This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/Spy7lYm24U3zdnyHMnurxfa2T6k.roa File: Spy7lYm24U3zdnyHMnurxfa2T6k.roa (raw, json) Hash identifier: JcDra+5Gb+YXgz7R5LBtufPmpQV8nA+XRnuojSfqw4U= Subject key identifier: 4A:9C:BB:95:89:B6:E1:4D:F3:76:7C:87:32:7B:AB:C5:F6:B6:4F:A9 Certificate issuer: /CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536 Certificate serial: 019B7C13381395FAEAF71BDD48D912358F5D Authority key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/Spy7lYm24U3zdnyHMnurxfa2T6k.roa Signing time: Fri 02 Jan 2026 00:19:52 +0000 ROA not before: Fri 02 Jan 2026 00:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15969 IP address blocks: 194.187.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:38:13:95:fa:ea:f7:1b:dd:48:d9:12:35:8f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536 Validity Not Before: Jan 2 00:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a9cbb9589b6e14df3767c87327babc5f6b64fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:f1:82:53:e2:b5:7a:e2:b6:2d:ab:01:4d: 8b:95:25:61:95:d0:d8:4f:a8:ec:0e:57:1b:6d:ec: d8:f6:76:0e:ea:b7:4b:45:d1:d9:ad:d1:e9:2a:5f: 63:79:de:d8:47:3a:fb:a6:a2:cf:e9:f5:0a:6d:73: e4:13:a5:b6:dd:43:dd:d9:7d:d3:52:c0:bd:b0:7a: d1:7b:93:92:98:ca:5f:65:25:0d:e9:f8:19:51:56: 53:c9:c2:94:31:db:b2:28:8e:38:d8:ab:84:f9:45: 5f:5b:99:d3:7e:4a:ba:a3:a3:35:49:6b:a6:4f:3e: 63:83:98:f6:1f:3d:1f:ce:7c:02:91:f4:ab:3e:2b: 8a:cd:6c:ed:5e:e0:93:0e:5c:d9:00:49:28:9b:d8: 05:1d:12:6e:79:7d:bc:d0:b0:ba:e0:92:08:23:36: db:0d:f1:62:3d:0a:ba:1e:1b:ed:c6:78:9b:77:93: f1:b9:5b:a4:b9:34:69:29:d4:83:02:cf:0d:1a:7c: e0:7a:81:9d:f4:75:3d:73:4f:d1:b1:b5:a5:60:3a: 13:7b:86:5f:81:70:c7:e8:3b:82:03:f4:93:bf:5c: c2:55:b7:8b:be:5d:86:47:38:40:52:56:2b:10:36: cb:48:c9:36:79:90:f8:f0:2c:aa:07:08:a6:c0:ad: 30:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9C:BB:95:89:B6:E1:4D:F3:76:7C:87:32:7B:AB:C5:F6:B6:4F:A9 X509v3 Authority Key Identifier: keyid:B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/Spy7lYm24U3zdnyHMnurxfa2T6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.187.72.0/22 Signature Algorithm: sha256WithRSAEncryption bd:60:d2:66:fb:94:97:fa:b7:f7:9d:78:b7:e0:69:2a:63:48: ab:3d:7f:23:c8:83:b7:71:7c:a4:34:f7:89:98:ee:e7:6b:75: e8:a1:ed:cd:79:bb:72:63:90:f6:20:94:8d:59:17:ae:9e:fb: 4b:f4:af:88:65:89:ec:d3:09:ce:77:ac:32:81:e7:5c:04:ff: 60:db:ac:94:36:5f:52:39:09:2c:0e:f9:55:1d:c9:a6:92:43: 79:a7:a2:2a:9d:0f:51:78:36:42:1a:99:df:d2:ff:7d:56:9c: 17:16:7a:98:ba:ab:7c:06:ed:69:8f:7e:87:70:dc:3a:fe:2c: e3:e9:bc:39:38:2a:82:66:b0:7a:00:2f:dd:9e:88:13:de:35: d9:eb:bd:46:9b:e5:c3:30:1d:aa:1c:ae:54:fc:d6:64:26:72: a8:15:d2:6e:84:ca:61:53:22:98:7c:ad:3c:b4:51:62:75:c5: 65:da:66:9d:1f:0c:2b:4b:a4:66:aa:bb:a7:2d:f6:e1:74:6a: 04:51:47:97:1b:59:fd:01:44:8a:37:b4:6f:8b:0e:c0:e3:e4: 21:5e:2d:60:06:05:fe:e9:11:45:78:9b:b5:7b:84:5e:8a:85: ca:91:f2:29:cc:9f:42:c6:1d:70:0c:e7:3b:3c:cd:ad:df:4a: 63:27:cb:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EzgTlfrq9xvdSNkSNY9dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYjQxZDJmN2Q3ZDM4NTdlMDc1ZjJhNGYyZjlkM2UwNDRm MmU1MzYwHhcNMjYwMTAyMDAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTljYmI5NTg5YjZlMTRkZjM3NjdjODczMjdiYWJjNWY2YjY0ZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zjxglPitXriti2rAU2LlSVhldDY T6jsDlcbbezY9nYO6rdLRdHZrdHpKl9jed7YRzr7pqLP6fUKbXPkE6W23UPd2X3T UsC9sHrRe5OSmMpfZSUN6fgZUVZTycKUMduyKI442KuE+UVfW5nTfkq6o6M1SWum Tz5jg5j2Hz0fznwCkfSrPiuKzWztXuCTDlzZAEkom9gFHRJueX280LC64JIIIzbb DfFiPQq6Hhvtxnibd5PxuVukuTRpKdSDAs8NGnzgeoGd9HU9c0/RsbWlYDoTe4Zf gXDH6DuCA/STv1zCVbeLvl2GRzhAUlYrEDbLSMk2eZD48CyqBwimwK0wowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEqcu5WJtuFN83Z8hzJ7q8X2tk+pMB8GA1UdIwQY MBaAFLK0HS99fThX4HXypPL50+BE8uU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3JRZEwzMTlPRmZnZGZLazh2blQ0RVR5NVRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNzdhYzQtZGM2Ni00MzRmLTg0MjMt YzllMjBjY2Q0NzZmLzEvU3B5N2xZbTI0VTN6ZG55SE1udXJ4ZmEyVDZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kNzdhYzQtZGM2Ni00MzRmLTg0MjMtYzllMjBjY2Q0NzZm LzEvc3JRZEwzMTlPRmZnZGZLazh2blQ0RVR5NVRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwrtIMA0G CSqGSIb3DQEBCwUAA4IBAQC9YNJm+5SX+rf3nXi34GkqY0irPX8jyIO3cXykNPeJ mO7na3Xooe3NebtyY5D2IJSNWReunvtL9K+IZYns0wnOd6wygedcBP9g26yUNl9S OQksDvlVHcmmkkN5p6IqnQ9ReDZCGpnf0v99VpwXFnqYuqt8Bu1pj36HcNw6/izj 6bw5OCqCZrB6AC/dnogT3jXZ671Gm+XDMB2qHK5U/NZkJnKoFdJuhMphUyKYfK08 tFFidcVl2madHwwrS6RmqrunLfbhdGoEUUeXG1n9AUSKN7Rviw7A4+QhXi1gBgX+ 6RFFeJu1e4ReioXKkfIpzJ9Cxh1wDOc7PM2t30pjJ8v/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:16 2026 by rpki-client