This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/kSQLLzfbaKVkpy2XDmfOOQR4kf0.roa File: kSQLLzfbaKVkpy2XDmfOOQR4kf0.roa (raw, json) Hash identifier: 4yJ7OIn+C8eTelE1cgdNN4SfqUsa616v8W0PFTdO90c= Subject key identifier: 91:24:0B:2F:37:DB:68:A5:64:A7:2D:97:0E:67:CE:39:04:78:91:FD Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Certificate serial: 019B7E383961A9061E66037B65D89A942F09 Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/kSQLLzfbaKVkpy2XDmfOOQR4kf0.roa Signing time: Fri 02 Jan 2026 10:19:32 +0000 ROA not before: Fri 02 Jan 2026 10:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 46.226.125.0/24 maxlen: 24 176.118.34.0/24 maxlen: 24 185.21.131.0/24 maxlen: 24 185.25.104.0/24 maxlen: 24 185.248.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:39:61:a9:06:1e:66:03:7b:65:d8:9a:94:2f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Validity Not Before: Jan 2 10:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91240b2f37db68a564a72d970e67ce39047891fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:fb:e3:fc:47:4e:e9:26:f4:c2:2c:c1:88: 27:00:15:de:66:91:88:b0:87:ee:c8:12:39:4a:dc: 89:37:1d:8b:3c:66:2e:cb:f2:00:85:fa:1c:00:ce: 75:62:f3:5e:11:87:0c:6b:45:b4:12:77:d5:58:93: 37:b8:6f:90:18:ad:dc:24:ac:5c:ab:64:83:23:ff: 13:39:57:66:57:18:dc:b4:9c:61:87:7a:5e:87:23: 21:51:3e:27:5b:89:91:54:9a:f6:fb:5a:bb:79:d3: 22:38:82:dd:24:ab:cc:d9:68:c3:27:69:f7:ce:fb: d5:fd:11:65:7c:38:ee:10:b1:70:0d:f4:93:42:06: 1d:f8:0c:ac:f2:a0:d5:38:82:4b:57:11:8c:19:a2: dc:ab:30:94:e8:04:82:0b:bd:51:9a:88:bf:36:b5: 2d:a3:5e:99:02:76:e1:ec:55:d0:41:a8:89:2e:92: 94:68:21:01:bf:60:3a:cf:66:02:bd:3b:a1:72:cf: 83:fb:f9:f6:2c:7a:44:1f:25:72:ad:10:08:07:f2: 47:53:f6:b0:f6:be:9b:2b:80:a6:46:91:9e:1c:12: 48:e3:4c:0e:1a:a0:87:f7:08:88:ee:02:5e:23:d2: db:b4:5b:ab:10:22:53:b9:19:e5:81:f7:94:60:a4: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:24:0B:2F:37:DB:68:A5:64:A7:2D:97:0E:67:CE:39:04:78:91:FD X509v3 Authority Key Identifier: keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/kSQLLzfbaKVkpy2XDmfOOQR4kf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.125.0/24 176.118.34.0/24 185.21.131.0/24 185.25.104.0/24 185.248.135.0/24 Signature Algorithm: sha256WithRSAEncryption 67:07:33:25:88:d9:11:e5:7b:10:f4:e2:a5:ab:5f:2e:f5:26: e6:93:5a:5e:52:fd:b7:a0:ac:f0:16:55:35:5f:f0:fc:6b:5c: 31:5c:2c:ca:1b:e7:06:3e:b4:82:a3:1b:46:c8:2e:a3:20:48: eb:69:9d:f3:09:22:57:cf:c0:7d:5e:e6:76:8e:b0:25:55:71: 9c:f2:05:dd:06:7c:e3:65:06:ac:98:42:ca:c0:4c:6f:ac:cb: fe:60:35:97:d9:81:b1:cf:39:5e:6b:5e:7c:6f:4c:ac:77:86: 45:92:07:f6:04:3a:3a:87:20:be:60:30:3a:6d:3c:5f:1f:ed: a5:77:dc:8b:c5:8e:db:83:50:17:f0:24:86:5c:4b:a0:3d:39: c4:a0:38:d8:d5:32:42:6b:d7:28:f7:6a:80:44:6b:40:24:d1: 76:36:9f:11:fc:94:13:cd:17:d5:bb:78:9c:92:25:38:70:ae: 95:1d:1f:ff:d3:1f:98:cf:4e:7e:04:8e:7a:d4:e1:cf:a0:d1: 4d:d5:7c:c0:ed:c4:2a:f5:3d:c7:61:f2:fb:db:73:37:7a:1f: 34:84:48:7d:e5:e0:94:51:b9:0d:9d:19:ca:2b:e1:ef:12:26: 1b:45:9f:3d:24:3e:32:35:1d:06:e7:8f:19:51:4a:cb:8e:3f: ae:a8:d8:5e -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+ODlhqQYeZgN7ZdialC8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw ZTJjZDgwHhcNMjYwMTAyMTAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTI0MGIyZjM3ZGI2OGE1NjRhNzJkOTcwZTY3Y2UzOTA0Nzg5MWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH/74/xHTukm9MIswYgnABXeZpGI sIfuyBI5StyJNx2LPGYuy/IAhfocAM51YvNeEYcMa0W0EnfVWJM3uG+QGK3cJKxc q2SDI/8TOVdmVxjctJxhh3pehyMhUT4nW4mRVJr2+1q7edMiOILdJKvM2WjDJ2n3 zvvV/RFlfDjuELFwDfSTQgYd+Ays8qDVOIJLVxGMGaLcqzCU6ASCC71Rmoi/NrUt o16ZAnbh7FXQQaiJLpKUaCEBv2A6z2YCvTuhcs+D+/n2LHpEHyVyrRAIB/JHU/aw 9r6bK4CmRpGeHBJI40wOGqCH9wiI7gJeI9LbtFurECJTuRnlgfeUYKQa1wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFJEkCy8322ilZKctlw5nzjkEeJH9MB8GA1UdIwQY MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt M2JlY2NhYWUzMzZkLzEva1NRTEx6ZmJhS1ZrcHkyWERtZk9PUVI0a2YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALuJ9AwQA sHYiAwQAuRWDAwQAuRloAwQAufiHMA0GCSqGSIb3DQEBCwUAA4IBAQBnBzMliNkR 5XsQ9OKlq18u9Sbmk1peUv23oKzwFlU1X/D8a1wxXCzKG+cGPrSCoxtGyC6jIEjr aZ3zCSJXz8B9XuZ2jrAlVXGc8gXdBnzjZQasmELKwExvrMv+YDWX2YGxzzlea158 b0ysd4ZFkgf2BDo6hyC+YDA6bTxfH+2ld9yLxY7bg1AX8CSGXEugPTnEoDjY1TJC a9co92qARGtAJNF2Np8R/JQTzRfVu3ickiU4cK6VHR//0x+Yz05+BI561OHPoNFN 1XzA7cQq9T3HYfL723M3eh80hEh95eCUUbkNnRnKK+HvEiYbRZ89JD4yNR0G548Z UUrLjj+uqNhe -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:10 2026 by rpki-client