This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/SIaMK_IuBxRiq7kTvu-I3ZuWh4c.roa File: SIaMK_IuBxRiq7kTvu-I3ZuWh4c.roa (raw, json) Hash identifier: R6bwiZJPSxjQW8oQUMZiQejN/ZuXwmuCXceRWrrSn8c= Subject key identifier: 48:86:8C:2B:F2:2E:07:14:62:AB:B9:13:BE:EF:88:DD:9B:96:87:87 Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c Certificate serial: 019B7DC957E177B9988ED811F867BF0E215B Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/SIaMK_IuBxRiq7kTvu-I3ZuWh4c.roa Signing time: Fri 02 Jan 2026 08:18:25 +0000 ROA not before: Fri 02 Jan 2026 08:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60717 IP address blocks: 176.111.206.0/23 maxlen: 23 185.55.104.0/22 maxlen: 22 185.80.183.0/24 maxlen: 24 2a04:d340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:57:e1:77:b9:98:8e:d8:11:f8:67:bf:0e:21:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c Validity Not Before: Jan 2 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48868c2bf22e071462abb913beef88dd9b968787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:c8:42:1b:32:50:2e:e0:83:49:bf:1d:e8: 9d:a6:68:be:be:f8:c2:64:3f:a7:17:d5:6a:b5:83: 83:0c:71:eb:a9:2c:ea:c1:8a:9b:f2:61:57:b8:45: b1:a4:0d:58:00:b5:23:32:74:03:4c:ad:bb:bf:8c: b1:07:6d:62:ac:9b:ae:09:9c:df:fd:b5:43:cb:f1: 77:10:83:b5:3d:56:8e:25:82:68:bb:7c:84:d8:8f: 42:03:ef:e2:9e:fa:44:f3:82:04:26:85:94:d5:9f: ea:5b:85:e0:29:02:42:7c:fe:5d:ee:34:a2:38:a3: 7e:ba:09:7d:12:5e:f4:38:9d:3f:cd:d3:2e:bf:3c: f3:9c:2f:e9:6c:84:bc:d6:c0:c0:32:21:46:11:bf: 69:3e:79:8c:b1:35:09:d4:77:83:ce:75:8d:44:f3: f4:c1:6b:2b:62:6c:fe:33:58:a8:3f:83:36:22:66: 67:55:fb:b5:6d:3b:21:7b:83:90:67:db:80:9b:f2: 4c:c7:49:14:f5:c9:2c:2a:d4:ed:0b:b8:af:f4:54: 8e:43:f9:06:6e:2d:fc:d9:55:e8:e6:a3:12:15:3a: 35:03:20:9b:2f:ca:c4:58:d5:10:1c:1c:4b:fc:5d: d4:3e:b2:62:f3:f6:2a:d8:38:4a:8c:bf:14:96:d3: ea:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:86:8C:2B:F2:2E:07:14:62:AB:B9:13:BE:EF:88:DD:9B:96:87:87 X509v3 Authority Key Identifier: keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/SIaMK_IuBxRiq7kTvu-I3ZuWh4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.111.206.0/23 185.55.104.0/22 185.80.183.0/24 IPv6: 2a04:d340::/29 Signature Algorithm: sha256WithRSAEncryption ad:e0:4c:5e:83:39:da:4d:61:17:12:84:7f:47:4f:78:e3:60: de:71:3b:15:4e:97:4e:15:86:2c:87:19:3a:a0:f4:35:51:8f: 60:46:b2:2e:59:20:4f:22:3d:65:98:98:b1:29:92:0c:cc:13: 25:3b:22:ef:7c:c3:84:d2:b5:a2:42:b9:ce:c9:fb:bf:da:7b: c4:75:e5:d5:4e:b3:5d:4f:c7:2a:f1:f8:42:89:77:19:e9:b4: b5:29:be:cc:77:90:fc:12:46:4a:6f:2a:7a:d2:14:0b:99:14: a5:58:06:aa:ec:31:a5:25:b9:8d:ff:77:9b:84:50:56:ce:fa: 2d:55:a4:77:ef:40:45:33:17:5a:41:f7:70:f3:fe:3b:ee:8c: e2:66:ef:ef:3c:bd:75:af:3e:90:79:e0:03:36:2a:3b:c3:0c: 09:4d:a6:50:9a:63:18:32:43:6e:27:ba:13:4b:6b:01:cc:7e: ab:00:c1:64:18:0c:95:39:b7:4a:33:d3:8a:8c:3a:1c:ef:88: b4:1f:a8:99:21:61:bc:d0:d8:40:29:4e:a2:4b:45:1e:c0:9d: cd:a3:26:8c:b8:6d:12:65:84:39:05:49:dd:e5:5e:06:fc:6b: b0:93:5d:f3:49:5b:f5:f9:a0:f5:bb:e5:dd:f0:fd:3b:f1:3d: dc:dd:06:fb -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9yVfhd7mYjtgR+Ge/DiFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMGFkZTU0YzI3ZTZmY2RkYWNlMjYyYzRmZGY3OTBmMzIw ZmVkOWMwHhcNMjYwMTAyMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODg2OGMyYmYyMmUwNzE0NjJhYmI5MTNiZWVmODhkZDliOTY4Nzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF7IQhsyUC7gg0m/Heidpmi+vvjC ZD+nF9VqtYODDHHrqSzqwYqb8mFXuEWxpA1YALUjMnQDTK27v4yxB21irJuuCZzf /bVDy/F3EIO1PVaOJYJou3yE2I9CA+/invpE84IEJoWU1Z/qW4XgKQJCfP5d7jSi OKN+ugl9El70OJ0/zdMuvzzznC/pbIS81sDAMiFGEb9pPnmMsTUJ1HeDznWNRPP0 wWsrYmz+M1ioP4M2ImZnVfu1bTshe4OQZ9uAm/JMx0kU9cksKtTtC7iv9FSOQ/kG bi382VXo5qMSFTo1AyCbL8rEWNUQHBxL/F3UPrJi8/Yq2DhKjL8UltPqhwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFEiGjCvyLgcUYqu5E77viN2bloeHMB8GA1UdIwQY MBaAFE0K3lTCfm/N2s4mLE/feQ8yD+2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2It ODkyOTZjY2IzNWY1LzEvU0lhTUtfSXVCeFJpcTdrVHZ1LUkzWnVXaDRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2ItODkyOTZjY2IzNWY1 LzEvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBsG/OAwQC uTdoAwQAuVC3MA0EAgACMAcDBQMqBNNAMA0GCSqGSIb3DQEBCwUAA4IBAQCt4Exe gznaTWEXEoR/R09442DecTsVTpdOFYYshxk6oPQ1UY9gRrIuWSBPIj1lmJixKZIM zBMlOyLvfMOE0rWiQrnOyfu/2nvEdeXVTrNdT8cq8fhCiXcZ6bS1Kb7Md5D8EkZK byp60hQLmRSlWAaq7DGlJbmN/3ebhFBWzvotVaR370BFMxdaQfdw8/477oziZu/v PL11rz6QeeADNio7wwwJTaZQmmMYMkNuJ7oTS2sBzH6rAMFkGAyVObdKM9OKjDoc 74i0H6iZIWG80NhAKU6iS0UewJ3NoyaMuG0SZYQ5BUnd5V4G/Guwk13zSVv1+aD1 u+Xd8P078T3c3Qb7 -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:59 2026 by rpki-client