This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/snScws96TnQnAtgCESncYf2cHQI.roa File: snScws96TnQnAtgCESncYf2cHQI.roa (raw, json) Hash identifier: Rg061AAdsDJTEuVCFaKulmhMa2nYwQQcIJgWuXh/KyU= Subject key identifier: B2:74:9C:C2:CF:7A:4E:74:27:02:D8:02:11:29:DC:61:FD:9C:1D:02 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019B7D5B6951D4B40B8A9628435833455471 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/snScws96TnQnAtgCESncYf2cHQI.roa Signing time: Fri 02 Jan 2026 06:18:21 +0000 ROA not before: Fri 02 Jan 2026 06:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 109.107.145.0/24 maxlen: 24 2a0a:d6c0:145::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:69:51:d4:b4:0b:8a:96:28:43:58:33:45:54:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Jan 2 06:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2749cc2cf7a4e742702d8021129dc61fd9c1d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:4d:aa:95:cf:fb:ec:01:4b:ac:88:70:f1: 28:bd:df:51:d8:a2:2d:f2:4a:f9:76:6f:b5:d8:6a: ea:73:35:be:f4:58:6e:b1:95:38:36:76:6f:94:da: 11:2b:22:74:3d:08:af:0d:7a:eb:2a:33:e8:c7:85: 35:32:c4:9a:eb:49:33:06:56:c4:b9:b3:f9:b5:26: 48:d5:27:f8:70:20:c9:ba:a5:71:0b:8f:42:d7:2f: 6b:4d:f6:f6:01:25:3f:a8:79:fb:8a:32:47:9a:6a: 33:e7:10:ef:df:88:59:71:8e:8e:1f:3c:c9:05:9d: 6c:6b:76:02:c7:ba:47:ab:99:37:49:cd:bb:51:02: a4:fb:54:b3:a0:26:12:c3:7d:4f:37:c9:f6:76:97: 06:0b:65:9d:fe:46:a1:a3:24:cb:d6:9e:65:c6:6b: ba:79:23:af:82:ef:a9:6f:08:9d:1e:ac:75:72:eb: 21:3a:8b:37:ca:c3:83:c4:df:d4:67:79:46:97:8d: 4a:ea:de:2d:95:ac:1a:7d:6b:62:84:a3:32:a9:c9: da:84:9d:6f:0d:e2:25:b0:06:2c:29:c5:8d:30:fc: 51:1f:b9:8f:9d:c4:e5:36:7c:7b:18:86:f4:45:98: 14:a1:9b:ed:a8:7d:df:cb:1a:63:2a:3f:53:58:f2: b0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:74:9C:C2:CF:7A:4E:74:27:02:D8:02:11:29:DC:61:FD:9C:1D:02 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/snScws96TnQnAtgCESncYf2cHQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.145.0/24 IPv6: 2a0a:d6c0:145::/48 Signature Algorithm: sha256WithRSAEncryption b8:72:77:da:36:5f:d1:14:bf:b7:21:63:01:5f:73:08:54:30: f8:c3:09:c5:d2:9c:7f:ce:8b:fe:c6:56:a6:57:8e:14:e5:28: 4b:1b:ad:a5:fa:51:76:0e:03:09:27:92:d5:0d:42:0f:ac:d0: b5:2b:84:de:ba:86:0a:3e:f2:70:ee:73:02:db:f8:75:b3:54: 26:7b:7c:5c:4e:6f:c9:ac:2e:51:d8:a4:62:5e:b7:4d:88:0e: d7:1a:20:f0:ec:12:ea:d4:32:cb:b5:dd:73:1f:2e:cc:8e:38: ef:fa:67:82:b0:40:44:33:7f:5e:a3:4c:de:b5:31:fe:26:2e: 70:0b:84:05:0c:e5:74:eb:00:04:c0:9d:3a:df:9b:e0:02:64: 53:99:e1:9c:ee:de:73:2f:76:7f:12:20:9a:49:c5:86:a3:c3: 24:35:03:c5:41:79:cf:22:3c:f4:40:14:88:43:bc:7d:ee:16: 39:71:55:aa:16:7a:61:26:64:9c:02:d5:0d:81:4e:3e:e0:98: 25:db:e9:a7:16:5a:d7:20:29:da:36:e0:65:40:db:8e:85:ac: 13:5a:a2:c6:f5:b6:eb:50:0e:48:92:eb:56:9c:56:46:29:39: a3:54:db:fa:81:fa:3d:3a:14:62:48:94:44:85:31:52:b9:04: fe:a6:75:b0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9W2lR1LQLipYoQ1gzRVRxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwMTAyMDYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjc0OWNjMmNmN2E0ZTc0MjcwMmQ4MDIxMTI5ZGM2MWZkOWMxZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHhNqpXP++wBS6yIcPEovd9R2KIt 8kr5dm+12GrqczW+9FhusZU4NnZvlNoRKyJ0PQivDXrrKjPox4U1MsSa60kzBlbE ubP5tSZI1Sf4cCDJuqVxC49C1y9rTfb2ASU/qHn7ijJHmmoz5xDv34hZcY6OHzzJ BZ1sa3YCx7pHq5k3Sc27UQKk+1SzoCYSw31PN8n2dpcGC2Wd/kahoyTL1p5lxmu6 eSOvgu+pbwidHqx1cushOos3ysODxN/UZ3lGl41K6t4tlawafWtihKMyqcnahJ1v DeIlsAYsKcWNMPxRH7mPncTlNnx7GIb0RZgUoZvtqH3fyxpjKj9TWPKw6wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLJ0nMLPek50JwLYAhEp3GH9nB0CMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvc25TY3dzOTZUblFuQXRnQ0VTbmNZZjJjSFFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAbWuRMA8E AgACMAkDBwAqCtbAAUUwDQYJKoZIhvcNAQELBQADggEBALhyd9o2X9EUv7chYwFf cwhUMPjDCcXSnH/Oi/7GVqZXjhTlKEsbraX6UXYOAwknktUNQg+s0LUrhN66hgo+ 8nDucwLb+HWzVCZ7fFxOb8msLlHYpGJet02IDtcaIPDsEurUMsu13XMfLsyOOO/6 Z4KwQEQzf16jTN61Mf4mLnALhAUM5XTrAATAnTrfm+ACZFOZ4Zzu3nMvdn8SIJpJ xYajwyQ1A8VBec8iPPRAFIhDvH3uFjlxVaoWemEmZJwC1Q2BTj7gmCXb6acWWtcg Kdo24GVA246FrBNaosb1tutQDkiS61acVkYpOaNU2/qB+j06FGJIlESFMVK5BP6m dbA= -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:27 2026 by rpki-client