This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/scmHvFPvVyV9IKgskiPXIFZZliA.roa File: scmHvFPvVyV9IKgskiPXIFZZliA.roa (raw, json) Hash identifier: x+i//mSRz34wAqe4SEf89qg0Z8YDvymsxjLahBkl1LM= Subject key identifier: B1:C9:87:BC:53:EF:57:25:7D:20:A8:2C:92:23:D7:20:56:59:96:20 Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019B79ED4E7C5E4ABDFD228A28B236DB1278 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/scmHvFPvVyV9IKgskiPXIFZZliA.roa Signing time: Thu 01 Jan 2026 14:19:13 +0000 ROA not before: Thu 01 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41959 IP address blocks: 185.125.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4e:7c:5e:4a:bd:fd:22:8a:28:b2:36:db:12:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Jan 1 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1c987bc53ef57257d20a82c9223d72056599620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:8f:e1:bf:09:30:f7:39:03:ce:b5:1b:ff: 34:25:d0:73:47:fc:65:e0:c8:80:a2:b3:36:67:c8: 45:78:e4:f7:02:6e:35:6f:43:60:1f:e0:23:27:8a: fa:47:c0:5d:45:ae:f4:0c:81:d3:47:3a:37:a6:7a: d0:07:30:b9:79:dc:0d:8a:8a:7c:b9:3e:3c:db:f8: c0:65:fa:87:29:c6:32:4d:e3:24:fa:60:d2:08:9c: 18:ff:21:38:cf:d2:12:20:08:a3:f3:4c:fd:04:38: ac:5a:96:c6:77:74:6f:0d:8d:d6:0d:0c:6a:26:60: 50:0c:bc:96:e9:e0:4e:44:ce:41:44:a3:d5:4e:2a: 9e:24:76:e6:4b:2b:32:29:f9:37:b7:df:45:82:90: e5:33:a7:78:48:22:5e:27:1c:7c:b7:c4:4d:ca:22: e5:d9:88:92:d3:30:70:77:0c:49:aa:96:70:36:e3: 9d:6c:43:3b:87:6b:0f:24:35:ad:74:d6:7e:f0:e6: 0b:de:d5:4c:ce:6b:2e:ee:cd:28:0e:dc:ea:5f:83: c7:b5:2d:6b:69:c6:fa:5e:d3:8e:bc:d7:2e:01:d9: d1:b9:d3:ce:07:06:dd:29:7c:f3:11:02:29:24:ca: ac:ec:50:2b:49:4d:f5:66:0d:8c:5a:e4:27:99:99: 76:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C9:87:BC:53:EF:57:25:7D:20:A8:2C:92:23:D7:20:56:59:96:20 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/scmHvFPvVyV9IKgskiPXIFZZliA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.6.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:e5:b8:b6:fc:50:36:bb:e2:a9:69:d0:04:4f:83:59:6b:95: c1:bd:e5:2e:fe:c9:99:f3:5d:ec:35:d8:5c:03:a7:ce:c9:30: e9:4d:23:ea:14:3b:76:1b:ef:3f:a9:c0:1b:09:4d:66:82:b1: 25:f6:44:e8:cb:58:de:42:91:88:ca:96:e4:9f:9c:4c:be:9a: af:1e:0d:96:96:bd:12:09:ce:34:9a:a6:a8:78:f2:41:4d:8c: 68:a2:e8:19:4c:cf:fa:44:60:d9:c1:75:44:40:4b:ec:28:7d: c2:b3:55:7f:c0:a1:8f:48:36:fa:a9:2c:dd:42:fe:76:32:d5: df:40:a4:e8:57:12:2c:fa:91:04:ea:cc:e1:fc:e6:6e:f2:a1: ec:21:93:ec:9a:2d:00:8a:6f:31:0f:93:9a:bb:19:b0:cf:eb: ae:b4:07:e5:a1:fa:ea:ca:e6:71:a0:74:24:7c:59:15:52:81: 3f:d2:87:9b:b2:eb:67:1b:ae:83:68:0b:df:da:f0:01:af:a0: d2:88:0d:b5:35:ba:ea:1b:67:15:bc:6d:ae:d1:56:51:54:25: 23:a8:88:35:1b:2d:e5:8b:cf:86:13:8a:48:da:86:d7:c6:df: d8:31:c6:7e:54:9d:54:3c:b0:bc:b9:9c:9d:dd:97:17:87:b6: a5:74:1f:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57U58Xkq9/SKKKLI22xJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwMTAxMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWM5ODdiYzUzZWY1NzI1N2QyMGE4MmM5MjIzZDcyMDU2NTk5NjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxviP4b8JMPc5A861G/80JdBzR/xl 4MiAorM2Z8hFeOT3Am41b0NgH+AjJ4r6R8BdRa70DIHTRzo3pnrQBzC5edwNiop8 uT482/jAZfqHKcYyTeMk+mDSCJwY/yE4z9ISIAij80z9BDisWpbGd3RvDY3WDQxq JmBQDLyW6eBORM5BRKPVTiqeJHbmSysyKfk3t99FgpDlM6d4SCJeJxx8t8RNyiLl 2YiS0zBwdwxJqpZwNuOdbEM7h2sPJDWtdNZ+8OYL3tVMzmsu7s0oDtzqX4PHtS1r acb6XtOOvNcuAdnRudPOBwbdKXzzEQIpJMqs7FArSU31Zg2MWuQnmZl2OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLHJh7xT71clfSCoLJIj1yBWWZYgMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvc2NtSHZGUHZWeVY5SUtnc2tpUFhJRlpabGlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX0GMA0G CSqGSIb3DQEBCwUAA4IBAQAP5bi2/FA2u+KpadAET4NZa5XBveUu/smZ813sNdhc A6fOyTDpTSPqFDt2G+8/qcAbCU1mgrEl9kToy1jeQpGIypbkn5xMvpqvHg2Wlr0S Cc40mqaoePJBTYxoougZTM/6RGDZwXVEQEvsKH3Cs1V/wKGPSDb6qSzdQv52MtXf QKToVxIs+pEE6szh/OZu8qHsIZPsmi0Aim8xD5Oauxmwz+uutAflofrqyuZxoHQk fFkVUoE/0oebsutnG66DaAvf2vABr6DSiA21NbrqG2cVvG2u0VZRVCUjqIg1Gy3l i8+GE4pI2obXxt/YMcZ+VJ1UPLC8uZyd3ZcXh7aldB85 -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:53 2026 by rpki-client