This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/SNi-DB-3orAf89rEiLGZKgrL02E.roa File: SNi-DB-3orAf89rEiLGZKgrL02E.roa (raw, json) Hash identifier: xohZ3XnxqpvX0iVD8h0Qoaj2j80QeDYnBo5BNQhrojg= Subject key identifier: 48:D8:BE:0C:1F:B7:A2:B0:1F:F3:DA:C4:88:B1:99:2A:0A:CB:D3:61 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38A7074DEE95DF1BDE860B5C05EF79 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/SNi-DB-3orAf89rEiLGZKgrL02E.roa Signing time: Fri 02 Jan 2026 10:20:00 +0000 ROA not before: Fri 02 Jan 2026 10:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212157 IP address blocks: 147.181.0.0/22 maxlen: 24 147.181.24.0/23 maxlen: 24 185.52.4.0/22 maxlen: 24 2a04:9a00:1010::/44 maxlen: 48 2a04:9a00:1040::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a7:07:4d:ee:95:df:1b:de:86:0b:5c:05:ef:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48d8be0c1fb7a2b01ff3dac488b1992a0acbd361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:93:fc:7c:20:02:c3:c3:b2:3e:0b:a5:01: dc:6d:3e:c3:8d:02:4b:29:39:34:fe:16:c3:97:e6: 45:7d:dd:b7:9c:2f:19:45:28:2d:84:50:18:3a:35: 9a:58:9f:78:26:a3:46:e6:38:da:f3:4f:47:60:d0: cb:cf:61:20:e6:f2:b8:e8:3d:0d:0c:5a:6b:e2:40: 4c:70:41:07:48:0a:1a:68:7a:74:d7:e7:f6:2e:7c: 18:6f:db:d3:75:c6:ab:48:e6:11:a2:f9:bb:de:02: bc:72:8b:8e:31:22:d6:39:f9:4c:fc:94:f3:ad:0b: 89:eb:e1:85:02:31:d4:01:3e:34:df:dc:89:74:26: 02:f6:32:4b:98:ff:01:a9:9e:fd:d8:d1:e5:97:2b: 42:5a:77:48:d8:c4:c1:9b:df:af:ad:01:24:ba:7f: 6c:8b:df:1d:0f:1d:88:9e:2b:a6:2e:bb:af:aa:6b: de:ab:4b:d5:b3:ef:46:c5:16:3e:5d:6c:1d:e7:f8: b3:45:e6:96:58:8f:5f:e0:c0:ff:d8:60:27:97:11: ab:d4:88:d3:45:d0:c9:bc:13:a2:8c:5e:e0:2f:c6: 32:c1:47:09:ef:25:29:b2:91:e5:85:47:8b:5b:59: b2:08:ca:98:7d:42:4d:03:1f:d9:58:89:68:91:87: c8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D8:BE:0C:1F:B7:A2:B0:1F:F3:DA:C4:88:B1:99:2A:0A:CB:D3:61 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/SNi-DB-3orAf89rEiLGZKgrL02E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.181.0.0/22 147.181.24.0/23 185.52.4.0/22 IPv6: 2a04:9a00:1010::/44 2a04:9a00:1040::/44 Signature Algorithm: sha256WithRSAEncryption cb:5f:f9:f0:71:f8:9d:5b:45:ae:11:3f:96:c0:a2:83:13:50: 2d:05:33:8a:f7:a3:cb:39:4d:3e:1a:f5:8c:b0:90:e0:c7:a2: 99:ab:29:3b:23:a7:7b:24:fe:43:71:8e:d6:69:b6:a6:a6:7c: d6:f9:ef:14:77:a8:cf:43:56:c1:52:a3:bd:fb:0f:27:19:3a: 3d:8c:e9:19:eb:52:5d:d8:93:25:09:72:67:b6:85:d9:9b:f1: 1b:43:bb:ae:1d:a5:12:5a:d0:4b:15:3e:f7:5a:3f:59:b9:6c: 6b:b3:43:61:3b:4e:f7:13:35:b4:bd:10:34:bf:5d:66:a0:7c: c1:8a:76:9f:8e:6b:10:a5:4e:c9:5e:cf:33:85:3e:dd:ca:18: 31:a9:64:17:d6:40:5a:22:76:c6:12:51:57:18:9a:e9:34:48: 2b:56:e4:49:f4:cf:24:cd:2e:32:60:1f:97:15:ce:25:b3:f5: bc:22:55:cf:91:6b:6c:ad:f2:e8:64:68:b0:3d:e7:03:85:eb: fc:66:85:34:26:07:ab:91:85:a6:dc:ec:da:2c:9b:56:26:a7: 05:2b:24:ed:2c:cd:61:ad:d3:5e:60:ca:0b:6d:4a:2b:d7:1e: 10:77:8e:bd:6a:52:89:5d:22:ff:7c:ee:02:e5:14:8a:6f:1f: ac:01:08:ec -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt+OKcHTe6V3xvehgtcBe95MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGQ4YmUwYzFmYjdhMmIwMWZmM2RhYzQ4OGIxOTkyYTBhY2JkMzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo52T/HwgAsPDsj4LpQHcbT7DjQJL KTk0/hbDl+ZFfd23nC8ZRSgthFAYOjWaWJ94JqNG5jja809HYNDLz2Eg5vK46D0N DFpr4kBMcEEHSAoaaHp01+f2LnwYb9vTdcarSOYRovm73gK8couOMSLWOflM/JTz rQuJ6+GFAjHUAT4039yJdCYC9jJLmP8BqZ792NHllytCWndI2MTBm9+vrQEkun9s i98dDx2IniumLruvqmveq0vVs+9GxRY+XWwd5/izReaWWI9f4MD/2GAnlxGr1IjT RdDJvBOijF7gL8YywUcJ7yUpspHlhUeLW1myCMqYfUJNAx/ZWIlokYfIfQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFEjYvgwft6KwH/PaxIixmSoKy9NhMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvU05pLURCLTNvckFmODlyRWlMR1pLZ3JMMDJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQCk7UAAwQB k7UYAwQCuTQEMBgEAgACMBIDBwQqBJoAEBADBwQqBJoAEEAwDQYJKoZIhvcNAQEL BQADggEBAMtf+fBx+J1bRa4RP5bAooMTUC0FM4r3o8s5TT4a9YywkODHopmrKTsj p3sk/kNxjtZptqamfNb57xR3qM9DVsFSo737DycZOj2M6RnrUl3YkyUJcme2hdmb 8RtDu64dpRJa0EsVPvdaP1m5bGuzQ2E7TvcTNbS9EDS/XWagfMGKdp+OaxClTsle zzOFPt3KGDGpZBfWQFoidsYSUVcYmuk0SCtW5En0zyTNLjJgH5cVziWz9bwiVc+R a2yt8uhkaLA95wOF6/xmhTQmB6uRhabc7Nosm1YmpwUrJO0szWGt015gygttSivX HhB3jr1qUoldIv987gLlFIpvH6wBCOw= -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:58 2026 by rpki-client