This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/SNOlYOcqtrnciePvkCUcLJcoUvU.roa File: SNOlYOcqtrnciePvkCUcLJcoUvU.roa (raw, json) Hash identifier: loMPRzn55InS2adOqJYmW2DSfbGu3PbAMnR1VbbSvpc= Subject key identifier: 48:D3:A5:60:E7:2A:B6:B9:DC:89:E3:EF:90:25:1C:2C:97:28:52:F5 Certificate issuer: /CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f Certificate serial: 019B7DCAAE620F6D5FFCAFB0438728BA1D9B Authority key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/SNOlYOcqtrnciePvkCUcLJcoUvU.roa Signing time: Fri 02 Jan 2026 08:19:53 +0000 ROA not before: Fri 02 Jan 2026 08:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2116 IP address blocks: 193.160.176.0/21 maxlen: 21 193.160.176.0/24 maxlen: 24 193.160.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ae:62:0f:6d:5f:fc:af:b0:43:87:28:ba:1d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f Validity Not Before: Jan 2 08:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48d3a560e72ab6b9dc89e3ef90251c2c972852f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:27:af:4c:33:48:51:2d:28:d8:03:35:70: 91:48:31:bc:31:cc:90:4f:57:47:45:f5:4d:cd:6a: 76:c8:a5:3d:29:dd:f4:ee:cd:ec:c7:00:4f:85:03: 3c:60:4a:8f:a7:8d:ff:de:2e:62:5b:0d:21:03:f8: d6:dc:3f:90:21:43:98:4e:eb:a5:99:9a:db:c8:7b: 2c:e8:df:47:c5:4c:29:7b:58:4f:dc:7d:64:4c:f5: 88:d0:50:ff:38:51:e8:52:d3:d0:a9:10:07:f9:94: 2a:fe:cb:1c:83:51:1c:e6:a9:f5:44:bc:c3:8f:e2: 8f:68:8f:50:f7:85:e3:3b:d3:c3:4b:8f:e5:99:5d: f9:3c:f9:d5:3a:c8:f8:ef:bb:a6:a5:f1:ea:0f:e2: 45:a4:db:ce:0e:3b:73:89:02:3b:37:ae:a0:c9:f1: 5c:29:41:f7:be:45:1c:c2:f6:8d:aa:be:89:2e:90: 72:44:c5:7e:1f:8b:05:7c:b2:82:58:93:b2:a2:db: fc:a3:08:75:46:b5:61:76:02:c4:a5:8b:b5:22:2b: c0:d1:bf:73:01:63:88:24:00:ca:34:ba:89:21:1f: 14:c5:48:d0:13:a4:f9:62:8a:ae:b4:a3:9a:53:c9: 8e:f6:a0:52:d4:c5:bd:ab:c1:7a:88:74:cf:0f:ef: ba:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D3:A5:60:E7:2A:B6:B9:DC:89:E3:EF:90:25:1C:2C:97:28:52:F5 X509v3 Authority Key Identifier: keyid:A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/SNOlYOcqtrnciePvkCUcLJcoUvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.176.0-193.160.187.255 Signature Algorithm: sha256WithRSAEncryption 8e:a3:9f:da:2f:8b:ee:74:4f:7d:a4:ed:a1:81:f4:0f:a5:5d: 93:ab:46:4d:10:ff:9f:e7:4f:1b:54:39:87:ea:2b:6c:16:cb: 16:71:80:fd:dd:04:31:8d:36:66:ce:aa:2f:cb:3f:53:9b:64: 78:ec:9c:3f:68:6a:38:fb:0b:c6:5b:77:c0:86:d5:9c:4c:02: 27:44:ea:3f:89:77:a4:2a:90:e5:9f:55:24:95:96:a1:aa:5c: 58:29:04:84:bc:05:d6:b8:52:ff:7f:7e:94:46:c2:27:a1:ad: b4:1c:96:5a:34:ba:47:f3:af:a2:b0:d8:3a:1a:f0:40:c5:23: db:f8:07:9c:28:02:2f:c5:9b:96:c9:e9:33:7e:e4:e6:50:11: 4a:37:bf:68:78:e7:93:26:0b:f5:6d:5f:66:85:5f:3a:63:6a: 15:3d:6d:ee:f7:f8:21:07:17:45:f7:db:ed:47:96:41:da:6c: d6:60:86:d8:bb:2b:9d:a8:be:a8:8b:70:ae:ff:f1:67:08:74: a6:4a:af:b0:b2:70:ad:e2:cb:14:48:a7:06:0d:d9:e1:bd:83: 0b:9e:bd:fc:74:6c:07:d9:c2:ad:0c:88:79:81:8b:cb:26:0f: ab:7b:66:27:77:a8:42:1c:75:96:4a:1e:d4:89:08:3e:50:74: 0c:5d:96:13 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9yq5iD21f/K+wQ4couh2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Y2I2ODI0NjY1MGJkNThjMjJhMmFlMDBhZDA2NjE3OGE4 MWViNmYwHhcNMjYwMTAyMDgxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGQzYTU2MGU3MmFiNmI5ZGM4OWUzZWY5MDI1MWMyYzk3Mjg1MmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQgnr0wzSFEtKNgDNXCRSDG8McyQ T1dHRfVNzWp2yKU9Kd307s3sxwBPhQM8YEqPp43/3i5iWw0hA/jW3D+QIUOYTuul mZrbyHss6N9HxUwpe1hP3H1kTPWI0FD/OFHoUtPQqRAH+ZQq/sscg1Ec5qn1RLzD j+KPaI9Q94XjO9PDS4/lmV35PPnVOsj477umpfHqD+JFpNvODjtziQI7N66gyfFc KUH3vkUcwvaNqr6JLpByRMV+H4sFfLKCWJOyotv8owh1RrVhdgLEpYu1IivA0b9z AWOIJADKNLqJIR8UxUjQE6T5YoqutKOaU8mO9qBS1MW9q8F6iHTPD++69wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEjTpWDnKra53Inj75AlHCyXKFL1MB8GA1UdIwQY MBaAFKbLaCRmUL1Ywioq4ArQZheKgetvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iNjBkNTAtNTUyYS00NGFmLThiYTUt MzZlNGZiNTZmZGI0LzEvU05PbFlPY3F0cm5jaWVQdmtDVWNMSmNvVXZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9iNjBkNTAtNTUyYS00NGFmLThiYTUtMzZlNGZiNTZmZGI0 LzEvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATBoLAD BALBoLgwDQYJKoZIhvcNAQELBQADggEBAI6jn9ovi+50T32k7aGB9A+lXZOrRk0Q /5/nTxtUOYfqK2wWyxZxgP3dBDGNNmbOqi/LP1ObZHjsnD9oajj7C8Zbd8CG1ZxM AidE6j+Jd6QqkOWfVSSVlqGqXFgpBIS8Bda4Uv9/fpRGwiehrbQcllo0ukfzr6Kw 2Doa8EDFI9v4B5woAi/Fm5bJ6TN+5OZQEUo3v2h455MmC/VtX2aFXzpjahU9be73 +CEHF0X32+1HlkHabNZghti7K52ovqiLcK7/8WcIdKZKr7CycK3iyxRIpwYN2eG9 gwuevfx0bAfZwq0MiHmBi8smD6t7Zid3qEIcdZZKHtSJCD5QdAxdlhM= -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:09 2026 by rpki-client