This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/sqmM075pYoIhRN4MwnW9o487rF8.roa File: sqmM075pYoIhRN4MwnW9o487rF8.roa (raw, json) Hash identifier: I1CZglIvCm1ewemqOSJLikUmJGVYj4wQzxEvNc+9woA= Subject key identifier: B2:A9:8C:D3:BE:69:62:82:21:44:DE:0C:C2:75:BD:A3:8F:3B:AC:5F Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 019B77C70B378AE41B7FD1E27ADD055FAE70 Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/sqmM075pYoIhRN4MwnW9o487rF8.roa Signing time: Thu 01 Jan 2026 04:18:11 +0000 ROA not before: Thu 01 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57809 IP address blocks: 91.206.156.0/23 maxlen: 24 91.229.230.0/23 maxlen: 24 185.90.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0b:37:8a:e4:1b:7f:d1:e2:7a:dd:05:5f:ae:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2a98cd3be6962822144de0cc275bda38f3bac5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:72:de:0c:a6:12:33:92:6c:01:87:c7:52: 7c:fe:64:74:4d:dd:f0:05:3b:aa:7e:4a:f5:79:09: 27:e9:a4:b6:d7:c6:0b:92:9f:c2:00:ea:85:f9:da: 85:a5:c7:75:c9:fa:57:09:65:bf:88:96:f5:90:7b: b0:bd:57:3a:83:e3:b6:ba:25:99:b5:0b:e9:16:57: 11:6c:41:5c:ec:74:db:14:6e:fa:63:3e:88:95:83: d7:1b:48:0e:2a:79:d2:d6:87:f1:6b:58:8f:c5:91: ef:11:71:e3:13:f5:42:88:09:ef:d0:b2:4f:9b:e1: 61:03:ba:68:b8:cd:f7:fd:39:af:74:61:99:83:c0: c9:ec:9a:16:05:80:2a:cc:2d:6a:a3:34:ac:5b:91: 16:d6:38:a0:ed:02:8e:d1:94:ff:41:67:d3:8d:db: a0:c4:6a:ff:57:39:cb:57:45:e1:6f:88:40:68:48: 0b:74:c9:69:f8:3d:5a:a7:f2:35:4b:c2:f2:7b:24: 0d:d0:3a:95:52:f8:19:6b:5d:df:40:2e:a8:10:3c: 41:1c:04:ab:4b:52:f4:fd:2e:d7:c3:dd:14:ea:df: d8:bd:5c:fa:12:a7:c6:39:af:b9:10:aa:67:48:ca: c0:e3:4e:10:7e:1b:2b:57:df:68:c3:59:77:3f:68: 3b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A9:8C:D3:BE:69:62:82:21:44:DE:0C:C2:75:BD:A3:8F:3B:AC:5F X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/sqmM075pYoIhRN4MwnW9o487rF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.156.0/23 91.229.230.0/23 185.90.96.0/22 Signature Algorithm: sha256WithRSAEncryption 54:8d:54:bb:f8:78:b1:22:68:29:61:d6:e5:92:3c:a5:40:4d: 88:b1:97:3f:05:33:f4:80:c7:32:50:f6:32:2b:cb:bf:b9:9d: 9f:50:33:8e:ad:f6:20:e7:66:38:7d:42:94:9a:d4:df:97:ea: 38:4a:4e:9e:52:d5:a3:4f:1a:de:8e:39:39:11:3c:e4:4c:9d: e4:4a:e2:5a:9e:69:1e:55:e4:7d:10:0d:74:08:f6:2b:fe:1d: 76:ed:19:26:f6:9a:50:74:af:d8:ff:b0:3f:91:4f:dd:8d:29: c2:0a:6e:05:24:dc:fb:10:30:b9:e4:ce:5d:34:be:68:8f:e4: e1:63:66:3f:e6:f9:0c:22:8a:52:3d:83:33:80:09:0c:57:55: c6:86:de:bf:9d:b1:3d:0e:aa:70:2d:7b:33:35:85:93:ef:21: 45:89:06:29:60:07:10:cc:84:b5:f2:48:ef:d2:2f:00:a1:4a: 8e:91:84:63:7a:6c:de:7e:ae:d8:cd:df:64:d1:36:3b:20:e7: 52:c2:a5:aa:bd:66:a0:db:f5:d7:5a:db:37:f3:93:28:d0:f2: 0b:d1:39:22:cb:2f:14:6f:b5:c5:64:4e:4d:e6:66:3d:8a:d7: 56:09:a0:01:d8:4d:41:a6:97:55:d6:eb:03:79:1a:29:62:07: 14:2f:c5:30 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xws3iuQbf9Hiet0FX65wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmE5OGNkM2JlNjk2MjgyMjE0NGRlMGNjMjc1YmRhMzhmM2JhYzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTNy3gymEjOSbAGHx1J8/mR0Td3w BTuqfkr1eQkn6aS218YLkp/CAOqF+dqFpcd1yfpXCWW/iJb1kHuwvVc6g+O2uiWZ tQvpFlcRbEFc7HTbFG76Yz6IlYPXG0gOKnnS1ofxa1iPxZHvEXHjE/VCiAnv0LJP m+FhA7pouM33/TmvdGGZg8DJ7JoWBYAqzC1qozSsW5EW1jig7QKO0ZT/QWfTjdug xGr/VznLV0Xhb4hAaEgLdMlp+D1ap/I1S8LyeyQN0DqVUvgZa13fQC6oEDxBHASr S1L0/S7Xw90U6t/YvVz6EqfGOa+5EKpnSMrA404QfhsrV99ow1l3P2g7mwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLKpjNO+aWKCIUTeDMJ1vaOPO6xfMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvc3FtTTA3NXBZb0loUk40TXduVzlvNDg3ckY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW86cAwQB W+XmAwQCuVpgMA0GCSqGSIb3DQEBCwUAA4IBAQBUjVS7+HixImgpYdblkjylQE2I sZc/BTP0gMcyUPYyK8u/uZ2fUDOOrfYg52Y4fUKUmtTfl+o4Sk6eUtWjTxrejjk5 ETzkTJ3kSuJanmkeVeR9EA10CPYr/h127Rkm9ppQdK/Y/7A/kU/djSnCCm4FJNz7 EDC55M5dNL5oj+ThY2Y/5vkMIopSPYMzgAkMV1XGht6/nbE9DqpwLXszNYWT7yFF iQYpYAcQzIS18kjv0i8AoUqOkYRjemzefq7Yzd9k0TY7IOdSwqWqvWag2/XXWts3 85Mo0PIL0Tkiyy8Ub7XFZE5N5mY9itdWCaAB2E1BppdV1usDeRopYgcUL8Uw -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:34 2026 by rpki-client