This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/Sq8500KhQRP1l10Z1msF9d2ysQw.roa File: Sq8500KhQRP1l10Z1msF9d2ysQw.roa (raw, json) Hash identifier: ReVbiMOhRmv6RCWB0b28trkVO+ZZwLBYu/yBa/+30Dw= Subject key identifier: 4A:AF:39:D3:42:A1:41:13:F5:97:5D:19:D6:6B:05:F5:DD:B2:B1:0C Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43 Certificate serial: 019B7A5AD5E1B4DAE8CD8AEA343F8C11FA11 Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/Sq8500KhQRP1l10Z1msF9d2ysQw.roa Signing time: Thu 01 Jan 2026 16:18:51 +0000 ROA not before: Thu 01 Jan 2026 16:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208041 IP address blocks: 85.155.248.0/22 maxlen: 22 185.222.4.0/22 maxlen: 22 185.222.4.0/24 maxlen: 24 185.222.5.0/24 maxlen: 24 185.222.6.0/24 maxlen: 24 185.222.7.0/24 maxlen: 24 193.160.10.0/23 maxlen: 23 193.160.14.0/23 maxlen: 23 2a0c:8440::/48 maxlen: 48 2a0f:d180::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d5:e1:b4:da:e8:cd:8a:ea:34:3f:8c:11:fa:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43 Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4aaf39d342a14113f5975d19d66b05f5ddb2b10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:90:7d:a6:14:61:22:9e:54:2b:23:51:93: 7c:34:b9:dc:ed:19:a4:89:92:ab:88:4b:ee:2f:39: 7d:a2:42:14:df:d0:51:12:60:f3:3e:41:e1:9a:f3: d7:78:72:5e:65:ef:f1:5c:35:da:56:02:e9:d9:8b: be:76:f2:7f:b5:c2:45:a4:66:9a:58:78:84:69:21: c4:7f:a1:61:44:73:11:83:5a:6a:02:68:a1:dd:d6: af:f4:ab:5b:b4:67:10:a9:bd:05:f2:57:7c:52:8f: 17:8a:fd:cd:99:02:47:a5:32:dd:43:eb:8d:11:84: f9:ac:f1:3c:cf:19:db:82:27:df:9e:5d:f6:96:11: 3b:2d:04:c4:26:dc:1d:13:3a:60:d4:52:cb:ad:ab: 4e:65:62:64:a2:12:7c:da:da:8e:6f:de:ac:52:65: 72:5a:0d:4a:55:7a:07:f2:e1:3b:5d:5d:5c:8d:07: ef:e0:df:0a:0e:ba:0a:59:33:62:f9:3e:6f:1f:13: 00:2e:11:9b:69:ff:1e:9d:db:a1:37:36:69:e5:f0: 31:f9:6f:75:c3:3c:4c:40:a5:dd:e8:66:fd:dd:ac: 53:6a:ca:fb:f4:5a:79:35:1c:62:a0:65:2b:80:a6: e5:84:fc:a2:19:7a:c6:46:8e:83:8a:b3:ff:3d:46: 15:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AF:39:D3:42:A1:41:13:F5:97:5D:19:D6:6B:05:F5:DD:B2:B1:0C X509v3 Authority Key Identifier: keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/Sq8500KhQRP1l10Z1msF9d2ysQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.155.248.0/22 185.222.4.0/22 193.160.10.0/23 193.160.14.0/23 IPv6: 2a0c:8440::/48 2a0f:d180::/29 Signature Algorithm: sha256WithRSAEncryption 2d:14:48:2c:5e:d2:86:6e:92:15:e8:51:7a:3f:c3:2d:94:41: 9e:5b:3b:a6:1b:a5:6e:01:f4:4d:5b:fa:24:69:11:be:70:28: 36:5e:d4:38:29:d6:32:b1:2d:d7:6c:9c:e1:a0:88:39:2b:8c: 47:62:60:2b:63:c4:8c:5b:69:da:06:ea:85:f0:e3:6b:0a:ec: cc:43:ef:be:b7:18:20:6f:a4:f8:ec:a7:bf:1e:e4:20:ad:92: 4e:fb:40:2c:bc:36:84:c9:8b:11:4c:31:00:0a:06:4a:b1:ac: 7c:28:c3:c4:f4:d2:14:77:69:3a:35:ed:07:f5:a8:35:d9:5a: 69:8d:51:8a:53:83:ce:2d:e9:e2:63:d3:6c:9b:70:3a:fb:e8: 09:eb:a2:a0:b0:1b:26:86:9d:89:5e:69:8d:fe:59:a8:b9:17: e8:4b:ee:59:cc:5e:cb:56:29:8b:02:e7:1c:34:bb:bb:ff:63: d1:7f:55:99:f6:db:8e:7d:bb:52:b4:be:29:46:83:12:a4:f5: e9:f0:bc:ad:70:1f:84:55:99:d1:c0:e0:49:7e:82:e4:d2:34: 40:89:68:51:83:93:ef:56:15:6c:39:2d:fa:ac:0e:f1:7c:ad: 82:6d:44:8a:9a:d7:d8:49:aa:f9:1b:4d:4b:75:ae:df:e8:b1: cb:d5:37:2a -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt6WtXhtNrozYrqND+MEfoRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MWVjYzFhNzRjZjkyYWI2MTljNWY3MTAxMjM5MzdjZTUw ZDljNDMwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWFmMzlkMzQyYTE0MTEzZjU5NzVkMTlkNjZiMDVmNWRkYjJiMTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUuQfaYUYSKeVCsjUZN8NLnc7Rmk iZKriEvuLzl9okIU39BREmDzPkHhmvPXeHJeZe/xXDXaVgLp2Yu+dvJ/tcJFpGaa WHiEaSHEf6FhRHMRg1pqAmih3dav9KtbtGcQqb0F8ld8Uo8Xiv3NmQJHpTLdQ+uN EYT5rPE8zxnbgiffnl32lhE7LQTEJtwdEzpg1FLLratOZWJkohJ82tqOb96sUmVy Wg1KVXoH8uE7XV1cjQfv4N8KDroKWTNi+T5vHxMALhGbaf8enduhNzZp5fAx+W91 wzxMQKXd6Gb93axTasr79Fp5NRxioGUrgKblhPyiGXrGRo6DirP/PUYVZQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFEqvOdNCoUET9ZddGdZrBfXdsrEMMB8GA1UdIwQY MBaAFFgezBp0z5KrYZxfcQEjk3zlDZxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0I3TUduVFBrcXRobkY5eEFTT1RmT1VObkVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jNzFkYWYtZGQ2Ni00MWQ4LWIwNGYt ZGE4OGI2YmRiMzE2LzEvU3E4NTAwS2hRUlAxbDEwWjFtc0Y5ZDJ5c1F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9jNzFkYWYtZGQ2Ni00MWQ4LWIwNGYtZGE4OGI2YmRiMzE2 LzEvV0I3TUduVFBrcXRobkY5eEFTT1RmT1VObkVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAeBAIAATAYAwQCVZv4AwQC ud4EAwQBwaAKAwQBwaAOMBYEAgACMBADBwAqDIRAAAADBQMqD9GAMA0GCSqGSIb3 DQEBCwUAA4IBAQAtFEgsXtKGbpIV6FF6P8MtlEGeWzumG6VuAfRNW/okaRG+cCg2 XtQ4KdYysS3XbJzhoIg5K4xHYmArY8SMW2naBuqF8ONrCuzMQ+++txggb6T47Ke/ HuQgrZJO+0AsvDaEyYsRTDEACgZKsax8KMPE9NIUd2k6Ne0H9ag12VppjVGKU4PO LeniY9Nsm3A6++gJ66KgsBsmhp2JXmmN/lmouRfoS+5ZzF7LVimLAuccNLu7/2PR f1WZ9tuOfbtStL4pRoMSpPXp8LytcB+EVZnRwOBJfoLk0jRAiWhRg5PvVhVsOS36 rA7xfK2CbUSKmtfYSar5G01Lda7f6LHL1Tcq -----END CERTIFICATE-----Generated at Mon Jan 26 11:06:01 2026 by rpki-client