This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/spIlTecfIOkshZMwK9KtOYZfUkI.roa File: spIlTecfIOkshZMwK9KtOYZfUkI.roa (raw, json) Hash identifier: F/eeG2fLu4g1L7wn7uLLQklSodsS5/Mx2XBm7dOwxcY= Subject key identifier: B2:92:25:4D:E7:1F:20:E9:2C:85:93:30:2B:D2:AD:39:86:5F:52:42 Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e Certificate serial: 019B78A3357EAB0B5C0BCD5CE6C430775422 Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/spIlTecfIOkshZMwK9KtOYZfUkI.roa Signing time: Thu 01 Jan 2026 08:18:40 +0000 ROA not before: Thu 01 Jan 2026 08:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41811 IP address blocks: 37.205.56.0/21 maxlen: 21 46.255.112.0/21 maxlen: 21 88.151.216.0/21 maxlen: 21 88.202.168.0/21 maxlen: 21 109.232.56.0/21 maxlen: 21 137.221.128.0/19 maxlen: 19 137.221.160.0/21 maxlen: 21 137.221.168.0/22 maxlen: 22 137.221.184.0/21 maxlen: 21 185.30.24.0/22 maxlen: 22 2a01:a200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:35:7e:ab:0b:5c:0b:cd:5c:e6:c4:30:77:54:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e Validity Not Before: Jan 1 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b292254de71f20e92c8593302bd2ad39865f5242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:60:5a:09:24:53:6c:cd:a1:56:c0:88:3d: d4:6d:01:f1:ad:95:80:38:8a:b5:4b:d8:0f:40:b5: c2:1c:2d:48:3f:71:46:0b:45:f2:e7:8a:af:4c:31: 72:63:a7:cf:f8:13:fa:5d:8e:e5:98:9e:31:43:a6: 73:1a:be:cc:ad:37:36:08:93:62:86:c8:60:a2:d7: 43:3c:29:06:da:5a:1c:c0:d6:0f:34:91:80:41:52: 96:4b:31:9b:91:84:96:da:76:d9:3a:8b:d4:d4:51: 33:49:26:8c:53:95:88:34:f2:50:0c:1c:98:7e:6e: 3a:ee:d1:83:9d:bf:11:42:7c:10:81:d8:e0:a7:a6: 51:90:40:fc:12:cd:a6:58:f5:7c:ef:d0:7d:f9:f2: a8:1a:ae:a0:74:e9:3d:75:fd:d6:82:39:eb:d7:8b: 61:91:19:18:e9:06:96:33:f0:2a:01:9c:c8:e2:8c: 68:dc:dc:29:54:c6:4e:2b:f2:b8:3b:ac:c9:f1:bc: e5:5a:d2:b2:65:e6:16:ef:09:c3:7c:1a:00:4c:25: 1a:69:36:72:26:36:89:5e:62:3a:9f:3d:7f:ce:de: 37:c7:a9:72:07:5b:4e:64:d2:ce:9e:d0:9c:60:e0: d5:b5:ff:a3:c4:b5:02:6e:22:80:08:12:ad:13:59: 3b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:92:25:4D:E7:1F:20:E9:2C:85:93:30:2B:D2:AD:39:86:5F:52:42 X509v3 Authority Key Identifier: keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/spIlTecfIOkshZMwK9KtOYZfUkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.205.56.0/21 46.255.112.0/21 88.151.216.0/21 88.202.168.0/21 109.232.56.0/21 137.221.128.0-137.221.171.255 137.221.184.0/21 185.30.24.0/22 IPv6: 2a01:a200::/32 Signature Algorithm: sha256WithRSAEncryption 6b:08:27:29:6c:bf:30:af:d3:57:16:2e:db:ab:24:22:73:a2: 74:44:8f:e4:9b:5e:7f:51:5b:5e:26:51:27:d2:c3:e3:99:05: d7:8b:84:08:f7:3c:15:fe:6d:ce:a8:77:c7:d0:2a:5e:f3:6a: 8a:da:9d:df:d5:35:58:10:36:55:3e:33:38:76:aa:ef:f6:ed: e2:0b:73:e2:1a:92:3d:5c:f1:c4:d2:95:35:53:90:4d:04:5a: 42:e9:12:84:ac:26:a7:20:7b:7e:ca:28:ac:a3:1d:4d:7e:cd: e4:d2:42:e8:31:c0:e2:3f:37:ed:11:44:b1:bc:0a:8a:3c:ad: 25:6b:b0:fc:67:06:c5:33:25:b6:58:b0:8a:44:83:7c:d2:e3: 4e:5b:43:d2:3b:81:b0:81:00:f0:76:53:b2:b6:43:21:c8:7f: 13:db:d5:85:80:ee:03:43:67:e6:57:7c:26:a0:32:55:ec:7f: 60:7c:ef:9e:e4:2e:85:56:e0:21:97:19:14:03:d6:f1:18:7e: 41:55:46:d4:e2:f6:4d:5a:03:80:78:d0:26:64:71:91:ed:e6: 0d:58:d0:b2:f9:c4:8a:29:d3:7a:95:b1:24:7a:f7:62:13:ce: 27:87:95:ea:fd:36:1e:8f:39:ba:06:15:92:ac:89:2e:ce:ae: 2d:ed:14:2a -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISAZt4ozV+qwtcC81c5sQwd1QiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNDYwMTAyODNhODIwMmVlYWEzZmVmMzI1MzRlM2U5N2Uw NDA3OWUwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjkyMjU0ZGU3MWYyMGU5MmM4NTkzMzAyYmQyYWQzOTg2NWY1MjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLhgWgkkU2zNoVbAiD3UbQHxrZWA OIq1S9gPQLXCHC1IP3FGC0Xy54qvTDFyY6fP+BP6XY7lmJ4xQ6ZzGr7MrTc2CJNi hshgotdDPCkG2locwNYPNJGAQVKWSzGbkYSW2nbZOovU1FEzSSaMU5WINPJQDByY fm467tGDnb8RQnwQgdjgp6ZRkED8Es2mWPV879B9+fKoGq6gdOk9df3Wgjnr14th kRkY6QaWM/AqAZzI4oxo3NwpVMZOK/K4O6zJ8bzlWtKyZeYW7wnDfBoATCUaaTZy JjaJXmI6nz1/zt43x6lyB1tOZNLOntCcYODVtf+jxLUCbiKACBKtE1k7qwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLKSJU3nHyDpLIWTMCvSrTmGX1JCMB8GA1UdIwQY MBaAFLFGAQKDqCAu6qP+8yU04+l+BAeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iYWMwYjktYzk5Zi00OWJiLTkwNWIt YzAzMDdiMGY2MmRjLzEvc3BJbFRlY2ZJT2tzaFpNd0s5S3RPWVpmVWtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iYWMwYjktYzk5Zi00OWJiLTkwNWItYzAzMDdiMGY2MmRj LzEvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA+BAIAATA4AwQDJc04AwQD Lv9wAwQDWJfYAwQDWMqoAwQDbeg4MAwDBAeJ3YADBAKJ3agDBAOJ3bgDBAK5Hhgw DQQCAAIwBwMFACoBogAwDQYJKoZIhvcNAQELBQADggEBAGsIJylsvzCv01cWLtur JCJzonREj+SbXn9RW14mUSfSw+OZBdeLhAj3PBX+bc6od8fQKl7zaorand/VNVgQ NlU+Mzh2qu/27eILc+Iakj1c8cTSlTVTkE0EWkLpEoSsJqcge37KKKyjHU1+zeTS QugxwOI/N+0RRLG8Coo8rSVrsPxnBsUzJbZYsIpEg3zS405bQ9I7gbCBAPB2U7K2 QyHIfxPb1YWA7gNDZ+ZXfCagMlXsf2B8757kLoVW4CGXGRQD1vEYfkFVRtTi9k1a A4B40CZkcZHt5g1Y0LL5xIop03qVsSR692ITzieHler9Nh6POboGFZKsiS7Ori3t FCo= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:08 2026 by rpki-client