This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/SNrZr0YQQkVPerWsrOP1UeJuDXc.roa File: SNrZr0YQQkVPerWsrOP1UeJuDXc.roa (raw, json) Hash identifier: hBAiAyDFyC3xgXvGIjNpbEwJ1pYU7Ki/GLElCyuFn4c= Subject key identifier: 48:DA:D9:AF:46:10:42:45:4F:7A:B5:AC:AC:E3:F5:51:E2:6E:0D:77 Certificate issuer: /CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b Certificate serial: 019B7834BCBA4C91EDAF4CA78921BEAB6BB2 Authority key identifier: A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/SNrZr0YQQkVPerWsrOP1UeJuDXc.roa Signing time: Thu 01 Jan 2026 06:18:00 +0000 ROA not before: Thu 01 Jan 2026 06:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209434 IP address blocks: 91.212.99.0/24 maxlen: 24 194.24.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:bc:ba:4c:91:ed:af:4c:a7:89:21:be:ab:6b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b Validity Not Before: Jan 1 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48dad9af461042454f7ab5acace3f551e26e0d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fb:b5:8d:e0:e5:3b:8b:15:b0:10:ee:08:c2: cc:22:af:d4:29:3b:f5:0a:f6:b9:de:3b:b3:fc:35: da:0d:fd:fb:67:52:f6:bf:72:d4:7c:33:11:00:94: 4c:22:a8:24:59:b6:05:08:bb:43:29:e2:cd:c6:86: 5f:5b:eb:41:62:1d:5e:c6:80:1c:79:c1:0a:db:c7: 58:be:e0:8d:6a:a9:e2:d4:e7:60:f1:46:fd:de:ab: 23:a6:ae:b8:8b:a7:79:ff:28:9a:20:42:6d:85:3a: 9c:29:f4:ed:d8:1d:67:5e:32:10:b7:63:da:d4:c3: 5f:bc:8f:51:fa:66:92:ec:8d:c3:9b:1e:cd:7a:fb: 6f:e6:f3:11:f2:e0:ff:05:13:96:d3:ad:7c:0e:69: 73:6c:66:50:80:66:54:e2:4d:e5:a3:7c:63:67:0f: 12:b4:59:2c:da:54:96:a4:e9:29:d6:8e:89:95:4b: 7e:38:2e:2c:65:eb:4c:69:cd:27:14:e2:18:52:3a: 70:73:4a:bf:f7:b8:d9:32:df:94:c2:80:aa:b6:20: cc:bf:e9:1c:5a:51:a6:9c:00:09:4f:88:2d:04:9f: 72:44:2f:5d:62:b7:70:a0:64:be:43:cc:4e:e1:e9: fb:d2:dc:7c:57:fd:a4:9c:23:a4:04:d4:91:79:57: fc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DA:D9:AF:46:10:42:45:4F:7A:B5:AC:AC:E3:F5:51:E2:6E:0D:77 X509v3 Authority Key Identifier: keyid:A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/SNrZr0YQQkVPerWsrOP1UeJuDXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.99.0/24 194.24.231.0/24 Signature Algorithm: sha256WithRSAEncryption 98:15:e1:f0:ba:21:30:21:a7:6b:8b:b9:de:f6:cb:ef:19:7d: ab:e0:00:c3:bc:0a:63:d2:9f:ab:eb:6c:12:cc:e3:58:d0:41: d6:a7:21:29:c5:45:fe:8d:8b:0f:ab:8c:b8:22:c3:93:1e:20: 1e:a9:d8:47:6b:1f:6a:42:9f:d4:aa:79:ad:6f:90:1d:5b:1e: 9e:4a:e5:ca:d4:81:d8:ea:fe:2e:3d:66:1c:5d:be:26:b5:c1: d4:c4:d0:b1:24:db:9d:ff:65:71:e8:b7:f5:9a:8a:2f:09:78: d5:b3:b5:44:ea:9a:a3:1a:f4:63:d9:39:bc:b3:6f:39:1b:d9: 5c:96:e4:54:91:72:16:30:a6:1f:5d:22:ef:a3:73:73:86:b0: 2b:08:63:21:cd:6e:f3:b7:e5:02:93:65:10:bd:ff:a9:ab:13: 7d:41:3e:47:c4:de:2c:7d:0c:5e:ad:77:ca:37:e6:fe:1b:ea: 3d:9e:a8:8d:0a:71:90:66:d9:eb:70:75:4f:e7:2b:b1:4f:71: 1b:02:83:20:98:8b:6a:77:4b:d9:96:5a:83:4a:89:9d:c7:70: d0:00:4c:91:66:79:63:a7:2f:ed:0c:48:1b:5a:cd:19:0e:1b: 85:43:3d:fa:8a:40:4b:c5:b3:52:cf:0e:e4:d7:08:2e:93:32: c0:f0:d5:fc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NLy6TJHtr0yniSG+q2uyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTc3YzFlNGU3MDEzOTkyZDRjNGQwZjMzY2NkNzcyZmFj OGQ5M2IwHhcNMjYwMTAxMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGRhZDlhZjQ2MTA0MjQ1NGY3YWI1YWNhY2UzZjU1MWUyNmUwZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPu1jeDlO4sVsBDuCMLMIq/UKTv1 Cva53juz/DXaDf37Z1L2v3LUfDMRAJRMIqgkWbYFCLtDKeLNxoZfW+tBYh1exoAc ecEK28dYvuCNaqni1Odg8Ub93qsjpq64i6d5/yiaIEJthTqcKfTt2B1nXjIQt2Pa 1MNfvI9R+maS7I3Dmx7Nevtv5vMR8uD/BROW0618DmlzbGZQgGZU4k3lo3xjZw8S tFks2lSWpOkp1o6JlUt+OC4sZetMac0nFOIYUjpwc0q/97jZMt+UwoCqtiDMv+kc WlGmnAAJT4gtBJ9yRC9dYrdwoGS+Q8xO4en70tx8V/2knCOkBNSReVf83QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEja2a9GEEJFT3q1rKzj9VHibg13MB8GA1UdIwQY MBaAFKKXfB5OcBOZLUxNDzPM13L6yNk7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BkOEhrNXdFNWt0VEUwUE04elhjdnJJMlRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82OWQwNzItMzJkZC00MzJkLTllYTIt MjYzZTQ2NmU0YWQ2LzEvU05yWnIwWVFRa1ZQZXJXc3JPUDFVZUp1RFhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82OWQwNzItMzJkZC00MzJkLTllYTItMjYzZTQ2NmU0YWQ2 LzEvb3BkOEhrNXdFNWt0VEUwUE04elhjdnJJMlRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9RjAwQA whjnMA0GCSqGSIb3DQEBCwUAA4IBAQCYFeHwuiEwIadri7ne9svvGX2r4ADDvApj 0p+r62wSzONY0EHWpyEpxUX+jYsPq4y4IsOTHiAeqdhHax9qQp/Uqnmtb5AdWx6e SuXK1IHY6v4uPWYcXb4mtcHUxNCxJNud/2Vx6Lf1moovCXjVs7VE6pqjGvRj2Tm8 s285G9lcluRUkXIWMKYfXSLvo3NzhrArCGMhzW7zt+UCk2UQvf+pqxN9QT5HxN4s fQxerXfKN+b+G+o9nqiNCnGQZtnrcHVP5yuxT3EbAoMgmItqd0vZllqDSomdx3DQ AEyRZnljpy/tDEgbWs0ZDhuFQz36ikBLxbNSzw7k1wgukzLA8NX8 -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:50 2026 by rpki-client