This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/sJ1sC2Tf4OlwBqYXFNFoZRduFG8.roa File: sJ1sC2Tf4OlwBqYXFNFoZRduFG8.roa (raw, json) Hash identifier: Lhps7HR/EcrDbFr4rG5Dh/G7U6wPLWZb+NnuBmiPIWs= Subject key identifier: B0:9D:6C:0B:64:DF:E0:E9:70:06:A6:17:14:D1:68:65:17:6E:14:6F Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 019B7FF2734336199CF69C7BA7497C923C07 Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/sJ1sC2Tf4OlwBqYXFNFoZRduFG8.roa Signing time: Fri 02 Jan 2026 18:22:34 +0000 ROA not before: Fri 02 Jan 2026 18:22:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44718 IP address blocks: 89.252.244.0/24 maxlen: 24 89.252.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:73:43:36:19:9c:f6:9c:7b:a7:49:7c:92:3c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Jan 2 18:22:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b09d6c0b64dfe0e97006a61714d16865176e146f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cb:f2:da:27:1e:3c:d9:c5:f0:42:7c:02:7c: f5:e6:2a:99:e1:cc:2c:0a:ca:dc:84:8e:ca:82:2e: df:92:94:8c:b3:da:4f:ed:3b:09:9d:77:9a:a1:36: f6:c8:11:b3:a1:e5:89:f7:dd:5a:2b:86:eb:17:aa: 17:55:ca:85:3b:48:a6:8a:38:b4:37:dd:ae:8e:81: eb:4e:58:ce:98:f6:b7:81:a1:4b:87:e4:b9:48:e6: 0d:51:6f:11:c6:0e:a5:51:5d:92:93:ca:05:05:6d: 31:8f:d6:23:ee:4c:9b:37:b0:ef:97:b2:ca:99:87: 4b:69:f1:c5:9c:b6:c7:e7:49:8e:b4:d9:48:fc:28: 6c:c8:27:9f:8c:79:13:c7:d7:de:2f:6e:46:99:ba: 95:75:8c:20:21:31:f5:00:31:68:4f:e7:49:07:6d: 46:07:3b:53:66:d0:46:09:cc:d6:dd:a8:ff:60:ed: 18:e6:7f:e0:ec:01:64:fa:ef:90:60:a4:22:82:20: 99:ab:f6:f5:2b:f5:63:40:62:9c:68:5e:c4:55:7f: 09:f4:6b:21:ca:86:93:e6:20:d1:d5:04:cb:37:e1: 5f:fc:b7:bb:5a:b4:17:6e:7f:b0:06:b5:28:83:e6: 33:bb:1e:6a:95:53:80:12:da:4e:fb:1a:ef:e4:55: 82:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9D:6C:0B:64:DF:E0:E9:70:06:A6:17:14:D1:68:65:17:6E:14:6F X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/sJ1sC2Tf4OlwBqYXFNFoZRduFG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.252.244.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:b4:fd:ad:7e:da:02:b7:67:53:cc:a6:55:cb:e9:a0:07:c5: 44:7a:b2:1a:de:0a:eb:f8:f4:87:13:80:93:7f:0f:02:d2:d7: 39:78:d1:2f:7c:c7:04:b0:a2:cf:e5:63:8b:70:cf:9b:ee:02: 32:d6:2b:a2:e5:c4:39:4d:d6:82:5e:20:cf:77:b2:28:24:7e: 60:71:1d:cd:81:32:36:7b:8c:70:89:e9:1d:24:8b:00:97:b7: 92:07:db:0a:6d:ab:4d:8a:76:9f:97:da:8c:a3:49:a9:32:90: 87:7e:5d:c3:a8:34:85:a3:4d:f3:8c:92:1f:56:69:90:36:2e: 5c:b2:b2:ca:bf:46:59:73:8b:0b:62:b3:ff:44:86:7e:d4:e0: d8:e8:5f:bd:c9:d4:48:6c:b4:c4:58:61:c0:fc:86:63:37:12: 56:c6:f0:fc:1a:26:82:2f:f5:9d:04:98:67:5c:c8:1a:64:ae: 1f:e8:39:0c:85:9a:38:67:aa:4b:4a:5d:06:1d:a1:12:c2:2e: 8f:d0:12:a1:ea:84:5c:e5:31:76:6a:a5:6c:68:77:5d:a0:2f: d0:a4:b9:e5:3c:e3:ec:75:91:87:d0:87:54:0d:2f:04:5d:65: 99:41:ae:44:f7:3a:91:f8:62:1d:4f:0b:c1:50:79:e5:fa:40: 4a:a4:6e:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8nNDNhmc9px7p0l8kjwHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjYwMTAyMTgyMjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDlkNmMwYjY0ZGZlMGU5NzAwNmE2MTcxNGQxNjg2NTE3NmUxNDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcvy2icePNnF8EJ8Anz15iqZ4cws CsrchI7Kgi7fkpSMs9pP7TsJnXeaoTb2yBGzoeWJ991aK4brF6oXVcqFO0imiji0 N92ujoHrTljOmPa3gaFLh+S5SOYNUW8Rxg6lUV2Sk8oFBW0xj9Yj7kybN7Dvl7LK mYdLafHFnLbH50mOtNlI/ChsyCefjHkTx9feL25GmbqVdYwgITH1ADFoT+dJB21G BztTZtBGCczW3aj/YO0Y5n/g7AFk+u+QYKQigiCZq/b1K/VjQGKcaF7EVX8J9Gsh yoaT5iDR1QTLN+Ff/Le7WrQXbn+wBrUog+Yzux5qlVOAEtpO+xrv5FWClQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLCdbAtk3+DpcAamFxTRaGUXbhRvMB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvc0oxc0MyVGY0T2x3QnFZWEZORm9aUmR1Rkc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWfz0MA0G CSqGSIb3DQEBCwUAA4IBAQBbtP2tftoCt2dTzKZVy+mgB8VEerIa3grr+PSHE4CT fw8C0tc5eNEvfMcEsKLP5WOLcM+b7gIy1iui5cQ5TdaCXiDPd7IoJH5gcR3NgTI2 e4xwiekdJIsAl7eSB9sKbatNinafl9qMo0mpMpCHfl3DqDSFo03zjJIfVmmQNi5c srLKv0ZZc4sLYrP/RIZ+1ODY6F+9ydRIbLTEWGHA/IZjNxJWxvD8GiaCL/WdBJhn XMgaZK4f6DkMhZo4Z6pLSl0GHaESwi6P0BKh6oRc5TF2aqVsaHddoC/QpLnlPOPs dZGH0IdUDS8EXWWZQa5E9zqR+GIdTwvBUHnl+kBKpG43 -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:31 2026 by rpki-client