This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/Sm4r_ZYf1TK-pmJlyZULA1V5IWY.roa File: Sm4r_ZYf1TK-pmJlyZULA1V5IWY.roa (raw, json) Hash identifier: WcFy3x0XhhNqCP1SgxYrQOhQpXbYRQ1TrY/aquk9Bhg= Subject key identifier: 4A:6E:2B:FD:96:1F:D5:32:BE:A6:62:65:C9:95:0B:03:55:79:21:66 Certificate issuer: /CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861 Certificate serial: 019B79ECC9AC07B58C2DDA944B7067193180 Authority key identifier: 78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/Sm4r_ZYf1TK-pmJlyZULA1V5IWY.roa Signing time: Thu 01 Jan 2026 14:18:39 +0000 ROA not before: Thu 01 Jan 2026 14:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3301 IP address blocks: 193.33.246.0/23 maxlen: 23 193.33.246.0/24 maxlen: 24 193.33.247.0/24 maxlen: 24 2001:67c:2798::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c9:ac:07:b5:8c:2d:da:94:4b:70:67:19:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861 Validity Not Before: Jan 1 14:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a6e2bfd961fd532bea66265c9950b0355792166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:70:65:90:15:55:bd:e8:61:1c:e9:7a:31:72: fe:9e:b2:a2:7f:1e:e6:c5:48:58:47:7a:7a:30:18: 21:c3:d4:67:ac:e7:17:0b:6a:8c:da:e7:1e:eb:2a: 08:32:c5:d2:8c:4a:5b:1f:33:2d:eb:21:6f:c1:3a: b1:ec:f0:40:5a:69:f6:d1:5e:b9:99:df:f0:29:fb: 49:e0:2c:ed:47:4c:d0:5c:8d:41:11:f4:ea:62:a3: 26:29:ca:31:66:fa:58:db:8a:31:bc:69:64:df:34: 4f:a9:f2:d2:2b:43:1b:92:54:8b:5a:7a:80:42:db: 8c:05:16:b2:08:6a:3a:bb:c3:1d:05:86:b9:64:cc: fd:a1:08:c7:f5:43:32:44:87:1a:4a:75:f6:bb:38: 68:44:25:c9:a6:c8:f7:01:b7:64:41:5b:34:88:d1: aa:6e:57:d8:fb:00:e8:c4:ce:54:60:f1:6b:bb:d1: 12:1a:a6:f0:b6:4b:63:8d:c1:12:6c:8a:fd:e1:a7: c6:ef:ee:44:98:a5:a3:06:2e:07:62:a4:be:59:90: 67:e8:2b:cd:b0:16:c8:36:d6:e5:91:a8:64:b5:1f: 0e:3f:f5:1b:29:b0:c6:7e:3e:c9:78:43:f1:2d:40: 1c:6d:5c:ea:b1:c0:57:4f:ec:3f:86:8f:8d:cf:fb: 1a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6E:2B:FD:96:1F:D5:32:BE:A6:62:65:C9:95:0B:03:55:79:21:66 X509v3 Authority Key Identifier: keyid:78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/Sm4r_ZYf1TK-pmJlyZULA1V5IWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.246.0/23 IPv6: 2001:67c:2798::/48 Signature Algorithm: sha256WithRSAEncryption a3:39:ea:e7:ed:85:7f:bb:6a:3f:45:56:c0:23:4e:52:ac:4c: 7d:ab:67:67:b5:c7:19:f2:d7:64:54:2c:f8:6f:c6:08:33:13: c9:de:5c:32:f6:19:b1:2b:4b:7e:b6:37:f1:1b:52:74:a0:87: c9:50:0a:2b:e3:94:43:2d:1b:a6:29:1b:b4:2a:4a:62:ca:8b: 71:d8:3b:4e:91:20:cc:f0:75:74:8b:fb:3f:9b:a0:7f:c0:75: 22:2e:3f:fa:c3:10:f0:31:67:1b:27:90:50:8a:62:e2:00:98: 89:de:e6:8c:68:b5:0d:54:07:7e:b4:32:24:d0:21:d6:ba:15: 6c:80:cf:81:42:de:9d:b6:ef:44:e7:54:e6:c4:d4:a1:35:9c: 8b:a3:55:a8:61:31:b8:6e:d8:6d:5d:9d:36:5d:3e:d3:85:de: d0:92:55:e3:d5:e9:cb:94:a9:75:f2:02:11:02:ff:67:46:c3: 3c:d2:5a:34:06:43:0f:21:3f:d5:44:20:ae:ed:4a:cf:08:68: d2:92:9d:a4:68:86:36:27:59:fa:01:2d:19:2e:9e:24:63:44: cb:d9:83:f3:63:95:c4:92:cb:2a:93:5a:d5:b6:f1:7b:5d:8a: cf:3d:66:b5:bc:d2:b7:f1:e8:16:55:fc:c5:9c:96:01:e5:48: ee:79:f3:8a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57MmsB7WMLdqUS3BnGTGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ODJhNTRkYjJhZjRhZTJlMDQ4NjQ3MWI4ZDUwZjhmYTVm N2U4NjEwHhcNMjYwMTAxMTQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTZlMmJmZDk2MWZkNTMyYmVhNjYyNjVjOTk1MGIwMzU1NzkyMTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnBlkBVVvehhHOl6MXL+nrKifx7m xUhYR3p6MBghw9RnrOcXC2qM2uce6yoIMsXSjEpbHzMt6yFvwTqx7PBAWmn20V65 md/wKftJ4CztR0zQXI1BEfTqYqMmKcoxZvpY24oxvGlk3zRPqfLSK0MbklSLWnqA QtuMBRayCGo6u8MdBYa5ZMz9oQjH9UMyRIcaSnX2uzhoRCXJpsj3AbdkQVs0iNGq blfY+wDoxM5UYPFru9ESGqbwtktjjcESbIr94afG7+5EmKWjBi4HYqS+WZBn6CvN sBbINtblkahktR8OP/UbKbDGfj7JeEPxLUAcbVzqscBXT+w/ho+Nz/saTwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEpuK/2WH9UyvqZiZcmVCwNVeSFmMB8GA1UdIwQY MBaAFHiCpU2yr0ri4EhkcbjVD4+l9+hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUlLbFRiS3ZTdUxnU0dSeHVOVVBqNlgzNkdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzMxMmUtMTBkMi00NDVmLTlmZWEt ZjE2YjA3ZjQzMDZmLzEvU200cl9aWWYxVEstcG1KbHlaVUxBMVY1SVdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MzMxMmUtMTBkMi00NDVmLTlmZWEtZjE2YjA3ZjQzMDZm LzEvZUlLbFRiS3ZTdUxnU0dSeHVOVVBqNlgzNkdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwSH2MA8E AgACMAkDBwAgAQZ8J5gwDQYJKoZIhvcNAQELBQADggEBAKM56ufthX+7aj9FVsAj TlKsTH2rZ2e1xxny12RULPhvxggzE8neXDL2GbErS362N/EbUnSgh8lQCivjlEMt G6YpG7QqSmLKi3HYO06RIMzwdXSL+z+boH/AdSIuP/rDEPAxZxsnkFCKYuIAmIne 5oxotQ1UB360MiTQIda6FWyAz4FC3p2270TnVObE1KE1nIujVahhMbhu2G1dnTZd PtOF3tCSVePV6cuUqXXyAhEC/2dGwzzSWjQGQw8hP9VEIK7tSs8IaNKSnaRohjYn WfoBLRkuniRjRMvZg/NjlcSSyyqTWtW28Xtdis89ZrW80rfx6BZV/MWclgHlSO55 84o= -----END CERTIFICATE-----Generated at Mon Jan 26 11:44:24 2026 by rpki-client