This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/SqRq0PolNA3E03foRnw2JTm9rZ0.roa File: SqRq0PolNA3E03foRnw2JTm9rZ0.roa (raw, json) Hash identifier: tFggQZODoP/iQ1uJ6WpnoLYbgbBH0wLYJNnug5FHL20= Subject key identifier: 4A:A4:6A:D0:FA:25:34:0D:C4:D3:77:E8:46:7C:36:25:39:BD:AD:9D Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C808DDF179BAA7EC61C4338E76EF152 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/SqRq0PolNA3E03foRnw2JTm9rZ0.roa Signing time: Fri 02 Jan 2026 02:19:18 +0000 ROA not before: Fri 02 Jan 2026 02:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215930 IP address blocks: 185.37.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8d:df:17:9b:aa:7e:c6:1c:43:38:e7:6e:f1:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4aa46ad0fa25340dc4d377e8467c362539bdad9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ba:2b:55:da:60:4a:1a:03:63:bf:17:5f:98: 0f:3e:d2:46:94:3d:a0:5f:8e:e7:e5:1a:f7:0e:aa: 14:b1:55:7a:88:18:4f:35:55:60:11:aa:56:1e:3d: 85:cf:9d:f0:fb:d5:ab:e8:11:64:f0:58:70:0a:7e: fe:ac:c8:02:4c:bb:9e:40:80:c0:11:33:47:ff:f2: 28:f3:59:9c:d7:5e:6b:61:64:f1:82:9a:43:d9:94: 56:e5:2a:2c:3f:a5:8d:97:ba:f9:5c:c1:d3:b6:19: bc:f9:73:7f:04:8c:90:6a:fb:f3:77:96:14:39:4b: 25:b0:71:24:f9:38:e1:e7:e6:ec:04:33:0b:a7:bb: fe:98:17:c1:4b:75:bc:34:f0:b6:ed:0a:a3:3d:3d: 2b:9e:a0:e0:86:af:17:7b:f3:a7:77:21:ba:db:9f: 5a:36:5f:9c:60:6a:aa:c2:77:b3:28:5b:a8:76:9e: f1:1a:e5:f0:da:c5:d5:c1:4c:d8:7a:0d:88:07:2b: 45:3a:59:a9:ba:89:55:f3:b9:27:f8:94:01:9f:a6: 62:af:ba:78:2c:1b:22:d6:5b:f6:c4:f3:fa:4a:38: de:19:fa:ca:07:86:6e:a1:d4:68:1f:82:d8:8e:65: 4c:f0:a9:85:5b:b5:5c:3c:5a:ec:b3:1d:d4:ea:ee: b3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A4:6A:D0:FA:25:34:0D:C4:D3:77:E8:46:7C:36:25:39:BD:AD:9D X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/SqRq0PolNA3E03foRnw2JTm9rZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.195.0/24 Signature Algorithm: sha256WithRSAEncryption 36:00:05:94:46:cc:e1:b1:2d:28:5a:46:28:39:ce:df:94:e2: 19:20:16:c0:1d:2b:c3:8c:e8:a5:d6:3e:c7:28:28:75:c6:96: 9e:7d:fa:a0:f0:ac:99:37:8a:8c:8b:cd:32:f7:4c:4f:b4:1a: 1b:82:d1:35:a5:2a:11:03:9e:c7:81:e3:6e:ac:8f:93:df:52: 97:14:6c:f1:fb:c1:c5:26:49:b5:d1:e7:23:46:24:ae:2a:50: da:6c:cf:82:6f:bf:26:a9:c1:6c:2c:7d:bb:6d:11:2d:e1:7c: 88:cb:7c:8e:73:02:02:f5:a6:43:b5:01:60:bf:7e:28:4a:a8: 31:c9:1b:f4:fc:c5:0a:b2:c3:c0:45:0f:a3:c2:5b:a4:54:16: fa:7f:31:81:9d:f6:ce:77:cd:a3:f3:6b:0d:af:bb:23:cb:b2: cf:b8:63:37:bf:32:90:ac:08:d7:1c:0a:30:3c:93:80:b1:a8: a4:81:04:b8:d5:a6:cb:b6:c0:1f:2d:75:fd:c1:62:27:ae:50: 8b:68:d6:98:a1:43:4d:cb:f8:4e:26:97:dd:3f:8c:a5:6c:b3: f0:11:73:68:f2:8b:d3:45:b9:6e:2e:b3:41:9f:7a:0b:9d:b2: 0d:f8:d2:1d:b1:e7:ce:66:10:0d:b7:53:37:9f:7c:d6:17:1b: 7f:c1:94:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gI3fF5uqfsYcQzjnbvFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWE0NmFkMGZhMjUzNDBkYzRkMzc3ZTg0NjdjMzYyNTM5YmRhZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7orVdpgShoDY78XX5gPPtJGlD2g X47n5Rr3DqoUsVV6iBhPNVVgEapWHj2Fz53w+9Wr6BFk8FhwCn7+rMgCTLueQIDA ETNH//Io81mc115rYWTxgppD2ZRW5SosP6WNl7r5XMHTthm8+XN/BIyQavvzd5YU OUslsHEk+Tjh5+bsBDMLp7v+mBfBS3W8NPC27QqjPT0rnqDghq8Xe/OndyG6259a Nl+cYGqqwnezKFuodp7xGuXw2sXVwUzYeg2IBytFOlmpuolV87kn+JQBn6Zir7p4 LBsi1lv2xPP6SjjeGfrKB4ZuodRoH4LYjmVM8KmFW7VcPFrssx3U6u6zHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEqkatD6JTQNxNN36EZ8NiU5va2dMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvU3FScTBQb2xOQTNFMDNmb1JudzJKVG05clowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSXDMA0G CSqGSIb3DQEBCwUAA4IBAQA2AAWURszhsS0oWkYoOc7flOIZIBbAHSvDjOil1j7H KCh1xpaeffqg8KyZN4qMi80y90xPtBobgtE1pSoRA57HgeNurI+T31KXFGzx+8HF Jkm10ecjRiSuKlDabM+Cb78mqcFsLH27bREt4XyIy3yOcwIC9aZDtQFgv34oSqgx yRv0/MUKssPARQ+jwlukVBb6fzGBnfbOd82j82sNr7sjy7LPuGM3vzKQrAjXHAow PJOAsaikgQS41abLtsAfLXX9wWInrlCLaNaYoUNNy/hOJpfdP4ylbLPwEXNo8ovT RbluLrNBn3oLnbIN+NIdsefOZhANt1M3n3zWFxt/wZTw -----END CERTIFICATE-----Generated at Wed Jan 21 08:06:44 2026 by rpki-client