This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/SnBUF-l7sU2GN1xYWmkSVmuspLE.roa File: SnBUF-l7sU2GN1xYWmkSVmuspLE.roa (raw, json) Hash identifier: NWqfON704hEJ6MRTsiaDYlhowGx3tqMVvkRiS8+G1qA= Subject key identifier: 4A:70:54:17:E9:7B:B1:4D:86:37:5C:58:5A:69:12:56:6B:AC:A4:B1 Certificate issuer: /CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4 Certificate serial: 019B77C6CB5AFE655E5A4E78FC03AAA4040C Authority key identifier: 19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/SnBUF-l7sU2GN1xYWmkSVmuspLE.roa Signing time: Thu 01 Jan 2026 04:17:55 +0000 ROA not before: Thu 01 Jan 2026 04:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210877 IP address blocks: 195.225.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:cb:5a:fe:65:5e:5a:4e:78:fc:03:aa:a4:04:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4 Validity Not Before: Jan 1 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a705417e97bb14d86375c585a6912566baca4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:c1:ff:d5:2f:67:d3:4b:24:4b:2f:80:11: a3:0f:02:be:c1:ec:28:e1:d0:a8:c6:8b:9e:e7:b4: 98:f0:17:e3:42:7c:a4:58:48:e6:e2:24:3e:83:c2: c2:9a:46:ec:fe:ce:ae:ad:e6:4c:f6:55:9c:b5:65: 96:37:bb:62:ba:25:88:44:4d:48:b3:48:c9:d3:c5: c8:b4:3b:4a:a5:52:f9:da:79:16:ba:af:6e:d6:1d: 19:6f:98:bb:88:d7:d7:ae:37:5d:84:45:e7:70:1a: 57:f5:f3:f3:c2:ce:f9:d3:14:d1:72:25:37:6c:61: 40:64:67:9c:d2:6c:4e:99:c1:4a:46:cc:3a:a4:ab: 1c:ce:d3:49:6d:a8:1d:78:c3:c3:f4:0a:22:50:f4: 02:21:63:b0:d4:27:9f:7e:e6:7d:8b:03:dd:7a:72: d2:6d:ec:fe:ab:bc:d8:b8:ea:aa:ff:bd:97:72:52: 04:1e:2e:40:9b:14:c7:d2:4e:77:e2:3c:0a:b0:26: 0f:17:19:77:09:59:38:0d:47:e1:3f:6b:e7:24:29: 50:90:2e:d7:b8:15:cd:9d:c1:31:79:79:21:16:7f: c9:d3:0a:8d:c1:b2:eb:bf:40:c7:db:31:99:d2:8e: 07:c8:e4:81:50:47:c4:31:1f:02:bf:bb:12:74:3c: cc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:70:54:17:E9:7B:B1:4D:86:37:5C:58:5A:69:12:56:6B:AC:A4:B1 X509v3 Authority Key Identifier: keyid:19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/SnBUF-l7sU2GN1xYWmkSVmuspLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.225.232.0/24 Signature Algorithm: sha256WithRSAEncryption 85:59:fe:43:0a:55:5d:23:80:63:3f:56:d9:55:cf:42:f8:c5: 88:c4:95:7b:3a:9a:be:5a:9c:b4:d9:f4:f7:87:3e:68:ab:9a: ee:70:19:96:d4:83:e6:7c:8d:00:e5:32:71:5d:1f:31:55:f7: ec:de:04:ff:ef:95:8a:e9:16:3c:24:78:4b:c3:e4:5e:0a:84: a3:9c:15:e5:d5:28:e4:c0:6f:ad:5a:0e:9e:a3:33:66:3a:f2: 89:ab:3c:28:f2:59:6d:8b:c3:10:9c:4e:fe:54:99:d7:57:45: 65:b9:ce:00:48:19:9d:82:99:dc:87:5c:26:e9:94:ec:d4:de: 11:62:92:9c:30:47:4a:75:84:21:e6:74:b1:56:fb:6b:89:a8: a6:9c:6a:e6:3b:c1:f0:9d:2f:8d:8f:5b:36:a8:93:70:f1:00: cf:e6:bd:88:d1:df:03:61:ed:bc:4c:df:55:47:4a:45:e9:6b: f6:39:e0:76:00:97:12:4c:78:a7:61:10:e6:c8:58:ae:f9:9f: 6e:37:d0:3a:e8:88:fd:1f:74:8a:e7:89:92:25:61:e8:fd:06: 93:4f:33:72:1b:59:71:ce:49:bb:51:68:b5:ee:09:43:da:3b: d5:d7:a4:1f:1e:17:ca:4b:c8:83:36:f1:7d:c5:b0:67:a9:97: 7a:82:7e:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsta/mVeWk54/AOqpAQMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2U0ODhlZmEzYzE4NGY0YWNiMmZjMzBlYjFhNzFmYTEx NmY5YjQwHhcNMjYwMTAxMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTcwNTQxN2U5N2JiMTRkODYzNzVjNTg1YTY5MTI1NjZiYWNhNGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvfB/9UvZ9NLJEsvgBGjDwK+wewo 4dCoxoue57SY8BfjQnykWEjm4iQ+g8LCmkbs/s6ureZM9lWctWWWN7tiuiWIRE1I s0jJ08XItDtKpVL52nkWuq9u1h0Zb5i7iNfXrjddhEXncBpX9fPzws750xTRciU3 bGFAZGec0mxOmcFKRsw6pKscztNJbagdeMPD9AoiUPQCIWOw1CeffuZ9iwPdenLS bez+q7zYuOqq/72XclIEHi5AmxTH0k534jwKsCYPFxl3CVk4DUfhP2vnJClQkC7X uBXNncExeXkhFn/J0wqNwbLrv0DH2zGZ0o4HyOSBUEfEMR8Cv7sSdDzMoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEpwVBfpe7FNhjdcWFppElZrrKSxMB8GA1UdIwQY MBaAFBnOSI76PBhPSssvww6xpx+hFvm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2M1SWp2bzhHRTlLeXlfRERyR25INkVXLWJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wZmVmNzEtOTIyZS00NDQ4LWIzN2Qt Zjc0MGI5ZTFjNDgwLzEvU25CVUYtbDdzVTJHTjF4WVdta1NWbXVzcExFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wZmVmNzEtOTIyZS00NDQ4LWIzN2QtZjc0MGI5ZTFjNDgw LzEvR2M1SWp2bzhHRTlLeXlfRERyR25INkVXLWJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+HoMA0G CSqGSIb3DQEBCwUAA4IBAQCFWf5DClVdI4BjP1bZVc9C+MWIxJV7Opq+Wpy02fT3 hz5oq5rucBmW1IPmfI0A5TJxXR8xVffs3gT/75WK6RY8JHhLw+ReCoSjnBXl1Sjk wG+tWg6eozNmOvKJqzwo8llti8MQnE7+VJnXV0Vluc4ASBmdgpnch1wm6ZTs1N4R YpKcMEdKdYQh5nSxVvtriaimnGrmO8HwnS+Nj1s2qJNw8QDP5r2I0d8DYe28TN9V R0pF6Wv2OeB2AJcSTHinYRDmyFiu+Z9uN9A66Ij9H3SK54mSJWHo/QaTTzNyG1lx zkm7UWi17glD2jvV16QfHhfKS8iDNvF9xbBnqZd6gn4B -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:00 2026 by rpki-client