This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/SqOaq96ulHVTcpzUuOSBevLevvA.roa File: SqOaq96ulHVTcpzUuOSBevLevvA.roa (raw, json) Hash identifier: IFEmgougI8zJPBZI5P1YChSlXgPawXZOVhctAZh4l8c= Subject key identifier: 4A:A3:9A:AB:DE:AE:94:75:53:72:9C:D4:B8:E4:81:7A:F2:DE:BE:F0 Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Certificate serial: 019B3726D3F4CF05A4DD2644725EA469F92C Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/SqOaq96ulHVTcpzUuOSBevLevvA.roa Signing time: Fri 19 Dec 2025 15:07:29 +0000 ROA not before: Fri 19 Dec 2025 15:07:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 194.59.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:26:d3:f4:cf:05:a4:dd:26:44:72:5e:a4:69:f9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Validity Not Before: Dec 19 15:07:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4aa39aabdeae947553729cd4b8e4817af2debef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:44:f9:21:cb:88:2f:24:da:e1:6c:af:ab: 18:67:a7:65:43:24:09:ee:70:13:ed:f4:a9:b7:4d: c0:aa:26:81:0f:7e:4a:c7:e2:4b:68:3f:71:11:c0: 58:98:0a:88:35:e3:84:ea:41:df:2a:d0:b2:2c:fe: df:71:66:25:70:77:b2:0c:28:63:80:0e:7f:7b:66: 2d:16:ed:e2:32:ab:b8:5d:6f:49:3d:71:2f:d1:b7: 67:2f:97:8e:bf:f2:70:e0:95:ee:b1:4b:b3:c0:ad: e2:09:4b:b5:2c:3c:18:d4:fb:07:e9:c7:ec:26:75: 20:00:1e:27:e3:92:a3:37:22:04:8b:20:16:4a:47: 71:d2:ea:d2:83:94:5e:7a:9b:cd:cb:0b:9d:ed:09: 4b:60:36:8e:13:e9:70:84:f0:e1:f4:06:2c:b2:22: 86:31:f8:80:db:89:c8:dc:f3:d7:8a:64:d2:72:6f: d6:10:57:5a:2e:dc:a5:68:83:f1:a7:2f:3f:60:fb: 9b:07:cf:04:7e:c5:bc:0f:29:67:95:ea:88:27:fe: 0d:88:38:84:c2:b3:e7:e9:46:66:2a:cd:25:80:c2: 39:1f:91:9e:7f:78:c5:9e:33:f2:56:96:40:0f:1b: ba:e2:c3:f9:e6:7e:99:b8:9b:07:5c:c6:ce:38:01: 53:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A3:9A:AB:DE:AE:94:75:53:72:9C:D4:B8:E4:81:7A:F2:DE:BE:F0 X509v3 Authority Key Identifier: keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/SqOaq96ulHVTcpzUuOSBevLevvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.183.0/24 Signature Algorithm: sha256WithRSAEncryption 98:35:7f:9e:3c:37:9d:da:be:53:6b:af:1c:06:46:b2:8d:f9: 73:51:c3:06:f9:01:b3:a5:35:99:96:47:6c:de:d5:ff:f2:2d: 07:71:72:8e:d0:35:81:81:ae:0c:31:e0:5b:72:07:fe:75:e0: 38:aa:95:d9:8c:7e:02:71:d6:be:b9:bf:f8:58:24:5f:c6:a8: aa:da:93:09:9e:4f:30:65:30:8c:7d:a4:56:5e:84:cc:3e:be: 7f:26:e4:47:cd:4a:cb:77:b9:22:bc:c1:ff:28:3b:d9:5f:fc: 56:bd:c8:7b:84:66:8a:20:4b:04:d1:e8:5b:ad:0e:48:8a:31: 98:84:fb:d0:f6:29:7f:ba:3c:49:c1:0c:1b:98:28:b9:f7:4c: 60:80:f8:75:35:d2:61:c3:dd:4f:86:d6:88:db:72:c9:34:36: 86:17:82:8c:23:52:c1:2d:d9:8c:86:b6:e7:e1:e2:1a:ad:0a: ac:7c:e0:40:40:df:bb:df:7c:c9:8e:45:1f:6d:6f:a9:c7:57: b2:43:e7:38:a0:7c:ce:23:a8:c3:70:42:d6:9f:35:e7:1e:44: 92:79:06:35:44:9c:e5:c6:f4:a8:98:19:51:78:6c:e2:6d:bd: b8:59:d3:bc:69:3a:4d:f0:f8:04:99:4b:46:c0:97:73:f7:bd: 13:a7:4f:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs3JtP0zwWk3SZEcl6kafksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk M2RjMTYwHhcNMjUxMjE5MTUwNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWEzOWFhYmRlYWU5NDc1NTM3MjljZDRiOGU0ODE3YWYyZGViZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUxE+SHLiC8k2uFsr6sYZ6dlQyQJ 7nAT7fSpt03AqiaBD35Kx+JLaD9xEcBYmAqINeOE6kHfKtCyLP7fcWYlcHeyDChj gA5/e2YtFu3iMqu4XW9JPXEv0bdnL5eOv/Jw4JXusUuzwK3iCUu1LDwY1PsH6cfs JnUgAB4n45KjNyIEiyAWSkdx0urSg5ReepvNywud7QlLYDaOE+lwhPDh9AYssiKG MfiA24nI3PPXimTScm/WEFdaLtylaIPxpy8/YPubB88EfsW8DylnleqIJ/4NiDiE wrPn6UZmKs0lgMI5H5Gef3jFnjPyVpZADxu64sP55n6ZuJsHXMbOOAFTSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEqjmqverpR1U3Kc1LjkgXry3r7wMB8GA1UdIwQY MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt OGFjNGEyMTkzOGI0LzEvU3FPYXE5NnVsSFZUY3B6VXVPU0JldkxldnZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0 LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwju3MA0G CSqGSIb3DQEBCwUAA4IBAQCYNX+ePDed2r5Ta68cBkayjflzUcMG+QGzpTWZlkds 3tX/8i0HcXKO0DWBga4MMeBbcgf+deA4qpXZjH4Ccda+ub/4WCRfxqiq2pMJnk8w ZTCMfaRWXoTMPr5/JuRHzUrLd7kivMH/KDvZX/xWvch7hGaKIEsE0ehbrQ5IijGY hPvQ9il/ujxJwQwbmCi590xggPh1NdJhw91PhtaI23LJNDaGF4KMI1LBLdmMhrbn 4eIarQqsfOBAQN+733zJjkUfbW+px1eyQ+c4oHzOI6jDcELWnzXnHkSSeQY1RJzl xvSomBlReGzibb24WdO8aTpN8PgEmUtGwJdz970Tp0/b -----END CERTIFICATE-----Generated at Sun Dec 21 07:17:17 2025 by rpki-client