This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/SzGtwnBEhJHpbVQ4WvWtpgcy8EE.roa File: SzGtwnBEhJHpbVQ4WvWtpgcy8EE.roa (raw, json) Hash identifier: nu5YBI8DbeInuZN7REJNZcl0QnlykTbhImughVEZYFI= Subject key identifier: 4B:31:AD:C2:70:44:84:91:E9:6D:54:38:5A:F5:AD:A6:07:32:F0:41 Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 019BB3483D53B236857374A617F8A58445D4 Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/SzGtwnBEhJHpbVQ4WvWtpgcy8EE.roa Signing time: Mon 12 Jan 2026 17:36:54 +0000 ROA not before: Mon 12 Jan 2026 17:36:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6718 IP address blocks: 5.154.171.0/24 maxlen: 24 5.154.224.0/24 maxlen: 24 37.156.37.0/24 maxlen: 24 89.35.4.0/24 maxlen: 24 89.35.5.0/24 maxlen: 24 89.37.186.0/24 maxlen: 24 89.37.187.0/24 maxlen: 24 89.40.133.0/24 maxlen: 24 89.43.240.0/24 maxlen: 24 89.43.241.0/24 maxlen: 24 89.43.242.0/24 maxlen: 24 89.43.243.0/24 maxlen: 24 89.43.244.0/24 maxlen: 24 89.43.245.0/24 maxlen: 24 89.43.246.0/24 maxlen: 24 89.43.247.0/24 maxlen: 24 89.46.24.0/24 maxlen: 24 89.46.25.0/24 maxlen: 24 89.46.26.0/24 maxlen: 24 89.46.27.0/24 maxlen: 24 89.46.28.0/24 maxlen: 24 89.46.29.0/24 maxlen: 24 89.46.30.0/24 maxlen: 24 89.46.31.0/24 maxlen: 24 91.208.75.0/24 maxlen: 24 91.239.230.0/24 maxlen: 24 92.114.88.0/24 maxlen: 24 92.114.89.0/24 maxlen: 24 92.114.90.0/24 maxlen: 24 92.114.91.0/24 maxlen: 24 94.176.186.0/24 maxlen: 24 94.176.187.0/24 maxlen: 24 128.0.34.0/24 maxlen: 24 128.0.36.0/24 maxlen: 24 185.36.252.0/24 maxlen: 24 188.241.111.0/24 maxlen: 24 193.93.142.0/23 maxlen: 23 193.162.136.0/24 maxlen: 24 195.206.164.0/24 maxlen: 24 2a00:ece0::/32 maxlen: 32 2a04:6c80::/48 maxlen: 48 2a05:1c00::/32 maxlen: 32 2a05:1c01::/32 maxlen: 32 2a05:1c02::/32 maxlen: 32 2a05:1c03::/32 maxlen: 32 2a05:1c04::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:48:3d:53:b2:36:85:73:74:a6:17:f8:a5:84:45:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Jan 12 17:36:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b31adc270448491e96d54385af5ada60732f041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:a6:88:c1:b8:4a:46:6f:e4:43:2d:aa:ed: 01:35:ca:b1:73:a7:fb:01:5b:68:54:e3:17:25:98: f1:da:d9:6e:6f:fe:ea:6e:d2:eb:53:b1:ab:50:5f: 16:88:f5:f6:59:d9:b0:25:00:78:6f:8d:41:d4:ee: 17:00:eb:a1:4e:e2:05:9b:24:fc:db:20:a6:ff:3d: 54:e3:0f:63:e9:49:a8:15:a1:1c:1a:90:37:7d:43: 88:7f:fe:5d:69:ae:1f:97:3a:14:02:7c:21:a9:82: f9:43:92:e6:d4:43:e3:72:bc:68:7c:ac:ac:af:a9: b9:9f:dc:32:69:ec:93:e6:cb:e0:44:4f:a3:9f:f3: 4e:6a:fa:7b:22:a4:72:60:32:89:02:7b:05:cf:8a: 34:e4:b4:8a:50:5a:53:46:74:53:17:fd:4f:2c:3c: 72:93:f0:b5:da:80:9f:47:90:56:d9:27:7b:d7:54: fc:cb:28:ed:50:93:df:75:4a:ef:f8:5f:8c:03:02: 38:8a:56:d3:ea:70:b8:47:26:86:50:44:60:c5:e5: 33:87:a7:cd:7e:a9:38:19:68:14:de:31:34:f1:33: 4a:27:3b:8a:54:65:0f:17:80:8d:b8:29:9b:66:87: 5a:24:88:0a:24:03:d8:63:50:b8:1d:ed:68:fa:39: 8a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:31:AD:C2:70:44:84:91:E9:6D:54:38:5A:F5:AD:A6:07:32:F0:41 X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/SzGtwnBEhJHpbVQ4WvWtpgcy8EE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.171.0/24 5.154.224.0/24 37.156.37.0/24 89.35.4.0/23 89.37.186.0/23 89.40.133.0/24 89.43.240.0/21 89.46.24.0/21 91.208.75.0/24 91.239.230.0/24 92.114.88.0/22 94.176.186.0/23 128.0.34.0/24 128.0.36.0/24 185.36.252.0/24 188.241.111.0/24 193.93.142.0/23 193.162.136.0/24 195.206.164.0/24 IPv6: 2a00:ece0::/32 2a04:6c80::/48 2a05:1c00::-2a05:1c04:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 4f:b8:3a:64:17:16:23:e4:0b:5f:73:19:8f:f0:03:6b:c9:1f: df:5c:86:aa:b4:b4:48:6a:79:3a:cc:ac:79:98:50:bf:07:6f: ab:02:fa:88:87:47:81:27:42:9b:61:a8:04:14:cc:41:81:a9: c7:28:dc:32:5e:87:6b:fb:1d:ca:0c:24:30:9e:61:82:8e:23: b8:ef:89:6a:ac:c4:43:da:8f:e3:cc:06:e4:60:31:70:2a:f1: 8b:1f:6a:b2:86:21:c9:b7:f5:21:74:2d:e4:2b:0e:e7:09:2e: 94:11:98:bb:8d:76:60:cb:13:f4:3b:0b:41:e1:a4:f2:4d:66: 2e:72:cc:21:bd:e6:00:09:f6:70:b1:7b:b3:7a:6e:8e:07:57: 7e:90:6c:73:2c:a4:52:9e:ac:d1:e3:62:e0:ee:ff:50:f8:4c: 6b:91:d2:5f:8b:61:c5:fd:a2:db:8d:6f:89:71:cd:31:b7:1c: ec:88:4e:6c:51:4b:48:1a:21:46:95:88:04:66:b2:19:56:7a: 4d:49:12:b8:33:36:77:89:2f:6b:18:4c:e9:34:12:4d:c3:4d: 96:b7:4f:59:04:6e:64:76:c7:7c:84:35:2d:1d:a9:64:74:ab: c8:f5:81:af:17:e3:f9:6e:ea:43:f0:3e:c3:92:aa:2e:9e:13: ef:70:43:a2 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZuzSD1TsjaFc3SmF/ilhEXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjYwMTEyMTczNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjMxYWRjMjcwNDQ4NDkxZTk2ZDU0Mzg1YWY1YWRhNjA3MzJmMDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qSmiMG4SkZv5EMtqu0BNcqxc6f7 AVtoVOMXJZjx2tlub/7qbtLrU7GrUF8WiPX2WdmwJQB4b41B1O4XAOuhTuIFmyT8 2yCm/z1U4w9j6UmoFaEcGpA3fUOIf/5daa4flzoUAnwhqYL5Q5Lm1EPjcrxofKys r6m5n9wyaeyT5svgRE+jn/NOavp7IqRyYDKJAnsFz4o05LSKUFpTRnRTF/1PLDxy k/C12oCfR5BW2Sd711T8yyjtUJPfdUrv+F+MAwI4ilbT6nC4RyaGUERgxeUzh6fN fqk4GWgU3jE08TNKJzuKVGUPF4CNuCmbZodaJIgKJAPYY1C4He1o+jmK1wIDAQAB o4ICnzCCApswHQYDVR0OBBYEFEsxrcJwRISR6W1UOFr1raYHMvBBMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvU3pHdHduQkVoSkhwYlZRNFd2V3RwZ2N5OEVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG0BggrBgEFBQcBBwEB/wSBpDCBoTB4BAIAATByAwQABZqr AwQABZrgAwQAJZwlAwQBWSMEAwQBWSW6AwQAWSiFAwQDWSvwAwQDWS4YAwQAW9BL AwQAW+/mAwQCXHJYAwQBXrC6AwQAgAAiAwQAgAAkAwQAuST8AwQAvPFvAwQBwV2O AwQAwaKIAwQAw86kMCUEAgACMB8DBQAqAOzgAwcAKgRsgAAAMA0DBAIqBRwDBQAq BRwEMA0GCSqGSIb3DQEBCwUAA4IBAQBPuDpkFxYj5AtfcxmP8ANryR/fXIaqtLRI ank6zKx5mFC/B2+rAvqIh0eBJ0KbYagEFMxBganHKNwyXodr+x3KDCQwnmGCjiO4 74lqrMRD2o/jzAbkYDFwKvGLH2qyhiHJt/UhdC3kKw7nCS6UEZi7jXZgyxP0OwtB 4aTyTWYucswhveYACfZwsXuzem6OB1d+kGxzLKRSnqzR42Lg7v9Q+ExrkdJfi2HF /aLbjW+Jcc0xtxzsiE5sUUtIGiFGlYgEZrIZVnpNSRK4MzZ3iS9rGEzpNBJNw02W t09ZBG5kdsd8hDUtHalkdKvI9YGvF+P5bupD8D7DkqounhPvcEOi -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:06 2026 by rpki-client