This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Scp2nM5P7b3JtI-qLRoRM-zY2DQ.roa File: Scp2nM5P7b3JtI-qLRoRM-zY2DQ.roa (raw, json) Hash identifier: ReY7U0Hu+rWmNt1KbWijPc8uks4szEsfEvUJpvT89z4= Subject key identifier: 49:CA:76:9C:CE:4F:ED:BD:C9:B4:8F:AA:2D:1A:11:33:EC:D8:D8:34 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB1A088F3EFE4A4BBCC323746D515A Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Scp2nM5P7b3JtI-qLRoRM-zY2DQ.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206930 IP address blocks: 185.188.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1a:08:8f:3e:fe:4a:4b:bc:c3:23:74:6d:51:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49ca769cce4fedbdc9b48faa2d1a1133ecd8d834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ed:f8:ce:ed:b3:4b:b6:57:a4:55:dc:9b:02: a3:13:ab:f5:58:2e:0a:3e:ce:37:4b:ab:92:7d:28: c3:ee:c0:e6:fc:ba:6d:5a:97:f6:e1:95:d7:db:a1: 15:39:b9:c3:54:49:38:56:d7:9d:79:2a:fb:bb:59: 88:77:46:85:4f:7c:d4:8e:4c:89:fe:21:ce:c2:29: b2:15:7a:b9:a6:9e:d8:50:f4:d2:01:f2:df:7d:cf: a9:73:c4:04:9f:33:b5:14:b8:1f:5e:e4:0a:cf:cc: f9:c3:6b:15:8e:24:c5:c0:d1:b7:6e:c2:d1:73:59: 4b:8a:54:46:47:4b:a2:6c:d7:6a:86:13:6e:bd:db: 7a:f7:7b:1d:fa:2d:9a:ff:5e:37:0e:07:b6:df:26: 27:4b:55:f0:28:ad:4c:37:de:3b:fd:2d:4d:62:f4: ef:c0:58:f4:09:1f:5d:02:3a:cb:1d:49:80:ee:d3: 5a:05:4f:53:e3:79:21:05:35:f3:e8:56:20:7c:7e: 0c:db:13:c9:f4:40:0b:63:6d:a8:24:f0:b4:f0:d5: 01:0a:17:70:34:88:64:52:76:c2:4f:4a:74:b4:c4: fd:35:67:b2:15:d8:2c:8a:d2:2a:f1:20:c9:0a:81: 33:66:4d:58:82:37:c2:65:92:75:39:7d:19:a8:ae: 44:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CA:76:9C:CE:4F:ED:BD:C9:B4:8F:AA:2D:1A:11:33:EC:D8:D8:34 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/Scp2nM5P7b3JtI-qLRoRM-zY2DQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.212.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:aa:7c:d7:6b:dd:8b:bf:83:bc:a8:e8:c2:b3:0d:cc:66:26: 72:c7:b9:f1:c4:de:8e:ac:13:ff:e5:ad:a2:c7:16:d0:71:f4: 78:71:99:43:1e:95:11:3a:22:bd:a9:ef:2e:e7:14:3e:05:0d: 78:ac:c7:9f:98:ae:c2:ae:4a:16:57:91:1c:71:f0:f2:44:d6: 45:27:59:a1:6d:81:1b:38:64:69:5c:4b:86:a5:96:7e:f5:b6: 27:50:60:f2:b3:48:8f:a1:0c:10:db:ef:65:dd:76:54:63:1c: a2:43:2f:8e:d1:29:3c:6a:1a:0b:51:d8:0a:d8:36:5b:5a:9b: 3d:25:40:18:e0:55:01:a1:de:5b:00:71:4d:2b:ea:b3:ee:90: fd:06:de:ee:d8:39:b3:ec:45:4c:50:43:b4:54:ac:35:66:d5: 9e:c6:18:8a:4e:f8:59:89:d4:4d:61:10:50:94:bb:0d:8a:0c: 0a:60:53:b7:63:2b:34:f5:5c:5f:c3:2d:aa:91:98:80:87:c9: 46:62:7b:c3:90:75:05:7e:99:f9:5d:b0:a4:d8:71:18:d9:53: a0:f4:44:71:c2:f2:7c:8e:02:f8:3a:9c:fa:28:a5:79:46:d6: 4d:1d:6c:99:1d:78:66:29:3e:76:f6:5c:53:28:46:b0:85:96: 13:66:07:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xoIjz7+Sku8wyN0bVFaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWNhNzY5Y2NlNGZlZGJkYzliNDhmYWEyZDFhMTEzM2VjZDhkODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu34zu2zS7ZXpFXcmwKjE6v1WC4K Ps43S6uSfSjD7sDm/LptWpf24ZXX26EVObnDVEk4VtedeSr7u1mId0aFT3zUjkyJ /iHOwimyFXq5pp7YUPTSAfLffc+pc8QEnzO1FLgfXuQKz8z5w2sVjiTFwNG3bsLR c1lLilRGR0uibNdqhhNuvdt693sd+i2a/143Dge23yYnS1XwKK1MN947/S1NYvTv wFj0CR9dAjrLHUmA7tNaBU9T43khBTXz6FYgfH4M2xPJ9EALY22oJPC08NUBChdw NIhkUnbCT0p0tMT9NWeyFdgsitIq8SDJCoEzZk1YgjfCZZJ1OX0ZqK5EZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEnKdpzOT+29ybSPqi0aETPs2Ng0MB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvU2NwMm5NNVA3YjNKdEktcUxSb1JNLXpZMkRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubzUMA0G CSqGSIb3DQEBCwUAA4IBAQALqnzXa92Lv4O8qOjCsw3MZiZyx7nxxN6OrBP/5a2i xxbQcfR4cZlDHpUROiK9qe8u5xQ+BQ14rMefmK7CrkoWV5EccfDyRNZFJ1mhbYEb OGRpXEuGpZZ+9bYnUGDys0iPoQwQ2+9l3XZUYxyiQy+O0Sk8ahoLUdgK2DZbWps9 JUAY4FUBod5bAHFNK+qz7pD9Bt7u2Dmz7EVMUEO0VKw1ZtWexhiKTvhZidRNYRBQ lLsNigwKYFO3Yys09Vxfwy2qkZiAh8lGYnvDkHUFfpn5XbCk2HEY2VOg9ERxwvJ8 jgL4Opz6KKV5RtZNHWyZHXhmKT529lxTKEawhZYTZgeG -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:55 2026 by rpki-client