This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/sq38IYtkwvLbxoqDW_7wpbQZMOY.roa File: sq38IYtkwvLbxoqDW_7wpbQZMOY.roa (raw, json) Hash identifier: 9FNCpi3tI2psX/axIbavUXntYIPjv5HbB/DRF/Sxvrg= Subject key identifier: B2:AD:FC:21:8B:64:C2:F2:DB:C6:8A:83:5B:FE:F0:A5:B4:19:30:E6 Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168 Certificate serial: 019B7835345D990D18DB9B658445C96D82B7 Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/sq38IYtkwvLbxoqDW_7wpbQZMOY.roa Signing time: Thu 01 Jan 2026 06:18:30 +0000 ROA not before: Thu 01 Jan 2026 06:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29169 IP address blocks: 46.226.104.0/21 maxlen: 32 185.26.124.0/22 maxlen: 32 213.167.228.0/22 maxlen: 24 213.167.240.0/20 maxlen: 24 217.70.176.0/20 maxlen: 32 2001:4b98::/31 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:34:5d:99:0d:18:db:9b:65:84:45:c9:6d:82:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168 Validity Not Before: Jan 1 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2adfc218b64c2f2dbc68a835bfef0a5b41930e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:79:4e:8a:38:87:47:8e:4e:f0:7f:a8:df:4d: b0:9f:ed:98:5a:90:d3:d8:52:e3:7b:b3:b8:f5:18: 74:94:b8:de:74:dd:b5:26:97:cd:ef:e0:2e:8d:09: 98:04:84:68:42:7d:21:ef:a8:24:a5:10:4e:fa:4e: 02:04:6e:a6:79:14:d3:7a:92:ba:cb:cc:b1:a0:70: be:f1:b1:c4:aa:1a:50:bb:13:65:ec:b4:cb:d3:ef: 87:10:4e:25:29:0a:68:57:16:09:aa:92:3c:fe:12: c5:28:22:6b:66:89:5e:a5:04:47:4e:e7:0d:fe:ad: 87:9d:75:8d:4b:69:a2:99:a0:03:7a:21:62:4e:08: 83:43:74:04:cd:11:38:03:e3:ca:9b:05:33:f2:b0: 57:7c:62:52:d7:d6:38:71:1d:2e:8a:2f:1b:6f:4e: 1a:7a:ac:7c:8c:5d:da:41:e9:f0:26:89:2d:e5:ab: 7a:c9:ea:58:70:ab:dc:86:e6:63:70:db:c9:8e:e4: 3f:a1:37:ef:bc:52:cb:5d:76:98:f6:41:e6:fb:07: 24:8b:17:58:13:87:a4:de:4f:8f:e1:87:56:4d:69: 14:15:eb:fc:a5:6c:04:c4:75:31:b2:f5:0d:eb:d8: 84:c1:93:8d:31:cd:e0:d8:78:f6:c4:9a:ea:a6:bd: 3d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AD:FC:21:8B:64:C2:F2:DB:C6:8A:83:5B:FE:F0:A5:B4:19:30:E6 X509v3 Authority Key Identifier: keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/sq38IYtkwvLbxoqDW_7wpbQZMOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.104.0/21 185.26.124.0/22 213.167.228.0/22 213.167.240.0/20 217.70.176.0/20 IPv6: 2001:4b98::/31 Signature Algorithm: sha256WithRSAEncryption b9:b7:c9:f0:be:69:eb:54:47:02:d0:7f:2f:51:48:b8:02:65: 80:41:8f:b2:26:95:1f:a7:a3:c6:2b:04:91:ee:4b:1f:75:c7: 4d:30:c0:78:d9:8e:c2:7e:14:95:16:85:b7:63:24:7d:d1:ba: e3:5d:f0:04:08:43:d3:13:18:26:21:ae:7a:d6:6b:2b:5f:2c: 56:df:b9:37:30:7c:ef:5b:d3:b4:ed:b9:9a:68:ec:7d:38:ef: 21:2e:61:02:f4:12:5e:ac:80:83:58:3b:4c:d8:20:14:d8:8e: 65:bd:6a:d1:26:15:ea:6d:76:74:95:50:a2:03:55:85:d3:e2: 62:a1:43:4e:5c:ba:1e:46:a3:2d:79:c9:b1:ef:cd:f7:89:a1: 71:f7:d3:c0:78:c5:11:fe:ef:ba:93:1d:ee:e6:23:0e:9f:4a: b0:5d:c5:c8:f3:ca:a5:cc:41:0f:20:9d:f4:28:78:15:9d:05: 26:9f:0b:9a:e6:b7:9a:4c:6c:7e:cd:9d:d7:87:94:6f:ac:eb: 89:94:78:31:90:d1:0f:09:c7:ec:8f:c4:cb:76:ed:7b:32:01: f1:f5:b5:8f:f7:dd:d3:a4:33:a1:8a:7d:d4:8e:ef:64:ac:ba: e0:08:ef:e5:b6:a8:2f:8a:2f:41:27:f3:2f:d7:5b:78:17:c1: 42:a1:b4:a0 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt4NTRdmQ0Y25tlhEXJbYK3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYTBlYzU5NTY0MzI0MjM3NDIwZDUwNmI5YjQ5OGQ3NTJl ZTIxNjgwHhcNMjYwMTAxMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmFkZmMyMThiNjRjMmYyZGJjNjhhODM1YmZlZjBhNWI0MTkzMGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXlOijiHR45O8H+o302wn+2YWpDT 2FLje7O49Rh0lLjedN21JpfN7+AujQmYBIRoQn0h76gkpRBO+k4CBG6meRTTepK6 y8yxoHC+8bHEqhpQuxNl7LTL0++HEE4lKQpoVxYJqpI8/hLFKCJrZolepQRHTucN /q2HnXWNS2mimaADeiFiTgiDQ3QEzRE4A+PKmwUz8rBXfGJS19Y4cR0uii8bb04a eqx8jF3aQenwJokt5at6yepYcKvchuZjcNvJjuQ/oTfvvFLLXXaY9kHm+wckixdY E4ek3k+P4YdWTWkUFev8pWwExHUxsvUN69iEwZONMc3g2Hj2xJrqpr09wwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFLKt/CGLZMLy28aKg1v+8KW0GTDmMB8GA1UdIwQY MBaAFLyg7FlWQyQjdCDVBrm0mNdS7iFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdktEc1dWWkRKQ04wSU5VR3ViU1kxMUx1SVdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yNDNiNTMtNGI5NC00MjQ0LWE4ZWMt N2M1NDlmMWVkMTZjLzEvc3EzOElZdGt3dkxieG9xRFdfN3dwYlFaTU9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yNDNiNTMtNGI5NC00MjQ0LWE4ZWMtN2M1NDlmMWVkMTZj LzEvdktEc1dWWkRKQ04wSU5VR3ViU1kxMUx1SVdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDLuJoAwQC uRp8AwQC1afkAwQE1afwAwQE2UawMA0EAgACMAcDBQEgAUuYMA0GCSqGSIb3DQEB CwUAA4IBAQC5t8nwvmnrVEcC0H8vUUi4AmWAQY+yJpUfp6PGKwSR7ksfdcdNMMB4 2Y7CfhSVFoW3YyR90brjXfAECEPTExgmIa561msrXyxW37k3MHzvW9O07bmaaOx9 OO8hLmEC9BJerICDWDtM2CAU2I5lvWrRJhXqbXZ0lVCiA1WF0+JioUNOXLoeRqMt ecmx7833iaFx99PAeMUR/u+6kx3u5iMOn0qwXcXI88qlzEEPIJ30KHgVnQUmnwua 5reaTGx+zZ3Xh5RvrOuJlHgxkNEPCcfsj8TLdu17MgHx9bWP993TpDOhin3Uju9k rLrgCO/ltqgvii9BJ/Mv11t4F8FCobSg -----END CERTIFICATE-----Generated at Sun Jan 11 21:00:53 2026 by rpki-client