This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/sQNC3PZhtT00aBnksKdxFAVZzQQ.roa File: sQNC3PZhtT00aBnksKdxFAVZzQQ.roa (raw, json) Hash identifier: 0L2z2BzNlMPl3E12ZeAaZbBCG9ys89MDIPcvR5FtVNI= Subject key identifier: B1:03:42:DC:F6:61:B5:3D:34:68:19:E4:B0:A7:71:14:05:59:CD:04 Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Certificate serial: 019B79EBCA3A00A0A0B5DAB699960FC32B0C Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/sQNC3PZhtT00aBnksKdxFAVZzQQ.roa Signing time: Thu 01 Jan 2026 14:17:34 +0000 ROA not before: Thu 01 Jan 2026 14:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8540 IP address blocks: 77.220.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:ca:3a:00:a0:a0:b5:da:b6:99:96:0f:c3:2b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Validity Not Before: Jan 1 14:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b10342dcf661b53d346819e4b0a771140559cd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:c3:a5:86:11:5f:7e:f2:c5:23:2c:4a:86: ba:61:5a:35:3b:bc:8f:a0:4e:f5:44:fa:9f:47:b2: 6d:92:6b:1f:f7:46:ba:c3:63:58:28:35:31:3a:39: fa:2e:8f:6b:3f:7e:ba:11:e0:a6:77:0c:b4:03:d8: ea:b3:5c:ee:fe:3f:9b:2c:53:09:1e:0a:0f:9e:9d: b5:59:23:8b:9c:e6:15:52:15:a7:af:2b:2a:57:1e: 5f:ee:df:3e:5e:12:f8:6d:de:cf:6a:40:6b:89:e3: 1e:fc:e8:f6:37:20:29:e3:bf:63:ca:17:ab:f6:d6: 9d:51:3d:95:ce:6b:a7:86:79:82:36:91:6e:ed:b3: 4f:cc:f4:d1:8e:70:08:ef:e9:67:09:40:a3:c6:0f: b2:75:1e:d8:a7:75:b1:6b:4a:eb:0a:ec:80:b9:d8: ae:bf:45:58:39:54:05:fd:3a:16:1a:86:c0:5a:02: 49:5a:fe:4a:8b:57:d5:dd:d7:9f:bc:c1:8d:cc:d6: 7c:70:47:15:35:90:5e:6d:b0:4c:b0:de:e6:b3:8e: 53:f0:34:e7:77:89:44:9a:f0:ea:3b:ec:a5:d1:df: 4e:6b:87:73:26:a0:fe:82:c5:69:2d:f3:68:06:a1: 98:cc:c5:92:80:4d:8e:b0:5b:76:51:89:b7:aa:d3: 47:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:03:42:DC:F6:61:B5:3D:34:68:19:E4:B0:A7:71:14:05:59:CD:04 X509v3 Authority Key Identifier: keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/sQNC3PZhtT00aBnksKdxFAVZzQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.220.109.0/24 Signature Algorithm: sha256WithRSAEncryption a1:4e:6b:c8:3b:a5:1d:37:77:a3:c1:94:57:50:dd:4c:6a:e5: 88:3a:0a:e4:18:33:e5:b6:9f:25:08:2a:ac:48:5b:ad:93:3d: 64:f4:1d:57:5e:a2:c0:29:76:ba:b0:fc:22:e2:c7:6b:36:4d: ce:7d:71:4f:d6:4b:4a:6b:6e:09:c4:09:07:e1:32:b3:11:d8: 00:43:8f:c3:92:bd:ec:d7:99:5e:21:d4:2b:81:a2:30:71:48: 4a:ca:e7:68:4a:7a:b7:8c:ae:e5:7b:aa:98:94:b0:8f:a6:57: 3f:1e:2f:4e:ad:0f:11:00:d1:1c:9d:64:eb:73:02:6b:9e:1f: 8e:24:40:04:79:d9:8d:2f:21:67:24:4c:6d:3e:ec:e0:9b:dd: a8:b4:0b:91:29:e8:65:4b:d4:cf:21:5f:39:17:33:34:1b:9b: 56:76:22:52:d5:b3:fc:1e:27:bd:44:5f:f7:a9:d1:d2:06:53: d9:51:1d:36:02:40:32:de:c2:18:7e:42:6d:f0:d8:fa:f2:35: 87:46:6a:b8:16:f2:10:da:f6:de:c7:0e:10:dd:3d:81:8d:64: f8:29:9f:7e:60:f3:96:e2:0b:86:d7:f3:24:eb:e1:0f:6a:07: b7:52:e5:a7:9b:1e:d2:d7:6a:be:86:6a:72:c5:a6:97:87:0d: 6e:58:b3:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt568o6AKCgtdq2mZYPwysMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NDE3MzhiYWFiOTg4YjFkNjg2OTNiYjA1ZTI5YmZiYjRm MGY2NzEwHhcNMjYwMTAxMTQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTAzNDJkY2Y2NjFiNTNkMzQ2ODE5ZTRiMGE3NzExNDA1NTljZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfjDpYYRX37yxSMsSoa6YVo1O7yP oE71RPqfR7Jtkmsf90a6w2NYKDUxOjn6Lo9rP366EeCmdwy0A9jqs1zu/j+bLFMJ HgoPnp21WSOLnOYVUhWnrysqVx5f7t8+XhL4bd7PakBrieMe/Oj2NyAp479jyher 9tadUT2VzmunhnmCNpFu7bNPzPTRjnAI7+lnCUCjxg+ydR7Yp3Wxa0rrCuyAudiu v0VYOVQF/ToWGobAWgJJWv5Ki1fV3defvMGNzNZ8cEcVNZBebbBMsN7ms45T8DTn d4lEmvDqO+yl0d9Oa4dzJqD+gsVpLfNoBqGYzMWSgE2OsFt2UYm3qtNHpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLEDQtz2YbU9NGgZ5LCncRQFWc0EMB8GA1UdIwQY MBaAFMRBc4uquYix1oaTuwXim/u08PZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUt NGM5OGQ5YTUxNDA1LzEvc1FOQzNQWmh0VDAwYUJua3NLZHhGQVZaelFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUtNGM5OGQ5YTUxNDA1 LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATdxtMA0G CSqGSIb3DQEBCwUAA4IBAQChTmvIO6UdN3ejwZRXUN1MauWIOgrkGDPltp8lCCqs SFutkz1k9B1XXqLAKXa6sPwi4sdrNk3OfXFP1ktKa24JxAkH4TKzEdgAQ4/Dkr3s 15leIdQrgaIwcUhKyudoSnq3jK7le6qYlLCPplc/Hi9OrQ8RANEcnWTrcwJrnh+O JEAEedmNLyFnJExtPuzgm92otAuRKehlS9TPIV85FzM0G5tWdiJS1bP8Hie9RF/3 qdHSBlPZUR02AkAy3sIYfkJt8Nj68jWHRmq4FvIQ2vbexw4Q3T2BjWT4KZ9+YPOW 4guG1/Mk6+EPage3UuWnmx7S12q+hmpyxaaXhw1uWLNM -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:31 2026 by rpki-client