This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/SxQI_3_Y-7ZpLPPNmq8yQolj8a4.roa File: SxQI_3_Y-7ZpLPPNmq8yQolj8a4.roa (raw, json) Hash identifier: /jpAQ90QqsOsi7QGg9C6CHgPGdkAjYPh2JAoZXEh1HE= Subject key identifier: 4B:14:08:FF:7F:D8:FB:B6:69:2C:F3:CD:9A:AF:32:42:89:63:F1:AE Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019A73268D29DC79E12616AFD77CBE79985E Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/SxQI_3_Y-7ZpLPPNmq8yQolj8a4.roa Signing time: Tue 11 Nov 2025 13:41:37 +0000 ROA not before: Tue 11 Nov 2025 13:41:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7029 IP address blocks: 81.22.131.0/24 maxlen: 24 81.22.135.0/24 maxlen: 24 81.22.138.0/24 maxlen: 24 81.22.141.0/24 maxlen: 24 89.185.0.0/24 maxlen: 24 109.72.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:26:8d:29:dc:79:e1:26:16:af:d7:7c:be:79:98:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Nov 11 13:41:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4b1408ff7fd8fbb6692cf3cd9aaf32428963f1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:f1:72:e9:c5:6f:9d:ec:92:f8:70:f1:f9: a1:4b:cf:2a:4a:c0:27:5f:d9:db:9f:c3:aa:65:c5: c1:ed:d7:be:78:aa:6b:73:93:8e:20:92:f5:89:1b: 6c:eb:22:fc:9a:59:fc:a4:c8:7d:46:91:c0:ae:a2: b9:33:b4:b1:7d:b8:f6:c4:bf:88:4f:46:25:63:40: cb:0e:db:c6:35:aa:41:cd:3a:a2:eb:cf:b7:9b:3f: 99:21:ca:1e:a2:03:ea:90:0b:db:18:90:85:78:6e: c3:96:27:77:bd:0c:71:99:1b:67:87:54:66:e4:04: 23:6c:ce:a0:c2:a5:eb:93:37:0e:37:39:cd:f1:3a: e0:0f:94:36:9f:a6:34:d3:bd:82:c4:68:59:b4:c6: f7:42:4b:4a:42:b2:c9:c2:39:0f:cb:29:8e:69:0a: bf:98:1c:ba:9c:96:84:0a:f2:9b:8d:a0:ce:e2:c9: 51:6a:e5:a9:88:c6:63:65:f2:aa:89:fe:95:26:98: fd:f3:c0:e0:56:26:4b:90:99:6c:1b:4a:b2:39:30: 3c:c6:75:aa:95:09:a4:d9:83:58:a2:6f:07:49:eb: 62:ae:75:47:8e:16:43:6f:71:e0:c8:b8:67:45:4b: 6a:e8:21:8d:3c:e5:d6:0d:08:ca:5e:06:ac:f8:da: df:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:14:08:FF:7F:D8:FB:B6:69:2C:F3:CD:9A:AF:32:42:89:63:F1:AE X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/SxQI_3_Y-7ZpLPPNmq8yQolj8a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.131.0/24 81.22.135.0/24 81.22.138.0/24 81.22.141.0/24 89.185.0.0/24 109.72.123.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:f1:de:4b:14:21:da:c8:6b:2d:3c:a9:5e:de:55:bf:7a:84: 46:3a:11:19:67:16:4a:3f:e8:5e:4d:64:3e:76:1a:da:72:a4: 1c:78:4e:15:84:c9:12:36:c3:68:77:ac:ef:43:9d:30:9f:86: 39:ad:55:a3:6c:13:35:f6:3a:df:3f:4a:fe:06:f6:04:e1:d0: 51:f8:03:3e:f9:2c:14:ce:10:71:97:1a:d5:78:a2:93:ec:39: a1:ac:8f:e9:8c:b9:f5:63:87:b1:bd:6d:ab:fb:54:dc:14:ae: c4:b1:2c:8f:78:1a:b0:70:c1:82:a6:f4:41:e3:08:db:a6:5a: aa:20:77:1f:56:f6:6e:0a:58:95:6f:2e:34:96:67:f4:11:f4: 2c:f2:fa:37:27:74:06:df:02:b6:15:6d:ab:c8:4c:a6:db:73: f3:aa:b7:1e:00:f7:67:90:e9:bf:ae:18:2d:35:9d:55:d2:46: ac:c8:ef:6f:9c:a0:ee:b4:77:a5:95:37:84:4a:fc:c5:40:92: 59:df:8f:c3:9d:ec:47:8b:23:3b:50:b8:a8:a2:44:ff:08:1b: c8:70:5d:b9:a2:d9:43:44:a2:f2:21:ce:ab:e3:96:1a:13:ca: 4b:47:5f:f0:fe:7a:32:46:8c:f1:ef:1e:52:74:26:c0:1e:ac: 90:7d:86:89 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZpzJo0p3HnhJhav13y+eZheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUxMTExMTM0MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjE0MDhmZjdmZDhmYmI2NjkyY2YzY2Q5YWFmMzI0Mjg5NjNmMWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3TxcunFb53skvhw8fmhS88qSsAn X9nbn8OqZcXB7de+eKprc5OOIJL1iRts6yL8mln8pMh9RpHArqK5M7Sxfbj2xL+I T0YlY0DLDtvGNapBzTqi68+3mz+ZIcoeogPqkAvbGJCFeG7Dlid3vQxxmRtnh1Rm 5AQjbM6gwqXrkzcONznN8TrgD5Q2n6Y0072CxGhZtMb3QktKQrLJwjkPyymOaQq/ mBy6nJaECvKbjaDO4slRauWpiMZjZfKqif6VJpj988DgViZLkJlsG0qyOTA8xnWq lQmk2YNYom8HSetirnVHjhZDb3HgyLhnRUtq6CGNPOXWDQjKXgas+NrfeQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFEsUCP9/2Pu2aSzzzZqvMkKJY/GuMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvU3hRSV8zX1ktN1pwTFBQTm1xOHlRb2xqOGE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAURaDAwQA URaHAwQAURaKAwQAURaNAwQAWbkAAwQAbUh7MA0GCSqGSIb3DQEBCwUAA4IBAQCc 8d5LFCHayGstPKle3lW/eoRGOhEZZxZKP+heTWQ+dhracqQceE4VhMkSNsNod6zv Q50wn4Y5rVWjbBM19jrfP0r+BvYE4dBR+AM++SwUzhBxlxrVeKKT7DmhrI/pjLn1 Y4exvW2r+1TcFK7EsSyPeBqwcMGCpvRB4wjbplqqIHcfVvZuCliVby40lmf0EfQs 8vo3J3QG3wK2FW2ryEym23PzqrceAPdnkOm/rhgtNZ1V0kasyO9vnKDutHellTeE SvzFQJJZ34/DnexHiyM7ULiookT/CBvIcF25otlDRKLyIc6r45YaE8pLR1/w/noy Rozx7x5SdCbAHqyQfYaJ -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:28 2025 by rpki-client