This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/sqjDR9C3yuWgeDEW-u7FZq2GXwI.roa File: sqjDR9C3yuWgeDEW-u7FZq2GXwI.roa (raw, json) Hash identifier: /0Ln3Zg2sTICpShIMihehk8+YHZcL9xlacfJl1AeuPs= Subject key identifier: B2:A8:C3:47:D0:B7:CA:E5:A0:78:31:16:FA:EE:C5:66:AD:86:5F:02 Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c Certificate serial: 019B7DC9F4928EF15306393AE7D15E6883AA Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/sqjDR9C3yuWgeDEW-u7FZq2GXwI.roa Signing time: Fri 02 Jan 2026 08:19:05 +0000 ROA not before: Fri 02 Jan 2026 08:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16097 IP address blocks: 45.157.224.0/24 maxlen: 24 2a0f:6cc6::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f4:92:8e:f1:53:06:39:3a:e7:d1:5e:68:83:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c Validity Not Before: Jan 2 08:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2a8c347d0b7cae5a0783116faeec566ad865f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:10:b9:e2:fb:3b:c5:81:fb:ec:07:d4:7f:7e: d9:25:e9:7c:0d:16:05:ab:d5:df:e7:b3:9d:19:7c: fe:00:f0:a9:54:05:ab:30:d8:01:dc:13:b7:b4:67: cf:7e:d5:f5:7f:5c:b5:44:e9:6a:a8:27:ed:43:70: 09:d0:6b:6a:2e:dc:f1:e8:f4:29:06:10:70:bb:94: fd:79:a2:99:32:2f:86:f8:2a:43:aa:fd:5c:74:c8: 0f:4f:1a:43:cb:ea:f2:a7:3c:50:1c:5d:95:fe:5a: bb:93:74:72:39:d1:32:9e:88:e1:62:c1:ff:be:65: bf:0a:94:f7:0b:8d:a2:fd:82:38:12:8b:b9:53:5c: 34:3d:f0:10:55:d5:15:f0:31:a3:44:22:8a:6e:20: bb:6a:fb:7c:ba:54:0d:77:a7:2e:0c:ae:9e:09:8f: 36:c0:73:ab:83:09:7e:d0:bb:0a:0b:d8:06:86:19: d2:11:ed:78:ef:e9:b0:d1:5d:85:2c:ae:1e:5b:70: 75:ff:cb:76:0a:e3:95:fb:8b:e2:48:56:5f:1b:5e: 98:0d:89:e2:08:37:ff:ac:d0:85:48:61:1b:47:04: 36:de:0f:99:a9:ee:1c:d6:a5:4a:9d:2b:3a:ce:6a: a2:5c:b9:7d:22:a9:bd:81:35:3e:e5:cc:b9:29:73: 4e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A8:C3:47:D0:B7:CA:E5:A0:78:31:16:FA:EE:C5:66:AD:86:5F:02 X509v3 Authority Key Identifier: keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/sqjDR9C3yuWgeDEW-u7FZq2GXwI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.224.0/24 IPv6: 2a0f:6cc6::/32 Signature Algorithm: sha256WithRSAEncryption 60:1e:11:f2:a0:f1:bc:64:00:40:7d:c8:ce:fd:c1:03:35:74: 8a:62:1d:8b:68:82:88:32:92:a5:91:d2:27:0f:49:66:46:d8: ff:af:97:34:35:dd:3b:6f:0f:b3:6b:73:52:cc:d7:ad:3c:44: e0:39:12:17:69:f7:7f:1a:7b:cd:6d:b3:e3:df:f6:2d:db:9e: fa:29:1e:fa:98:e4:40:d2:ab:2b:5a:7e:a7:38:4a:ac:d1:93: 48:bf:f9:9b:28:4b:eb:fa:0a:04:24:11:a0:d3:a8:84:6c:f2: ae:0e:1c:77:8b:10:f8:42:9d:10:32:0c:5f:6b:78:a8:6c:7a: 4c:a3:4c:0b:39:49:6a:f3:09:fa:cb:e8:1d:ca:2e:21:4c:42: 85:ef:e3:39:f3:5a:03:91:bb:6a:16:e2:d5:3a:e6:3d:f9:5a: 94:a7:68:2a:d1:ac:51:5a:4e:21:6a:8e:ba:1d:70:0e:34:4f: d4:04:8c:db:8c:63:71:54:20:cb:69:3d:ed:d2:0d:a0:a0:b2: b5:4c:ba:2a:bf:35:d5:86:c5:3f:24:b7:b6:03:c0:06:aa:90: 20:47:ee:37:7a:c5:25:09:8a:44:34:40:e3:18:f3:b8:3c:26: af:8e:5a:37:cd:ef:04:8a:0a:a0:1e:00:2e:4a:40:bd:b0:99: b1:a6:1e:b0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yfSSjvFTBjk659FeaIOqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZjZhNzFhMTgwZGNmOGIyMzBjNDE0ZjA5ZjdiNzFiYWVh OTc4MWMwHhcNMjYwMTAyMDgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmE4YzM0N2QwYjdjYWU1YTA3ODMxMTZmYWVlYzU2NmFkODY1ZjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBC54vs7xYH77AfUf37ZJel8DRYF q9Xf57OdGXz+APCpVAWrMNgB3BO3tGfPftX1f1y1ROlqqCftQ3AJ0GtqLtzx6PQp BhBwu5T9eaKZMi+G+CpDqv1cdMgPTxpDy+rypzxQHF2V/lq7k3RyOdEynojhYsH/ vmW/CpT3C42i/YI4Eou5U1w0PfAQVdUV8DGjRCKKbiC7avt8ulQNd6cuDK6eCY82 wHOrgwl+0LsKC9gGhhnSEe147+mw0V2FLK4eW3B1/8t2CuOV+4viSFZfG16YDYni CDf/rNCFSGEbRwQ23g+Zqe4c1qVKnSs6zmqiXLl9Iqm9gTU+5cy5KXNOvwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLKow0fQt8rloHgxFvruxWathl8CMB8GA1UdIwQY MBaAFKX2pxoYDc+LIwxBTwn3txuuqXgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2Mt NjY2MDIzOGIwM2NlLzEvc3FqRFI5QzN5dVdnZURFVy11N0ZacTJHWHdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2MtNjY2MDIzOGIwM2Nl LzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALZ3gMA0E AgACMAcDBQAqD2zGMA0GCSqGSIb3DQEBCwUAA4IBAQBgHhHyoPG8ZABAfcjO/cED NXSKYh2LaIKIMpKlkdInD0lmRtj/r5c0Nd07bw+za3NSzNetPETgORIXafd/GnvN bbPj3/Yt2576KR76mORA0qsrWn6nOEqs0ZNIv/mbKEvr+goEJBGg06iEbPKuDhx3 ixD4Qp0QMgxfa3iobHpMo0wLOUlq8wn6y+gdyi4hTEKF7+M581oDkbtqFuLVOuY9 +VqUp2gq0axRWk4hao66HXAONE/UBIzbjGNxVCDLaT3t0g2goLK1TLoqvzXVhsU/ JLe2A8AGqpAgR+43esUlCYpENEDjGPO4PCavjlo3ze8EigqgHgAuSkC9sJmxph6w -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:53 2026 by rpki-client