This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/SNdVrzFoTGYFoAaQRYv8cJ6F2H0.roa File: SNdVrzFoTGYFoAaQRYv8cJ6F2H0.roa (raw, json) Hash identifier: MfCh5miyV4l1WaY/F5DKyibenGShF9S2TLmog0i5DGQ= Subject key identifier: 48:D7:55:AF:31:68:4C:66:05:A0:06:90:45:8B:FC:70:9E:85:D8:7D Certificate issuer: /CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6 Certificate serial: 019B7D5AAEDD87F6CF01C57062C90E307B85 Authority key identifier: 70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/SNdVrzFoTGYFoAaQRYv8cJ6F2H0.roa Signing time: Fri 02 Jan 2026 06:17:33 +0000 ROA not before: Fri 02 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206094 IP address blocks: 185.192.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ae:dd:87:f6:cf:01:c5:70:62:c9:0e:30:7b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6 Validity Not Before: Jan 2 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48d755af31684c6605a00690458bfc709e85d87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:ef:51:61:3d:cd:38:92:d3:4d:df:1a:09: e9:d3:87:a1:72:8e:d3:5c:65:5f:d4:38:38:0b:0c: c3:cd:95:fc:e2:3f:98:a5:0c:a5:3d:86:eb:5c:d5: db:4f:29:82:f6:ac:50:06:8d:d1:86:6a:a2:41:43: f0:f7:da:71:83:7a:fe:f3:1d:be:c1:1b:db:35:ae: 09:de:12:4c:18:79:67:f4:71:af:43:a3:4e:fb:90: 62:9f:cb:b2:c9:1e:5c:e4:9b:4a:95:72:90:1f:e8: 9c:18:5a:2b:4c:1f:08:50:59:74:6d:28:4e:64:1f: 33:6a:2a:c8:b1:13:d2:cf:cd:0b:71:6e:0a:73:cc: 23:43:f5:6c:71:7e:22:9a:eb:93:08:2a:df:7e:ab: bb:51:d2:4b:c2:aa:60:ec:0c:91:26:72:4c:46:90: fe:61:66:e7:27:1f:34:c1:e4:66:fe:f0:9e:55:eb: 73:ff:9d:17:33:52:dc:21:6a:d6:c8:64:74:14:09: e9:40:76:a9:7d:b5:ae:4e:05:74:45:c1:27:97:cf: fd:4c:3d:b8:40:58:bb:18:6a:bf:ad:80:f8:a2:7d: 36:52:e6:0b:27:69:61:1f:a3:55:12:a3:c1:fb:38: 6d:16:4e:f0:41:2b:67:bb:e5:75:8e:32:f2:f3:16: 0a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D7:55:AF:31:68:4C:66:05:A0:06:90:45:8B:FC:70:9E:85:D8:7D X509v3 Authority Key Identifier: keyid:70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/SNdVrzFoTGYFoAaQRYv8cJ6F2H0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.240.0/22 Signature Algorithm: sha256WithRSAEncryption 85:c3:12:c1:c0:46:5c:1b:f5:60:ae:fd:e9:dc:32:4f:22:0e: f4:d0:a2:d2:56:fd:97:e3:6c:d4:e1:3d:84:f1:50:fb:5c:aa: f2:20:db:63:b8:77:f9:22:93:af:6f:16:79:ba:f8:79:87:df: 27:7f:94:8f:68:90:de:ab:53:d9:af:09:c0:c5:92:76:9a:df: 51:a9:19:56:a3:03:8b:e8:e9:ef:94:1f:cf:47:a5:bb:86:b7: 64:22:a6:46:f3:57:a3:b3:77:21:21:c8:d0:5b:2f:b9:c3:2a: 32:d3:01:0b:bc:d3:26:7f:d4:af:9a:c0:6b:b1:40:d2:2c:5d: ea:7e:c9:3f:b3:b6:8b:a8:94:d7:c8:95:25:d1:92:8b:ab:34: d8:7a:11:8b:63:84:a8:4b:b8:4a:c0:56:33:62:71:d1:d4:08: aa:f6:01:99:b9:12:83:7e:95:fa:ec:4a:22:fd:20:0c:f8:b0: 8e:e3:d2:ea:fb:34:3c:4b:32:a8:75:13:7a:e3:7e:f7:c6:2a: 40:9a:fc:9b:05:eb:82:9c:8c:cc:92:f3:6d:93:d7:e8:bb:90: db:fe:e7:5a:f8:d8:22:c3:0b:4c:9c:ec:91:1d:75:9f:c7:da: 97:3c:a2:41:dd:cb:04:fa:db:cd:17:ea:e2:10:34:35:0d:a3: e7:6b:d2:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wq7dh/bPAcVwYskOMHuFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMTJhNTJlODhiMDE4MzJjZjBlZTM3Y2NkYWI2MWRlY2U3 ZDEyYzYwHhcNMjYwMTAyMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGQ3NTVhZjMxNjg0YzY2MDVhMDA2OTA0NThiZmM3MDllODVkODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw3vUWE9zTiS003fGgnp04ehco7T XGVf1Dg4CwzDzZX84j+YpQylPYbrXNXbTymC9qxQBo3RhmqiQUPw99pxg3r+8x2+ wRvbNa4J3hJMGHln9HGvQ6NO+5Bin8uyyR5c5JtKlXKQH+icGForTB8IUFl0bShO ZB8zairIsRPSz80LcW4Kc8wjQ/VscX4imuuTCCrffqu7UdJLwqpg7AyRJnJMRpD+ YWbnJx80weRm/vCeVetz/50XM1LcIWrWyGR0FAnpQHapfbWuTgV0RcEnl8/9TD24 QFi7GGq/rYD4on02UuYLJ2lhH6NVEqPB+zhtFk7wQStnu+V1jjLy8xYKQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEjXVa8xaExmBaAGkEWL/HCehdh9MB8GA1UdIwQY MBaAFHASpS6IsBgyzw7jfM2rYd7OfRLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0JLbExvaXdHRExQRHVOOHphdGgzczU5RXNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZTU0NWItNDQzZi00Y2ZiLThjMjgt MzIwMWI4N2YxNDkwLzEvU05kVnJ6Rm9UR1lGb0FhUVJZdjhjSjZGMkgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wZTU0NWItNDQzZi00Y2ZiLThjMjgtMzIwMWI4N2YxNDkw LzEvY0JLbExvaXdHRExQRHVOOHphdGgzczU5RXNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucDwMA0G CSqGSIb3DQEBCwUAA4IBAQCFwxLBwEZcG/Vgrv3p3DJPIg700KLSVv2X42zU4T2E 8VD7XKryINtjuHf5IpOvbxZ5uvh5h98nf5SPaJDeq1PZrwnAxZJ2mt9RqRlWowOL 6OnvlB/PR6W7hrdkIqZG81ejs3chIcjQWy+5wyoy0wELvNMmf9SvmsBrsUDSLF3q fsk/s7aLqJTXyJUl0ZKLqzTYehGLY4SoS7hKwFYzYnHR1Aiq9gGZuRKDfpX67Eoi /SAM+LCO49Lq+zQ8SzKodRN64373xipAmvybBeuCnIzMkvNtk9fou5Db/uda+Ngi wwtMnOyRHXWfx9qXPKJB3csE+tvNF+riEDQ1DaPna9Lb -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:37 2026 by rpki-client