This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/sDq5U53kui-SouGQwvgx88wuoqc.roa File: sDq5U53kui-SouGQwvgx88wuoqc.roa (raw, json) Hash identifier: cLZsm7xp+yinJ4qALYPDYjVVs4ZwSgrcr5htqd8PthY= Subject key identifier: B0:3A:B9:53:9D:E4:BA:2F:92:A2:E1:90:C2:F8:31:F3:CC:2E:A2:A7 Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Certificate serial: 019BE56611F676298AD52D3DC863DA654FF1 Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/sDq5U53kui-SouGQwvgx88wuoqc.roa Signing time: Thu 22 Jan 2026 11:10:30 +0000 ROA not before: Thu 22 Jan 2026 11:10:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214366 IP address blocks: 157.173.24.0/24 maxlen: 24 2a07:cec0:4100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:66:11:f6:76:29:8a:d5:2d:3d:c8:63:da:65:4f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Validity Not Before: Jan 22 11:10:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b03ab9539de4ba2f92a2e190c2f831f3cc2ea2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:13:67:49:75:fe:0b:16:87:6c:1c:73:54:fe: 77:0a:ee:ca:8e:28:67:73:5d:f3:6b:16:1b:15:7b: f2:81:ae:53:20:05:38:3b:7e:a5:6d:f4:24:ff:88: 3d:2e:59:52:bb:0a:10:ee:62:7b:9c:c6:e0:63:0a: 99:c5:08:22:b2:9b:f6:85:f4:07:a6:69:52:73:41: 8f:88:3b:c4:fe:96:a3:30:ca:78:97:81:29:2a:c5: 6c:eb:18:a5:4a:fb:ae:db:de:3a:8d:0d:11:35:12: 6b:ba:27:86:55:c9:80:a7:33:89:18:8f:30:81:6a: 98:10:1b:96:76:43:b7:ee:e1:ee:cf:b8:57:c1:e1: 45:0c:1a:41:99:60:aa:b3:d0:39:4d:c4:68:dd:7b: c8:b5:d6:10:2f:ae:dd:d5:04:44:38:7b:05:d9:3c: b7:f1:94:1b:31:7c:57:9e:be:28:01:11:5e:18:ef: e7:21:78:65:11:17:a3:f9:26:dc:ce:fc:9d:38:e1: 16:43:7b:f1:ee:e9:bf:88:1b:c9:4f:d5:98:d6:66: 7a:1e:8d:a2:63:37:7e:59:28:64:c7:45:6f:74:54: 17:8f:ae:36:bd:91:e5:10:3d:45:45:56:c3:7b:b3: 45:3e:0c:57:28:18:17:4d:1b:c0:e6:ad:7a:fc:be: 54:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3A:B9:53:9D:E4:BA:2F:92:A2:E1:90:C2:F8:31:F3:CC:2E:A2:A7 X509v3 Authority Key Identifier: keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/sDq5U53kui-SouGQwvgx88wuoqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.173.24.0/24 IPv6: 2a07:cec0:4100::/48 Signature Algorithm: sha256WithRSAEncryption 35:48:39:b5:f6:ad:45:5b:ec:ae:8e:b3:79:f1:9a:c6:cf:62: 62:0f:62:3d:d1:37:86:5b:8f:b7:03:01:8b:99:d2:a4:5e:54: 9d:a8:92:41:85:a7:f6:a0:eb:4a:7a:bd:b9:18:41:77:d2:a7: 75:ee:70:fc:77:c5:2d:92:59:df:bf:3a:13:49:a0:68:62:df: e8:c0:4b:1e:5d:81:51:2b:43:04:d1:be:ef:a4:6c:2e:19:c1: be:e2:ff:8e:91:e2:7d:07:fd:6a:cc:d5:49:d1:81:e3:64:9a: 2e:4e:65:c4:eb:e5:56:b6:d2:5b:fa:16:98:8b:d8:d3:ff:18: 17:9c:a1:f5:7b:30:37:b1:c6:ca:a4:8e:89:bc:b5:66:d1:e7: 2c:70:b2:41:37:5e:d6:6f:cb:e1:a5:bd:9f:3c:0f:7d:02:e1: 66:69:aa:0d:87:a0:41:6f:fe:2c:dc:52:e9:70:b3:cb:8d:a1: 49:d3:62:2e:e3:26:55:a6:9b:eb:d1:a2:91:7d:01:71:6d:b4: b2:b7:65:58:aa:57:46:24:45:04:c8:c2:3b:98:55:b8:23:60: e0:b0:5e:58:77:ef:f2:4c:00:82:ef:51:b3:bc:08:20:6b:ec: 5b:54:9e:2f:ed:47:72:e8:54:1a:4e:56:f5:62:c9:72:15:e3: 34:47:ed:7c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZvlZhH2dimK1S09yGPaZU/xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4 NjFmYjIwHhcNMjYwMTIyMTExMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDNhYjk1MzlkZTRiYTJmOTJhMmUxOTBjMmY4MzFmM2NjMmVhMmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RNnSXX+CxaHbBxzVP53Cu7Kjihn c13zaxYbFXvyga5TIAU4O36lbfQk/4g9LllSuwoQ7mJ7nMbgYwqZxQgispv2hfQH pmlSc0GPiDvE/pajMMp4l4EpKsVs6xilSvuu2946jQ0RNRJruieGVcmApzOJGI8w gWqYEBuWdkO37uHuz7hXweFFDBpBmWCqs9A5TcRo3XvItdYQL67d1QREOHsF2Ty3 8ZQbMXxXnr4oARFeGO/nIXhlERej+SbczvydOOEWQ3vx7um/iBvJT9WY1mZ6Ho2i Yzd+WShkx0VvdFQXj642vZHlED1FRVbDe7NFPgxXKBgXTRvA5q16/L5UwQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLA6uVOd5LovkqLhkML4MfPMLqKnMB8GA1UdIwQY MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt MDEzZDJhMTFjMGE1LzEvc0RxNVU1M2t1aS1Tb3VHUXd2Z3g4OHd1b3FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1 LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAna0YMA8E AgACMAkDBwAqB87AQQAwDQYJKoZIhvcNAQELBQADggEBADVIObX2rUVb7K6Os3nx msbPYmIPYj3RN4Zbj7cDAYuZ0qReVJ2okkGFp/ag60p6vbkYQXfSp3XucPx3xS2S Wd+/OhNJoGhi3+jASx5dgVErQwTRvu+kbC4Zwb7i/46R4n0H/WrM1UnRgeNkmi5O ZcTr5Va20lv6FpiL2NP/GBecofV7MDexxsqkjom8tWbR5yxwskE3XtZvy+GlvZ88 D30C4WZpqg2HoEFv/izcUulws8uNoUnTYi7jJlWmm+vRopF9AXFttLK3ZViqV0Yk RQTIwjuYVbgjYOCwXlh37/JMAILvUbO8CCBr7FtUni/tR3LoVBpOVvViyXIV4zRH 7Xw= -----END CERTIFICATE-----Generated at Sun Jan 25 14:40:09 2026 by rpki-client