This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/SPQxl-sIx_CmX8izrtv12Y7kVyA.roa File: SPQxl-sIx_CmX8izrtv12Y7kVyA.roa (raw, json) Hash identifier: QFkpuPufNbHEesw8O151p6FVQDRuzn4BSiF8hTA4/X4= Subject key identifier: 48:F4:31:97:EB:08:C7:F0:A6:5F:C8:B3:AE:DB:F5:D9:8E:E4:57:20 Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c Certificate serial: 019B7C1275156C761BE782AEA1406E5C4D96 Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/SPQxl-sIx_CmX8izrtv12Y7kVyA.roa Signing time: Fri 02 Jan 2026 00:19:02 +0000 ROA not before: Fri 02 Jan 2026 00:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204969 IP address blocks: 185.234.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:75:15:6c:76:1b:e7:82:ae:a1:40:6e:5c:4d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c Validity Not Before: Jan 2 00:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48f43197eb08c7f0a65fc8b3aedbf5d98ee45720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:fa:1e:bb:b6:ae:97:46:bd:f3:71:fe:62: 4a:36:d8:36:9e:38:5f:33:70:03:0e:ff:ef:84:be: d3:ac:6a:83:07:5d:bc:c0:d3:5d:6b:56:5f:7d:d9: ae:18:44:07:6c:18:77:1d:ab:11:09:92:71:48:d7: a1:67:5a:8e:6d:70:1f:69:e5:ca:0b:a6:c6:c2:81: 73:28:0c:d8:8a:af:43:6a:f1:de:2f:6f:b1:79:e6: de:5e:39:bf:63:d7:20:c7:b0:1b:59:fd:3f:7e:2a: 5a:c2:5f:dd:28:73:ec:a3:bb:77:c0:7e:5d:78:a9: c9:20:81:7a:73:f5:4d:33:6b:41:39:ed:e6:d1:5d: 72:31:bd:cf:24:ee:88:6a:0f:4f:27:df:64:bc:95: ca:96:d3:30:67:1f:2a:e0:b7:ef:17:c9:d9:79:31: 45:3f:f8:17:80:5b:b5:66:6c:3e:a4:e7:d2:30:de: c3:23:a5:e0:b8:12:93:bd:ad:aa:ea:29:f2:48:c3: a5:f0:ec:6a:5e:00:e6:9d:64:55:b3:51:64:bb:02: c4:ce:55:4c:5e:31:59:e2:31:32:5d:74:7b:ff:ae: fc:cb:e9:88:51:8c:fc:dc:68:6a:57:29:f3:9e:e5: 57:5e:32:08:68:a3:57:24:0e:3d:18:67:7f:bc:13: 1a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F4:31:97:EB:08:C7:F0:A6:5F:C8:B3:AE:DB:F5:D9:8E:E4:57:20 X509v3 Authority Key Identifier: keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/SPQxl-sIx_CmX8izrtv12Y7kVyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.234.104.0/22 Signature Algorithm: sha256WithRSAEncryption 43:30:c7:6e:b1:b3:68:57:ab:3b:81:1b:fc:0e:eb:0c:65:0f: ad:d5:03:bd:62:aa:dc:66:4d:ba:84:36:f6:f6:45:35:f6:14: 42:05:65:0b:df:ba:01:38:13:66:39:5d:09:c2:35:14:98:9d: af:e3:dd:38:94:45:bd:9c:18:d9:08:a3:97:08:49:33:05:e6: 54:81:a8:3f:b8:69:01:ae:50:7f:28:f9:62:31:c1:cd:61:ee: bb:5e:88:8b:97:f8:e1:53:cb:1f:4d:c2:6d:e5:12:f0:16:c0: ac:b9:fe:49:3d:2a:ae:18:34:15:e1:9e:7b:43:f9:f8:fe:83: bf:6d:12:14:cc:b7:81:cc:c5:ca:ac:21:d0:d3:ac:2d:22:c5: 0d:18:2c:73:40:8a:ef:75:12:22:41:76:28:0e:0a:c3:1b:c0: 53:f1:ae:12:9d:31:e9:ef:cb:f2:d8:8a:03:86:47:31:52:44: 4e:ce:00:59:82:fd:07:35:26:ef:42:a5:89:15:87:14:f9:83: 9f:b5:75:64:95:4f:84:60:fa:71:0c:58:73:20:b3:6a:44:48: 08:f0:58:bc:38:ae:56:c8:16:d2:2a:ae:bc:36:94:80:31:b9: f8:c6:dd:11:f4:e7:86:ad:d2:de:fc:ef:69:54:4c:b9:91:00: 9f:b9:0c:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EnUVbHYb54KuoUBuXE2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MzY5MmYyYTFkMWJjNzZmZjdmOWQyOTA5MWJlZGEwOGI3 YmM5NmMwHhcNMjYwMTAyMDAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGY0MzE5N2ViMDhjN2YwYTY1ZmM4YjNhZWRiZjVkOThlZTQ1NzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/H6Hru2rpdGvfNx/mJKNtg2njhf M3ADDv/vhL7TrGqDB128wNNda1ZffdmuGEQHbBh3HasRCZJxSNehZ1qObXAfaeXK C6bGwoFzKAzYiq9DavHeL2+xeebeXjm/Y9cgx7AbWf0/fipawl/dKHPso7t3wH5d eKnJIIF6c/VNM2tBOe3m0V1yMb3PJO6Iag9PJ99kvJXKltMwZx8q4LfvF8nZeTFF P/gXgFu1Zmw+pOfSMN7DI6XguBKTva2q6inySMOl8OxqXgDmnWRVs1FkuwLEzlVM XjFZ4jEyXXR7/678y+mIUYz83GhqVynznuVXXjIIaKNXJA49GGd/vBMaNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEj0MZfrCMfwpl/Is67b9dmO5FcgMB8GA1UdIwQY MBaAFAQ2kvKh0bx2/3+dKQkb7aCLe8lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkRhUzhxSFJ2SGJfZjUwcENSdnRvSXQ3eVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jNmUyMTctMDNmZi00Mzk2LWFkZmUt MjU1ZjBjNTFiYmUwLzEvU1BReGwtc0l4X0NtWDhpenJ0djEyWTdrVnlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9jNmUyMTctMDNmZi00Mzk2LWFkZmUtMjU1ZjBjNTFiYmUw LzEvQkRhUzhxSFJ2SGJfZjUwcENSdnRvSXQ3eVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuepoMA0G CSqGSIb3DQEBCwUAA4IBAQBDMMdusbNoV6s7gRv8DusMZQ+t1QO9YqrcZk26hDb2 9kU19hRCBWUL37oBOBNmOV0JwjUUmJ2v4904lEW9nBjZCKOXCEkzBeZUgag/uGkB rlB/KPliMcHNYe67XoiLl/jhU8sfTcJt5RLwFsCsuf5JPSquGDQV4Z57Q/n4/oO/ bRIUzLeBzMXKrCHQ06wtIsUNGCxzQIrvdRIiQXYoDgrDG8BT8a4SnTHp78vy2IoD hkcxUkROzgBZgv0HNSbvQqWJFYcU+YOftXVklU+EYPpxDFhzILNqREgI8Fi8OK5W yBbSKq68NpSAMbn4xt0R9OeGrdLe/O9pVEy5kQCfuQzi -----END CERTIFICATE-----Generated at Mon Jan 26 02:02:22 2026 by rpki-client