This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/smlZ7JTHvm4P3nZNzZsryZ_yA5A.roa File: smlZ7JTHvm4P3nZNzZsryZ_yA5A.roa (raw, json) Hash identifier: +VBNM06YqR+uhNJp3b1HBKPNStgs2sJGwRLlTNxj+ZU= Subject key identifier: B2:69:59:EC:94:C7:BE:6E:0F:DE:76:4D:CD:9B:2B:C9:9F:F2:03:90 Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72 Certificate serial: 019B7F83C0CE069C0602611B41DFEDD3D141 Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/smlZ7JTHvm4P3nZNzZsryZ_yA5A.roa Signing time: Fri 02 Jan 2026 16:21:39 +0000 ROA not before: Fri 02 Jan 2026 16:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200567 IP address blocks: 45.146.132.0/22 maxlen: 23 46.16.216.0/22 maxlen: 22 46.16.216.0/23 maxlen: 23 46.16.218.0/23 maxlen: 23 46.16.220.0/22 maxlen: 22 46.16.220.0/23 maxlen: 23 46.16.222.0/23 maxlen: 23 185.39.176.0/23 maxlen: 24 185.39.178.0/23 maxlen: 23 185.70.144.0/23 maxlen: 23 185.70.146.0/23 maxlen: 23 185.109.32.0/23 maxlen: 23 185.109.34.0/23 maxlen: 23 192.109.223.0/24 maxlen: 24 192.109.231.0/24 maxlen: 24 192.109.235.0/24 maxlen: 24 192.109.239.0/24 maxlen: 24 2a02:4500::/32 maxlen: 32 2a05:2a80::/29 maxlen: 29 2a05:2a80::/32 maxlen: 32 2a05:2a80:1::/48 maxlen: 48 2a06:4e40::/29 maxlen: 29 2a0f:1000::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:c0:ce:06:9c:06:02:61:1b:41:df:ed:d3:d1:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72 Validity Not Before: Jan 2 16:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b26959ec94c7be6e0fde764dcd9b2bc99ff20390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bd:4a:7a:9e:82:fe:f7:d6:46:e1:0e:08:cb: 62:d9:aa:6e:7b:3c:6b:18:cd:4c:0a:86:2a:fe:96: 2a:60:2d:6a:42:e3:cb:5e:38:1d:7a:7f:80:50:e0: a3:89:d8:dc:9d:49:92:4e:7e:9a:a6:85:d0:66:ac: 34:d6:ba:e4:ca:a4:c7:e2:61:a6:eb:88:bf:b0:81: e0:03:be:11:81:82:17:4c:07:53:f2:2c:d8:8b:d2: 88:06:b3:06:25:ca:28:37:fc:8a:a7:f2:46:d7:3a: c4:1a:2e:3f:d6:6f:31:45:b2:8f:63:f6:4b:ad:f8: 61:6e:c6:88:1e:dc:dd:d9:24:6b:52:05:86:5f:ac: 9f:0e:1a:ad:6f:ab:12:e0:71:31:8f:a7:4d:47:07: 3e:d2:92:bb:74:45:cf:ad:87:fa:70:7f:a4:e1:de: f4:e5:f1:1e:78:08:a4:0a:10:7d:b3:f3:38:19:3f: 22:2a:72:08:4b:0d:93:e7:fc:78:c3:4c:60:e9:a1: 7b:ea:7d:68:15:11:54:8d:e8:e1:c7:3a:25:fa:6f: 01:d7:de:25:46:3d:14:99:c4:2c:a8:6e:05:bd:47: f1:fd:fb:b5:a8:46:56:84:d5:93:6c:c5:76:62:37: cc:05:fa:81:d3:76:60:dd:6b:bf:d8:f9:e5:33:08: ea:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:69:59:EC:94:C7:BE:6E:0F:DE:76:4D:CD:9B:2B:C9:9F:F2:03:90 X509v3 Authority Key Identifier: keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/smlZ7JTHvm4P3nZNzZsryZ_yA5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.132.0/22 46.16.216.0/21 185.39.176.0/22 185.70.144.0/22 185.109.32.0/22 192.109.223.0/24 192.109.231.0/24 192.109.235.0/24 192.109.239.0/24 IPv6: 2a02:4500::/32 2a05:2a80::/29 2a06:4e40::/29 2a0f:1000::/29 Signature Algorithm: sha256WithRSAEncryption 14:7c:af:d9:38:1d:02:8f:5c:67:ed:30:57:eb:8f:67:31:84: 81:c9:00:56:4a:4f:77:9a:0d:e2:e3:ce:36:cd:0a:c7:9a:46: 40:8b:c0:bb:37:c4:7a:a4:19:f2:8a:24:b8:2a:6b:5b:83:48: d7:35:e2:10:4f:b7:49:41:47:d0:48:78:33:47:24:06:57:65: c0:d6:2f:02:c6:f0:07:44:b0:6f:c0:80:44:d1:aa:c1:85:7e: a6:57:94:1b:a0:12:36:b0:9e:df:80:9a:1a:f0:a0:1a:5f:f2: e0:95:e4:ab:eb:48:20:a5:ad:1f:32:de:cc:fa:f6:91:fd:e7: a1:e3:bc:38:08:63:62:b2:7d:c1:e0:ba:ba:cc:27:c2:c9:09: 27:bc:21:cd:f0:a1:df:9c:0b:4c:ba:9f:92:c3:d2:a2:01:23: e6:17:cf:38:76:3b:0f:b9:a8:44:76:f0:a6:bc:ab:f4:e6:b3: 8e:1d:81:00:75:64:52:e8:b8:f0:ec:ad:09:76:3b:65:d8:58: 24:0a:8f:69:f9:d4:b4:a4:17:de:04:eb:cc:df:7f:c2:29:93: 5d:b7:81:9a:56:cd:0d:a1:39:cc:86:55:58:60:34:2e:4a:cf: cc:3d:34:00:d6:53:17:b4:dd:64:dd:2b:c8:75:ab:b6:11:e7: a7:f0:9d:74 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt/g8DOBpwGAmEbQd/t09FBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1N2JjN2YyZWFmMGNhZmE2OWJlZTVmYWJlNjcxMjJiNDM2 M2ZlNzIwHhcNMjYwMTAyMTYyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjY5NTllYzk0YzdiZTZlMGZkZTc2NGRjZDliMmJjOTlmZjIwMzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL1Kep6C/vfWRuEOCMti2apuezxr GM1MCoYq/pYqYC1qQuPLXjgden+AUOCjidjcnUmSTn6apoXQZqw01rrkyqTH4mGm 64i/sIHgA74RgYIXTAdT8izYi9KIBrMGJcooN/yKp/JG1zrEGi4/1m8xRbKPY/ZL rfhhbsaIHtzd2SRrUgWGX6yfDhqtb6sS4HExj6dNRwc+0pK7dEXPrYf6cH+k4d70 5fEeeAikChB9s/M4GT8iKnIISw2T5/x4w0xg6aF76n1oFRFUjejhxzol+m8B194l Rj0UmcQsqG4FvUfx/fu1qEZWhNWTbMV2YjfMBfqB03Zg3Wu/2PnlMwjqNwIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFLJpWeyUx75uD952Tc2bK8mf8gOQMB8GA1UdIwQY MBaAFPV7x/Lq8Mr6ab7l+r5nEitDY/5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVh2SDh1cnd5dnBwdnVYNnZtY1NLME5qX25JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NDQxYjQtZjk4MS00YzI2LTliOTkt MTAxMDQ3M2Y0ZmU4LzEvc21sWjdKVEh2bTRQM25aTnpac3J5Wl95QTVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80NDQxYjQtZjk4MS00YzI2LTliOTktMTAxMDQ3M2Y0ZmU4 LzEvOVh2SDh1cnd5dnBwdnVYNnZtY1NLME5qX25JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjA8BAIAATA2AwQCLZKEAwQD LhDYAwQCuSewAwQCuUaQAwQCuW0gAwQAwG3fAwQAwG3nAwQAwG3rAwQAwG3vMCIE AgACMBwDBQAqAkUAAwUDKgUqgAMFAyoGTkADBQMqDxAAMA0GCSqGSIb3DQEBCwUA A4IBAQAUfK/ZOB0Cj1xn7TBX649nMYSByQBWSk93mg3i4842zQrHmkZAi8C7N8R6 pBnyiiS4Kmtbg0jXNeIQT7dJQUfQSHgzRyQGV2XA1i8CxvAHRLBvwIBE0arBhX6m V5QboBI2sJ7fgJoa8KAaX/LgleSr60ggpa0fMt7M+vaR/eeh47w4CGNisn3B4Lq6 zCfCyQknvCHN8KHfnAtMup+Sw9KiASPmF884djsPuahEdvCmvKv05rOOHYEAdWRS 6Ljw7K0Jdjtl2FgkCo9p+dS0pBfeBOvM33/CKZNdt4GaVs0NoTnMhlVYYDQuSs/M PTQA1lMXtN1k3SvIdau2Eeen8J10 -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:16 2026 by rpki-client