This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/SPQiaZ3julcN6ImZOduLjd1qohM.roa File: SPQiaZ3julcN6ImZOduLjd1qohM.roa (raw, json) Hash identifier: 0YIxYrRhuUKf32GXdhAAMFjgeWQ0j2Tfw0leBwT+5Aw= Subject key identifier: 48:F4:22:69:9D:E3:BA:57:0D:E8:89:99:39:DB:8B:8D:DD:6A:A2:13 Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599 Certificate serial: 019B7EA44DE5B9DE8A23578B49310E258526 Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/SPQiaZ3julcN6ImZOduLjd1qohM.roa Signing time: Fri 02 Jan 2026 12:17:35 +0000 ROA not before: Fri 02 Jan 2026 12:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 194.33.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:4d:e5:b9:de:8a:23:57:8b:49:31:0e:25:85:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599 Validity Not Before: Jan 2 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48f422699de3ba570de8899939db8b8ddd6aa213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:16:c6:69:c3:1c:70:ca:db:ee:3c:99:97: 17:3f:08:47:84:1c:a8:e3:00:76:a4:04:71:5f:5f: f4:ec:4a:0e:0e:78:80:f2:bc:c3:e5:c9:59:41:39: 54:06:81:38:7a:1b:1c:50:8b:d6:32:2b:a0:ed:41: 5c:2c:2a:8c:ea:4c:92:f3:a9:da:07:66:fa:ec:7c: 59:a9:47:e8:8b:75:ed:1a:6b:41:b0:05:fc:75:5b: 6b:5b:55:07:e1:14:d3:ef:88:02:8a:51:9d:34:b1: e8:33:d1:df:20:00:38:77:2d:c5:b8:3b:62:d1:59: 69:05:49:38:92:8a:e8:de:11:cd:39:7a:29:1a:c7: b5:99:9b:b0:36:20:bc:28:43:c2:a8:df:5e:3e:03: 23:e1:73:c4:f4:84:65:25:ca:ac:f4:79:ae:b4:05: 53:7f:f4:93:f2:c1:0d:4b:43:bb:51:64:d3:28:34: b4:25:2f:a7:ea:71:3c:0b:f3:96:15:1f:42:ac:a0: b7:ef:25:c1:07:78:2c:3f:6f:7a:2c:59:fd:d8:99: ae:b4:56:fc:a0:2e:43:b1:a9:d4:dd:24:8d:58:72: 0b:ee:d0:dd:3b:3d:56:d0:aa:de:52:6a:17:a4:ac: af:e1:62:35:16:bc:8b:64:aa:e7:73:b8:08:a7:76: a8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F4:22:69:9D:E3:BA:57:0D:E8:89:99:39:DB:8B:8D:DD:6A:A2:13 X509v3 Authority Key Identifier: keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/SPQiaZ3julcN6ImZOduLjd1qohM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.184.0/24 Signature Algorithm: sha256WithRSAEncryption b9:ff:24:59:5a:14:90:8b:f9:60:d2:3f:10:a9:2e:cb:76:45: 12:17:41:db:ca:a6:51:09:d7:86:dd:5a:4c:10:fd:56:f3:3c: 1e:39:98:48:79:63:60:7f:42:7c:9e:11:6e:9e:e3:c0:0e:99: 48:ea:45:c4:c4:e8:b4:a9:a4:00:4c:b0:9a:fc:dc:da:14:aa: c1:a4:55:39:cb:55:98:5f:db:ea:13:a4:dc:4e:72:c0:a6:24: fb:e2:86:4c:7d:b5:38:e6:0c:bf:0b:ee:40:8a:a5:b9:17:f5: a7:d0:55:4a:1b:54:91:ba:6d:ed:f4:28:64:88:c0:dc:56:28: 02:a6:12:a5:02:76:61:da:e6:bc:77:f2:62:63:5b:4d:38:80: 83:e1:74:2f:a8:62:e3:9e:10:4a:57:7c:3f:eb:4d:7f:e4:9b: 17:25:ba:7a:25:d4:05:b1:be:d3:e4:78:56:82:81:ee:75:ed: 89:10:e5:41:73:71:79:be:df:80:7c:a6:12:17:97:53:fa:02: 45:31:c4:17:69:d0:ab:87:7a:7c:9b:0e:5b:49:5f:d8:b8:5c: 5c:4a:5a:11:ef:8f:47:4b:9c:d0:ff:df:8f:92:91:f7:95:81: b9:2e:6f:bd:d4:4e:02:d9:38:32:61:ef:9a:7c:ee:7e:4b:0b: a6:13:83:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pE3lud6KI1eLSTEOJYUmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNmMxZGY2NjIzNzRkNGFlY2QwYzhiM2Y4NDMxMmRmNDIx MjU1OTkwHhcNMjYwMTAyMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGY0MjI2OTlkZTNiYTU3MGRlODg5OTkzOWRiOGI4ZGRkNmFhMjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4cWxmnDHHDK2+48mZcXPwhHhByo 4wB2pARxX1/07EoODniA8rzD5clZQTlUBoE4ehscUIvWMiug7UFcLCqM6kyS86na B2b67HxZqUfoi3XtGmtBsAX8dVtrW1UH4RTT74gCilGdNLHoM9HfIAA4dy3FuDti 0VlpBUk4koro3hHNOXopGse1mZuwNiC8KEPCqN9ePgMj4XPE9IRlJcqs9HmutAVT f/ST8sENS0O7UWTTKDS0JS+n6nE8C/OWFR9CrKC37yXBB3gsP296LFn92JmutFb8 oC5DsanU3SSNWHIL7tDdOz1W0KreUmoXpKyv4WI1FryLZKrnc7gIp3aowwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEj0Immd47pXDeiJmTnbi43daqITMB8GA1UdIwQY MBaAFL9sHfZiN01K7NDIs/hDEt9CElWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzct OTA4NDE5ZDM5NDAxLzEvU1BRaWFaM2p1bGNONkltWk9kdUxqZDFxb2hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzctOTA4NDE5ZDM5NDAx LzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiG4MA0G CSqGSIb3DQEBCwUAA4IBAQC5/yRZWhSQi/lg0j8QqS7LdkUSF0HbyqZRCdeG3VpM EP1W8zweOZhIeWNgf0J8nhFunuPADplI6kXExOi0qaQATLCa/NzaFKrBpFU5y1WY X9vqE6TcTnLApiT74oZMfbU45gy/C+5AiqW5F/Wn0FVKG1SRum3t9ChkiMDcVigC phKlAnZh2ua8d/JiY1tNOICD4XQvqGLjnhBKV3w/601/5JsXJbp6JdQFsb7T5HhW goHude2JEOVBc3F5vt+AfKYSF5dT+gJFMcQXadCrh3p8mw5bSV/YuFxcSloR749H S5zQ/9+PkpH3lYG5Lm+91E4C2TgyYe+afO5+SwumE4Mp -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:24 2026 by rpki-client