This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/sQ-PGm3V00xBDT0qqPPPgHHq11M.roa File: sQ-PGm3V00xBDT0qqPPPgHHq11M.roa (raw, json) Hash identifier: o5ucqRn0DHHqYoHJ+Qw03dH+VXUyTmU4LwJejoQASVA= Subject key identifier: B1:0F:8F:1A:6D:D5:D3:4C:41:0D:3D:2A:A8:F3:CF:80:71:EA:D7:53 Certificate issuer: /CN=d44de659759b0274124a7b481d0976840b7ade06 Certificate serial: 019B7BA32FE3E4CBEFE25CAC04884A9E7AAC Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/sQ-PGm3V00xBDT0qqPPPgHHq11M.roa Signing time: Thu 01 Jan 2026 22:17:30 +0000 ROA not before: Thu 01 Jan 2026 22:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51793 IP address blocks: 37.143.160.0/23 maxlen: 23 2a03:8f87:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:2f:e3:e4:cb:ef:e2:5c:ac:04:88:4a:9e:7a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06 Validity Not Before: Jan 1 22:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b10f8f1a6dd5d34c410d3d2aa8f3cf8071ead753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:49:d6:32:31:ab:9b:ea:6a:23:d7:fc:60: 4e:a8:df:ba:d6:28:f5:b8:02:2e:fd:0e:35:96:ff: 67:69:58:2c:25:ea:a0:45:11:78:bd:18:1d:45:9c: be:5b:04:08:e3:c5:1a:8f:0f:82:46:d0:01:1b:85: b4:56:0c:f1:6a:71:95:01:87:9c:74:81:0d:66:09: 1e:e0:4f:c1:c7:cf:a7:24:c3:1b:9c:8d:94:0e:6c: 73:6a:2a:c5:cb:db:cc:79:b1:8b:a0:c4:d7:f3:80: 02:7d:dc:77:7f:19:27:56:2b:cf:ef:e5:ac:34:80: 73:07:55:dd:ec:b0:29:b0:7c:6a:18:1d:78:ae:6b: b4:e4:1c:14:03:45:d7:92:7e:d6:da:e6:f6:59:bc: 30:75:4a:e5:af:1b:a1:f5:c6:00:9f:c1:ff:e3:c9: 95:cd:f8:d6:48:1c:a2:c2:e9:b7:5f:d5:6a:a8:24: fe:ee:27:20:1c:4b:2e:9c:41:91:c5:44:b6:a5:73: 2b:4d:5f:db:bf:0f:22:a9:cd:d9:bf:ed:cc:93:eb: 0d:ba:63:80:bd:94:37:0d:b2:19:72:17:f2:8f:c9: 0d:50:c4:db:b4:66:2e:1c:2e:4a:07:73:8e:ac:f3: 36:10:b7:04:d7:3d:3d:f9:a9:de:05:69:37:e2:55: 1d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0F:8F:1A:6D:D5:D3:4C:41:0D:3D:2A:A8:F3:CF:80:71:EA:D7:53 X509v3 Authority Key Identifier: keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/sQ-PGm3V00xBDT0qqPPPgHHq11M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.143.160.0/23 IPv6: 2a03:8f87:1::/48 Signature Algorithm: sha256WithRSAEncryption 1a:74:5b:a0:b9:77:9d:db:2c:72:ab:33:e1:2e:da:58:ba:76: 5b:44:7d:d1:d7:6b:1c:85:d1:31:c2:6e:17:04:ff:cb:0b:8e: ec:ba:19:e5:b4:86:dc:5f:68:f8:26:41:6b:b7:a2:2b:ea:8c: 0e:da:a3:e2:86:e1:7b:a6:86:71:61:6e:64:72:57:59:ea:f7: b5:87:f2:db:46:fb:95:61:fd:ad:51:e5:11:a2:9a:2e:c9:dc: ff:36:7c:c2:b9:b6:a3:72:ce:9d:95:e0:f3:e5:4c:ac:e8:eb: e7:ac:5c:a7:c0:54:ed:2e:bb:97:e5:32:c5:82:1f:da:15:ac: 25:08:b2:3f:f6:3d:16:1b:24:5f:e5:5a:be:a6:d1:0e:c0:89: e0:a0:5f:21:2b:58:9c:3d:90:40:10:11:e2:42:70:85:e1:72: 71:84:59:6c:00:52:13:ba:d1:b3:7e:8d:d9:a8:d0:31:47:98: 3f:4d:f1:8c:46:f5:42:3b:34:1d:7d:44:da:c8:e3:6f:36:cf: d9:b9:df:85:b5:04:cf:7a:a9:b0:ac:12:3d:02:0c:ca:e1:bc: 58:64:fc:de:b3:1b:a9:ee:b5:d9:f0:38:5f:90:13:48:95:8d: 6d:f9:31:46:c7:85:e2:f2:a4:2a:21:e7:ac:14:fc:70:93:70: d8:a5:db:f0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7oy/j5Mvv4lysBIhKnnqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NGRlNjU5NzU5YjAyNzQxMjRhN2I0ODFkMDk3Njg0MGI3 YWRlMDYwHhcNMjYwMTAxMjIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTBmOGYxYTZkZDVkMzRjNDEwZDNkMmFhOGYzY2Y4MDcxZWFkNzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdxJ1jIxq5vqaiPX/GBOqN+61ij1 uAIu/Q41lv9naVgsJeqgRRF4vRgdRZy+WwQI48Uajw+CRtABG4W0VgzxanGVAYec dIENZgke4E/Bx8+nJMMbnI2UDmxzairFy9vMebGLoMTX84ACfdx3fxknVivP7+Ws NIBzB1Xd7LApsHxqGB14rmu05BwUA0XXkn7W2ub2WbwwdUrlrxuh9cYAn8H/48mV zfjWSByiwum3X9VqqCT+7icgHEsunEGRxUS2pXMrTV/bvw8iqc3Zv+3Mk+sNumOA vZQ3DbIZchfyj8kNUMTbtGYuHC5KB3OOrPM2ELcE1z09+aneBWk34lUdpwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLEPjxpt1dNMQQ09Kqjzz4Bx6tdTMB8GA1UdIwQY MBaAFNRN5ll1mwJ0Ekp7SB0JdoQLet4GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUUzbVdYV2JBblFTU250SUhRbDJoQXQ2M2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83NTIxNmQtNjg0Yi00N2NjLWE5NWUt ZGI0ZDM5ZGM0ZWM3LzEvc1EtUEdtM1YwMHhCRFQwcXFQUFBnSEhxMTFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy83NTIxNmQtNjg0Yi00N2NjLWE5NWUtZGI0ZDM5ZGM0ZWM3 LzEvMUUzbVdYV2JBblFTU250SUhRbDJoQXQ2M2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBJY+gMA8E AgACMAkDBwAqA4+HAAEwDQYJKoZIhvcNAQELBQADggEBABp0W6C5d53bLHKrM+Eu 2li6dltEfdHXaxyF0THCbhcE/8sLjuy6GeW0htxfaPgmQWu3oivqjA7ao+KG4Xum hnFhbmRyV1nq97WH8ttG+5Vh/a1R5RGimi7J3P82fMK5tqNyzp2V4PPlTKzo6+es XKfAVO0uu5flMsWCH9oVrCUIsj/2PRYbJF/lWr6m0Q7AieCgXyErWJw9kEAQEeJC cIXhcnGEWWwAUhO60bN+jdmo0DFHmD9N8YxG9UI7NB19RNrI4282z9m534W1BM96 qbCsEj0CDMrhvFhk/N6zG6nutdnwOF+QE0iVjW35MUbHheLypCoh56wU/HCTcNil 2/A= -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:49 2026 by rpki-client