This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/sBKm5lh9pFW6Bx5UfqBwJxTOW-c.roa File: sBKm5lh9pFW6Bx5UfqBwJxTOW-c.roa (raw, json) Hash identifier: fm7BpsPCc0ljnRZ7PGXN1/E5kbFIYol2cEhLrnlX2S0= Subject key identifier: B0:12:A6:E6:58:7D:A4:55:BA:07:1E:54:7E:A0:70:27:14:CE:5B:E7 Certificate issuer: /CN=b4810d7c9bfc58b9e0a1e59169c3dd322de9f737 Certificate serial: 019B7A5B04BC09B8CF43B5C257B375820F9F Authority key identifier: B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/sBKm5lh9pFW6Bx5UfqBwJxTOW-c.roa Signing time: Thu 01 Jan 2026 16:19:03 +0000 ROA not before: Thu 01 Jan 2026 16:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29050 IP address blocks: 5.43.232.0/21 maxlen: 24 46.182.152.0/21 maxlen: 24 185.14.76.0/22 maxlen: 24 213.243.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:04:bc:09:b8:cf:43:b5:c2:57:b3:75:82:0f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4810d7c9bfc58b9e0a1e59169c3dd322de9f737 Validity Not Before: Jan 1 16:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b012a6e6587da455ba071e547ea0702714ce5be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:76:7c:eb:c2:98:47:f3:e7:99:19:97:3f:21: 39:05:57:05:28:05:d1:f3:60:e8:5b:65:39:85:71: 0c:e2:a7:d0:91:48:f1:50:a7:9e:c7:e5:09:bd:06: 33:9a:c7:7b:ce:ef:c8:d7:e7:06:84:22:ea:2b:c3: d8:4f:84:9a:2c:f7:cc:cc:07:7b:8f:e4:a3:b9:d1: 96:ce:cf:3e:db:53:fe:7c:a8:df:5d:c0:fa:12:6e: ec:3a:24:95:47:c5:b9:bc:62:20:ff:85:c8:58:00: ca:63:19:c9:9c:27:f6:04:96:e5:70:50:91:c3:70: ab:9e:af:66:9e:28:60:83:dc:01:be:33:f6:03:63: a8:d4:8a:e9:4f:ff:50:3a:32:e4:cf:9f:6f:1c:bf: 3f:07:3d:70:17:33:33:08:c5:d6:32:f5:60:83:68: 19:a1:4a:ab:1f:62:1a:52:67:b2:13:1b:00:14:a6: 78:a2:ee:e4:c7:36:cd:68:94:56:f2:2c:fc:85:94: e8:ee:e0:44:c2:36:80:d2:70:89:0e:30:4b:c4:b9: fe:da:22:c6:b6:22:33:b5:aa:6c:54:44:dd:de:ec: 63:a3:f1:b2:01:42:b7:f8:65:5d:23:79:0d:6a:78: 1e:12:e8:b4:a1:d4:41:39:e5:a9:d7:04:03:89:6e: 21:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:12:A6:E6:58:7D:A4:55:BA:07:1E:54:7E:A0:70:27:14:CE:5B:E7 X509v3 Authority Key Identifier: keyid:B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/sBKm5lh9pFW6Bx5UfqBwJxTOW-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.43.232.0/21 46.182.152.0/21 185.14.76.0/22 213.243.192.0/18 Signature Algorithm: sha256WithRSAEncryption 5e:cd:21:de:e8:ae:75:b0:19:4c:fb:09:b2:5e:f2:5c:47:86: a1:ce:aa:fa:f5:72:9a:3b:c3:5f:eb:2d:85:f0:81:41:a4:4e: 85:8a:43:fb:06:1f:f1:89:d5:af:ec:e5:ee:c1:45:73:b2:e7: bc:00:8c:c4:f9:30:eb:8a:b2:c5:94:64:9a:ff:df:1f:ce:a1: 70:3f:51:fa:18:61:0c:dd:76:17:65:21:f8:f8:db:b4:1b:21: 79:9d:6b:bb:3c:17:05:bf:78:eb:ea:83:d4:ba:17:bb:2a:cb: a1:d2:c6:71:5c:7e:d1:fc:b3:36:1e:ed:98:25:7b:26:2c:93: c4:6f:76:d7:6a:7f:55:a2:69:d9:5d:63:a6:29:42:84:98:c5: f7:f7:db:62:2e:56:8c:61:60:dd:e6:44:6a:5f:4b:b4:8a:34: 7e:38:48:10:e9:98:87:f9:d1:6e:27:f7:be:0e:c6:45:fc:d4: 4e:92:06:f7:f3:44:50:ae:30:fc:42:0d:6e:82:9c:0e:de:56: 93:91:0f:9f:a2:f7:97:9e:d3:56:ed:73:eb:1c:a1:2b:f7:f6: c6:0a:57:53:d5:21:f1:fa:48:86:ec:5e:ff:3c:d3:a6:70:25: c5:98:e4:54:85:28:4f:20:3a:1e:a7:50:62:3a:f7:66:90:bf: 14:1f:f7:1f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6WwS8CbjPQ7XCV7N1gg+fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODEwZDdjOWJmYzU4YjllMGExZTU5MTY5YzNkZDMyMmRl OWY3MzcwHhcNMjYwMTAxMTYxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDEyYTZlNjU4N2RhNDU1YmEwNzFlNTQ3ZWEwNzAyNzE0Y2U1YmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXZ868KYR/PnmRmXPyE5BVcFKAXR 82DoW2U5hXEM4qfQkUjxUKeex+UJvQYzmsd7zu/I1+cGhCLqK8PYT4SaLPfMzAd7 j+SjudGWzs8+21P+fKjfXcD6Em7sOiSVR8W5vGIg/4XIWADKYxnJnCf2BJblcFCR w3Crnq9mnihgg9wBvjP2A2Oo1IrpT/9QOjLkz59vHL8/Bz1wFzMzCMXWMvVgg2gZ oUqrH2IaUmeyExsAFKZ4ou7kxzbNaJRW8iz8hZTo7uBEwjaA0nCJDjBLxLn+2iLG tiIztapsVETd3uxjo/GyAUK3+GVdI3kNangeEui0odRBOeWp1wQDiW4huQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLASpuZYfaRVugceVH6gcCcUzlvnMB8GA1UdIwQY MBaAFLSBDXyb/Fi54KHlkWnD3TIt6fc3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElFTmZKdjhXTG5nb2VXUmFjUGRNaTNwOXpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zZDRjNDYtNzU0NS00YjNkLThmMWMt MmE2MzQwMmJlYzY2LzEvc0JLbTVsaDlwRlc2Qng1VWZxQndKeFRPVy1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zZDRjNDYtNzU0NS00YjNkLThmMWMtMmE2MzQwMmJlYzY2 LzEvdElFTmZKdjhXTG5nb2VXUmFjUGRNaTNwOXpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDBSvoAwQD LraYAwQCuQ5MAwQG1fPAMA0GCSqGSIb3DQEBCwUAA4IBAQBezSHe6K51sBlM+wmy XvJcR4ahzqr69XKaO8Nf6y2F8IFBpE6FikP7Bh/xidWv7OXuwUVzsue8AIzE+TDr irLFlGSa/98fzqFwP1H6GGEM3XYXZSH4+Nu0GyF5nWu7PBcFv3jr6oPUuhe7Ksuh 0sZxXH7R/LM2Hu2YJXsmLJPEb3bXan9VomnZXWOmKUKEmMX399tiLlaMYWDd5kRq X0u0ijR+OEgQ6ZiH+dFuJ/e+DsZF/NROkgb380RQrjD8Qg1ugpwO3laTkQ+foveX ntNW7XPrHKEr9/bGCldT1SHx+kiG7F7/PNOmcCXFmORUhShPIDoep1BiOvdmkL8U H/cf -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:20 2026 by rpki-client