This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/SpCVnDCeEekxdblga7xr60e2Z5Q.roa File: SpCVnDCeEekxdblga7xr60e2Z5Q.roa (raw, json) Hash identifier: 38e7O6zFRveFVAruc/e0fsqYdqeGU4GrUOL6ww1G6oQ= Subject key identifier: 4A:90:95:9C:30:9E:11:E9:31:75:B9:60:6B:BC:6B:EB:47:B6:67:94 Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a Certificate serial: 019B7BA41736C5210A66449941D55DA1D615 Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/SpCVnDCeEekxdblga7xr60e2Z5Q.roa Signing time: Thu 01 Jan 2026 22:18:30 +0000 ROA not before: Thu 01 Jan 2026 22:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 27647 IP address blocks: 185.148.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:17:36:c5:21:0a:66:44:99:41:d5:5d:a1:d6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a Validity Not Before: Jan 1 22:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a90959c309e11e93175b9606bbc6beb47b66794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:48:7b:81:4a:a3:b3:5c:1a:84:33:47:9d:b5: f7:0e:65:29:a2:8b:36:31:86:58:dd:7e:23:7e:5a: 4c:47:a3:05:48:2d:0f:4a:4c:1d:73:30:40:4b:b0: 94:33:fb:ff:1c:23:38:7a:28:75:37:0f:04:04:b0: ac:7a:90:29:75:9d:03:60:fb:e9:df:37:11:1d:c5: 62:1e:7e:04:7e:dc:89:bb:ba:47:21:dd:1b:a3:3d: ce:38:f5:60:91:85:68:9a:d2:8c:c6:99:0d:bd:bf: 17:dc:bb:ba:11:68:17:6f:48:87:8c:08:c4:26:39: 2c:ef:0c:11:39:29:05:0d:09:11:54:ec:cd:6e:df: 7c:ff:43:8c:cf:03:67:22:1d:28:59:ca:80:95:95: fa:f4:cd:86:6b:ed:c9:31:a1:3c:56:ae:17:c5:98: 85:52:05:aa:10:80:9b:44:1f:ae:57:f3:3e:0f:70: 67:22:23:42:e1:43:cb:9c:6b:1c:c3:82:49:06:b2: 63:ff:3d:39:bc:66:68:32:82:e4:54:ae:29:19:6b: 22:0d:fa:39:3a:06:7e:60:a3:d6:15:0f:c4:b0:92: 62:87:3b:24:d0:62:2a:41:18:a0:8d:df:09:7f:1d: 1e:85:3c:da:39:e3:8d:64:ef:5b:75:a0:d9:62:b3: 93:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:90:95:9C:30:9E:11:E9:31:75:B9:60:6B:BC:6B:EB:47:B6:67:94 X509v3 Authority Key Identifier: keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/SpCVnDCeEekxdblga7xr60e2Z5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.148.180.0/22 Signature Algorithm: sha256WithRSAEncryption 93:4d:6f:b4:22:35:0b:05:a1:f2:18:83:43:d7:04:a6:0b:9f: 0f:9b:90:9d:58:4e:9d:fd:5d:04:5d:f0:22:b0:c4:e7:2f:6f: cd:dc:85:23:f3:5c:ac:57:a4:f1:88:72:0c:23:9f:a0:f7:fb: 1f:f9:28:32:7f:f4:37:a6:ef:07:42:19:43:e4:e9:7d:91:68: ab:e9:cc:91:bd:94:52:77:4d:1a:3d:28:d2:54:16:4a:59:8d: 8c:f9:ca:fc:78:7f:96:15:0f:36:d2:04:85:bc:04:89:dc:b9: 67:8c:53:1f:41:58:f0:04:0c:9b:8e:ed:89:52:02:76:bb:b5: 3f:55:92:c5:9c:86:2d:e2:ff:5b:03:82:9b:0c:fc:15:d1:0e: 62:ff:a8:4d:9b:8d:f2:94:9a:59:77:3f:8e:e3:87:88:d9:7d: 82:1d:52:00:78:f7:d6:c2:28:0f:34:3c:d1:f3:d2:12:29:a6: 88:fe:38:9c:b0:c5:5b:4b:1a:e0:f8:e7:16:27:10:e8:79:f3: 8c:91:5d:48:03:53:c9:c3:18:4c:5a:80:03:b2:c9:78:c2:91: 84:8c:7e:28:63:86:f5:64:2f:50:4a:c6:42:06:1e:c6:40:66: a6:e9:42:64:74:cd:cb:e2:ca:96:d9:69:ef:43:4e:7c:43:b7: 0e:ce:f4:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pBc2xSEKZkSZQdVdodYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2OTE1NDQ1ZTBlOGI3MDM4YWEzZDdhNDUxN2U5MGI2OWM3 ZjcyMGEwHhcNMjYwMTAxMjIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTkwOTU5YzMwOWUxMWU5MzE3NWI5NjA2YmJjNmJlYjQ3YjY2Nzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40h7gUqjs1wahDNHnbX3DmUpoos2 MYZY3X4jflpMR6MFSC0PSkwdczBAS7CUM/v/HCM4eih1Nw8EBLCsepApdZ0DYPvp 3zcRHcViHn4EftyJu7pHId0boz3OOPVgkYVomtKMxpkNvb8X3Lu6EWgXb0iHjAjE Jjks7wwROSkFDQkRVOzNbt98/0OMzwNnIh0oWcqAlZX69M2Ga+3JMaE8Vq4XxZiF UgWqEICbRB+uV/M+D3BnIiNC4UPLnGscw4JJBrJj/z05vGZoMoLkVK4pGWsiDfo5 OgZ+YKPWFQ/EsJJihzsk0GIqQRigjd8Jfx0ehTzaOeONZO9bdaDZYrOTuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEqQlZwwnhHpMXW5YGu8a+tHtmeUMB8GA1UdIwQY MBaAFNaRVEXg6LcDiqPXpFF+kLacf3IKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMt YzNjNjdmZmZkYWFkLzEvU3BDVm5EQ2VFZWt4ZGJsZ2E3eHI2MGUyWjVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMtYzNjNjdmZmZkYWFk LzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZS0MA0G CSqGSIb3DQEBCwUAA4IBAQCTTW+0IjULBaHyGIND1wSmC58Pm5CdWE6d/V0EXfAi sMTnL2/N3IUj81ysV6TxiHIMI5+g9/sf+Sgyf/Q3pu8HQhlD5Ol9kWir6cyRvZRS d00aPSjSVBZKWY2M+cr8eH+WFQ820gSFvASJ3LlnjFMfQVjwBAybju2JUgJ2u7U/ VZLFnIYt4v9bA4KbDPwV0Q5i/6hNm43ylJpZdz+O44eI2X2CHVIAePfWwigPNDzR 89ISKaaI/jicsMVbSxrg+OcWJxDoefOMkV1IA1PJwxhMWoADssl4wpGEjH4oY4b1 ZC9QSsZCBh7GQGam6UJkdM3L4sqW2WnvQ058Q7cOzvQf -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:17 2026 by rpki-client