This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/sp2MMK9YRqm89c-c8Nk0zqZ0hl0.roa File: sp2MMK9YRqm89c-c8Nk0zqZ0hl0.roa (raw, json) Hash identifier: 4AR1dpezwOfRG52yq/YaU//Ei5bTQmeOkpGOb7/yTjo= Subject key identifier: B2:9D:8C:30:AF:58:46:A9:BC:F5:CF:9C:F0:D9:34:CE:A6:74:86:5D Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 019B7C804B3E090FAA9226BE760C59A37942 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/sp2MMK9YRqm89c-c8Nk0zqZ0hl0.roa Signing time: Fri 02 Jan 2026 02:19:01 +0000 ROA not before: Fri 02 Jan 2026 02:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1241 IP address blocks: 91.230.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:4b:3e:09:0f:aa:92:26:be:76:0c:59:a3:79:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Jan 2 02:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b29d8c30af5846a9bcf5cf9cf0d934cea674865d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:f9:bf:c9:ba:1c:43:21:0c:9c:9f:35:b2: bc:73:b4:19:28:de:8c:50:69:41:0c:f3:ea:74:d6: 68:03:4a:91:89:15:70:22:9e:54:67:37:86:f5:ab: 74:3d:de:3c:4f:96:c9:56:fc:3e:a8:7c:e5:b1:7c: c2:51:81:fd:b7:42:6f:76:92:79:fa:fc:bd:32:43: 1f:85:16:d2:69:da:f7:a7:c4:f6:07:c9:cd:fb:4b: 77:44:96:26:a6:dd:2c:7a:98:1b:44:69:6d:56:48: 14:4e:df:04:cc:58:f9:48:a2:e3:74:ab:33:ff:f9: 2e:0f:7d:60:7c:64:b3:f6:db:67:bc:41:b8:4c:87: b8:31:6d:42:4d:e8:00:bb:9c:3a:98:ff:e3:2b:f6: a2:05:e1:cd:9a:5d:bd:5b:bf:a4:66:7e:83:7d:6d: d9:bd:23:99:21:23:9a:de:d0:c6:3a:7a:39:c7:1f: b6:ae:38:ed:6e:f4:38:02:1e:52:d1:d9:76:fd:27: f4:e2:44:09:d2:59:9e:dd:e7:35:cd:41:8b:70:c8: 75:ad:97:62:bc:35:62:a2:4d:4b:71:0a:b6:fc:85: 27:05:bd:e6:79:35:14:3a:d1:1f:a9:4e:f8:da:f6: 44:4b:76:ea:60:04:ad:d0:7c:7a:25:61:45:7e:81: 51:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9D:8C:30:AF:58:46:A9:BC:F5:CF:9C:F0:D9:34:CE:A6:74:86:5D X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/sp2MMK9YRqm89c-c8Nk0zqZ0hl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.247.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:e7:66:a2:f8:f3:43:ce:ca:1c:c1:7d:61:27:99:7f:99:fa: cd:ab:76:ab:c6:aa:7b:4f:86:1b:9e:72:02:5b:36:99:8f:b0: eb:93:d8:64:57:9d:e3:ca:0f:29:10:31:f9:9d:74:34:1b:76: 20:fe:d0:fd:05:29:43:0e:0a:88:da:84:8c:ae:e5:a6:b6:95: bd:7e:22:c5:13:7a:43:81:51:71:4d:17:80:88:eb:cb:fc:c3: 64:6b:b5:aa:c1:2e:eb:53:e7:a8:4d:2d:1b:13:68:6b:d9:95: 7b:41:d7:9b:47:92:78:1a:7b:c4:a0:1a:0e:38:ac:ed:a0:ca: cc:9c:2a:5e:81:9a:1f:8a:23:09:5a:08:46:e8:b5:d1:b0:e6: e3:4f:c0:b3:f2:79:d3:ed:76:bb:cc:b6:8f:17:12:e3:78:45: b7:7a:80:7c:2f:1b:63:64:df:1a:3a:bd:2d:12:e5:fd:7e:df: 91:75:ac:0e:8c:af:98:78:bd:90:ae:07:ea:04:88:0d:4e:c5: 00:35:b5:e9:bd:df:8a:09:4f:22:50:bb:57:33:80:f8:d3:c8: 9c:1f:8f:e6:b5:1f:27:b7:03:0d:62:68:de:1f:60:36:5a:d4: 5f:6f:74:98:23:c5:5d:68:87:6a:e7:ab:3f:f7:11:a1:fa:4a: 62:6f:2c:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gEs+CQ+qkia+dgxZo3lCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjYwMTAyMDIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjlkOGMzMGFmNTg0NmE5YmNmNWNmOWNmMGQ5MzRjZWE2NzQ4NjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEP5v8m6HEMhDJyfNbK8c7QZKN6M UGlBDPPqdNZoA0qRiRVwIp5UZzeG9at0Pd48T5bJVvw+qHzlsXzCUYH9t0JvdpJ5 +vy9MkMfhRbSadr3p8T2B8nN+0t3RJYmpt0sepgbRGltVkgUTt8EzFj5SKLjdKsz //kuD31gfGSz9ttnvEG4TIe4MW1CTegAu5w6mP/jK/aiBeHNml29W7+kZn6DfW3Z vSOZISOa3tDGOno5xx+2rjjtbvQ4Ah5S0dl2/Sf04kQJ0lme3ec1zUGLcMh1rZdi vDViok1LcQq2/IUnBb3meTUUOtEfqU742vZES3bqYASt0Hx6JWFFfoFR0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLKdjDCvWEapvPXPnPDZNM6mdIZdMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvc3AyTU1LOVlScW04OWMtYzhOazB6cVowaGwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+b3MA0G CSqGSIb3DQEBCwUAA4IBAQAb52ai+PNDzsocwX1hJ5l/mfrNq3arxqp7T4YbnnIC WzaZj7Drk9hkV53jyg8pEDH5nXQ0G3Yg/tD9BSlDDgqI2oSMruWmtpW9fiLFE3pD gVFxTReAiOvL/MNka7WqwS7rU+eoTS0bE2hr2ZV7QdebR5J4GnvEoBoOOKztoMrM nCpegZofiiMJWghG6LXRsObjT8Cz8nnT7Xa7zLaPFxLjeEW3eoB8LxtjZN8aOr0t EuX9ft+RdawOjK+YeL2QrgfqBIgNTsUANbXpvd+KCU8iULtXM4D408icH4/mtR8n twMNYmjeH2A2WtRfb3SYI8VdaIdq56s/9xGh+kpibywg -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:57 2026 by rpki-client