This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/SQgk14LJvQD58GJwhzmdHvEGMpA.roa File: SQgk14LJvQD58GJwhzmdHvEGMpA.roa (raw, json) Hash identifier: 9nEhhW/HaWe0QsWNlFcb5L1Nm0I/W7PdcIHoewo3ZNU= Subject key identifier: 49:08:24:D7:82:C9:BD:00:F9:F0:62:70:87:39:9D:1E:F1:06:32:90 Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6 Certificate serial: 019B7910098DE54EF1B2C897EC8AEE3CD6AC Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/SQgk14LJvQD58GJwhzmdHvEGMpA.roa Signing time: Thu 01 Jan 2026 10:17:32 +0000 ROA not before: Thu 01 Jan 2026 10:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206907 IP address blocks: 91.224.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:09:8d:e5:4e:f1:b2:c8:97:ec:8a:ee:3c:d6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6 Validity Not Before: Jan 1 10:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=490824d782c9bd00f9f0627087399d1ef1063290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:15:ff:d7:0e:93:c8:ff:ac:28:91:5b:4e:6c: 25:18:34:67:af:96:67:04:bf:3c:30:2b:4d:dc:11: ec:a4:b1:6b:93:96:5b:e0:29:1a:79:2d:50:13:08: ca:31:35:92:fb:24:3e:5b:0b:9a:51:8d:1f:b2:ea: 07:eb:56:1f:e7:64:1d:43:e6:60:fd:ea:d2:2e:c1: 6e:d8:1a:24:32:a6:21:32:fa:49:f8:b5:76:aa:3d: 57:6f:02:33:16:c0:34:7f:41:f2:97:43:61:ee:a8: 5f:fb:40:48:f3:55:a6:09:ad:a2:1a:b7:f3:ef:1c: a1:9a:b9:ee:df:8f:d2:67:b5:80:0d:d9:cc:11:4a: e7:bc:3e:d5:aa:22:95:57:88:f8:7f:cb:f3:c9:ca: 1e:e9:cc:06:5c:e8:f8:b4:44:34:2d:f0:46:4e:ea: c8:9e:d2:30:a4:da:98:4d:2e:9d:b0:6d:6f:68:ae: 50:a7:8f:b9:b8:a3:4c:43:49:5c:76:81:5a:db:f4: 0b:8c:08:e4:c1:95:1d:84:b3:b1:18:10:06:ab:af: 57:23:d7:3c:52:43:42:4c:a5:3c:db:95:9c:a5:8b: 3b:3e:3b:40:42:82:09:42:c5:3a:12:ab:63:eb:44: 49:04:7c:5b:42:c3:73:8f:ad:83:66:e9:c7:15:42: 1a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:08:24:D7:82:C9:BD:00:F9:F0:62:70:87:39:9D:1E:F1:06:32:90 X509v3 Authority Key Identifier: keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/SQgk14LJvQD58GJwhzmdHvEGMpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.68.0/23 Signature Algorithm: sha256WithRSAEncryption 45:29:66:54:1f:af:59:8f:c0:aa:9d:90:64:2e:b4:0d:ee:89: f3:20:0a:96:a0:4d:f6:09:b8:f5:a5:97:d0:fb:ef:8c:1b:ea: 46:01:18:07:a5:bd:cb:cb:bb:db:14:26:e8:b1:50:dd:91:bf: a9:ee:93:bf:80:f7:51:04:ff:93:cc:f1:7b:e6:a2:cd:5e:71: 1a:42:c8:dc:39:5a:d5:1b:6f:a4:ca:7e:36:f7:85:e5:3f:cf: 96:cd:c9:dd:d3:77:8b:4d:01:e7:17:c5:d8:12:94:c3:96:4b: a3:4e:91:a4:13:23:07:65:e9:17:f8:38:c1:a4:f3:36:2b:f5: bc:49:0b:e9:a0:da:24:fc:c4:82:62:33:00:f1:3b:f0:8b:2b: e6:20:ee:49:36:21:e6:01:6b:c2:b4:85:6d:53:44:5b:b4:1c: 19:ce:d4:6b:1b:0f:5a:8f:54:f0:67:82:0f:bb:72:b4:dd:f3: 3e:8e:3e:68:84:fb:e6:bc:de:d9:2a:3a:17:17:73:47:5b:04: db:5c:05:59:91:0a:c9:6d:88:61:7f:ab:a7:ae:32:fc:5a:6b: 4a:2c:f7:1a:35:b2:f5:b6:95:98:b8:c8:83:e0:e2:64:58:8a: a6:1f:ef:d8:af:b6:f5:04:85:89:99:31:5e:e2:74:09:f9:1a: 8d:f1:67:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EAmN5U7xssiX7IruPNasMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OTY2OGYzNDdjNTVhZGQ3N2FjNTE3ZTkzMzFkZGU3ZmMz NTU2YTYwHhcNMjYwMTAxMTAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTA4MjRkNzgyYzliZDAwZjlmMDYyNzA4NzM5OWQxZWYxMDYzMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxX/1w6TyP+sKJFbTmwlGDRnr5Zn BL88MCtN3BHspLFrk5Zb4CkaeS1QEwjKMTWS+yQ+WwuaUY0fsuoH61Yf52QdQ+Zg /erSLsFu2BokMqYhMvpJ+LV2qj1XbwIzFsA0f0Hyl0Nh7qhf+0BI81WmCa2iGrfz 7xyhmrnu34/SZ7WADdnMEUrnvD7VqiKVV4j4f8vzycoe6cwGXOj4tEQ0LfBGTurI ntIwpNqYTS6dsG1vaK5Qp4+5uKNMQ0lcdoFa2/QLjAjkwZUdhLOxGBAGq69XI9c8 UkNCTKU825WcpYs7PjtAQoIJQsU6Eqtj60RJBHxbQsNzj62DZunHFUIaiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEkIJNeCyb0A+fBicIc5nR7xBjKQMB8GA1UdIwQY MBaAFMaWaPNHxVrdd6xRfpMx3ef8NVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wNjA5NjktNWNhZi00MThmLThjMjUt YWNiMjcyM2E1MDc2LzEvU1FnazE0TEp2UUQ1OEdKd2h6bWRIdkVHTXBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8wNjA5NjktNWNhZi00MThmLThjMjUtYWNiMjcyM2E1MDc2 LzEveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+BEMA0G CSqGSIb3DQEBCwUAA4IBAQBFKWZUH69Zj8CqnZBkLrQN7onzIAqWoE32Cbj1pZfQ +++MG+pGARgHpb3Ly7vbFCbosVDdkb+p7pO/gPdRBP+TzPF75qLNXnEaQsjcOVrV G2+kyn4294XlP8+Wzcnd03eLTQHnF8XYEpTDlkujTpGkEyMHZekX+DjBpPM2K/W8 SQvpoNok/MSCYjMA8TvwiyvmIO5JNiHmAWvCtIVtU0RbtBwZztRrGw9aj1TwZ4IP u3K03fM+jj5ohPvmvN7ZKjoXF3NHWwTbXAVZkQrJbYhhf6unrjL8WmtKLPcaNbL1 tpWYuMiD4OJkWIqmH+/Yr7b1BIWJmTFe4nQJ+RqN8WfA -----END CERTIFICATE-----Generated at Tue Feb 10 01:24:27 2026 by rpki-client