This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/sl_qn_gMelOUS3XMJODn5T8W54w.roa File: sl_qn_gMelOUS3XMJODn5T8W54w.roa (raw, json) Hash identifier: MlmmeycjTjJos3jc0JF/rEVajpy499lBCd4bHXbugOg= Subject key identifier: B2:5F:EA:9F:F8:0C:7A:53:94:4B:75:CC:24:E0:E7:E5:3F:16:E7:8C Certificate issuer: /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7 Certificate serial: 019B76EB9EC023D1F2BB9B69FB8DEBE68647 Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/sl_qn_gMelOUS3XMJODn5T8W54w.roa Signing time: Thu 01 Jan 2026 00:18:31 +0000 ROA not before: Thu 01 Jan 2026 00:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198024 IP address blocks: 185.191.192.0/22 maxlen: 22 2a0a:1c40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9e:c0:23:d1:f2:bb:9b:69:fb:8d:eb:e6:86:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b25fea9ff80c7a53944b75cc24e0e7e53f16e78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b3:22:02:14:37:18:8b:15:be:77:ec:eb:94: b3:2b:36:59:a7:34:00:86:45:b3:41:9f:1c:70:be: b1:93:20:9a:32:59:6f:cb:40:21:ca:36:76:db:67: 45:5b:b7:5b:2a:18:87:aa:5d:c2:9b:80:6f:cc:c3: c9:c6:48:40:39:c3:88:d8:6b:3d:62:35:42:0d:ae: 30:d2:11:f7:f7:9f:d2:81:f1:9f:00:a9:b1:3c:03: b4:3a:a8:01:6e:f3:45:af:a5:7b:20:bc:f3:7a:f1: c2:fd:36:07:2f:e3:22:75:58:3c:b1:ea:24:db:b2: a0:68:3d:e9:7f:b9:12:8e:c5:bb:63:81:30:3e:13: ba:01:b6:80:af:5b:ea:18:5f:f2:17:14:80:f2:66: da:05:f8:50:3e:19:b3:3e:b0:45:0b:ad:28:f8:94: 5b:96:9c:a1:0c:51:41:23:97:01:fe:77:fd:41:0e: 12:50:52:1a:9b:a0:1b:f6:84:35:f9:84:d5:10:70: 20:94:94:20:f1:a8:b2:d9:cf:42:51:84:f5:40:8b: 25:75:d7:0f:7f:ef:4c:57:62:79:23:fc:d1:16:12: e4:50:40:ec:16:62:01:86:0a:41:0e:f8:ba:cf:9c: 56:78:ee:a5:48:47:b1:a6:89:93:a1:b0:23:47:e3: 2e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5F:EA:9F:F8:0C:7A:53:94:4B:75:CC:24:E0:E7:E5:3F:16:E7:8C X509v3 Authority Key Identifier: keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/sl_qn_gMelOUS3XMJODn5T8W54w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.191.192.0/22 IPv6: 2a0a:1c40::/29 Signature Algorithm: sha256WithRSAEncryption 35:bc:2a:87:ee:a7:55:93:63:98:e4:4d:24:c9:24:33:19:97: bd:90:d9:9c:ea:44:ab:96:35:f7:70:94:33:c4:b6:61:93:d1: d4:10:4d:61:d0:8d:a6:2c:15:6e:f5:69:92:a0:38:24:ac:6d: ca:c9:cc:69:f0:10:e3:02:fe:ce:8f:f4:b7:87:8e:34:f8:7a: 95:c7:ea:0d:bc:3d:5c:ef:1b:10:f9:1d:ff:0c:51:79:27:e0: 9a:8e:87:2e:87:24:f9:fd:82:84:e6:5c:9a:fd:4c:81:54:74: cf:b5:42:fe:24:c1:30:b2:b8:27:71:d7:48:5c:bc:92:15:43: c2:62:78:10:14:9e:06:a5:3d:27:43:50:77:80:2c:0e:1c:91: 95:74:5f:65:10:ba:04:ea:a3:32:fb:0a:e7:ad:39:60:bf:35: f2:53:76:7f:a1:c5:7d:07:44:d6:12:13:5a:b4:d1:99:b2:06: 40:21:f1:92:88:92:e0:12:cd:c5:0f:b9:ee:84:ad:61:ad:30: 71:3a:c1:a4:0b:81:8f:2e:ae:64:2e:e2:11:d6:fd:d9:75:f6: b2:6e:b2:53:b9:13:c4:92:73:e9:61:43:34:ae:8b:15:d3:de: 1c:79:7d:64:67:9c:41:0e:54:56:7c:5d:9f:01:cf:b7:d0:41: 7a:f2:56:ea -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt2657AI9Hyu5tp+43r5oZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzllYWQ4MzVhOGZjZmFlMGQ5ZWUyODM5Y2QxNjg4MWJh MTFkZDcwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjVmZWE5ZmY4MGM3YTUzOTQ0Yjc1Y2MyNGUwZTdlNTNmMTZlNzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57MiAhQ3GIsVvnfs65SzKzZZpzQA hkWzQZ8ccL6xkyCaMllvy0AhyjZ222dFW7dbKhiHql3Cm4BvzMPJxkhAOcOI2Gs9 YjVCDa4w0hH395/SgfGfAKmxPAO0OqgBbvNFr6V7ILzzevHC/TYHL+MidVg8seok 27KgaD3pf7kSjsW7Y4EwPhO6AbaAr1vqGF/yFxSA8mbaBfhQPhmzPrBFC60o+JRb lpyhDFFBI5cB/nf9QQ4SUFIam6Ab9oQ1+YTVEHAglJQg8aiy2c9CUYT1QIslddcP f+9MV2J5I/zRFhLkUEDsFmIBhgpBDvi6z5xWeO6lSEexpomTobAjR+MuAQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLJf6p/4DHpTlEt1zCTg5+U/FueMMB8GA1UdIwQY MBaAFIJ56tg1qPz64NnuKDnNFogboR3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUt ZWUyOWM5MTM2ZThiLzEvc2xfcW5fZ01lbE9VUzNYTUpPRG41VDhXNTR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUtZWUyOWM5MTM2ZThi LzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCub/AMA0E AgACMAcDBQMqChxAMA0GCSqGSIb3DQEBCwUAA4IBAQA1vCqH7qdVk2OY5E0kySQz GZe9kNmc6kSrljX3cJQzxLZhk9HUEE1h0I2mLBVu9WmSoDgkrG3Kycxp8BDjAv7O j/S3h440+HqVx+oNvD1c7xsQ+R3/DFF5J+CajocuhyT5/YKE5lya/UyBVHTPtUL+ JMEwsrgncddIXLySFUPCYngQFJ4GpT0nQ1B3gCwOHJGVdF9lELoE6qMy+wrnrTlg vzXyU3Z/ocV9B0TWEhNatNGZsgZAIfGSiJLgEs3FD7nuhK1hrTBxOsGkC4GPLq5k LuIR1v3ZdfaybrJTuRPEknPpYUM0rosV094ceX1kZ5xBDlRWfF2fAc+30EF68lbq -----END CERTIFICATE-----Generated at Tue Jan 27 00:27:13 2026 by rpki-client