This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/SmT1BUT7BtnuZLJ6_6jIBBoQ70s.roa File: SmT1BUT7BtnuZLJ6_6jIBBoQ70s.roa (raw, json) Hash identifier: RYBd7FR6OZyKgfNBGxNgxiTa308oNZjB95Z8XVN3KKA= Subject key identifier: 4A:64:F5:05:44:FB:06:D9:EE:64:B2:7A:FF:A8:C8:04:1A:10:EF:4B Certificate issuer: /CN=ac5eadc0032850236fee756eb58fbf05e1316b5e Certificate serial: 019BC7A68A9767E5EA84D13AFFBA1E65356D Authority key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/SmT1BUT7BtnuZLJ6_6jIBBoQ70s.roa Signing time: Fri 16 Jan 2026 16:32:18 +0000 ROA not before: Fri 16 Jan 2026 16:32:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201709 IP address blocks: 185.41.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c7:a6:8a:97:67:e5:ea:84:d1:3a:ff:ba:1e:65:35:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e Validity Not Before: Jan 16 16:32:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a64f50544fb06d9ee64b27affa8c8041a10ef4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:46:ec:21:5d:b2:f4:df:95:34:fe:a3:2c:17: 55:c2:a7:a3:4b:6c:50:a2:57:a8:77:45:d9:0c:34: 53:cb:4b:4a:38:c1:ab:94:ba:d7:0e:5b:9b:31:8b: fb:bb:be:5a:b1:12:95:90:d8:9d:d5:c4:a0:1e:64: 60:d2:a8:87:31:ab:d2:07:93:b1:62:ad:55:d0:86: a4:02:4e:6c:a1:8e:16:ee:8e:62:e6:ca:d7:51:7f: bb:aa:ab:c1:ae:95:32:f0:e0:54:37:6f:ef:0b:07: a3:fc:42:40:0e:dc:22:4d:c4:32:cd:db:b9:ca:d3: ff:c2:0c:7a:48:9a:de:32:d0:08:40:54:5e:12:19: 8a:8d:07:d5:3a:1b:cd:67:7f:1c:c6:28:95:61:cf: 93:1b:43:cf:ba:c3:f3:39:5b:5d:f2:13:b1:f5:e7: 97:ed:8f:8c:c3:93:44:ae:d2:49:ca:af:e9:0a:db: 05:cc:48:22:d0:19:e5:f1:86:c7:e2:a6:f3:dd:af: 49:71:31:89:3c:46:ce:23:ef:de:78:12:64:a4:b1: f6:58:61:ff:99:6f:21:cf:df:83:8d:48:29:0b:26: 3a:fc:40:0d:20:60:4f:33:f4:83:dd:33:05:79:c1: d4:d3:ea:9c:1e:7f:d8:29:24:80:1a:9c:7b:bf:8e: 82:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:64:F5:05:44:FB:06:D9:EE:64:B2:7A:FF:A8:C8:04:1A:10:EF:4B X509v3 Authority Key Identifier: keyid:AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/SmT1BUT7BtnuZLJ6_6jIBBoQ70s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.104.0/23 Signature Algorithm: sha256WithRSAEncryption 08:eb:ca:b8:07:0e:7e:b7:c9:bc:15:fd:a1:c1:0b:f5:37:d8: 8d:fa:ad:77:ed:15:dd:53:2a:c7:54:7a:1c:8c:5f:46:42:0e: 24:27:62:0d:81:16:b8:45:bb:3b:60:f8:10:a4:de:0c:06:c5: 46:26:be:77:e9:32:5a:2c:34:cd:ee:3f:da:12:f1:57:4c:20: f9:68:f9:da:c2:d7:22:01:42:c5:7a:a3:4f:29:91:ec:a9:22: 58:b1:d2:68:c5:32:e5:58:e8:13:08:97:9b:c7:62:50:c2:d1: 63:5f:8b:25:d8:3f:8b:45:6b:91:32:de:a9:e1:45:be:9c:16: ce:e5:fe:b2:79:23:d7:9e:64:04:8f:68:1b:d7:61:06:2f:e1: e2:0c:95:e5:89:af:7b:92:c8:5c:b5:61:8a:92:56:19:f7:0a: 50:e4:01:23:92:e9:0b:b1:91:06:53:72:f2:f2:87:6f:f2:78: 71:b4:8c:82:cb:2c:64:3e:e4:0a:8d:d9:f3:64:11:3b:76:2a: 38:f6:17:6c:e0:3a:87:36:53:a4:9c:1b:e0:30:85:38:72:8f: d2:ab:ca:07:05:4a:39:86:88:ad:3b:4f:30:12:2a:10:e2:ee: 57:86:8e:60:81:6c:40:f3:1f:1f:d9:dd:5f:a2:0b:9b:56:33: f4:27:6c:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvHpoqXZ+XqhNE6/7oeZTVtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNWVhZGMwMDMyODUwMjM2ZmVlNzU2ZWI1OGZiZjA1ZTEz MTZiNWUwHhcNMjYwMTE2MTYzMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTY0ZjUwNTQ0ZmIwNmQ5ZWU2NGIyN2FmZmE4YzgwNDFhMTBlZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokbsIV2y9N+VNP6jLBdVwqejS2xQ oleod0XZDDRTy0tKOMGrlLrXDlubMYv7u75asRKVkNid1cSgHmRg0qiHMavSB5Ox Yq1V0IakAk5soY4W7o5i5srXUX+7qqvBrpUy8OBUN2/vCwej/EJADtwiTcQyzdu5 ytP/wgx6SJreMtAIQFReEhmKjQfVOhvNZ38cxiiVYc+TG0PPusPzOVtd8hOx9eeX 7Y+Mw5NErtJJyq/pCtsFzEgi0Bnl8YbH4qbz3a9JcTGJPEbOI+/eeBJkpLH2WGH/ mW8hz9+DjUgpCyY6/EANIGBPM/SD3TMFecHU0+qcHn/YKSSAGpx7v46CrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEpk9QVE+wbZ7mSyev+oyAQaEO9LMB8GA1UdIwQY MBaAFKxercADKFAjb+51brWPvwXhMWteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckY2dHdBTW9VQ052N25WdXRZLV9CZUV4YTE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81Mjk3NWYtZmViMi00MzNiLWIyZGMt YzIzOGNlNDgxN2RiLzEvU21UMUJVVDdCdG51WkxKNl82aklCQm9RNzBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81Mjk3NWYtZmViMi00MzNiLWIyZGMtYzIzOGNlNDgxN2Ri LzEvckY2dHdBTW9VQ052N25WdXRZLV9CZUV4YTE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSloMA0G CSqGSIb3DQEBCwUAA4IBAQAI68q4Bw5+t8m8Ff2hwQv1N9iN+q137RXdUyrHVHoc jF9GQg4kJ2INgRa4Rbs7YPgQpN4MBsVGJr536TJaLDTN7j/aEvFXTCD5aPnawtci AULFeqNPKZHsqSJYsdJoxTLlWOgTCJebx2JQwtFjX4sl2D+LRWuRMt6p4UW+nBbO 5f6yeSPXnmQEj2gb12EGL+HiDJXlia97kshctWGKklYZ9wpQ5AEjkukLsZEGU3Ly 8odv8nhxtIyCyyxkPuQKjdnzZBE7dio49hds4DqHNlOknBvgMIU4co/Sq8oHBUo5 hoitO08wEioQ4u5Xho5ggWxA8x8f2d1fogubVjP0J2zy -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:14 2026 by rpki-client