This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/SbbT_vemLYhSpPxloUrfpgEATIA.roa File: SbbT_vemLYhSpPxloUrfpgEATIA.roa (raw, json) Hash identifier: TxqN78AgB7Nz/Wz8KEGfJojT7Yd8MRSlYTLQkCNBIXM= Subject key identifier: 49:B6:D3:FE:F7:A6:2D:88:52:A4:FC:65:A1:4A:DF:A6:01:00:4C:80 Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4 Certificate serial: 019B7A5B979AEF6CD635D4FCABA1FF374F42 Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/SbbT_vemLYhSpPxloUrfpgEATIA.roa Signing time: Thu 01 Jan 2026 16:19:41 +0000 ROA not before: Thu 01 Jan 2026 16:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 193.176.112.0/23 maxlen: 23 193.176.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:97:9a:ef:6c:d6:35:d4:fc:ab:a1:ff:37:4f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4 Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49b6d3fef7a62d8852a4fc65a14adfa601004c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9a:42:f7:f8:df:22:62:5c:8d:e2:5d:69:37: 1f:a7:68:59:9e:95:6c:3f:7d:54:d6:ff:9a:b2:6c: 9d:ac:f3:1f:ae:5a:68:76:22:dd:19:c6:46:e8:a7: 17:97:d2:af:4b:92:7b:21:e2:ec:f7:e5:27:57:9e: 76:aa:0e:30:24:64:f0:c7:c4:7b:e3:22:ea:d1:10: 27:c6:14:0d:49:68:33:31:ea:27:d9:34:3a:b5:99: 97:89:2b:3e:c2:51:b3:5e:0f:ac:63:be:80:95:b4: c4:c0:eb:5a:bf:9c:2e:52:5b:06:d6:d0:d7:d3:f4: 3a:86:be:95:3c:a1:99:b5:e8:e4:cc:b7:b6:5c:b8: 2a:37:c2:27:15:b9:f4:87:25:35:42:30:92:d1:49: 6e:e0:b1:47:3c:3e:f8:39:e7:21:75:56:5a:38:6b: db:c5:4e:64:13:46:da:c5:08:00:32:44:e5:6e:c8: 42:f2:b8:a1:73:a7:2b:09:5b:b0:76:aa:16:71:7a: 26:20:c6:05:53:35:9f:d9:1f:e8:6b:3c:99:87:90: a9:57:94:38:32:fd:fa:b7:51:3a:b6:d3:e7:71:30: 9f:1a:c4:c4:e7:b9:f2:85:35:47:87:c2:25:8c:27: 82:07:b4:aa:96:f4:de:3b:41:9c:76:cc:ce:61:3b: f4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B6:D3:FE:F7:A6:2D:88:52:A4:FC:65:A1:4A:DF:A6:01:00:4C:80 X509v3 Authority Key Identifier: keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/SbbT_vemLYhSpPxloUrfpgEATIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.112.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:ab:d3:d5:39:9a:83:26:d8:8a:c3:14:b4:84:ca:d1:0d:0d: 41:42:5a:91:8d:0c:7e:50:e9:9e:76:50:e7:e5:ee:f1:f9:fe: 87:18:be:bc:93:9a:dc:00:fb:d4:9b:63:a4:b6:24:cc:e1:d9: 9f:ab:f6:a7:30:c3:ce:48:8c:17:c9:7b:9b:5b:e8:65:7e:3a: c9:31:0a:7f:17:00:c7:71:40:2a:77:a3:89:97:f3:4d:63:30: ea:9f:85:b3:d5:19:71:88:50:9f:e0:c0:e3:82:27:ab:5f:4b: 7a:e7:ac:f4:5e:82:e8:08:3e:e1:98:80:6a:3d:f1:21:af:ff: 69:c6:fb:c2:d9:e1:03:01:33:ab:c6:e8:f4:c6:23:4a:61:95: c7:7b:3d:04:87:12:57:a1:2b:8c:dc:2a:8e:da:37:44:7e:fb: e5:b6:e5:6a:80:4e:24:3b:40:73:af:af:05:51:94:4e:0c:b5: 16:a0:60:99:53:89:ee:d0:0c:40:28:ca:45:16:36:3a:ec:c6: ff:3c:61:c5:4b:b8:ba:eb:3e:dc:61:49:46:7f:af:df:34:b2: 62:6a:6e:6f:0c:b5:e4:1d:18:23:24:69:b9:fd:5b:59:b0:a1: 84:c7:9e:a1:bf:d6:ba:49:42:6a:c0:8f:37:8c:8a:ae:4f:45: c7:93:b8:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5ea72zWNdT8q6H/N09CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZWQ2NmQyYzVhNDkzYTA5NTM0MzU3ZTVjYTI2ZjAzZDFh NGRkZDQwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWI2ZDNmZWY3YTYyZDg4NTJhNGZjNjVhMTRhZGZhNjAxMDA0YzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5pC9/jfImJcjeJdaTcfp2hZnpVs P31U1v+asmydrPMfrlpodiLdGcZG6KcXl9KvS5J7IeLs9+UnV552qg4wJGTwx8R7 4yLq0RAnxhQNSWgzMeon2TQ6tZmXiSs+wlGzXg+sY76AlbTEwOtav5wuUlsG1tDX 0/Q6hr6VPKGZtejkzLe2XLgqN8InFbn0hyU1QjCS0Ulu4LFHPD74OechdVZaOGvb xU5kE0baxQgAMkTlbshC8rihc6crCVuwdqoWcXomIMYFUzWf2R/oazyZh5CpV5Q4 Mv36t1E6ttPncTCfGsTE57nyhTVHh8IljCeCB7SqlvTeO0GcdszOYTv04wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEm20/73pi2IUqT8ZaFK36YBAEyAMB8GA1UdIwQY MBaAFA3tZtLFpJOglTQ1flyibwPRpN3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGUxbTBzV2trNkNWTkRWLVhLSnZBOUdrM2RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kOWNjNWItZjg2OC00M2ZlLTljNWMt MzdiOTZmZmJhNzZhLzEvU2JiVF92ZW1MWWhTcFB4bG9VcmZwZ0VBVElBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kOWNjNWItZjg2OC00M2ZlLTljNWMtMzdiOTZmZmJhNzZh LzEvRGUxbTBzV2trNkNWTkRWLVhLSnZBOUdrM2RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwbBwMA0G CSqGSIb3DQEBCwUAA4IBAQCdq9PVOZqDJtiKwxS0hMrRDQ1BQlqRjQx+UOmedlDn 5e7x+f6HGL68k5rcAPvUm2OktiTM4dmfq/anMMPOSIwXyXubW+hlfjrJMQp/FwDH cUAqd6OJl/NNYzDqn4Wz1RlxiFCf4MDjgierX0t656z0XoLoCD7hmIBqPfEhr/9p xvvC2eEDATOrxuj0xiNKYZXHez0EhxJXoSuM3CqO2jdEfvvltuVqgE4kO0Bzr68F UZRODLUWoGCZU4nu0AxAKMpFFjY67Mb/PGHFS7i66z7cYUlGf6/fNLJiam5vDLXk HRgjJGm5/VtZsKGEx56hv9a6SUJqwI83jIquT0XHk7jR -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:14 2026 by rpki-client