This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/SvxCrHRH9qtDgRtKCtLQ9Vh4GMg.roa File: SvxCrHRH9qtDgRtKCtLQ9Vh4GMg.roa (raw, json) Hash identifier: hh/DbdPPGnpvcaZfF2CgRTxk6vKo3UGb19IP1Aj8Lm0= Subject key identifier: 4A:FC:42:AC:74:47:F6:AB:43:81:1B:4A:0A:D2:D0:F5:58:78:18:C8 Certificate issuer: /CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959 Certificate serial: 019B7B353DE0FD29F28900A600F45CA5221B Authority key identifier: 9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/SvxCrHRH9qtDgRtKCtLQ9Vh4GMg.roa Signing time: Thu 01 Jan 2026 20:17:25 +0000 ROA not before: Thu 01 Jan 2026 20:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60533 IP address blocks: 185.29.156.0/22 maxlen: 24 185.29.156.0/23 maxlen: 23 185.29.158.0/23 maxlen: 23 2a00:a8a0::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:3d:e0:fd:29:f2:89:00:a6:00:f4:5c:a5:22:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959 Validity Not Before: Jan 1 20:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4afc42ac7447f6ab43811b4a0ad2d0f5587818c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a2:cc:16:14:45:ec:ed:9d:5f:c8:b5:0a:74: fe:e7:a3:de:85:2a:8f:1d:ec:2b:fa:29:8a:4f:33: ec:f3:ce:47:82:77:43:dc:80:06:ad:62:34:ef:79: 86:1d:96:8a:62:51:45:6e:2e:c2:34:21:b4:a4:81: 70:73:86:d9:29:56:ba:6e:af:64:47:8c:81:0e:2f: 2d:39:c2:c6:70:13:b0:30:83:d0:07:dd:de:2e:ce: 7d:f7:82:78:6e:94:28:7c:2d:56:05:4e:01:ef:33: 18:62:ee:39:96:0e:50:5e:45:34:e7:48:1a:00:61: e0:9f:ea:63:00:0d:65:a4:1a:8e:60:8e:ff:b3:dd: e1:85:d2:73:bd:c7:8c:88:a4:77:8d:c2:5d:9a:cc: 19:48:57:90:ad:71:e7:61:f3:cb:9b:a3:f7:aa:c6: bc:5e:66:f9:51:e5:2a:6c:68:d9:99:6b:98:dd:98: af:15:aa:59:b5:2f:ec:89:86:93:79:f4:85:45:cb: 93:5b:d8:5d:c6:ab:8b:9f:e7:11:dc:47:8e:07:33: 95:3e:fe:9f:a8:80:23:7a:01:25:36:cc:21:ca:22: 5c:ca:5c:09:cb:92:42:d3:a4:a4:42:0b:9d:ba:f7: a8:66:e3:bd:bc:15:26:6b:88:a3:3c:1e:90:20:c4: 6f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FC:42:AC:74:47:F6:AB:43:81:1B:4A:0A:D2:D0:F5:58:78:18:C8 X509v3 Authority Key Identifier: keyid:9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/SvxCrHRH9qtDgRtKCtLQ9Vh4GMg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.156.0/22 IPv6: 2a00:a8a0::/32 Signature Algorithm: sha256WithRSAEncryption 86:94:b3:1f:40:29:77:b8:62:04:e6:7e:50:3c:58:1b:66:58: 85:a7:3b:cd:c2:bf:c2:57:d5:f2:cd:6e:47:ca:11:31:ad:fc: 4c:55:20:33:20:02:f2:81:44:d0:ea:b5:fa:7c:37:46:1c:ab: db:a8:7a:a0:77:f5:6c:8c:7e:e3:7c:0b:25:b2:38:ce:3c:ca: 49:e1:d7:e8:ad:be:a9:61:03:26:92:d7:24:6d:66:4c:4f:dc: 63:e0:35:44:75:4f:a9:ce:96:49:5e:65:3e:59:6e:70:da:ea: 9e:26:dc:b8:43:6d:7f:1d:04:04:83:34:36:12:d4:29:53:c7: b5:09:58:0d:33:9b:d8:f7:1e:a0:dd:cc:b1:51:5f:99:ae:ac: 66:7e:a1:e1:44:85:3c:4c:78:31:6c:4e:85:16:08:09:59:0d: ef:cd:88:d5:65:31:91:4e:ef:2e:25:18:d5:df:8e:4b:be:9c: ba:44:d3:07:bf:e3:64:58:b2:9b:5a:ec:63:d3:2d:e4:46:78: a4:db:59:18:de:1d:d0:5f:70:d2:4d:a2:d3:b1:28:ef:29:2c: a5:d2:42:f7:82:35:30:b7:af:c3:e3:1b:6d:fa:3a:81:0d:9e: fc:52:80:c2:b3:30:45:9f:cb:f3:fe:ea:b4:30:9a:08:4f:45: 62:9d:48:bf -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NT3g/SnyiQCmAPRcpSIbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZDZiZjEyYWQ1YTI5MzI3YmM2ZjdiNjYwMjZmMDU0Njg2 Y2Q5NTkwHhcNMjYwMTAxMjAxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWZjNDJhYzc0NDdmNmFiNDM4MTFiNGEwYWQyZDBmNTU4NzgxOGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaLMFhRF7O2dX8i1CnT+56PehSqP Hewr+imKTzPs885HgndD3IAGrWI073mGHZaKYlFFbi7CNCG0pIFwc4bZKVa6bq9k R4yBDi8tOcLGcBOwMIPQB93eLs5994J4bpQofC1WBU4B7zMYYu45lg5QXkU050ga AGHgn+pjAA1lpBqOYI7/s93hhdJzvceMiKR3jcJdmswZSFeQrXHnYfPLm6P3qsa8 Xmb5UeUqbGjZmWuY3ZivFapZtS/siYaTefSFRcuTW9hdxquLn+cR3EeOBzOVPv6f qIAjegElNswhyiJcylwJy5JC06SkQguduveoZuO9vBUma4ijPB6QIMRvIwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEr8Qqx0R/arQ4EbSgrS0PVYeBjIMB8GA1UdIwQY MBaAFJrWvxKtWikye8b3tmAm8FRobNlZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXRhX0VxMWFLVEo3eHZlMllDYndWR2hzMlZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jMGVhODgtNzU5Mi00ZTg0LTlhOWEt NDMzNTY3MGY2YjdlLzEvU3Z4Q3JIUkg5cXREZ1J0S0N0TFE5Vmg0R01nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9jMGVhODgtNzU5Mi00ZTg0LTlhOWEtNDMzNTY3MGY2Yjdl LzEvbXRhX0VxMWFLVEo3eHZlMllDYndWR2hzMlZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuR2cMA0E AgACMAcDBQAqAKigMA0GCSqGSIb3DQEBCwUAA4IBAQCGlLMfQCl3uGIE5n5QPFgb ZliFpzvNwr/CV9XyzW5HyhExrfxMVSAzIALygUTQ6rX6fDdGHKvbqHqgd/VsjH7j fAslsjjOPMpJ4dforb6pYQMmktckbWZMT9xj4DVEdU+pzpZJXmU+WW5w2uqeJty4 Q21/HQQEgzQ2EtQpU8e1CVgNM5vY9x6g3cyxUV+ZrqxmfqHhRIU8THgxbE6FFggJ WQ3vzYjVZTGRTu8uJRjV345Lvpy6RNMHv+NkWLKbWuxj0y3kRnik21kY3h3QX3DS TaLTsSjvKSyl0kL3gjUwt6/D4xtt+jqBDZ78UoDCszBFn8vz/uq0MJoIT0VinUi/ -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:22 2026 by rpki-client