This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/SQ9ZxRxAMd1xoAu9tA2c2yS9YUQ.roa File: SQ9ZxRxAMd1xoAu9tA2c2yS9YUQ.roa (raw, json) Hash identifier: MYiap9ADnfYQb/YwxbWyM4PVhhzPTbhg8edINlxn310= Subject key identifier: 49:0F:59:C5:1C:40:31:DD:71:A0:0B:BD:B4:0D:9C:DB:24:BD:61:44 Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c Certificate serial: 019B7D5CAFB53E035D0910AF966C05C60E48 Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/SQ9ZxRxAMd1xoAu9tA2c2yS9YUQ.roa Signing time: Fri 02 Jan 2026 06:19:44 +0000 ROA not before: Fri 02 Jan 2026 06:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 91.234.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:af:b5:3e:03:5d:09:10:af:96:6c:05:c6:0e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c Validity Not Before: Jan 2 06:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=490f59c51c4031dd71a00bbdb40d9cdb24bd6144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:17:21:4e:d5:9a:b8:11:78:8f:71:f3:8f:e5: f8:03:aa:63:e5:ab:14:c1:c6:21:a5:0c:d1:a8:ef: 21:01:18:d9:8d:4e:0e:24:7d:51:b5:ee:9f:cd:a2: 2e:09:d8:25:d3:89:2f:dc:86:ff:cf:0c:17:78:0d: 32:53:d1:75:a6:19:a0:d7:f1:96:92:f9:d5:aa:26: fd:94:63:1c:bb:da:f0:b3:8e:98:79:ed:94:c4:6f: 92:b0:a1:ab:1e:b6:1f:b9:91:5d:4e:ef:43:9b:52: 90:e9:02:c5:12:f1:7b:a4:44:3d:9c:b9:70:bf:d4: d5:e8:93:9a:56:e1:3c:b9:8a:cd:83:7b:02:ad:72: 9c:7a:27:8e:6d:29:37:e6:81:07:c0:9b:b6:18:71: d4:84:08:db:9d:72:9f:b2:84:c9:21:43:16:2f:16: e9:9e:3f:56:9d:b5:15:28:63:85:80:e4:b4:c7:f7: 07:d2:a0:29:46:e1:4e:88:83:fc:75:78:5b:4c:f1: 85:97:35:ad:15:9c:89:dc:41:93:d1:bc:1e:89:90: 11:20:d5:cd:12:a4:2d:e9:f5:08:16:ce:d9:2e:99: fb:45:2f:c7:a4:aa:9d:cf:14:4f:ec:cc:5d:ca:2c: 3d:57:2f:8f:e4:9c:c1:91:ed:74:59:a7:85:cd:64: 2d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0F:59:C5:1C:40:31:DD:71:A0:0B:BD:B4:0D:9C:DB:24:BD:61:44 X509v3 Authority Key Identifier: keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/SQ9ZxRxAMd1xoAu9tA2c2yS9YUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.9.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:a7:aa:81:47:29:89:40:5c:57:96:8d:96:54:39:87:d3:91: e7:3d:b1:8d:7e:92:a6:80:e4:24:5a:50:9d:cb:f4:77:ef:c4: bf:4a:c2:70:0a:09:56:f7:a1:a7:0a:c6:b7:6d:d5:21:03:9d: 73:21:72:bd:1a:ca:b1:83:f5:33:78:50:dd:04:93:0d:bd:97: 1a:b4:e0:02:90:6f:e7:f6:9b:ea:8d:f1:86:e1:bc:10:73:8f: 73:96:cf:ed:ae:5f:e6:5e:7a:0e:75:32:bc:b5:b4:06:06:8d: 2b:23:ad:05:09:06:3d:f1:20:d3:8b:1e:46:14:19:2e:17:a4: 1a:97:a4:9b:06:87:4e:8d:d3:1b:b1:05:44:45:40:14:5e:1f: 94:9d:3f:60:c1:73:ce:49:17:fb:6f:6d:af:74:ec:31:0f:81: fc:cd:4e:c0:bb:51:5f:f2:65:d1:53:1c:ac:11:b1:f1:d6:66: fe:c2:9a:93:24:08:ae:c9:3b:c0:d7:4c:24:ad:52:3e:32:91: 3b:71:f4:ec:fb:09:7e:92:65:1c:a5:65:79:b0:b8:c8:20:9f: 11:4d:cc:d6:9a:85:b7:31:ee:f8:a0:20:bf:65:c3:5b:39:4d: 8f:dc:9d:08:94:01:39:c1:fc:3d:16:18:44:e7:d2:f3:98:e2: a2:cb:97:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XK+1PgNdCRCvlmwFxg5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNzE4MGM0YmFkM2NmNDI1YTUwNjcyZTFjYjdhOWQyYWM3 OGUyMGMwHhcNMjYwMTAyMDYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTBmNTljNTFjNDAzMWRkNzFhMDBiYmRiNDBkOWNkYjI0YmQ2MTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xchTtWauBF4j3Hzj+X4A6pj5asU wcYhpQzRqO8hARjZjU4OJH1Rte6fzaIuCdgl04kv3Ib/zwwXeA0yU9F1phmg1/GW kvnVqib9lGMcu9rws46Yee2UxG+SsKGrHrYfuZFdTu9Dm1KQ6QLFEvF7pEQ9nLlw v9TV6JOaVuE8uYrNg3sCrXKceieObSk35oEHwJu2GHHUhAjbnXKfsoTJIUMWLxbp nj9WnbUVKGOFgOS0x/cH0qApRuFOiIP8dXhbTPGFlzWtFZyJ3EGT0bweiZARINXN EqQt6fUIFs7ZLpn7RS/HpKqdzxRP7Mxdyiw9Vy+P5JzBke10WaeFzWQtBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEkPWcUcQDHdcaALvbQNnNskvWFEMB8GA1UdIwQY MBaAFM5xgMS6089CWlBnLhy3qdKseOIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQt MDQ2ZDJlMmFkY2Q1LzEvU1E5WnhSeEFNZDF4b0F1OXRBMmMyeVM5WVVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQtMDQ2ZDJlMmFkY2Q1 LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+oJMA0G CSqGSIb3DQEBCwUAA4IBAQCOp6qBRymJQFxXlo2WVDmH05HnPbGNfpKmgOQkWlCd y/R378S/SsJwCglW96GnCsa3bdUhA51zIXK9Gsqxg/UzeFDdBJMNvZcatOACkG/n 9pvqjfGG4bwQc49zls/trl/mXnoOdTK8tbQGBo0rI60FCQY98SDTix5GFBkuF6Qa l6SbBodOjdMbsQVERUAUXh+UnT9gwXPOSRf7b22vdOwxD4H8zU7Au1Ff8mXRUxys EbHx1mb+wpqTJAiuyTvA10wkrVI+MpE7cfTs+wl+kmUcpWV5sLjIIJ8RTczWmoW3 Me74oCC/ZcNbOU2P3J0IlAE5wfw9FhhE59LzmOKiy5cE -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:59 2026 by rpki-client