This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/SQTK66WzLAK8TXDSG7HMSsqFAn8.roa File: SQTK66WzLAK8TXDSG7HMSsqFAn8.roa (raw, json) Hash identifier: 1jt/Bil6UdOScDCfuLlT86C9WZy4s6/vQGzui9lZXx4= Subject key identifier: 49:04:CA:EB:A5:B3:2C:02:BC:4D:70:D2:1B:B1:CC:4A:CA:85:02:7F Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CCC32F359E3292A15C8953B15AF9C Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/SQTK66WzLAK8TXDSG7HMSsqFAn8.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51219 IP address blocks: 93.189.226.0/24 maxlen: 24 93.189.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cc:32:f3:59:e3:29:2a:15:c8:95:3b:15:af:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4904caeba5b32c02bc4d70d21bb1cc4aca85027f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:39:aa:1a:78:e6:b4:c0:14:12:5e:f0:ee:6a: 95:8c:6d:e3:21:e9:ca:46:fe:0c:78:4f:dd:45:b6: 77:29:8b:0b:30:67:b2:b4:ed:b2:aa:6f:e2:f0:24: c4:7a:0b:0b:36:a2:a5:a8:04:22:e2:d9:04:67:15: 3c:70:1b:ac:8b:e1:86:f8:ff:88:89:1d:46:91:d0: 6b:0d:a0:0d:0a:91:a0:2d:b4:4f:d0:70:7d:8c:9c: fe:1f:ed:5d:13:59:44:ad:de:a5:47:83:ec:37:f7: 24:33:0f:29:e8:4f:da:1a:81:8c:ab:02:ad:84:33: 57:59:61:0f:83:dd:30:ee:93:a2:0a:04:f9:78:6a: e1:21:6d:ae:98:b2:f8:8d:5b:cc:4e:6c:9d:87:2f: 4d:d1:4a:db:26:50:98:b8:ea:41:71:54:8f:80:d5: a7:df:8f:e1:e9:32:63:b2:88:bf:75:57:04:07:77: 5d:c7:26:70:97:ac:ae:48:17:0b:a0:cb:7d:59:9c: 90:1a:60:73:30:00:3b:1d:00:87:09:43:14:5c:59: 7f:ed:e0:7d:7a:00:a6:5c:66:d6:24:a5:94:4f:fe: 48:7d:bf:f6:a8:58:b7:a4:99:37:3b:8e:d0:40:fc: 99:b8:a1:4d:6a:95:3f:67:05:d7:e7:09:bc:82:3c: b1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:04:CA:EB:A5:B3:2C:02:BC:4D:70:D2:1B:B1:CC:4A:CA:85:02:7F X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/SQTK66WzLAK8TXDSG7HMSsqFAn8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.189.226.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:22:77:31:7c:bb:17:27:76:a7:f1:87:35:16:55:8a:86:0b: d7:72:dc:4f:5c:79:be:f4:1c:96:bb:c2:83:48:d0:55:0d:11: 57:c7:dd:b5:87:2a:2a:2e:15:92:8f:7b:d2:ca:bd:20:2f:1b: e1:5a:2d:88:83:25:59:f7:35:02:17:fc:96:cd:f7:57:46:9d: dc:90:87:c3:b5:5b:60:74:90:62:65:25:fa:dd:2d:e5:17:ce: 8c:62:94:81:6b:e9:d8:0a:9b:17:b6:a6:16:ff:b4:25:ef:d7: a6:33:f6:b7:dd:3a:16:3a:0b:1b:a6:6b:01:7d:f1:3f:b8:bb: 87:dd:d6:c4:e6:40:4d:aa:f0:07:fe:e6:c0:d5:36:9e:f7:a8: 8a:e7:e7:0b:1b:9a:6f:13:8d:2f:59:06:ce:97:46:d4:ce:fc: ce:3b:49:19:cf:9b:af:88:05:17:90:c0:69:b7:a5:dc:d7:b2: 00:86:2a:b6:13:cf:d1:2a:e5:4b:bc:66:e3:94:e6:40:e7:eb: 9c:22:65:e9:aa:d8:b9:68:fc:7d:12:d6:92:a0:17:41:9e:ef: 70:e4:40:e1:1d:7a:60:99:27:b4:8e:7e:9e:67:3a:44:6b:d9: 5c:2a:aa:d0:08:d8:2d:19:a5:ee:4b:1c:7c:fb:2c:23:a9:9b: 4e:16:58:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XMwy81njKSoVyJU7Fa+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTA0Y2FlYmE1YjMyYzAyYmM0ZDcwZDIxYmIxY2M0YWNhODUwMjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DmqGnjmtMAUEl7w7mqVjG3jIenK Rv4MeE/dRbZ3KYsLMGeytO2yqm/i8CTEegsLNqKlqAQi4tkEZxU8cBusi+GG+P+I iR1GkdBrDaANCpGgLbRP0HB9jJz+H+1dE1lErd6lR4PsN/ckMw8p6E/aGoGMqwKt hDNXWWEPg90w7pOiCgT5eGrhIW2umLL4jVvMTmydhy9N0UrbJlCYuOpBcVSPgNWn 34/h6TJjsoi/dVcEB3ddxyZwl6yuSBcLoMt9WZyQGmBzMAA7HQCHCUMUXFl/7eB9 egCmXGbWJKWUT/5Ifb/2qFi3pJk3O47QQPyZuKFNapU/ZwXX5wm8gjyxjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEkEyuulsywCvE1w0huxzErKhQJ/MB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvU1FUSzY2V3pMQUs4VFhEU0c3SE1Tc3FGQW44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXb3iMA0G CSqGSIb3DQEBCwUAA4IBAQBNIncxfLsXJ3an8Yc1FlWKhgvXctxPXHm+9ByWu8KD SNBVDRFXx921hyoqLhWSj3vSyr0gLxvhWi2IgyVZ9zUCF/yWzfdXRp3ckIfDtVtg dJBiZSX63S3lF86MYpSBa+nYCpsXtqYW/7Ql79emM/a33ToWOgsbpmsBffE/uLuH 3dbE5kBNqvAH/ubA1Tae96iK5+cLG5pvE40vWQbOl0bUzvzOO0kZz5uviAUXkMBp t6Xc17IAhiq2E8/RKuVLvGbjlOZA5+ucImXpqti5aPx9EtaSoBdBnu9w5EDhHXpg mSe0jn6eZzpEa9lcKqrQCNgtGaXuSxx8+ywjqZtOFliB -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:58 2026 by rpki-client