This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/SMSEOT3Bw8BdVDxGYRzfDIZdEU0.roa File: SMSEOT3Bw8BdVDxGYRzfDIZdEU0.roa (raw, json) Hash identifier: Q+jvQC3Cp7YojEH0cGPSd1xy7T9E3c9+3+jfE13JjeY= Subject key identifier: 48:C4:84:39:3D:C1:C3:C0:5D:54:3C:46:61:1C:DF:0C:86:5D:11:4D Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78 Certificate serial: 019B7F813B1B6973E121916C586C8BFD8528 Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/SMSEOT3Bw8BdVDxGYRzfDIZdEU0.roa Signing time: Fri 02 Jan 2026 16:18:54 +0000 ROA not before: Fri 02 Jan 2026 16:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200884 IP address blocks: 185.92.196.0/24 maxlen: 24 185.92.197.0/24 maxlen: 24 185.92.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:3b:1b:69:73:e1:21:91:6c:58:6c:8b:fd:85:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78 Validity Not Before: Jan 2 16:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48c484393dc1c3c05d543c46611cdf0c865d114d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:03:47:89:da:ba:53:8d:4b:8e:28:b5:b2:9c: 5b:17:90:d4:af:9c:33:79:5b:a8:d7:00:a7:81:08: 08:c0:6f:d7:01:19:48:60:64:e5:58:71:27:33:0d: f5:57:9e:72:ec:42:4b:27:78:32:4d:bf:7e:55:21: da:77:da:e6:be:26:9c:0e:a8:bb:2c:7d:7f:b0:02: f7:cf:b1:94:92:b4:03:9c:e4:86:ca:2a:0d:a5:45: 11:3c:b9:63:4a:65:7d:d1:15:f8:be:78:75:7b:df: 42:e8:5b:16:9d:98:3a:8f:99:22:64:e0:05:79:bb: ae:66:38:21:94:87:a3:a9:bf:9f:2a:d8:02:2a:88: 5e:3d:80:02:77:ac:c2:61:c6:50:5f:c8:e3:fa:0a: 78:88:6a:44:f4:75:6f:fd:f5:cf:6c:15:ef:0c:c1: 53:2b:8d:8c:85:f5:d7:d7:34:52:f9:d9:f4:3b:c0: 5b:3a:f3:c7:52:16:a7:d9:08:4a:15:5e:45:9b:71: 05:2d:d7:4e:71:ce:94:11:b8:0b:16:c5:f3:d6:94: e0:81:a6:78:5b:1f:22:34:07:55:51:c1:7e:65:5b: b5:01:b3:ea:0c:58:88:6a:20:55:c1:3d:0a:0e:c3: 79:00:1a:10:7a:0d:fb:95:d8:da:95:a8:cb:da:5e: bf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C4:84:39:3D:C1:C3:C0:5D:54:3C:46:61:1C:DF:0C:86:5D:11:4D X509v3 Authority Key Identifier: keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/SMSEOT3Bw8BdVDxGYRzfDIZdEU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.196.0-185.92.198.255 Signature Algorithm: sha256WithRSAEncryption 48:f9:70:5b:d9:ea:17:33:93:90:19:60:38:b2:b0:74:f0:bd: d1:47:9b:04:15:3b:d6:4d:ca:4d:c6:10:d7:3c:0d:39:d6:75: b6:0a:01:23:77:76:18:62:3c:cb:da:ce:27:60:e4:f8:72:59: 04:ca:84:dd:e3:fd:5f:63:29:e3:eb:1f:e5:90:62:14:56:29: c6:16:24:ac:38:03:32:a2:fa:79:09:48:51:15:dc:91:cb:35: 14:0d:09:6a:13:60:ad:f2:f7:2f:f7:ae:3c:e1:7e:57:ad:b6: e7:a1:00:ed:39:09:6f:9b:e6:9f:91:92:80:ba:e1:d3:49:97: b6:e6:2b:45:0a:ec:2a:4a:94:72:c1:49:63:81:29:f4:95:40: 73:99:39:57:f3:66:f4:3f:c1:51:65:62:17:b8:18:37:3c:72: 64:2a:53:90:c0:08:7e:5d:47:1e:b5:b9:37:4d:f8:a2:d2:72: 09:34:40:5c:ba:79:1a:00:83:7d:6f:df:c4:8f:05:37:d2:63: 5a:52:75:a9:cb:06:2f:a8:13:bf:25:78:8e:a7:fb:37:a3:5d: 6c:24:2b:7c:91:ff:95:51:ed:fa:93:26:2c:30:00:21:f1:89: 3e:8c:a4:7e:4d:bc:50:a0:85:4a:c5:22:56:c7:87:52:dc:15: 8c:82:64:72 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/gTsbaXPhIZFsWGyL/YUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZjY5ZWY4YTU0ODMwYzVhN2I2Mzc4OTFmYzNjOTBhYjEy Y2JhNzgwHhcNMjYwMTAyMTYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGM0ODQzOTNkYzFjM2MwNWQ1NDNjNDY2MTFjZGYwYzg2NWQxMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQNHidq6U41Ljii1spxbF5DUr5wz eVuo1wCngQgIwG/XARlIYGTlWHEnMw31V55y7EJLJ3gyTb9+VSHad9rmviacDqi7 LH1/sAL3z7GUkrQDnOSGyioNpUURPLljSmV90RX4vnh1e99C6FsWnZg6j5kiZOAF ebuuZjghlIejqb+fKtgCKohePYACd6zCYcZQX8jj+gp4iGpE9HVv/fXPbBXvDMFT K42MhfXX1zRS+dn0O8BbOvPHUhan2QhKFV5Fm3EFLddOcc6UEbgLFsXz1pTggaZ4 Wx8iNAdVUcF+ZVu1AbPqDFiIaiBVwT0KDsN5ABoQeg37ldjalajL2l6/6QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEjEhDk9wcPAXVQ8RmEc3wyGXRFNMB8GA1UdIwQY MBaAFMz2nvilSDDFp7Y3iR/DyQqxLLp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBhZS1LVklNTVdudGplSkg4UEpDckVzdW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yMDg2MjMtMjY4Yy00YmY2LWI5NDct ZjQ1OTIzNWQ5ODdiLzEvU01TRU9UM0J3OEJkVkR4R1lSemZESVpkRVUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yMDg2MjMtMjY4Yy00YmY2LWI5NDctZjQ1OTIzNWQ5ODdi LzEvelBhZS1LVklNTVdudGplSkg4UEpDckVzdW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5XMQD BAC5XMYwDQYJKoZIhvcNAQELBQADggEBAEj5cFvZ6hczk5AZYDiysHTwvdFHmwQV O9ZNyk3GENc8DTnWdbYKASN3dhhiPMvazidg5PhyWQTKhN3j/V9jKePrH+WQYhRW KcYWJKw4AzKi+nkJSFEV3JHLNRQNCWoTYK3y9y/3rjzhflettuehAO05CW+b5p+R koC64dNJl7bmK0UK7CpKlHLBSWOBKfSVQHOZOVfzZvQ/wVFlYhe4GDc8cmQqU5DA CH5dRx61uTdN+KLScgk0QFy6eRoAg31v38SPBTfSY1pSdanLBi+oE78leI6n+zej XWwkK3yR/5VR7fqTJiwwACHxiT6MpH5NvFCghUrFIlbHh1LcFYyCZHI= -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:42 2026 by rpki-client