This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/SPGrDLQaFsT172oeZdTKFdrl91k.roa File: SPGrDLQaFsT172oeZdTKFdrl91k.roa (raw, json) Hash identifier: WPFNZ/4htp8+qkQuN5ulMQodOLBFGPQsppnleYAxYHE= Subject key identifier: 48:F1:AB:0C:B4:1A:16:C4:F5:EF:6A:1E:65:D4:CA:15:DA:E5:F7:59 Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F847687E98887D8257F193E71550540 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/SPGrDLQaFsT172oeZdTKFdrl91k.roa Signing time: Fri 02 Jan 2026 16:22:25 +0000 ROA not before: Fri 02 Jan 2026 16:22:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208916 IP address blocks: 176.236.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:76:87:e9:88:87:d8:25:7f:19:3e:71:55:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48f1ab0cb41a16c4f5ef6a1e65d4ca15dae5f759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:91:7e:17:bd:59:d3:a0:2b:44:82:55:86:8b: 3f:95:b1:aa:9b:a0:12:1d:c8:f0:56:7f:f7:98:b6: 87:d4:07:f6:19:e6:43:c7:98:ce:d2:40:9d:8e:ed: 29:ec:14:f3:a4:7b:b5:60:cc:d8:50:c1:61:3c:17: f1:40:b0:4c:91:1e:b4:b3:4f:9a:f1:10:d3:bc:8f: 9f:a9:8e:ef:24:e3:fa:b1:82:bd:a6:7a:de:8c:da: 25:a4:34:94:d7:0b:b2:08:eb:bd:bb:bb:c8:a5:f8: 73:c9:c2:e8:3d:37:99:8a:f2:d1:5d:78:c9:84:78: 15:a7:4b:da:ae:18:c3:3b:7b:2c:e2:a6:c5:1b:62: 6e:74:35:7e:a7:60:97:cc:73:09:ad:70:b4:c1:47: d0:bc:30:92:ee:55:00:11:7b:13:4b:e4:a4:2b:12: f0:3a:4c:40:0a:af:89:01:80:0f:6f:a3:8c:7a:c4: 37:59:7d:05:b3:53:c7:05:60:33:3b:a6:f1:7e:91: 35:7f:9f:9b:57:d3:17:77:d6:85:8f:65:16:33:68: 7c:2f:d9:76:0b:c7:2a:46:61:55:ca:bb:3c:28:4f: 93:00:cf:63:a8:c9:ee:4e:b1:7f:a7:f7:d1:d2:c2: f9:ed:1e:bd:51:e2:f6:5e:18:6c:c6:73:f7:a2:bf: 7f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F1:AB:0C:B4:1A:16:C4:F5:EF:6A:1E:65:D4:CA:15:DA:E5:F7:59 X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/SPGrDLQaFsT172oeZdTKFdrl91k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.236.246.0/24 Signature Algorithm: sha256WithRSAEncryption 53:51:d4:fa:92:da:66:29:4e:dc:a7:30:e0:0a:16:40:93:b0: 48:4d:33:17:08:86:2c:4c:6c:ed:88:9d:e3:11:8d:ae:0e:c9: 26:e0:d9:5f:f1:7a:8c:3b:21:00:55:82:03:82:f1:b4:ab:23: 9d:1b:8f:c4:33:c3:62:cd:1e:20:8d:40:d7:ad:27:d6:ca:7d: ac:49:51:6f:55:0f:61:9c:ad:75:fd:55:1d:48:1b:9d:d5:bc: d0:8c:6a:f0:c0:57:1f:eb:c2:b4:fc:a9:74:40:81:36:ef:0b: e9:45:7f:30:98:d8:41:e3:0d:69:86:ef:b1:f6:07:57:ad:8a: 67:ec:4e:39:5d:10:fb:06:bf:02:11:76:eb:e9:cf:ec:53:ea: a0:e9:49:13:63:bb:ff:7f:5e:dc:29:80:40:dd:b2:e3:fd:fc: 5d:b5:1d:87:8b:66:fb:97:ac:fc:1e:6d:ea:d5:19:e0:16:1f: d9:b2:68:93:49:71:11:9f:cf:13:e7:c3:ce:20:b8:71:65:9a: e0:93:f6:45:53:a9:5c:a4:66:a9:ce:f8:cc:43:6f:57:a1:dc: 24:18:f3:a2:ed:d4:2b:6c:07:fd:77:1e:88:cd:9b:8b:93:3a: 74:02:57:fc:d6:b7:06:73:1d:64:94:b8:e3:23:c2:6c:1f:a1: ef:d1:5e:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHaH6YiH2CV/GT5xVQVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGYxYWIwY2I0MWExNmM0ZjVlZjZhMWU2NWQ0Y2ExNWRhZTVmNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5F+F71Z06ArRIJVhos/lbGqm6AS HcjwVn/3mLaH1Af2GeZDx5jO0kCdju0p7BTzpHu1YMzYUMFhPBfxQLBMkR60s0+a 8RDTvI+fqY7vJOP6sYK9pnrejNolpDSU1wuyCOu9u7vIpfhzycLoPTeZivLRXXjJ hHgVp0varhjDO3ss4qbFG2JudDV+p2CXzHMJrXC0wUfQvDCS7lUAEXsTS+SkKxLw OkxACq+JAYAPb6OMesQ3WX0Fs1PHBWAzO6bxfpE1f5+bV9MXd9aFj2UWM2h8L9l2 C8cqRmFVyrs8KE+TAM9jqMnuTrF/p/fR0sL57R69UeL2XhhsxnP3or9/OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEjxqwy0GhbE9e9qHmXUyhXa5fdZMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvU1BHckRMUWFGc1QxNzJvZVpkVEtGZHJsOTFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsOz2MA0G CSqGSIb3DQEBCwUAA4IBAQBTUdT6ktpmKU7cpzDgChZAk7BITTMXCIYsTGztiJ3j EY2uDskm4Nlf8XqMOyEAVYIDgvG0qyOdG4/EM8NizR4gjUDXrSfWyn2sSVFvVQ9h nK11/VUdSBud1bzQjGrwwFcf68K0/Kl0QIE27wvpRX8wmNhB4w1phu+x9gdXrYpn 7E45XRD7Br8CEXbr6c/sU+qg6UkTY7v/f17cKYBA3bLj/fxdtR2Hi2b7l6z8Hm3q 1RngFh/ZsmiTSXERn88T58POILhxZZrgk/ZFU6lcpGapzvjMQ29XodwkGPOi7dQr bAf9dx6IzZuLkzp0Alf81rcGcx1klLjjI8JsH6Hv0V5f -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:48 2026 by rpki-client