This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/SquegwSGe9lqsOnJYD7FAGZCM9U.roa File: SquegwSGe9lqsOnJYD7FAGZCM9U.roa (raw, json) Hash identifier: qoe24JrxhFTVLaawaWqNTYrhXkVXUWR/nCvvs1nr+yc= Subject key identifier: 4A:AB:9E:83:04:86:7B:D9:6A:B0:E9:C9:60:3E:C5:00:66:42:33:D5 Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730 Certificate serial: 019B7C1355E4E17F0E5E6F06BC80276E8F1A Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/SquegwSGe9lqsOnJYD7FAGZCM9U.roa Signing time: Fri 02 Jan 2026 00:20:00 +0000 ROA not before: Fri 02 Jan 2026 00:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60847 IP address blocks: 91.244.227.0/24 maxlen: 24 185.92.12.0/24 maxlen: 24 185.92.13.0/24 maxlen: 24 185.92.14.0/24 maxlen: 24 185.92.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:55:e4:e1:7f:0e:5e:6f:06:bc:80:27:6e:8f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730 Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4aab9e8304867bd96ab0e9c9603ec500664233d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:31:59:5f:6e:98:09:b0:3d:ee:22:cd:31: 5c:bb:49:e8:f9:42:a7:47:da:ed:b7:dc:81:66:85: f1:2d:13:f1:ae:23:3a:22:d9:5b:f9:27:c8:22:d5: 75:56:eb:3e:21:a9:8c:5b:cd:14:2e:38:1d:cf:a4: 3f:0b:a4:a5:5a:69:e0:56:d2:e1:f6:4b:01:7b:e3: a4:0b:02:47:99:3b:4f:ec:9e:d1:47:72:53:fa:bd: f0:2a:7e:12:6b:34:49:7c:7e:99:db:ed:08:fd:0b: 7e:d6:17:be:cc:93:69:a8:60:5e:be:84:b9:81:f3: ee:fb:38:ba:04:e2:44:b0:7e:a6:6e:68:8d:d6:22: d1:84:c6:26:7c:c2:96:18:2d:85:64:ce:05:e9:23: 48:c5:4a:2d:64:ff:d3:7d:b3:2a:c1:21:37:f6:86: fa:02:2f:0b:00:8d:d1:3e:11:2f:43:13:da:9b:28: dd:8f:bc:40:d0:ce:14:cb:b9:7f:79:4a:84:1f:8b: dd:48:e3:0b:f8:4d:16:05:e0:b1:d2:67:75:b5:ed: 64:01:52:68:43:27:4f:6f:51:de:e6:bb:67:d2:11: d1:8b:cc:c6:82:6b:07:d3:34:0d:ca:9a:0b:ae:8b: 79:ee:89:4e:f9:fe:e1:07:97:af:7c:5a:91:97:42: 98:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AB:9E:83:04:86:7B:D9:6A:B0:E9:C9:60:3E:C5:00:66:42:33:D5 X509v3 Authority Key Identifier: keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/SquegwSGe9lqsOnJYD7FAGZCM9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.244.227.0/24 185.92.12.0/22 Signature Algorithm: sha256WithRSAEncryption 40:7e:2e:ef:cf:83:2b:87:18:ff:23:93:71:c9:9b:d4:5c:1b: 9d:75:ea:e7:b6:4a:a0:e2:ae:fb:5e:dd:eb:fc:eb:61:04:6f: cd:a7:c8:42:fc:de:5d:ff:8f:de:b5:e7:79:d1:61:64:8e:b7: 33:91:95:32:bf:2f:04:58:5a:c9:b9:12:c6:4a:be:22:14:f4: 63:bf:7c:1c:f0:93:c4:8c:8f:7d:e3:76:3a:36:07:ec:80:b4: bf:b4:9c:cf:1a:ae:96:b5:ee:3f:9c:81:5a:0a:1a:f3:58:92: 8a:2b:07:6e:f4:af:ce:aa:8f:dd:bd:0f:3a:34:f1:77:95:15: e5:c4:bd:70:fc:11:e9:01:2b:3e:a8:90:a5:5a:05:bc:92:eb: e0:b1:8f:47:0a:99:7b:9c:5f:1b:5f:4e:fd:df:c3:6f:6c:f0: 36:f9:7e:8e:34:d0:22:aa:8f:a0:b2:4f:e2:9a:d4:70:fb:15: 4c:eb:b3:36:fe:1e:16:17:98:06:bd:c3:21:e3:3d:ac:f2:76: 12:ee:21:13:95:5c:a7:7d:ee:1c:29:43:ee:8b:57:5f:07:79: 47:dc:d3:e5:19:4a:6b:07:b5:2b:04:5f:6b:81:f1:74:fe:d6: 1b:d4:27:34:12:fe:e2:74:db:44:9f:02:4a:cb:a1:f9:ed:a8: 36:aa:cf:14 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E1Xk4X8OXm8GvIAnbo8aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGIyMDAzMDkwMWZmMmRmNGViZDFmNDllNDg5MWNiMjhm ZTA3MzAwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWFiOWU4MzA0ODY3YmQ5NmFiMGU5Yzk2MDNlYzUwMDY2NDIzM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfgxWV9umAmwPe4izTFcu0no+UKn R9rtt9yBZoXxLRPxriM6Itlb+SfIItV1Vus+IamMW80ULjgdz6Q/C6SlWmngVtLh 9ksBe+OkCwJHmTtP7J7RR3JT+r3wKn4SazRJfH6Z2+0I/Qt+1he+zJNpqGBevoS5 gfPu+zi6BOJEsH6mbmiN1iLRhMYmfMKWGC2FZM4F6SNIxUotZP/TfbMqwSE39ob6 Ai8LAI3RPhEvQxPamyjdj7xA0M4Uy7l/eUqEH4vdSOML+E0WBeCx0md1te1kAVJo QydPb1He5rtn0hHRi8zGgmsH0zQNypoLrot57olO+f7hB5evfFqRl0KYjwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEqrnoMEhnvZarDpyWA+xQBmQjPVMB8GA1UdIwQY MBaAFN7bIAMJAf8t9OvR9J5Ikcso/gcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3RzZ0F3a0JfeTMwNjlIMG5raVJ5eWotQnpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82Nzg5NjQtZDgwMi00OGY5LTk2ZjEt ZTNiZmE3MmQ3ZWY4LzEvU3F1ZWd3U0dlOWxxc09uSllEN0ZBR1pDTTlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82Nzg5NjQtZDgwMi00OGY5LTk2ZjEtZTNiZmE3MmQ3ZWY4 LzEvM3RzZ0F3a0JfeTMwNjlIMG5raVJ5eWotQnpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW/TjAwQC uVwMMA0GCSqGSIb3DQEBCwUAA4IBAQBAfi7vz4Mrhxj/I5NxyZvUXBudderntkqg 4q77Xt3r/OthBG/Np8hC/N5d/4/eted50WFkjrczkZUyvy8EWFrJuRLGSr4iFPRj v3wc8JPEjI9943Y6NgfsgLS/tJzPGq6Wte4/nIFaChrzWJKKKwdu9K/Oqo/dvQ86 NPF3lRXlxL1w/BHpASs+qJClWgW8kuvgsY9HCpl7nF8bX07938NvbPA2+X6ONNAi qo+gsk/imtRw+xVM67M2/h4WF5gGvcMh4z2s8nYS7iETlVynfe4cKUPui1dfB3lH 3NPlGUprB7UrBF9rgfF0/tYb1Cc0Ev7idNtEnwJKy6H57ag2qs8U -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:24 2026 by rpki-client