This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/Sq5GF5xDWerJCaR8MKskLCNyA48.roa File: Sq5GF5xDWerJCaR8MKskLCNyA48.roa (raw, json) Hash identifier: Kqk7S9LaQa7Qwv5psViEyLsic7oZB/WO0G83CM5f8/c= Subject key identifier: 4A:AE:46:17:9C:43:59:EA:C9:09:A4:7C:30:AB:24:2C:23:72:03:8F Certificate issuer: /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30 Certificate serial: 019C3D520C38CFFDB7E6AB138C0E133C6B32 Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/Sq5GF5xDWerJCaR8MKskLCNyA48.roa Signing time: Sun 08 Feb 2026 12:55:13 +0000 ROA not before: Sun 08 Feb 2026 12:55:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34854 IP address blocks: 2.56.11.0/24 maxlen: 24 2a07:22c0::/48 maxlen: 48 2a0c:6500:1::/48 maxlen: 48 2a0c:6500:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:3d:52:0c:38:cf:fd:b7:e6:ab:13:8c:0e:13:3c:6b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30 Validity Not Before: Feb 8 12:55:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4aae46179c4359eac909a47c30ab242c2372038f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:68:a1:e0:86:00:1c:13:e2:3d:45:32:76:90: 4c:90:bd:57:7c:d0:d6:09:a6:41:1e:f9:3b:99:db: e2:40:40:5b:5d:7c:b9:f2:11:29:41:47:cf:8b:4a: 02:8c:52:7f:49:cf:10:13:85:db:08:a7:77:df:61: 67:d6:a5:fd:99:21:13:57:b0:42:8e:ad:b7:ae:d2: a5:c9:45:90:6f:cf:7c:a4:35:6a:38:9d:a3:f7:72: b9:7d:17:55:23:c9:02:e8:58:60:fd:9d:35:11:c7: 34:e5:72:22:94:d0:7c:06:1a:55:12:a2:9c:ed:a8: dd:0a:0d:c7:76:6e:2b:d1:f5:89:8f:04:04:7a:4b: 92:71:00:11:8b:85:34:69:e1:81:1a:0a:08:df:57: cb:a5:9c:8f:7d:d8:47:04:5d:10:b3:3c:d8:a6:7f: 94:ec:69:8b:b0:12:3a:f8:6e:ee:7c:d4:fe:9c:0e: 89:7c:20:87:e1:2d:f7:b7:ee:27:98:b2:e7:5e:a6: 8c:1b:30:b5:1c:da:81:d8:80:b9:9c:6a:06:91:62: a4:bb:e3:57:69:c8:89:34:2c:06:53:95:0f:c6:e4: e2:91:39:12:1b:92:3b:d0:d8:ce:66:f1:4e:21:26: fa:b5:40:c6:89:d7:cd:86:1d:d2:81:96:22:47:ff: e2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AE:46:17:9C:43:59:EA:C9:09:A4:7C:30:AB:24:2C:23:72:03:8F X509v3 Authority Key Identifier: keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/Sq5GF5xDWerJCaR8MKskLCNyA48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.11.0/24 IPv6: 2a07:22c0::/48 2a0c:6500:1::/48 2a0c:6500:100::/40 Signature Algorithm: sha256WithRSAEncryption b6:54:cf:49:3e:6f:32:08:fe:09:1d:c8:9c:71:27:0c:c3:df: f7:19:51:3d:e2:60:63:16:40:b4:15:c2:4c:98:bc:12:4b:30: 15:1c:0f:20:72:1a:e2:b5:f6:08:d5:b6:cf:46:59:80:be:90: 20:00:07:08:1a:9d:c2:78:94:8d:90:8b:2d:e4:cf:94:f2:1f: 22:a2:e7:d5:95:59:f6:a5:16:e7:f9:a5:82:5a:41:89:b9:11: ec:d2:05:bc:c0:18:8d:24:a0:5f:a1:f0:d1:49:e2:7a:9f:41: a8:8e:38:82:78:85:ac:ef:cd:9e:a0:92:d2:85:85:59:90:49: c0:16:bd:9d:52:bd:63:66:7e:ac:28:39:fe:5f:e5:b3:3f:76: 51:f6:79:80:21:8a:11:43:d1:40:6b:bd:96:18:47:95:29:fb: 62:c8:c2:53:bd:b0:57:68:e0:02:7b:85:dc:7c:fc:d1:06:b0: 92:fc:d3:c5:00:1f:fb:09:af:c2:06:77:b2:fc:36:d2:fd:9c: 8f:b3:24:97:ad:02:d7:45:bf:57:fb:14:e5:46:b5:7d:59:0e: be:3e:25:db:bb:71:fc:f9:69:05:11:fd:dd:f6:80:6e:bb:01: f8:e0:50:94:fa:01:fa:f1:d4:df:f8:7a:67:73:72:89:a6:f7: 28:65:ba:78 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZw9Ugw4z/235qsTjA4TPGsyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNmQxZGM2Y2FhNDFkM2JlZmZlOGQxZGEyNjcxYTUwZTdm NzlhMzAwHhcNMjYwMjA4MTI1NTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWFlNDYxNzljNDM1OWVhYzkwOWE0N2MzMGFiMjQyYzIzNzIwMzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Gih4IYAHBPiPUUydpBMkL1XfNDW CaZBHvk7mdviQEBbXXy58hEpQUfPi0oCjFJ/Sc8QE4XbCKd332Fn1qX9mSETV7BC jq23rtKlyUWQb898pDVqOJ2j93K5fRdVI8kC6Fhg/Z01Ecc05XIilNB8BhpVEqKc 7ajdCg3Hdm4r0fWJjwQEekuScQARi4U0aeGBGgoI31fLpZyPfdhHBF0QszzYpn+U 7GmLsBI6+G7ufNT+nA6JfCCH4S33t+4nmLLnXqaMGzC1HNqB2IC5nGoGkWKku+NX aciJNCwGU5UPxuTikTkSG5I70NjOZvFOISb6tUDGidfNhh3SgZYiR//iRwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFEquRhecQ1nqyQmkfDCrJCwjcgOPMB8GA1UdIwQY MBaAFJ5tHcbKpB077/6NHaJnGlDn95owMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm0wZHhzcWtIVHZ2X28wZG9tY2FVT2YzbWpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xNDkxZjktZGM3Ni00Nzc3LWI1YmUt ODNmOWE4ZDFkNGQ2LzEvU3E1R0Y1eERXZXJKQ2FSOE1Lc2tMQ055QTQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xNDkxZjktZGM3Ni00Nzc3LWI1YmUtODNmOWE4ZDFkNGQ2 LzEvbm0wZHhzcWtIVHZ2X28wZG9tY2FVT2YzbWpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAMBAIAATAGAwQAAjgLMCAE AgACMBoDBwAqByLAAAADBwAqDGUAAAEDBgAqDGUAATANBgkqhkiG9w0BAQsFAAOC AQEAtlTPST5vMgj+CR3InHEnDMPf9xlRPeJgYxZAtBXCTJi8EkswFRwPIHIa4rX2 CNW2z0ZZgL6QIAAHCBqdwniUjZCLLeTPlPIfIqLn1ZVZ9qUW5/mlglpBibkR7NIF vMAYjSSgX6Hw0Uniep9BqI44gniFrO/NnqCS0oWFWZBJwBa9nVK9Y2Z+rCg5/l/l sz92UfZ5gCGKEUPRQGu9lhhHlSn7YsjCU72wV2jgAnuF3Hz80QawkvzTxQAf+wmv wgZ3svw20v2cj7Mkl60C10W/V/sU5Ua1fVkOvj4l27tx/PlpBRH93faAbrsB+OBQ lPoB+vHU3/h6Z3Nyiab3KGW6eA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:35 2026 by rpki-client