt2fD0BmQero13SpoFlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.16.32.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:c3:f2:07:cf:8b:3f:3a:17:b6:fb:31:83:b9:5a:80:1b:fd: ae:52:f9:fb:97:3a:04:fa:a8:1f:1b:c6:b8:8f:23:09:31:40: 05:c2:96:88:66:de:22:d2:60:44:5b:8a:3d:8e:df:75:e6:71: da:dc:19:25:de:a5:d2:a5:d1:f4:c2:6e:16:21:4c:d3:ac:06: 9d:92:26:92:0d:fd:d6:c3:84:d9:3e:76:4c:d0:d9:be:18:3c: d3:3d:6a:ae:2c:bf:10:1c:74:2a:c9:55:a5:9c:3b:6a:02:bf: 17:0f:8a:27:66:e7:b8:7b:1b:95:46:54:df:49:44:f3:23:d3: e5:ad:89:b6:c3:62:dc:64:f4:b3:81:a3:63:29:ea:4d:92:40: 58:96:e1:c9:3f:41:8a:c7:64:55:3e:43:2b:0e:e9:2f:a4:fa: 34:44:60:f0:2a:9f:47:96:5e:ae:63:6f:95:79:ad:74:b5:87: 73:55:94:db:fe:e3:70:b9:8e:d6:c2:f0:c4:e3:b6:70:15:5c: cc:33:f2:0b:64:aa:2a:34:bc:61:a6:3e:77:d0:de:25:84:de: ed:68:91:a2:35:dc:b9:d5:46:86:e5:04:9e:6e:3a:32:e1:20: 57:f1:ec:71:9d:b0:ef:0b:98:77:7c:db:a4:d0:71:0b:9f:9d: 69:30:f0:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57UDISfvVKmQWqbONY3X0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMTI4MjY1YjgwOTkxNzg4ZDg2ZTIyNjJlOTMzOTAzOGI0 ZWZhODIwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTI0ZWY3NDAwZjJiNzY3YzNkMDE5OTA3YWJhMzVkZDJhNjgxNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruqioHkHW8ccK8GnlU+mj2h6GF1P qJH5xIaHXibMtEhO0Lt2D/v9Xn0oKf5bDHHN0f8eT2GZYTBAO8InJ+X3yz0iyzj6 Dmr8hl7n7QIV1RcuiGtZaHfsd9nZ5BnzTIKsX57TZbcrCdzAXCYMBG5oA4yC1STv EUVt4UeM00ZwfdtuwS1Cc6H/M4PCJjxA/RKpHBaqgfnrbb0d3XSZNxNQIWPuCRst UEqWz5narAl3xf3UtjB9/S0b43y9ThdooVOerz+FRme7pvEAgURlLFuULqg/EOMu zcMOEnHIyDNd7YxOFJ0yhnRrDgaMu5I2ccHAFVAAEO0tXxiAbg+x7dbZ3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEok73QA8rdnw9AZkHq6Nd0qaBZXMB8GA1UdIwQY MBaAFCwSgmW4CZF4jYbiJi6TOQOLTvqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lY2JmZmEtMTE2Ni00ZDFlLTlmNTUt MTE1NzVkYjY0ZmJlLzEvU2lUdmRBRHl0MmZEMEJtUWVybzEzU3BvRmxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lY2JmZmEtMTE2Ni00ZDFlLTlmNTUtMTE1NzVkYjY0ZmJl LzEvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRAgMA0G CSqGSIb3DQEBCwUAA4IBAQA/w/IHz4s/Ohe2+zGDuVqAG/2uUvn7lzoE+qgfG8a4 jyMJMUAFwpaIZt4i0mBEW4o9jt915nHa3Bkl3qXSpdH0wm4WIUzTrAadkiaSDf3W w4TZPnZM0Nm+GDzTPWquLL8QHHQqyVWlnDtqAr8XD4onZue4exuVRlTfSUTzI9Pl rYm2w2LcZPSzgaNjKepNkkBYluHJP0GKx2RVPkMrDukvpPo0RGDwKp9Hll6uY2+V ea10tYdzVZTb/uNwuY7WwvDE47ZwFVzMM/ILZKoqNLxhpj530N4lhN7taJGiNdy5 1UaG5QSebjoy4SBX8exxnbDvC5h3fNuk0HELn51pMPBS -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:32 2026 by rpki-client