This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/SRftmv9sQMTlSJPXfowLnAaGrnE.roa File: SRftmv9sQMTlSJPXfowLnAaGrnE.roa (raw, json) Hash identifier: HYcUVT7S2MMJhQf2Ty7rezIr8XBfCmUq2EwYkkh9kE0= Subject key identifier: 49:17:ED:9A:FF:6C:40:C4:E5:48:93:D7:7E:8C:0B:9C:06:86:AE:71 Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f Certificate serial: 019B7E37FF1A918BA1F583E199E7798D83BB Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/SRftmv9sQMTlSJPXfowLnAaGrnE.roa Signing time: Fri 02 Jan 2026 10:19:17 +0000 ROA not before: Fri 02 Jan 2026 10:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202220 IP address blocks: 188.123.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ff:1a:91:8b:a1:f5:83:e1:99:e7:79:8d:83:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f Validity Not Before: Jan 2 10:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4917ed9aff6c40c4e54893d77e8c0b9c0686ae71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3d:29:38:d5:0f:b3:22:03:ba:55:21:e4:c5: 31:9c:c6:a1:5e:a8:c3:3b:f1:5c:0c:12:85:e1:1f: 2b:3f:95:c7:a3:55:e4:04:1d:91:c5:63:54:2e:f2: b0:f4:87:b8:90:95:fb:94:95:c7:e7:45:e7:a8:3d: fc:f6:cd:a7:cf:0a:0c:eb:fe:4b:05:3f:30:fe:04: a5:00:02:fb:6a:39:d8:57:70:cb:fa:25:e8:c8:4c: 07:5a:78:ae:68:50:0c:b0:47:e2:b2:6f:49:2f:99: d0:18:0e:ca:95:b4:79:47:18:ee:59:56:ce:23:41: 8f:c6:89:24:3d:00:db:b1:e7:ad:cd:dc:ae:d7:f3: cb:f1:4d:6f:65:b5:38:c8:a3:12:36:87:ec:e4:5d: 91:1b:28:53:9a:53:6c:70:4a:93:48:fa:de:3a:e6: 3c:4e:69:75:c0:b5:f2:64:b9:f2:63:b2:4a:fc:bb: ec:4b:52:63:1b:c7:35:d4:df:b5:3b:1a:04:5e:25: 77:cc:4d:e5:c5:3b:43:f9:10:e9:5e:4d:f8:34:f0: e6:ee:4d:f5:72:83:c7:cc:cc:95:a5:3c:6a:99:9d: af:55:f2:37:f3:e4:d2:8a:ef:94:3c:fe:70:05:d8: 09:15:e3:32:31:d1:92:fa:27:7c:69:50:c4:9e:a7: 2d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:17:ED:9A:FF:6C:40:C4:E5:48:93:D7:7E:8C:0B:9C:06:86:AE:71 X509v3 Authority Key Identifier: keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/SRftmv9sQMTlSJPXfowLnAaGrnE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.123.215.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:2f:1a:3f:ea:2e:b6:d8:a6:c4:f1:ce:28:94:5f:b4:c9:3b: 83:16:20:2f:07:ff:82:d6:44:a0:7d:92:09:ca:06:65:4e:0d: 2d:95:c8:79:33:c9:8d:4a:92:09:ed:24:8e:f0:e0:ad:fe:89: 88:6f:6b:fe:aa:bb:49:5a:20:c2:07:70:41:54:df:ce:a3:ce: a0:08:8c:ba:8c:b9:51:ec:e0:4c:cf:74:03:db:f7:53:3b:35: 21:15:95:5f:10:a1:e5:05:89:3e:41:b6:fb:b2:05:03:78:aa: 2c:6e:a1:c4:80:80:d5:51:f3:80:ac:8a:0a:07:3c:f7:4f:8f: 7b:fc:c5:47:9e:e3:39:44:25:f3:5c:b3:e0:e3:01:22:9e:27: b9:10:03:7d:67:a7:a0:dc:ad:49:0f:d2:61:20:fc:42:2e:40: ee:41:07:ec:86:1c:59:07:1d:0d:34:f1:1e:88:33:4f:21:f6: 55:c8:14:8f:b3:85:00:78:ef:1f:47:8c:96:14:fc:69:2e:9d: 74:be:e7:ba:7f:9f:99:c1:73:6a:0d:32:93:3c:8b:8f:27:b6: 34:ea:2b:96:f4:e8:a9:ff:ea:eb:82:ee:f4:3b:72:78:54:4f: 66:6e:a8:9a:32:82:a2:dc:38:0b:5c:85:e1:42:66:7e:be:b8: b3:18:d6:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N/8akYuh9YPhmed5jYO7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYmUzYzZkOTk4MTE4MTljZWRkZGNkMjdlNGJlMjViYzBj ZjUwNmYwHhcNMjYwMTAyMTAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTE3ZWQ5YWZmNmM0MGM0ZTU0ODkzZDc3ZThjMGI5YzA2ODZhZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD0pONUPsyIDulUh5MUxnMahXqjD O/FcDBKF4R8rP5XHo1XkBB2RxWNULvKw9Ie4kJX7lJXH50XnqD389s2nzwoM6/5L BT8w/gSlAAL7ajnYV3DL+iXoyEwHWniuaFAMsEfism9JL5nQGA7KlbR5RxjuWVbO I0GPxokkPQDbseetzdyu1/PL8U1vZbU4yKMSNofs5F2RGyhTmlNscEqTSPreOuY8 Tml1wLXyZLnyY7JK/LvsS1JjG8c11N+1OxoEXiV3zE3lxTtD+RDpXk34NPDm7k31 coPHzMyVpTxqmZ2vVfI38+TSiu+UPP5wBdgJFeMyMdGS+id8aVDEnqctCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEkX7Zr/bEDE5UiT136MC5wGhq5xMB8GA1UdIwQY MBaAFMu+PG2ZgRgZzt3c0n5L4lvAz1BvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2Ut OGNmN2Q0NDkzMzU4LzEvU1JmdG12OXNRTVRsU0pQWGZvd0xuQWFHcm5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2UtOGNmN2Q0NDkzMzU4 LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvHvXMA0G CSqGSIb3DQEBCwUAA4IBAQCfLxo/6i622KbE8c4olF+0yTuDFiAvB/+C1kSgfZIJ ygZlTg0tlch5M8mNSpIJ7SSO8OCt/omIb2v+qrtJWiDCB3BBVN/Oo86gCIy6jLlR 7OBMz3QD2/dTOzUhFZVfEKHlBYk+Qbb7sgUDeKosbqHEgIDVUfOArIoKBzz3T497 /MVHnuM5RCXzXLPg4wEinie5EAN9Z6eg3K1JD9JhIPxCLkDuQQfshhxZBx0NNPEe iDNPIfZVyBSPs4UAeO8fR4yWFPxpLp10vue6f5+ZwXNqDTKTPIuPJ7Y06iuW9Oip /+rrgu70O3J4VE9mbqiaMoKi3DgLXIXhQmZ+vrizGNbB -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:27 2026 by rpki-client