This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/SnpB0ExR-bCAJLKknHnesUTaAWU.roa File: SnpB0ExR-bCAJLKknHnesUTaAWU.roa (raw, json) Hash identifier: wlr5EY83KcqFkovq8AptI/Jy70VxHPVKk3n5WEh7t3w= Subject key identifier: 4A:7A:41:D0:4C:51:F9:B0:80:24:B2:A4:9C:79:DE:B1:44:DA:01:65 Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 019B78345F11070EF142EDE770B52758C4BD Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/SnpB0ExR-bCAJLKknHnesUTaAWU.roa Signing time: Thu 01 Jan 2026 06:17:36 +0000 ROA not before: Thu 01 Jan 2026 06:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212866 IP address blocks: 89.39.54.0/24 maxlen: 24 212.231.133.0/24 maxlen: 24 212.231.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5f:11:07:0e:f1:42:ed:e7:70:b5:27:58:c4:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Jan 1 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a7a41d04c51f9b08024b2a49c79deb144da0165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:1b:f2:d5:f1:93:c6:33:56:ca:32:67:a3: 3b:f4:98:7d:11:19:a7:21:4e:c5:5c:2e:90:f4:6b: f1:1b:f3:fa:bd:30:65:10:51:0d:cb:81:36:2f:0a: b8:e3:95:fb:a5:b0:47:a0:d3:e7:09:e9:fd:1c:34: d9:65:e0:80:c3:d3:53:36:c8:53:8b:ee:32:15:8e: 9c:44:8c:b5:fe:00:2c:bd:b0:ff:0b:6b:cc:8d:c5: f6:d6:07:2e:28:69:a2:79:dc:c7:fb:43:04:96:d7: 49:75:07:01:23:b4:d1:c5:70:84:b9:38:c4:ef:4b: 9e:41:66:e9:32:8a:a7:5b:4e:1b:53:73:17:0a:77: 22:1e:54:f9:20:34:88:9e:c8:03:e6:c1:16:c9:6c: 16:8f:07:e2:f7:96:63:9a:f0:8a:81:79:b6:ea:9c: cc:92:d9:57:59:c0:cd:da:f8:b3:b7:77:25:59:45: ce:d6:60:b9:d5:47:fc:d7:5b:92:dc:0e:14:66:a1: af:27:08:04:e5:bb:1f:19:83:ae:11:7d:0d:b2:b4: da:0c:99:7b:52:a9:34:12:48:94:0d:24:25:2c:5f: 6a:ed:89:81:13:5a:98:25:2d:f4:6f:2f:fe:a8:1d: 49:fd:01:bb:ca:68:d8:67:f0:67:e9:82:72:fd:b2: a8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7A:41:D0:4C:51:F9:B0:80:24:B2:A4:9C:79:DE:B1:44:DA:01:65 X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/SnpB0ExR-bCAJLKknHnesUTaAWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.54.0/24 212.231.133.0/24 212.231.143.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:45:62:2b:b6:60:d6:fb:3c:4e:ed:8c:f9:62:a9:6a:de:54: cf:3f:69:9d:39:b5:c6:4f:4a:8b:0f:4a:aa:ab:09:6e:36:d1: a6:31:fa:95:96:b5:db:ab:1c:14:7f:3b:bd:1d:87:40:2b:9c: 83:7c:af:ba:27:64:60:c8:f1:18:ff:12:60:22:ad:66:90:5f: b4:56:3d:74:2c:ea:71:18:fb:b8:cf:54:ce:b8:67:4a:83:85: 35:43:ad:61:dd:1a:eb:c1:96:80:90:39:81:25:79:79:32:a1: 84:d3:b7:4b:f9:c1:0c:4e:30:e2:c6:bd:8e:5b:1b:fd:dd:93: db:dd:6c:08:f0:9c:8d:03:42:f9:42:38:fd:5a:05:7a:d0:94: 9b:36:4a:49:a6:f6:60:88:bd:ae:1e:f0:ab:a9:49:72:48:28: 5f:65:e0:da:0f:02:e3:fd:3b:fd:ff:61:da:89:d9:c8:67:1c: b5:62:c3:b8:58:29:81:7e:8f:af:1e:c6:de:4a:02:36:55:95: 7d:29:30:14:7d:27:10:a1:5c:d8:3b:5e:4d:5d:e1:4a:02:57: a0:74:53:c6:7d:1c:ed:31:66:71:38:b7:c6:d1:77:be:5c:1f: 25:a6:c0:79:8a:94:3e:f2:35:dd:c6:61:39:57:fd:db:50:16: 3b:ef:75:83 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NF8RBw7xQu3ncLUnWMS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjYwMTAxMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTdhNDFkMDRjNTFmOWIwODAyNGIyYTQ5Yzc5ZGViMTQ0ZGEwMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDsb8tXxk8YzVsoyZ6M79Jh9ERmn IU7FXC6Q9GvxG/P6vTBlEFENy4E2Lwq445X7pbBHoNPnCen9HDTZZeCAw9NTNshT i+4yFY6cRIy1/gAsvbD/C2vMjcX21gcuKGmiedzH+0MEltdJdQcBI7TRxXCEuTjE 70ueQWbpMoqnW04bU3MXCnciHlT5IDSInsgD5sEWyWwWjwfi95ZjmvCKgXm26pzM ktlXWcDN2vizt3clWUXO1mC51Uf811uS3A4UZqGvJwgE5bsfGYOuEX0NsrTaDJl7 Uqk0EkiUDSQlLF9q7YmBE1qYJS30by/+qB1J/QG7ymjYZ/Bn6YJy/bKo2QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEp6QdBMUfmwgCSypJx53rFE2gFlMB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvU25wQjBFeFItYkNBSkxLa25IbmVzVVRhQVdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSc2AwQA 1OeFAwQA1OePMA0GCSqGSIb3DQEBCwUAA4IBAQCeRWIrtmDW+zxO7Yz5Yqlq3lTP P2mdObXGT0qLD0qqqwluNtGmMfqVlrXbqxwUfzu9HYdAK5yDfK+6J2RgyPEY/xJg Iq1mkF+0Vj10LOpxGPu4z1TOuGdKg4U1Q61h3RrrwZaAkDmBJXl5MqGE07dL+cEM TjDixr2OWxv93ZPb3WwI8JyNA0L5Qjj9WgV60JSbNkpJpvZgiL2uHvCrqUlySChf ZeDaDwLj/Tv9/2HaidnIZxy1YsO4WCmBfo+vHsbeSgI2VZV9KTAUfScQoVzYO15N XeFKAlegdFPGfRztMWZxOLfG0Xe+XB8lpsB5ipQ+8jXdxmE5V/3bUBY773WD -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:20 2026 by rpki-client