This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/SNlhQevvZx38hS-oDse5owlAEIQ.roa File: SNlhQevvZx38hS-oDse5owlAEIQ.roa (raw, json) Hash identifier: 1KArQ1IMqF7C3d1s3h8r45tchrjeJSzFxFsM5xeyIkM= Subject key identifier: 48:D9:61:41:EB:EF:67:1D:FC:85:2F:A8:0E:C7:B9:A3:09:40:10:84 Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b Certificate serial: 019B77591BE8C3E98AC37C844C2CB721540E Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/SNlhQevvZx38hS-oDse5owlAEIQ.roa Signing time: Thu 01 Jan 2026 02:18:07 +0000 ROA not before: Thu 01 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198167 IP address blocks: 185.138.220.0/23 maxlen: 23 185.138.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1b:e8:c3:e9:8a:c3:7c:84:4c:2c:b7:21:54:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48d96141ebef671dfc852fa80ec7b9a309401084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:34:9b:af:32:4b:37:f0:52:c3:f1:38:72: 02:02:86:57:82:c4:fe:b7:c5:63:59:4b:a4:e2:7a: 54:a7:a1:de:60:19:f3:20:be:31:cd:2a:5e:89:65: 8e:0b:2f:a5:b7:11:73:10:2b:81:f0:b7:87:a3:cd: eb:99:e9:31:79:dd:b9:65:95:8b:ca:27:21:17:d0: 5a:60:1b:90:f0:a4:37:96:81:8a:de:6c:3a:77:83: 2f:68:9d:5b:77:dd:03:28:9d:ec:05:d9:8f:64:a6: 54:74:ad:fa:7d:31:c0:ca:ee:78:39:d9:9d:45:62: 92:6d:5f:72:d0:84:b8:3b:a6:fa:34:5e:5b:41:07: e3:42:d4:e1:78:29:dd:2b:16:a5:ca:c5:1e:4c:37: 9a:c8:a4:fa:4d:30:23:5e:cb:9d:52:d8:1a:ed:51: ff:51:25:92:3e:f9:ee:c7:bb:62:84:25:de:b3:9e: 43:f4:54:17:2c:ef:97:d7:c2:22:20:7c:15:3f:a7: 14:0b:81:17:1b:34:67:5a:6c:65:92:26:f1:70:1f: 69:db:69:f3:2c:56:44:f6:b3:0c:ca:37:fc:4b:00: 9b:1f:0e:37:83:28:b1:a3:c2:b5:05:37:43:e9:a9: 72:2c:2d:72:4f:f9:9f:5d:2b:bc:2c:a3:5c:85:96: 7c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D9:61:41:EB:EF:67:1D:FC:85:2F:A8:0E:C7:B9:A3:09:40:10:84 X509v3 Authority Key Identifier: keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/SNlhQevvZx38hS-oDse5owlAEIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.220.0/22 Signature Algorithm: sha256WithRSAEncryption 63:bd:47:0b:62:46:10:9b:17:6c:92:57:84:03:c8:97:26:8d: 5a:be:48:db:1c:d4:06:1a:37:c7:cd:87:c2:57:8e:5b:26:38: 8f:93:7d:24:ce:12:d0:fd:70:50:0e:aa:7c:53:12:0c:e7:70: 67:45:fd:0b:3f:aa:b4:6a:9a:57:70:17:4b:7c:fe:14:5e:72: 31:8c:16:c9:51:59:34:42:01:72:47:37:45:09:33:44:49:80: 36:fb:d8:30:88:e9:24:a7:b7:22:11:0e:92:0a:6a:05:86:57: 17:ff:9f:88:18:9a:b3:45:3e:be:9e:e4:33:ac:d5:3e:12:30: c7:0e:37:77:38:ac:54:50:e7:5c:a4:ef:38:b6:3c:0c:09:5f: a5:87:8d:fe:57:31:6e:30:ca:44:1e:fe:16:53:d8:fe:b3:7e: 0a:bd:68:85:9b:87:2a:30:81:b5:56:35:5b:42:ac:04:5e:b2: b3:64:ba:cd:69:60:b4:89:b5:8b:6c:0a:64:28:35:7e:c1:3b: 31:3e:55:e8:ac:44:94:bf:60:e0:24:44:42:81:e5:d1:08:9b: 25:ca:ec:a0:b2:13:1d:4b:83:95:fc:c8:8f:3c:b7:95:30:41: 05:5e:06:3e:36:13:94:1f:83:97:36:d1:eb:c2:b9:ee:5f:32: 95:7e:fc:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRvow+mKw3yETCy3IVQOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZWExYjEyOTdkYmMzZjRiODFkOTEwYzI0NzZlYzgxZmMz ZTk2OWIwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGQ5NjE0MWViZWY2NzFkZmM4NTJmYTgwZWM3YjlhMzA5NDAxMDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttA0m68ySzfwUsPxOHICAoZXgsT+ t8VjWUuk4npUp6HeYBnzIL4xzSpeiWWOCy+ltxFzECuB8LeHo83rmekxed25ZZWL yichF9BaYBuQ8KQ3loGK3mw6d4MvaJ1bd90DKJ3sBdmPZKZUdK36fTHAyu54Odmd RWKSbV9y0IS4O6b6NF5bQQfjQtTheCndKxalysUeTDeayKT6TTAjXsudUtga7VH/ USWSPvnux7tihCXes55D9FQXLO+X18IiIHwVP6cUC4EXGzRnWmxlkibxcB9p22nz LFZE9rMMyjf8SwCbHw43gyixo8K1BTdD6alyLC1yT/mfXSu8LKNchZZ8cQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEjZYUHr72cd/IUvqA7HuaMJQBCEMB8GA1UdIwQY MBaAFEvqGxKX28P0uB2RDCR27IH8PpabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5Yjkt ODZmNWQwYTExOTQ5LzEvU05saFFldnZaeDM4aFMtb0RzZTVvd2xBRUlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5YjktODZmNWQwYTExOTQ5 LzEvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYrcMA0G CSqGSIb3DQEBCwUAA4IBAQBjvUcLYkYQmxdskleEA8iXJo1avkjbHNQGGjfHzYfC V45bJjiPk30kzhLQ/XBQDqp8UxIM53BnRf0LP6q0appXcBdLfP4UXnIxjBbJUVk0 QgFyRzdFCTNESYA2+9gwiOkkp7ciEQ6SCmoFhlcX/5+IGJqzRT6+nuQzrNU+EjDH Djd3OKxUUOdcpO84tjwMCV+lh43+VzFuMMpEHv4WU9j+s34KvWiFm4cqMIG1VjVb QqwEXrKzZLrNaWC0ibWLbApkKDV+wTsxPlXorESUv2DgJERCgeXRCJslyuygshMd S4OV/MiPPLeVMEEFXgY+NhOUH4OXNtHrwrnuXzKVfvxA -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:00 2026 by rpki-client