This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/sq7d7j6Ll-c_n51y9g5sD3aC3pE.roa File: sq7d7j6Ll-c_n51y9g5sD3aC3pE.roa (raw, json) Hash identifier: be+6ZZf9ONJycKOxIJ6onZ/JKAQonZaE9BDfNxiECl8= Subject key identifier: B2:AE:DD:EE:3E:8B:97:E7:3F:9F:9D:72:F6:0E:6C:0F:76:82:DE:91 Certificate issuer: /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7 Certificate serial: 019B76EB3ED411DA063A7EA752C1FC7D9371 Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/sq7d7j6Ll-c_n51y9g5sD3aC3pE.roa Signing time: Thu 01 Jan 2026 00:18:07 +0000 ROA not before: Thu 01 Jan 2026 00:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209859 IP address blocks: 2001:67c:1768::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3e:d4:11:da:06:3a:7e:a7:52:c1:fc:7d:93:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7 Validity Not Before: Jan 1 00:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2aeddee3e8b97e73f9f9d72f60e6c0f7682de91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5e:a0:09:17:eb:c1:1f:1e:e4:52:10:98:c4: 95:19:bc:de:d3:c8:e5:33:2f:4a:53:96:f3:16:da: 10:97:e2:06:27:c8:76:13:73:f9:e5:dc:91:8c:c1: a4:08:38:ff:a9:2d:a8:7e:d2:a2:62:79:05:a4:74: 4f:d3:cb:d6:e1:f5:c6:e7:d6:96:98:35:b4:99:67: 74:4d:9c:90:06:ae:cb:59:f1:78:6f:22:44:48:40: 6d:e4:6c:9c:0b:a5:07:bf:8d:0b:6d:be:37:0f:48: 26:b8:16:63:54:b6:40:97:28:48:2c:d8:4b:32:f6: 75:a1:d8:4e:b8:06:bb:cb:ee:13:00:75:e8:34:59: 74:90:82:03:03:17:1c:0f:0e:46:ca:7c:d3:82:ee: af:c2:d3:b6:f9:7d:d5:cf:eb:1c:09:37:fe:12:b5: 25:6c:42:1f:82:78:aa:ef:38:75:04:c3:d4:99:06: ce:78:77:a7:b5:67:d0:42:61:0a:91:0f:e5:dd:07: 8b:5d:1b:3c:dc:e3:9e:0d:81:9a:7c:a2:62:41:2f: 6c:fd:f1:55:e9:a0:01:f1:16:fe:5e:1b:a3:3f:b7: b6:02:bf:be:ba:7b:a7:9e:cd:46:1f:96:3d:e6:7a: 1e:b0:2e:db:f8:ee:85:fc:77:e0:55:81:59:91:90: 78:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AE:DD:EE:3E:8B:97:E7:3F:9F:9D:72:F6:0E:6C:0F:76:82:DE:91 X509v3 Authority Key Identifier: keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/sq7d7j6Ll-c_n51y9g5sD3aC3pE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1768::/48 Signature Algorithm: sha256WithRSAEncryption 27:68:6e:9a:43:e7:72:4b:33:96:be:d0:dd:fb:f3:2d:7a:69: e8:c4:d6:0e:73:5c:69:0f:d4:93:a8:55:ed:54:ed:7b:53:34: 37:78:9d:9f:58:00:4c:bf:f0:0a:53:7b:3d:ff:c4:fd:c5:ef: f5:5b:bd:9a:18:f5:49:7f:ec:b3:a3:61:f3:7e:17:44:49:d5: 66:02:1d:e2:89:19:30:ab:33:a3:f2:b1:21:91:cd:d8:9e:e3: 7c:ce:3a:7d:bc:99:75:1e:f5:7e:c6:cd:0b:a3:f4:a8:12:7f: 40:50:77:5a:08:e2:e5:f2:06:a1:28:7a:ed:46:2c:de:e0:22: 91:12:aa:38:bf:8f:4f:5e:1c:7b:85:99:a6:76:eb:51:0c:ff: c7:a4:95:cf:a2:14:c8:c7:cc:99:c9:b8:49:a8:b9:db:b3:b0: 7a:11:fc:88:24:0f:5e:4a:87:9b:58:ec:e6:8b:a9:9b:e8:16: ff:f9:48:c4:e6:35:d2:6e:56:d3:11:12:da:5d:67:5d:70:aa: 24:c9:e2:40:e1:58:13:74:5a:90:6e:76:9c:f8:05:3e:fb:c9: 41:e0:9b:aa:b3:b5:2a:c2:88:92:11:bb:92:37:aa:90:c5:1a: fd:c4:7c:f6:f2:23:e4:e1:8c:ee:43:df:d5:4f:b9:ae:39:7a: 46:96:91:46 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt26z7UEdoGOn6nUsH8fZNxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMjVlZjRkYzlkM2VjZGY0ODY2NTVjMmRkMjMxZTljYmJi MGEwYjcwHhcNMjYwMTAxMDAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmFlZGRlZTNlOGI5N2U3M2Y5ZjlkNzJmNjBlNmMwZjc2ODJkZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr16gCRfrwR8e5FIQmMSVGbze08jl My9KU5bzFtoQl+IGJ8h2E3P55dyRjMGkCDj/qS2oftKiYnkFpHRP08vW4fXG59aW mDW0mWd0TZyQBq7LWfF4byJESEBt5GycC6UHv40Lbb43D0gmuBZjVLZAlyhILNhL MvZ1odhOuAa7y+4TAHXoNFl0kIIDAxccDw5GynzTgu6vwtO2+X3Vz+scCTf+ErUl bEIfgniq7zh1BMPUmQbOeHentWfQQmEKkQ/l3QeLXRs83OOeDYGafKJiQS9s/fFV 6aAB8Rb+XhujP7e2Ar++ununns1GH5Y95noesC7b+O6F/HfgVYFZkZB43wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLKu3e4+i5fnP5+dcvYObA92gt6RMB8GA1UdIwQY MBaAFMEl703J0+zfSGZVwt0jHpy7sKC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEt ZTc0NGM1YmVmNTYxLzEvc3E3ZDdqNkxsLWNfbjUxeTlnNXNEM2FDM3BFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEtZTc0NGM1YmVmNTYx LzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBdo MA0GCSqGSIb3DQEBCwUAA4IBAQAnaG6aQ+dySzOWvtDd+/MtemnoxNYOc1xpD9ST qFXtVO17UzQ3eJ2fWABMv/AKU3s9/8T9xe/1W72aGPVJf+yzo2HzfhdESdVmAh3i iRkwqzOj8rEhkc3YnuN8zjp9vJl1HvV+xs0Lo/SoEn9AUHdaCOLl8gahKHrtRize 4CKREqo4v49PXhx7hZmmdutRDP/HpJXPohTIx8yZybhJqLnbs7B6EfyIJA9eSoeb WOzmi6mb6Bb/+UjE5jXSblbTERLaXWddcKokyeJA4VgTdFqQbnac+AU++8lB4Juq s7UqwoiSEbuSN6qQxRr9xHz28iPk4YzuQ9/VT7muOXpGlpFG -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:21 2026 by rpki-client