This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/svbZ3xnzSZtEiOKXO_TW25acCTk.roa File: svbZ3xnzSZtEiOKXO_TW25acCTk.roa (raw, json) Hash identifier: opv9wDSI8/zZJZrpAhEN95Q4AkFIV4SP2QjFUJ853yU= Subject key identifier: B2:F6:D9:DF:19:F3:49:9B:44:88:E2:97:3B:F4:D6:DB:96:9C:09:39 Certificate issuer: /CN=d15646a3c9acb6a4b201bb6326a9f0074224f387 Certificate serial: 019B791120C42F88F01E189BB452A11F037B Authority key identifier: D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/svbZ3xnzSZtEiOKXO_TW25acCTk.roa Signing time: Thu 01 Jan 2026 10:18:44 +0000 ROA not before: Thu 01 Jan 2026 10:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198236 IP address blocks: 92.243.69.0/24 maxlen: 24 2a10:f6c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:20:c4:2f:88:f0:1e:18:9b:b4:52:a1:1f:03:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d15646a3c9acb6a4b201bb6326a9f0074224f387 Validity Not Before: Jan 1 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2f6d9df19f3499b4488e2973bf4d6db969c0939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:06:b4:f8:4e:85:db:cc:54:d3:f5:90:65: 6c:5a:cc:86:1a:c8:dd:3c:55:44:04:45:78:7f:be: 46:56:7b:a3:6f:3a:93:c3:58:b1:7a:ed:a8:21:be: 43:ca:98:1f:c5:22:03:82:69:ea:a0:6e:58:47:ac: fc:d4:c2:d1:7f:f8:92:88:02:3f:55:f5:97:4d:c9: 7d:42:c9:62:7f:cf:94:1e:de:22:66:91:7d:23:48: 0c:b9:58:4a:81:f2:5c:37:6b:cd:b0:0f:38:f5:6c: 12:c2:d1:eb:bd:4f:c1:bd:8e:63:86:06:16:30:7a: d9:ca:04:73:a2:e6:49:93:59:0b:4e:a6:44:d3:e7: f7:4b:20:05:18:10:99:da:c5:19:8e:76:b6:6c:34: b4:57:53:68:66:36:81:d7:09:05:83:f6:02:06:bd: 0e:2b:52:c5:d2:f7:f3:30:de:83:6f:3c:38:14:51: 99:eb:0c:45:6e:31:e8:ab:d2:74:de:a2:bf:51:fb: 2f:c4:33:5b:ee:db:e7:c0:0e:2e:45:3d:a6:f4:1e: e3:6d:93:be:4f:4d:20:6a:34:45:51:67:97:61:94: 78:5a:40:e8:a9:c2:a4:6c:57:b6:1c:50:de:cd:29: 16:a1:bf:97:40:29:ff:08:2e:df:83:8e:d0:a1:82: 17:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F6:D9:DF:19:F3:49:9B:44:88:E2:97:3B:F4:D6:DB:96:9C:09:39 X509v3 Authority Key Identifier: keyid:D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/svbZ3xnzSZtEiOKXO_TW25acCTk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.243.69.0/24 IPv6: 2a10:f6c0::/29 Signature Algorithm: sha256WithRSAEncryption 26:5f:26:c5:17:40:dd:17:73:46:ba:c9:43:93:36:e3:38:aa: 11:a9:92:df:06:f6:dd:46:9e:de:20:fb:95:1e:7d:12:54:a7: 1e:96:38:96:e6:e2:8b:97:b1:90:2d:4a:49:39:d7:a9:4f:18: f6:5e:b0:96:20:2e:dc:a2:be:bb:43:14:87:d5:28:9a:61:4d: 48:d1:64:54:c2:e1:bf:f0:dc:92:14:34:6f:2a:13:54:43:b0: 21:98:82:c1:45:50:86:4a:53:b5:a4:59:23:42:28:a7:db:46: 8b:98:db:ae:de:50:75:21:88:44:24:55:a8:bb:f7:a7:ac:3f: fa:9f:44:17:e5:a6:b5:da:b5:c1:7a:65:2d:84:2b:9d:85:17: 4f:07:07:cc:af:ba:25:ce:81:f6:88:ed:6b:be:b9:6a:0a:80: 78:23:94:8a:b3:c8:d9:4e:d1:2e:99:73:bf:5b:56:c1:66:fd: 8d:cf:87:e7:59:6d:ee:e5:17:8e:80:e0:32:f8:0e:5e:79:2b: 3b:59:39:47:10:b3:92:33:ca:b1:77:45:59:2e:7f:69:1c:3a: 91:72:7a:37:07:c3:c3:99:76:6a:f1:a9:e9:aa:44:84:5c:66: 71:ab:71:9e:07:af:bd:4a:9e:ac:9d:12:1c:d7:cd:8d:3c:1d: e3:dd:2b:6b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ESDEL4jwHhibtFKhHwN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNTY0NmEzYzlhY2I2YTRiMjAxYmI2MzI2YTlmMDA3NDIy NGYzODcwHhcNMjYwMTAxMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmY2ZDlkZjE5ZjM0OTliNDQ4OGUyOTczYmY0ZDZkYjk2OWMwOTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArekGtPhOhdvMVNP1kGVsWsyGGsjd PFVEBEV4f75GVnujbzqTw1ixeu2oIb5DypgfxSIDgmnqoG5YR6z81MLRf/iSiAI/ VfWXTcl9Qslif8+UHt4iZpF9I0gMuVhKgfJcN2vNsA849WwSwtHrvU/BvY5jhgYW MHrZygRzouZJk1kLTqZE0+f3SyAFGBCZ2sUZjna2bDS0V1NoZjaB1wkFg/YCBr0O K1LF0vfzMN6Dbzw4FFGZ6wxFbjHoq9J03qK/UfsvxDNb7tvnwA4uRT2m9B7jbZO+ T00gajRFUWeXYZR4WkDoqcKkbFe2HFDezSkWob+XQCn/CC7fg47QoYIX2wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLL22d8Z80mbRIjilzv01tuWnAk5MB8GA1UdIwQY MBaAFNFWRqPJrLaksgG7Yyap8AdCJPOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFZaR284bXN0cVN5QWJ0akpxbndCMElrODRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi81MGQ0ZDItY2I5NC00MGY1LTliY2Ut OTBkZGU4NWQ4ZmE3LzEvc3ZiWjN4bnpTWnRFaU9LWE9fVFcyNWFjQ1RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi81MGQ0ZDItY2I5NC00MGY1LTliY2UtOTBkZGU4NWQ4ZmE3 LzEvMFZaR284bXN0cVN5QWJ0akpxbndCMElrODRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXPNFMA0E AgACMAcDBQMqEPbAMA0GCSqGSIb3DQEBCwUAA4IBAQAmXybFF0DdF3NGuslDkzbj OKoRqZLfBvbdRp7eIPuVHn0SVKceljiW5uKLl7GQLUpJOdepTxj2XrCWIC7cor67 QxSH1SiaYU1I0WRUwuG/8NySFDRvKhNUQ7AhmILBRVCGSlO1pFkjQiin20aLmNuu 3lB1IYhEJFWou/enrD/6n0QX5aa12rXBemUthCudhRdPBwfMr7olzoH2iO1rvrlq CoB4I5SKs8jZTtEumXO/W1bBZv2Nz4fnWW3u5ReOgOAy+A5eeSs7WTlHELOSM8qx d0VZLn9pHDqRcno3B8PDmXZq8anpqkSEXGZxq3GeB6+9Sp6snRIc182NPB3j3Str -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:22 2026 by rpki-client