This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/SNq1qsP_v5HGgFCmwxtgF5oBbtM.roa File: SNq1qsP_v5HGgFCmwxtgF5oBbtM.roa (raw, json) Hash identifier: KVtsT0fMQgVAG+EfM+vPhmS8z1w+vo6LbjbuGgZDfvk= Subject key identifier: 48:DA:B5:AA:C3:FF:BF:91:C6:80:50:A6:C3:1B:60:17:9A:01:6E:D3 Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Certificate serial: 019B7C11FC5048396644B411DEF3DF0CF40B Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/SNq1qsP_v5HGgFCmwxtgF5oBbtM.roa Signing time: Fri 02 Jan 2026 00:18:32 +0000 ROA not before: Fri 02 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206484 IP address blocks: 62.192.11.0/24 maxlen: 24 213.173.161.0/24 maxlen: 24 217.111.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:fc:50:48:39:66:44:b4:11:de:f3:df:0c:f4:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Validity Not Before: Jan 2 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48dab5aac3ffbf91c68050a6c31b60179a016ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:c0:1d:bf:a8:9b:29:f6:2e:1a:ca:11:17: 44:24:cc:90:e4:40:5c:d6:f0:fd:5a:3a:1c:a4:a0: d6:2e:bc:22:ee:61:f3:a0:e9:20:8e:c2:ed:0f:74: 50:a8:b7:d9:77:f0:62:f4:34:48:f5:c3:6a:10:88: 37:1b:0a:18:c5:fd:13:51:a2:a6:86:b7:75:ab:7e: c3:05:45:45:2c:b7:de:5a:40:64:9f:f8:fa:b6:40: f3:f4:4d:f9:f3:b8:8c:36:8d:f4:bd:b6:76:0b:ee: 53:5f:f5:85:94:3a:13:8d:5c:ce:dc:33:3b:e9:2d: 7d:75:b2:9c:5d:26:b2:85:8f:80:eb:5a:d5:89:12: 00:b6:13:b0:e9:55:46:3f:a2:b5:da:66:b6:56:09: 63:80:23:37:d9:32:f4:66:d3:b8:7b:a8:b8:10:e0: cd:0d:6f:65:ef:7e:1a:ee:30:7e:32:3f:49:f8:c8: 54:fb:91:7a:1a:f8:22:c2:0c:b2:52:31:cd:18:2b: 31:ae:07:5f:e8:52:41:32:ee:bc:db:c7:b2:77:5c: 91:a3:2f:42:7c:fc:b6:ef:03:3b:96:6f:ce:c4:b7: 8c:29:46:e8:d3:dd:6f:ea:ec:a0:9e:f8:b4:d1:c5: a2:72:8e:65:f5:4c:90:a5:fe:45:b3:8d:09:7c:44: 34:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DA:B5:AA:C3:FF:BF:91:C6:80:50:A6:C3:1B:60:17:9A:01:6E:D3 X509v3 Authority Key Identifier: keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/SNq1qsP_v5HGgFCmwxtgF5oBbtM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.11.0/24 213.173.161.0/24 217.111.138.0/24 Signature Algorithm: sha256WithRSAEncryption 43:c4:b7:4f:1a:9a:31:21:de:75:52:6a:42:f1:ad:c2:61:05: 47:bc:bc:89:e8:c9:08:59:fb:10:e5:93:82:f3:f8:92:8a:1c: 37:fc:77:8d:f9:d9:f3:58:c8:74:5a:20:f7:2a:9a:c2:17:96: f5:6a:0e:0d:22:bb:ac:dc:73:e6:0c:7e:08:ce:27:a2:de:b5: cb:c6:d0:f0:1f:62:36:39:bf:ea:20:ad:ce:e6:b9:c7:ba:8b: a2:f5:24:13:56:b1:70:70:75:c7:c1:30:26:0e:7e:a5:a8:37: cb:0a:7f:ba:00:99:b8:07:12:f8:b2:55:0a:7b:41:46:98:6c: 95:91:63:03:cf:7f:42:25:bb:55:ee:ec:a4:27:b0:1e:60:40: 0d:fe:a7:03:33:ba:5f:d1:c6:b5:cb:30:1c:d2:f7:31:25:79: a7:86:0a:79:28:2a:fd:2d:2d:25:a1:a2:73:81:8a:12:49:85: 41:19:c0:73:86:a2:7b:d3:88:6c:3c:c8:c8:7b:0b:0f:49:04: ec:66:82:89:98:7b:6a:c2:a9:d6:b6:9f:bb:d2:ae:0a:50:2f: 43:25:f9:b1:76:ab:dc:78:76:ab:fe:1c:08:ea:3a:a0:ba:f1: 8f:44:e0:7f:3b:98:26:be:02:71:94:a0:e2:02:c0:9e:67:7d: 75:ea:79:c3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EfxQSDlmRLQR3vPfDPQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz NjYwMjYwHhcNMjYwMTAyMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGRhYjVhYWMzZmZiZjkxYzY4MDUwYTZjMzFiNjAxNzlhMDE2ZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz/AHb+omyn2LhrKERdEJMyQ5EBc 1vD9WjocpKDWLrwi7mHzoOkgjsLtD3RQqLfZd/Bi9DRI9cNqEIg3GwoYxf0TUaKm hrd1q37DBUVFLLfeWkBkn/j6tkDz9E3587iMNo30vbZ2C+5TX/WFlDoTjVzO3DM7 6S19dbKcXSayhY+A61rViRIAthOw6VVGP6K12ma2VgljgCM32TL0ZtO4e6i4EODN DW9l734a7jB+Mj9J+MhU+5F6GvgiwgyyUjHNGCsxrgdf6FJBMu6828eyd1yRoy9C fPy27wM7lm/OxLeMKUbo091v6uygnvi00cWico5l9UyQpf5Fs40JfEQ0yQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEjatarD/7+RxoBQpsMbYBeaAW7TMB8GA1UdIwQY MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt YjNiNzhiMGI2NmVhLzEvU05xMXFzUF92NUhHZ0ZDbXd4dGdGNW9CYnRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPsALAwQA 1a2hAwQA2W+KMA0GCSqGSIb3DQEBCwUAA4IBAQBDxLdPGpoxId51UmpC8a3CYQVH vLyJ6MkIWfsQ5ZOC8/iSihw3/HeN+dnzWMh0WiD3KprCF5b1ag4NIrus3HPmDH4I ziei3rXLxtDwH2I2Ob/qIK3O5rnHuoui9SQTVrFwcHXHwTAmDn6lqDfLCn+6AJm4 BxL4slUKe0FGmGyVkWMDz39CJbtV7uykJ7AeYEAN/qcDM7pf0ca1yzAc0vcxJXmn hgp5KCr9LS0loaJzgYoSSYVBGcBzhqJ704hsPMjIewsPSQTsZoKJmHtqwqnWtp+7 0q4KUC9DJfmxdqvceHar/hwI6jqguvGPROB/O5gmvgJxlKDiAsCeZ3116nnD -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:28 2026 by rpki-client