This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/SPWsU8T9PLAubzeedd1G0T5GSAM.roa File: SPWsU8T9PLAubzeedd1G0T5GSAM.roa (raw, json) Hash identifier: UkMo0FW619fM25TcBwQ8m/aK6wdUQ2mji2t/icRA2rU= Subject key identifier: 48:F5:AC:53:C4:FD:3C:B0:2E:6F:37:9E:75:DD:46:D1:3E:46:48:03 Certificate issuer: /CN=27f0b737715114ded20f68ef0347d9f752a0e0b7 Certificate serial: 019B7A5A12AC46B676DDBD5E4C17649245BB Authority key identifier: 27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/SPWsU8T9PLAubzeedd1G0T5GSAM.roa Signing time: Thu 01 Jan 2026 16:18:01 +0000 ROA not before: Thu 01 Jan 2026 16:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34841 IP address blocks: 46.252.48.0/20 maxlen: 20 185.77.124.0/23 maxlen: 23 185.77.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:12:ac:46:b6:76:dd:bd:5e:4c:17:64:92:45:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27f0b737715114ded20f68ef0347d9f752a0e0b7 Validity Not Before: Jan 1 16:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48f5ac53c4fd3cb02e6f379e75dd46d13e464803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:f1:b1:d5:ab:09:80:0e:35:89:d5:95:42: d2:7e:43:bc:88:ff:61:71:15:26:97:c4:30:5f:1c: a4:81:ab:b5:5b:b6:0b:c0:ba:78:32:d5:e3:4b:10: be:86:77:51:40:63:9d:b0:cc:71:83:9d:68:5f:e3: 4f:93:76:6d:20:1a:19:a4:5f:e9:44:97:07:d2:f9: 82:dd:16:f1:b7:da:45:99:b3:8a:e2:90:9a:5c:46: 99:5a:6f:25:96:4a:db:b8:7e:d3:df:84:70:7d:51: fc:e2:b0:1d:8a:43:cd:dc:09:b3:6a:06:b7:19:0e: fd:7d:a4:4c:7e:7b:b6:3f:93:fb:e8:4c:dd:3d:39: f7:07:ef:65:1b:cb:0f:5c:16:11:d6:7c:38:56:de: 22:af:8c:0a:f4:a0:85:ca:d0:c1:78:06:65:11:e7: 0e:4b:ab:e4:96:8e:84:2c:7e:7f:8b:e1:70:e8:37: fb:57:f0:9c:22:e6:8e:71:0e:85:94:13:13:bb:59: de:0a:3b:bc:2c:83:c8:15:c2:08:6c:6f:2d:e9:6a: b2:bc:b5:be:2a:0b:a5:25:09:fc:53:27:9f:17:a7: fb:41:61:f9:99:ed:51:e2:d8:1d:5a:d5:13:d9:6a: 65:b5:fc:a4:67:2b:ad:ab:29:23:d2:a9:6a:8a:0a: 11:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F5:AC:53:C4:FD:3C:B0:2E:6F:37:9E:75:DD:46:D1:3E:46:48:03 X509v3 Authority Key Identifier: keyid:27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/SPWsU8T9PLAubzeedd1G0T5GSAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.252.48.0/20 185.77.124.0/22 Signature Algorithm: sha256WithRSAEncryption 39:bf:89:44:71:5c:4f:8e:fb:8a:0e:66:5a:59:9f:66:ad:52: 36:8e:ea:e3:39:b7:2a:4b:3c:cd:53:a3:1f:39:d1:bd:39:35: f9:76:67:fe:e3:11:ef:c0:02:e0:bb:6d:18:ef:6f:c4:de:d8: 0a:92:df:80:77:42:d7:f3:92:93:ce:d8:9e:59:fc:3e:dd:ba: 96:e6:df:d3:be:b5:b7:61:89:45:26:c7:f6:43:39:b7:60:44: 96:e0:49:52:6d:8e:ec:0c:97:38:44:13:af:89:ad:fe:53:c2: 8b:17:56:e4:80:fa:56:c1:1d:fd:71:c6:c7:0d:99:b6:fd:40: 35:b1:da:47:55:9f:15:e5:0c:bd:ef:e9:2f:8a:12:c6:aa:48: 10:27:f5:ca:27:81:7b:c2:62:91:74:f8:55:53:52:21:e2:8e: c2:b7:58:34:a6:63:32:7b:d2:43:6b:71:85:9b:d0:77:9e:c0: e5:1e:15:fe:01:ce:73:e3:1b:29:c2:4b:04:7f:0e:ef:b6:00: 79:43:ab:9b:10:04:97:87:e1:59:70:b9:bd:9b:31:89:5b:d3: 2e:f5:37:5e:03:c8:ec:74:78:e1:ed:8e:9c:aa:0c:81:19:53: 16:04:98:00:20:39:a0:9b:35:0e:d2:14:27:df:5d:df:ea:81: 59:43:d7:09 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WhKsRrZ23b1eTBdkkkW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZjBiNzM3NzE1MTE0ZGVkMjBmNjhlZjAzNDdkOWY3NTJh MGUwYjcwHhcNMjYwMTAxMTYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGY1YWM1M2M0ZmQzY2IwMmU2ZjM3OWU3NWRkNDZkMTNlNDY0ODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQzxsdWrCYAONYnVlULSfkO8iP9h cRUml8QwXxykgau1W7YLwLp4MtXjSxC+hndRQGOdsMxxg51oX+NPk3ZtIBoZpF/p RJcH0vmC3Rbxt9pFmbOK4pCaXEaZWm8llkrbuH7T34RwfVH84rAdikPN3Amzaga3 GQ79faRMfnu2P5P76EzdPTn3B+9lG8sPXBYR1nw4Vt4ir4wK9KCFytDBeAZlEecO S6vklo6ELH5/i+Fw6Df7V/CcIuaOcQ6FlBMTu1neCju8LIPIFcIIbG8t6WqyvLW+ KgulJQn8UyefF6f7QWH5me1R4tgdWtUT2WpltfykZyutqykj0qlqigoRvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEj1rFPE/TywLm83nnXdRtE+RkgDMB8GA1UdIwQY MBaAFCfwtzdxURTe0g9o7wNH2fdSoOC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl9DM04zRlJGTjdTRDJqdkEwZlo5MUtnNExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iNjc5NTMtM2NlMy00YWZlLTlkN2Ut MWVkNjIwNDUyNTA5LzEvU1BXc1U4VDlQTEF1YnplZWRkMUcwVDVHU0FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iNjc5NTMtM2NlMy00YWZlLTlkN2UtMWVkNjIwNDUyNTA5 LzEvSl9DM04zRlJGTjdTRDJqdkEwZlo5MUtnNExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELvwwAwQC uU18MA0GCSqGSIb3DQEBCwUAA4IBAQA5v4lEcVxPjvuKDmZaWZ9mrVI2jurjObcq SzzNU6MfOdG9OTX5dmf+4xHvwALgu20Y72/E3tgKkt+Ad0LX85KTztieWfw+3bqW 5t/TvrW3YYlFJsf2Qzm3YESW4ElSbY7sDJc4RBOvia3+U8KLF1bkgPpWwR39ccbH DZm2/UA1sdpHVZ8V5Qy97+kvihLGqkgQJ/XKJ4F7wmKRdPhVU1Ih4o7Ct1g0pmMy e9JDa3GFm9B3nsDlHhX+Ac5z4xspwksEfw7vtgB5Q6ubEASXh+FZcLm9mzGJW9Mu 9TdeA8jsdHjh7Y6cqgyBGVMWBJgAIDmgmzUO0hQn313f6oFZQ9cJ -----END CERTIFICATE-----Generated at Mon Jan 26 15:35:04 2026 by rpki-client