This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/SQMkOh0lAhnLUEE_3rZZmavte74.roa File: SQMkOh0lAhnLUEE_3rZZmavte74.roa (raw, json) Hash identifier: snhMe8j8Fr+taJDX59zfUjo276EpEtnhIdyeRCqRDG8= Subject key identifier: 49:03:24:3A:1D:25:02:19:CB:50:41:3F:DE:B6:59:99:AB:ED:7B:BE Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8 Certificate serial: 019B791026685A2BBA34F15AEA64345D42B4 Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/SQMkOh0lAhnLUEE_3rZZmavte74.roa Signing time: Thu 01 Jan 2026 10:17:40 +0000 ROA not before: Thu 01 Jan 2026 10:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.209.208.0/24 maxlen: 24 185.209.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:26:68:5a:2b:ba:34:f1:5a:ea:64:34:5d:42:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=613d23f2121327d917d708d8fe153382455959a8 Validity Not Before: Jan 1 10:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4903243a1d250219cb50413fdeb65999abed7bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:82:85:76:5e:5a:b0:cb:b2:0c:66:16:e7:d4: e2:b8:09:5e:b5:9a:26:dd:c2:61:aa:42:93:c3:98: e2:d6:3e:51:7e:a3:7c:6f:78:53:1b:76:31:9d:39: ac:95:86:9d:8f:01:88:1a:5b:ce:34:82:64:01:8d: 97:84:d3:94:66:28:a9:08:c8:40:b0:d6:cb:99:2c: da:91:37:91:f1:d6:a5:11:fc:ef:e2:c4:c5:cc:6a: 51:7a:55:42:91:51:cd:e2:9c:80:71:fd:b8:22:03: f4:71:19:31:4e:9e:4c:c8:f9:c5:4b:48:9a:67:26: 99:23:3e:5b:39:d4:9c:14:89:23:bc:ea:a7:3b:77: a1:23:27:ae:9b:f0:93:4c:60:f2:db:94:ce:05:c8: ae:55:3e:c3:e4:95:60:24:19:af:5c:09:13:67:83: 74:1a:63:5f:5d:fb:12:07:3d:5e:ef:b6:6d:0b:44: a3:1e:fa:b2:4f:65:f4:47:e7:ab:04:42:f6:c2:10: 7a:97:ab:94:53:9e:88:aa:8b:70:e8:73:14:09:e8: e5:85:5c:05:73:59:95:97:cc:4d:df:a9:87:e5:eb: c3:2b:dc:d8:bd:cb:3f:fa:a7:08:5a:e3:37:f7:37: a4:80:db:cd:93:b3:b0:fd:b6:cb:a3:61:65:be:54: 92:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:03:24:3A:1D:25:02:19:CB:50:41:3F:DE:B6:59:99:AB:ED:7B:BE X509v3 Authority Key Identifier: keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/SQMkOh0lAhnLUEE_3rZZmavte74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.208.0/23 Signature Algorithm: sha256WithRSAEncryption a4:a6:7d:4f:70:86:d0:79:90:51:a1:7b:83:d6:ee:63:b6:53: 8f:95:15:e1:79:a2:06:b4:58:c3:32:ee:32:cf:16:97:a3:d4: 9d:ff:cb:7e:32:8f:09:66:4d:66:d9:95:d7:2f:e8:e4:0e:05: 08:88:c5:d1:76:1f:4a:c0:20:4b:8c:d6:df:5f:a1:58:17:ec: b9:26:76:1d:38:76:7c:f7:c3:d0:cf:bb:9c:63:c7:67:ab:00: d7:91:34:e9:18:37:d0:3a:1d:96:10:33:8b:89:5a:7a:87:07: 60:bd:48:23:d3:f4:25:03:a9:b1:85:61:14:52:ac:f7:dc:a8: c3:88:f7:8c:13:a9:5a:cf:15:d8:b3:ad:0c:66:ff:cc:cf:42: 86:a1:e0:26:78:a9:68:ce:ef:11:cf:7e:ef:47:1a:a1:0b:3c: c4:aa:9d:d9:8e:11:8d:35:8c:5d:cf:03:eb:27:41:54:68:a1: 25:74:1b:07:49:bd:39:92:bd:37:2f:01:c8:fe:e9:20:f2:70: bc:da:2c:5e:0a:85:87:b3:e7:ad:ad:cb:ed:59:23:80:bd:95: 27:df:71:b0:6c:3a:08:9e:9b:30:c3:4d:65:34:10:78:62:0b: b8:f5:47:3c:78:e1:33:64:3a:ae:29:fa:67:e7:e7:c5:1e:d7: 6b:bd:f1:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ECZoWiu6NPFa6mQ0XUK0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxM2QyM2YyMTIxMzI3ZDkxN2Q3MDhkOGZlMTUzMzgyNDU1 OTU5YTgwHhcNMjYwMTAxMTAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTAzMjQzYTFkMjUwMjE5Y2I1MDQxM2ZkZWI2NTk5OWFiZWQ3YmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YKFdl5asMuyDGYW59TiuAletZom 3cJhqkKTw5ji1j5RfqN8b3hTG3YxnTmslYadjwGIGlvONIJkAY2XhNOUZiipCMhA sNbLmSzakTeR8dalEfzv4sTFzGpRelVCkVHN4pyAcf24IgP0cRkxTp5MyPnFS0ia ZyaZIz5bOdScFIkjvOqnO3ehIyeum/CTTGDy25TOBciuVT7D5JVgJBmvXAkTZ4N0 GmNfXfsSBz1e77ZtC0SjHvqyT2X0R+erBEL2whB6l6uUU56Iqotw6HMUCejlhVwF c1mVl8xN36mH5evDK9zYvcs/+qcIWuM39zekgNvNk7Ow/bbLo2FlvlSSZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEkDJDodJQIZy1BBP962WZmr7Xu+MB8GA1UdIwQY MBaAFGE9I/ISEyfZF9cI2P4VM4JFWVmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mY2U2YmUtMDg5Ni00NDg3LWFhMzQt N2E2MDViYTQwYzFlLzEvU1FNa09oMGxBaG5MVUVFXzNyWlptYXZ0ZTc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mY2U2YmUtMDg5Ni00NDg3LWFhMzQtN2E2MDViYTQwYzFl LzEvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudHQMA0G CSqGSIb3DQEBCwUAA4IBAQCkpn1PcIbQeZBRoXuD1u5jtlOPlRXheaIGtFjDMu4y zxaXo9Sd/8t+Mo8JZk1m2ZXXL+jkDgUIiMXRdh9KwCBLjNbfX6FYF+y5JnYdOHZ8 98PQz7ucY8dnqwDXkTTpGDfQOh2WEDOLiVp6hwdgvUgj0/QlA6mxhWEUUqz33KjD iPeME6lazxXYs60MZv/Mz0KGoeAmeKlozu8Rz37vRxqhCzzEqp3ZjhGNNYxdzwPr J0FUaKEldBsHSb05kr03LwHI/ukg8nC82ixeCoWHs+etrcvtWSOAvZUn33GwbDoI npsww01lNBB4Ygu49Uc8eOEzZDquKfpn5+fFHtdrvfHr -----END CERTIFICATE-----Generated at Sat Jan 3 01:33:22 2026 by rpki-client