This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/RsPq-Q75oYdBP6d7MT59xlgY-HQ.roa File: RsPq-Q75oYdBP6d7MT59xlgY-HQ.roa (raw, json) Hash identifier: Hb85y/nsx1XdLTmRRWMyt3fqQ9P1nyZYPAXbyIk10J0= Subject key identifier: 46:C3:EA:F9:0E:F9:A1:87:41:3F:A7:7B:31:3E:7D:C6:58:18:F8:74 Certificate issuer: /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd Certificate serial: 019B7A5AF7AB9B33D1D742D0D8B6CDB9AEEC Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/RsPq-Q75oYdBP6d7MT59xlgY-HQ.roa Signing time: Thu 01 Jan 2026 16:19:00 +0000 ROA not before: Thu 01 Jan 2026 16:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 185.59.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f7:ab:9b:33:d1:d7:42:d0:d8:b6:cd:b9:ae:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd Validity Not Before: Jan 1 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46c3eaf90ef9a187413fa77b313e7dc65818f874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6a:f7:5a:ca:69:db:d9:8d:60:5f:2d:5a:85: 11:3c:53:1e:11:b0:35:d3:f5:46:e1:3a:20:05:f9: 21:d4:07:ff:68:dd:cc:48:fc:48:02:40:5a:82:5b: 93:f9:1b:b2:bb:9a:14:89:45:41:d9:33:cd:c6:1b: a5:09:3f:99:fb:23:c0:db:dc:b3:58:5f:5e:29:a5: 26:fa:af:9e:26:18:8a:39:6d:65:ea:34:2a:06:c9: 38:ea:a8:f5:16:9d:9a:3c:cf:09:53:f0:e6:ea:cd: cc:93:59:5c:7c:97:96:a7:18:c4:d2:59:23:49:5f: fc:d2:53:40:c6:dc:d2:1f:ea:4a:7e:b4:e7:fd:41: 99:b3:ce:2c:0b:d9:42:1e:c1:10:ab:3e:95:a6:5b: 7c:6c:f7:dd:bb:7c:d5:8d:3f:52:f8:f6:23:d4:d9: 96:09:cd:6d:5f:d0:ee:64:bc:db:60:7d:78:6e:84: d7:2d:17:81:cb:33:ca:79:66:91:59:cd:34:5f:d7: 5c:ee:47:75:b1:36:9f:bd:e5:da:55:6d:6c:59:78: 1e:40:05:70:43:04:d5:59:91:b5:c1:f6:75:1d:49: f2:db:bc:9d:4b:ae:c7:a9:ea:31:ed:8e:ca:d0:a8: f0:ff:a0:6d:c9:0b:8e:eb:ac:a9:a1:76:82:8e:17: 83:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C3:EA:F9:0E:F9:A1:87:41:3F:A7:7B:31:3E:7D:C6:58:18:F8:74 X509v3 Authority Key Identifier: keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/RsPq-Q75oYdBP6d7MT59xlgY-HQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.59.52.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:d0:8b:87:e2:fd:54:3a:7c:0d:41:73:03:79:db:2a:ee:29: 48:92:8b:7c:67:dd:da:a9:c9:31:b3:52:c0:1a:4b:37:c3:15: 08:b1:5b:32:33:33:03:ae:87:d5:53:fe:3e:27:3a:cc:b7:78: a2:43:75:46:9b:82:5f:7a:c9:8c:60:d5:c5:dc:70:ed:9d:39: 69:c4:d9:d7:7f:f3:ab:03:bd:0a:6b:97:3a:8a:41:76:0a:99: 4e:e4:88:9a:c5:97:83:2e:8f:9f:e0:1f:27:6d:56:4f:e5:50: be:bd:1b:f1:56:79:84:6d:ae:4f:a5:df:a7:ca:f3:1b:dc:63: 21:78:b9:5e:83:6a:d6:8e:1c:83:62:ff:bf:ef:09:82:6f:c7: 02:af:95:f4:e3:13:19:2f:8f:a4:69:0f:03:fe:77:51:97:8c: c6:e2:7a:de:e8:1a:2f:fd:5d:a6:5a:6f:c5:c9:33:95:1b:e1: fd:59:20:bf:bf:93:d6:e8:d0:5d:0d:1f:18:85:e3:50:9a:ea: 92:67:1a:e9:9e:95:fb:d6:8e:cc:71:67:45:a8:15:79:0f:ab: b0:ab:9f:29:fd:82:4d:da:8c:e5:ca:9c:61:b1:8a:da:f8:66: b1:43:f1:a6:de:a1:20:2b:b8:9f:77:4d:5c:1b:96:f8:80:0c: 5c:61:4f:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WvermzPR10LQ2LbNua7sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YzM3ZDAzNWQ5NWZlZmJhMWQ0N2Y5OGI5ZmY0OTczZjE3 ZGY2Y2QwHhcNMjYwMTAxMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmMzZWFmOTBlZjlhMTg3NDEzZmE3N2IzMTNlN2RjNjU4MThmODc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2r3Wspp29mNYF8tWoURPFMeEbA1 0/VG4TogBfkh1Af/aN3MSPxIAkBagluT+Ruyu5oUiUVB2TPNxhulCT+Z+yPA29yz WF9eKaUm+q+eJhiKOW1l6jQqBsk46qj1Fp2aPM8JU/Dm6s3Mk1lcfJeWpxjE0lkj SV/80lNAxtzSH+pKfrTn/UGZs84sC9lCHsEQqz6Vplt8bPfdu3zVjT9S+PYj1NmW Cc1tX9DuZLzbYH14boTXLReByzPKeWaRWc00X9dc7kd1sTafveXaVW1sWXgeQAVw QwTVWZG1wfZ1HUny27ydS67Hqeox7Y7K0Kjw/6BtyQuO66ypoXaCjheDrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEbD6vkO+aGHQT+nezE+fcZYGPh0MB8GA1UdIwQY MBaAFIfDfQNdlf77odR/mLn/SXPxffbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81ZWYwNjAtZjQ3My00MDQzLWI4YTIt ZTFiN2M3NjQ5ZmEzLzEvUnNQcS1RNzVvWWRCUDZkN01UNTl4bGdZLUhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS81ZWYwNjAtZjQ3My00MDQzLWI4YTItZTFiN2M3NjQ5ZmEz LzEvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTs0MA0G CSqGSIb3DQEBCwUAA4IBAQAM0IuH4v1UOnwNQXMDedsq7ilIkot8Z93aqckxs1LA Gks3wxUIsVsyMzMDrofVU/4+JzrMt3iiQ3VGm4JfesmMYNXF3HDtnTlpxNnXf/Or A70Ka5c6ikF2CplO5IiaxZeDLo+f4B8nbVZP5VC+vRvxVnmEba5Ppd+nyvMb3GMh eLleg2rWjhyDYv+/7wmCb8cCr5X04xMZL4+kaQ8D/ndRl4zG4nre6Bov/V2mWm/F yTOVG+H9WSC/v5PW6NBdDR8YheNQmuqSZxrpnpX71o7McWdFqBV5D6uwq58p/YJN 2ozlypxhsYra+GaxQ/Gm3qEgK7ifd01cG5b4gAxcYU+U -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:31 2026 by rpki-client