This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/sPNW9L7nvdJWjHEG7P1B2mLSY6I.roa File: sPNW9L7nvdJWjHEG7P1B2mLSY6I.roa (raw, json) Hash identifier: GJ8bFB5CbpvRHqB9ftaag6jbvrupCXTR5QaGBQCK/Ms= Subject key identifier: B0:F3:56:F4:BE:E7:BD:D2:56:8C:71:06:EC:FD:41:DA:62:D2:63:A2 Certificate issuer: /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb Certificate serial: 019B7EA58604711D47F31676ADF2AA66C360 Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/sPNW9L7nvdJWjHEG7P1B2mLSY6I.roa Signing time: Fri 02 Jan 2026 12:18:55 +0000 ROA not before: Fri 02 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 81.89.224.0/19 maxlen: 24 81.89.246.0/24 maxlen: 24 84.201.64.0/18 maxlen: 24 84.201.65.0/24 maxlen: 24 84.201.66.0/24 maxlen: 24 84.201.73.0/24 maxlen: 24 84.201.98.0/24 maxlen: 24 212.62.64.0/19 maxlen: 24 212.62.67.0/24 maxlen: 24 212.62.68.0/24 maxlen: 24 212.62.72.0/24 maxlen: 24 212.62.85.0/24 maxlen: 24 2a00:1348:10::/48 maxlen: 64 2a00:1348:11::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:86:04:71:1d:47:f3:16:76:ad:f2:aa:66:c3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb Validity Not Before: Jan 2 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0f356f4bee7bdd2568c7106ecfd41da62d263a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:34:eb:7a:e1:67:97:1c:e4:e0:97:1e:f0:4f: 00:97:b8:1d:4c:8e:b9:37:e2:aa:48:b0:24:81:f4: a6:b1:24:f4:33:ac:95:e7:26:49:fe:18:18:01:3d: 59:72:31:5c:73:15:cc:ce:f1:06:54:e9:13:d2:07: 4b:c7:6d:66:df:2a:82:51:b8:5c:ec:6e:c9:13:67: 5b:22:c0:43:69:f8:7a:11:30:cb:ff:35:15:25:f5: 9a:eb:d8:2c:91:94:b1:ff:e4:98:2f:e6:d5:a7:da: 07:db:9d:f3:0f:6a:cc:c4:0f:fc:3a:7c:a0:e8:72: 9f:bb:dc:4d:e4:5a:f4:4a:e9:80:ee:fc:47:16:3d: 6b:79:56:f8:9c:97:c3:23:2f:56:1f:b4:4c:b6:d8: ec:88:fb:6b:95:76:b8:4a:ce:e2:25:0b:dd:9b:f4: d8:08:64:ad:e9:3f:ac:eb:d8:94:8d:e4:6a:09:21: 96:ab:66:ea:a2:01:f9:7f:50:a8:26:5b:4a:e5:00: 2e:91:3a:a5:13:c4:f0:db:7d:6e:e0:25:a4:75:34: 27:aa:1e:87:9d:c4:11:98:c9:5f:d0:e3:2a:b2:e0: 5d:45:f6:2a:6b:2b:d5:6e:33:5c:da:31:56:ee:e3: 62:24:7b:7c:52:7d:f6:8b:1f:f5:d5:5a:da:66:e8: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F3:56:F4:BE:E7:BD:D2:56:8C:71:06:EC:FD:41:DA:62:D2:63:A2 X509v3 Authority Key Identifier: keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/sPNW9L7nvdJWjHEG7P1B2mLSY6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.89.224.0/19 84.201.64.0/18 212.62.64.0/19 IPv6: 2a00:1348:10::/47 Signature Algorithm: sha256WithRSAEncryption 3f:9f:5f:b7:4f:0e:ac:54:86:52:4d:16:ca:46:9b:bb:eb:54: 32:0f:82:ee:34:72:b9:de:ed:6d:a7:ee:b6:a3:37:ab:01:9a: 8a:ad:e7:64:cd:d7:28:88:1f:29:2c:7d:1e:6f:5f:61:c9:dc: c3:4b:b3:4f:a1:d5:36:63:57:a5:39:2f:dd:6d:7e:07:e8:16: 54:fe:b3:f6:47:7b:8d:ff:d1:b0:26:60:71:e3:fc:04:3a:a0: c7:79:03:af:0b:f6:30:98:da:1e:22:87:13:6b:37:6d:f2:08: 21:99:bb:c2:4b:64:61:e7:8b:2a:17:dc:06:e2:97:b7:cf:1b: e6:74:2c:26:d4:53:3c:ac:b9:9b:29:47:c2:e2:5d:20:8b:02: 81:68:99:96:23:6a:a7:b6:d5:8d:03:91:b6:04:d2:a4:89:c5: 8e:93:73:2f:45:ba:33:d9:9a:61:91:15:53:5d:94:fc:8f:25: c2:e6:5a:12:93:fe:ba:51:56:f4:52:03:66:cf:3b:d7:8a:b3: 1d:f0:f6:a9:3e:31:69:d9:8c:9d:36:11:e3:67:ab:29:1a:8e: d5:ec:4c:94:92:94:fb:2d:31:46:cd:01:6d:70:a6:83:cc:28: 0b:5e:d4:a4:8a:f2:69:e2:0e:a4:3c:7c:91:73:1d:01:3f:35: 66:04:84:ff -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt+pYYEcR1H8xZ2rfKqZsNgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNjMyZWRiNjM1YWE4ZjljNDBhMDQ5NWE3YTYzYmI2NTM5 NTgwYmIwHhcNMjYwMTAyMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGYzNTZmNGJlZTdiZGQyNTY4YzcxMDZlY2ZkNDFkYTYyZDI2M2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTTreuFnlxzk4Jce8E8Al7gdTI65 N+KqSLAkgfSmsST0M6yV5yZJ/hgYAT1ZcjFccxXMzvEGVOkT0gdLx21m3yqCUbhc 7G7JE2dbIsBDafh6ETDL/zUVJfWa69gskZSx/+SYL+bVp9oH253zD2rMxA/8Onyg 6HKfu9xN5Fr0SumA7vxHFj1reVb4nJfDIy9WH7RMttjsiPtrlXa4Ss7iJQvdm/TY CGSt6T+s69iUjeRqCSGWq2bqogH5f1CoJltK5QAukTqlE8Tw231u4CWkdTQnqh6H ncQRmMlf0OMqsuBdRfYqayvVbjNc2jFW7uNiJHt8Un32ix/11VraZuhIDwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFLDzVvS+573SVoxxBuz9Qdpi0mOiMB8GA1UdIwQY MBaAFJtjLttjWqj5xAoElaemO7ZTlYC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUt ZThjOWFkNWYwNTFhLzEvc1BOVzlMN252ZEpXakhFRzdQMUIybUxTWTZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUtZThjOWFkNWYwNTFh LzEvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQFUVngAwQG VMlAAwQF1D5AMA8EAgACMAkDBwEqABNIABAwDQYJKoZIhvcNAQELBQADggEBAD+f X7dPDqxUhlJNFspGm7vrVDIPgu40crne7W2n7rajN6sBmoqt52TN1yiIHyksfR5v X2HJ3MNLs0+h1TZjV6U5L91tfgfoFlT+s/ZHe43/0bAmYHHj/AQ6oMd5A68L9jCY 2h4ihxNrN23yCCGZu8JLZGHniyoX3Abil7fPG+Z0LCbUUzysuZspR8LiXSCLAoFo mZYjaqe21Y0DkbYE0qSJxY6Tcy9FujPZmmGRFVNdlPyPJcLmWhKT/rpRVvRSA2bP O9eKsx3w9qk+MWnZjJ02EeNnqykajtXsTJSSlPstMUbNAW1wpoPMKAte1KSK8mni DqQ8fJFzHQE/NWYEhP8= -----END CERTIFICATE-----Generated at Wed Jan 7 22:33:31 2026 by rpki-client