This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/xHgaXte9HqMrsf8WuO3SOUGon4k.roa File: xHgaXte9HqMrsf8WuO3SOUGon4k.roa (raw, json) Hash identifier: BLSOqyIwGSV17AMpLrGkfpwd4bhMWIYoasF0mEgmUds= Subject key identifier: C4:78:1A:5E:D7:BD:1E:A3:2B:B1:FF:16:B8:ED:D2:39:41:A8:9F:89 Certificate issuer: /CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13 Certificate serial: 019B7CEE2E127E380F01A559DDF9E09CCD94 Authority key identifier: F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/xHgaXte9HqMrsf8WuO3SOUGon4k.roa Signing time: Fri 02 Jan 2026 04:19:02 +0000 ROA not before: Fri 02 Jan 2026 04:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48016 IP address blocks: 185.57.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.mft rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2e:12:7e:38:0f:01:a5:59:dd:f9:e0:9c:cd:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13 Validity Not Before: Jan 2 04:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4781a5ed7bd1ea32bb1ff16b8edd23941a89f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:6d:f8:26:91:69:d2:99:f2:13:ec:18:56: b5:b8:4b:f2:64:ea:93:b3:98:a5:65:1a:f4:d9:76: 75:52:8f:30:36:4b:84:14:a0:3b:a3:5e:37:9e:59: 35:56:72:dc:e4:d0:d3:fc:be:e5:93:f1:88:42:bd: 0e:94:ca:7e:f1:75:5e:b8:23:0d:ed:04:68:80:7b: 96:bb:61:d8:a0:ce:52:1c:69:b9:37:a6:e1:28:aa: 8a:2b:2f:91:ed:3d:45:a2:ab:3b:ed:27:eb:f6:d1: 38:b2:c7:d7:b2:cf:14:1e:c0:2e:c4:ee:d1:ae:b4: c4:d4:13:e0:bd:52:10:58:c1:ef:e4:b9:48:ab:2c: 6b:13:54:9f:69:ab:73:d4:8f:ba:9f:53:9e:15:ad: 85:c2:06:1b:c4:e5:92:14:87:40:26:d0:66:71:6d: d4:32:83:f4:16:61:43:41:22:a0:d8:70:30:05:79: c1:01:3d:90:c0:89:b8:29:9e:f0:ee:3c:5c:7b:f2: 24:b2:85:5f:5c:9a:6b:35:9f:bb:75:dd:a8:ff:e0: e6:a8:3d:70:6d:61:be:4c:aa:ec:b7:cf:6b:80:e1: db:67:7d:70:84:ec:0a:ff:24:b2:61:e8:ce:ab:dc: 62:40:11:ff:b8:91:15:1d:80:e0:a3:50:c2:19:a9: d8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:78:1A:5E:D7:BD:1E:A3:2B:B1:FF:16:B8:ED:D2:39:41:A8:9F:89 X509v3 Authority Key Identifier: keyid:F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/xHgaXte9HqMrsf8WuO3SOUGon4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.57.18.0/24 Signature Algorithm: sha256WithRSAEncryption 17:32:84:55:f0:d4:bf:ac:ca:a4:40:71:7c:75:06:bd:e1:d2: 8a:e4:96:a7:6b:af:84:4e:73:79:6c:87:20:b9:76:4a:b5:40: ee:45:f3:b8:de:2b:7e:d2:ec:50:c0:d8:60:95:df:32:8e:d1: 18:af:df:05:49:b6:b3:59:c9:fb:d7:74:25:30:e1:34:4a:90: b5:4e:b2:a9:ed:e5:e3:0c:97:72:e3:3c:63:3e:52:10:5d:fc: 86:4c:03:d3:dd:67:17:cc:76:16:e4:35:99:3a:d0:f1:d5:ec: 35:b6:8e:a5:fc:97:5a:e7:32:26:eb:c8:49:d3:2a:71:cd:d8: 0c:27:93:5e:06:f1:55:fa:28:54:fa:6a:de:8d:34:a8:aa:c8: 57:cf:3b:db:b2:40:39:62:4e:42:7e:76:19:c7:f7:ac:7f:c8: 3f:f3:22:65:40:1e:ad:2c:0e:51:48:3e:06:bc:37:b6:e6:75: cc:ae:1d:6f:27:7d:3f:4a:12:de:59:2f:50:99:ac:c0:02:e0: 64:35:6e:e6:f6:41:d2:a9:6e:a8:60:f9:81:cd:55:20:1b:e2: 65:e1:bb:b0:87:e0:a6:ed:db:fd:0b:3a:6c:5f:62:b0:a9:64: f7:88:26:60:2d:80:e0:1d:f0:64:8c:d4:de:61:da:31:77:6e: b3:5d:a3:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87i4SfjgPAaVZ3fngnM2UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZjQ5MDJkMjQwYjI1ZDdlYjc3ZjRmMDJlMjRmMjMzZjQ0 YTlhMTMwHhcNMjYwMTAyMDQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDc4MWE1ZWQ3YmQxZWEzMmJiMWZmMTZiOGVkZDIzOTQxYTg5Zjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYVt+CaRadKZ8hPsGFa1uEvyZOqT s5ilZRr02XZ1Uo8wNkuEFKA7o143nlk1VnLc5NDT/L7lk/GIQr0OlMp+8XVeuCMN 7QRogHuWu2HYoM5SHGm5N6bhKKqKKy+R7T1Foqs77Sfr9tE4ssfXss8UHsAuxO7R rrTE1BPgvVIQWMHv5LlIqyxrE1Sfaatz1I+6n1OeFa2FwgYbxOWSFIdAJtBmcW3U MoP0FmFDQSKg2HAwBXnBAT2QwIm4KZ7w7jxce/IksoVfXJprNZ+7dd2o/+DmqD1w bWG+TKrst89rgOHbZ31whOwK/ySyYejOq9xiQBH/uJEVHYDgo1DCGanYJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMR4Gl7XvR6jK7H/Frjt0jlBqJ+JMB8GA1UdIwQY MBaAFPf0kC0kCyXX63f08C4k8jP0SpoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jNmE0ZmUtYTc2MC00YzRjLTgxYjAt NTNhYjg4YzVmMmM3LzEveEhnYVh0ZTlIcU1yc2Y4V3VPM1NPVUdvbjRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9jNmE0ZmUtYTc2MC00YzRjLTgxYjAtNTNhYjg4YzVmMmM3 LzEvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTkSMA0G CSqGSIb3DQEBCwUAA4IBAQAXMoRV8NS/rMqkQHF8dQa94dKK5Jana6+ETnN5bIcg uXZKtUDuRfO43it+0uxQwNhgld8yjtEYr98FSbazWcn713QlMOE0SpC1TrKp7eXj DJdy4zxjPlIQXfyGTAPT3WcXzHYW5DWZOtDx1ew1to6l/Jda5zIm68hJ0ypxzdgM J5NeBvFV+ihU+mrejTSoqshXzzvbskA5Yk5CfnYZx/esf8g/8yJlQB6tLA5RSD4G vDe25nXMrh1vJ30/ShLeWS9QmazAAuBkNW7m9kHSqW6oYPmBzVUgG+Jl4buwh+Cm 7dv9CzpsX2KwqWT3iCZgLYDgHfBkjNTeYdoxd26zXaMv -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:50 2026 by rpki-client