This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/SNEaKtL2yJGAVO2vEwP7jxGl2H0.roa
File: SNEaKtL2yJGAVO2vEwP7jxGl2H0.roa (raw, json)
Hash identifier: Pb62vRdjdsMJXeIUL95Djt1CD7hzu51dxI2T6BhHAHQ=
Subject key identifier: 48:D1:1A:2A:D2:F6:C8:91:80:54:ED:AF:13:03:FB:8F:11:A5:D8:7D
Certificate issuer: /CN=449b18e3296d795d3a9c959be25c70aaab365200
Certificate serial: 019B7B35D00DAB934919823F036000E865CA
Authority key identifier: 44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/SNEaKtL2yJGAVO2vEwP7jxGl2H0.roa
Signing time: Thu 01 Jan 2026 20:18:02 +0000
ROA not before: Thu 01 Jan 2026 20:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49808
IP address blocks: 5.159.0.0/21 maxlen: 22
31.193.160.0/21 maxlen: 21
63.247.208.0/20 maxlen: 24
85.118.184.0/21 maxlen: 21
85.193.160.0/20 maxlen: 24
86.109.24.0/21 maxlen: 24
89.249.184.0/21 maxlen: 21
109.68.104.0/21 maxlen: 21
139.178.96.0/19 maxlen: 19
145.40.32.0/19 maxlen: 24
162.211.104.0/22 maxlen: 24
162.213.160.0/22 maxlen: 24
185.16.112.0/22 maxlen: 22
185.21.96.0/22 maxlen: 23
185.44.210.0/23 maxlen: 24
193.41.207.0/24 maxlen: 24
194.107.144.0/24 maxlen: 32
198.89.232.0/21 maxlen: 24
2a03:c100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:d0:0d:ab:93:49:19:82:3f:03:60:00:e8:65:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449b18e3296d795d3a9c959be25c70aaab365200
Validity
Not Before: Jan 1 20:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48d11a2ad2f6c8918054edaf1303fb8f11a5d87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:38:6b:4b:ee:b1:a9:48:99:1b:1b:21:f8:
bb:00:22:e4:ad:db:e2:44:48:40:49:10:88:88:ac:
cb:ae:cb:41:28:69:36:0a:7c:78:48:80:fc:f8:0b:
15:fd:1b:67:17:d7:c5:bb:5a:d0:97:70:d0:53:8d:
95:a0:a3:e5:eb:83:22:1e:1a:56:6c:0f:09:eb:f4:
0d:2d:be:13:af:6c:23:2f:40:ee:65:ac:15:05:dc:
75:fe:84:57:19:6c:d3:04:62:83:51:aa:69:b8:27:
c7:73:d6:cd:60:c0:d3:4b:93:5a:8a:31:37:10:01:
b9:70:55:27:6a:9d:fc:7f:90:cd:af:12:f6:a1:46:
55:7b:00:d4:24:42:cd:61:3c:0e:79:69:bb:fd:a1:
7d:d1:a4:87:cf:03:f8:48:ff:7e:03:1d:49:c4:c5:
05:72:3a:2a:7e:e3:f6:49:8a:ca:8c:e4:21:48:ab:
18:a3:61:72:f6:2a:5d:bc:08:c5:f8:ec:8c:61:de:
18:d0:ee:37:9c:1f:0d:87:cd:d3:d3:99:38:04:70:
7b:cc:e1:85:9b:09:c8:13:8c:fb:9e:03:38:b2:2a:
02:02:01:93:7c:eb:7b:3c:15:73:44:9a:10:7b:a5:
7c:ce:b0:4d:e3:c1:65:bd:e7:21:55:9b:09:67:09:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D1:1A:2A:D2:F6:C8:91:80:54:ED:AF:13:03:FB:8F:11:A5:D8:7D
X509v3 Authority Key Identifier:
keyid:44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/SNEaKtL2yJGAVO2vEwP7jxGl2H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.0.0/21
31.193.160.0/21
63.247.208.0/20
85.118.184.0/21
85.193.160.0/20
86.109.24.0/21
89.249.184.0/21
109.68.104.0/21
139.178.96.0/19
145.40.32.0/19
162.211.104.0/22
162.213.160.0/22
185.16.112.0/22
185.21.96.0/22
185.44.210.0/23
193.41.207.0/24
194.107.144.0/24
198.89.232.0/21
IPv6:
2a03:c100::/32
Signature Algorithm: sha256WithRSAEncryption
a8:81:3a:11:f5:d7:b1:0f:33:8b:6f:93:cc:3d:6b:9a:d8:62:
e0:bc:a2:60:5d:f0:91:8d:6b:a6:a5:4d:16:09:9d:83:10:32:
68:28:90:ca:65:26:70:d7:08:5f:4e:6f:88:6c:6b:f7:c9:70:
df:4d:ae:85:37:87:8c:21:87:f6:bc:fd:ee:8e:fc:31:7c:28:
bc:15:9f:dc:dc:e2:95:cd:0a:7d:1f:d1:09:57:87:4d:86:95:
d8:eb:ff:48:52:45:4c:f1:b2:1d:7c:2b:80:cc:a8:f1:00:01:
d7:0f:4d:8a:56:82:36:75:07:5a:eb:3b:6b:26:3d:1e:3e:54:
57:07:96:55:e8:7a:89:48:8a:58:0e:40:78:0e:05:fe:d3:78:
36:3a:42:3c:ad:d0:31:a5:71:89:c2:79:4d:55:5b:e3:89:95:
c0:f5:7d:b4:ba:ad:63:45:d0:f9:de:a9:72:55:a5:45:c7:05:
d7:b6:38:be:af:d4:64:30:30:a3:11:d4:a2:8e:ff:25:d1:24:
b8:2e:79:4c:2d:c2:e8:7f:89:ff:c0:f5:26:e4:da:bc:4b:69:
7e:11:ff:94:2d:ed:5c:d4:84:c3:89:d4:7e:43:43:bb:c5:12:
89:f9:d1:ab:0a:48:6e:73:9e:2d:e5:b1:34:4d:7c:65:e5:b5:
b0:9c:0a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:14:28 2026 by rpki-client