This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/soHOJ8tC1zZjzurYwew3031V0fk.roa File: soHOJ8tC1zZjzurYwew3031V0fk.roa (raw, json) Hash identifier: 93TQvaBjo7fcpgf+WpkgNKE8nSMQXwUYhrQFhUZ1ncQ= Subject key identifier: B2:81:CE:27:CB:42:D7:36:63:CE:EA:D8:C1:EC:37:D3:7D:55:D1:F9 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EC98B522B32CE257059CFA82E2707 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/soHOJ8tC1zZjzurYwew3031V0fk.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197741 IP address blocks: 85.118.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c9:8b:52:2b:32:ce:25:70:59:cf:a8:2e:27:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b281ce27cb42d73663ceead8c1ec37d37d55d1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:76:7c:81:b4:b7:a4:0d:3b:20:19:67:31:a3: f1:0d:6d:c5:1e:be:d7:b9:b0:83:f1:d8:7c:35:1c: c9:b4:ab:f5:a3:c5:0b:f2:4e:7a:c8:a0:76:b9:3b: cf:7d:6a:88:ef:6e:76:f6:1a:f3:27:f9:d9:db:ff: e1:c4:8e:78:cc:98:d1:df:1a:69:36:d5:3d:6d:19: a7:7a:ca:69:0b:90:59:a1:b5:14:33:86:e6:e1:30: ee:28:b0:f7:e8:bd:be:fe:92:eb:50:d4:02:20:11: 5c:46:c7:0e:b3:26:78:b7:0a:ba:09:80:7e:0c:65: c3:56:45:b5:72:23:cd:4e:f1:e9:ef:fc:75:a9:e2: f0:9a:a6:6c:bd:b2:7d:a5:ea:ec:47:12:7e:82:81: 77:f0:79:8e:50:7e:d1:ab:99:5b:9a:4e:95:51:df: c8:78:e3:2e:cf:cc:ce:4b:d5:eb:b8:37:a5:69:a6: 80:5f:6d:64:7d:8c:ec:e4:ea:b0:26:cc:6e:d6:14: 5d:8b:bd:f9:17:16:4f:d4:f6:02:59:f8:44:07:a1: fb:95:4b:36:8d:a6:6e:0b:59:13:1f:df:13:2d:ff: b5:72:f5:af:cc:4b:13:9d:0c:ba:f7:cf:c9:44:ba: f5:72:ac:f4:0c:3e:ea:9c:69:c3:55:b7:2d:2f:c2: 61:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:81:CE:27:CB:42:D7:36:63:CE:EA:D8:C1:EC:37:D3:7D:55:D1:F9 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/soHOJ8tC1zZjzurYwew3031V0fk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.118.90.0/24 Signature Algorithm: sha256WithRSAEncryption 27:88:a7:b5:a6:55:08:78:e8:09:2f:e3:25:73:ba:c7:c0:ee: d4:fd:e1:f4:72:fa:e3:e5:2e:74:98:18:76:65:f6:95:cc:1b: af:b9:01:6d:9c:df:0c:96:0c:ed:1c:0c:77:59:76:fc:94:6b: 5a:b1:0c:76:b7:d4:04:3e:9f:30:56:fc:ad:60:b9:b8:45:80: 46:79:15:c1:ba:ce:bb:9a:13:af:b4:92:d0:a3:e4:64:95:74: 07:a6:09:37:2b:da:d6:01:f4:6c:19:5f:5d:fd:fb:ea:03:68: a6:1c:a0:f7:d6:7d:44:a5:1d:86:2e:74:b8:fb:26:2d:a7:26: 84:e1:6f:60:b0:46:95:dc:8e:5a:9f:78:3c:5f:15:f8:00:c9: b1:6d:b7:9f:e2:45:39:d8:56:43:98:be:ff:dd:50:2f:f0:7a: 5f:0b:d5:47:30:a4:5f:fe:72:b8:44:96:50:b0:b4:86:52:a7: d9:de:5a:d2:67:c9:80:47:1b:b8:0c:51:6a:f0:f2:68:7b:33: 0c:55:7c:ba:72:8f:1a:ba:75:3c:d0:ac:cc:8f:1d:a9:ed:03: ee:0a:47:55:fe:3d:e9:c9:55:93:9e:ba:eb:f0:2b:21:c9:19: 81:44:d2:01:02:9c:cf:22:23:f7:d4:c9:6f:8d:ad:8c:8c:52: b1:9e:ca:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fsmLUisyziVwWc+oLicHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjgxY2UyN2NiNDJkNzM2NjNjZWVhZDhjMWVjMzdkMzdkNTVkMWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Z8gbS3pA07IBlnMaPxDW3FHr7X ubCD8dh8NRzJtKv1o8UL8k56yKB2uTvPfWqI72529hrzJ/nZ2//hxI54zJjR3xpp NtU9bRmnesppC5BZobUUM4bm4TDuKLD36L2+/pLrUNQCIBFcRscOsyZ4twq6CYB+ DGXDVkW1ciPNTvHp7/x1qeLwmqZsvbJ9persRxJ+goF38HmOUH7Rq5lbmk6VUd/I eOMuz8zOS9XruDelaaaAX21kfYzs5OqwJsxu1hRdi735FxZP1PYCWfhEB6H7lUs2 jaZuC1kTH98TLf+1cvWvzEsTnQy698/JRLr1cqz0DD7qnGnDVbctL8JhqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLKBzifLQtc2Y87q2MHsN9N9VdH5MB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvc29IT0o4dEMxelpqenVyWXdldzMwMzFWMGZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXZaMA0G CSqGSIb3DQEBCwUAA4IBAQAniKe1plUIeOgJL+Mlc7rHwO7U/eH0cvrj5S50mBh2 ZfaVzBuvuQFtnN8MlgztHAx3WXb8lGtasQx2t9QEPp8wVvytYLm4RYBGeRXBus67 mhOvtJLQo+RklXQHpgk3K9rWAfRsGV9d/fvqA2imHKD31n1EpR2GLnS4+yYtpyaE 4W9gsEaV3I5an3g8XxX4AMmxbbef4kU52FZDmL7/3VAv8HpfC9VHMKRf/nK4RJZQ sLSGUqfZ3lrSZ8mARxu4DFFq8PJoezMMVXy6co8aunU80KzMjx2p7QPuCkdV/j3p yVWTnrrr8CshyRmBRNIBApzPIiP31Mlvja2MjFKxnso5 -----END CERTIFICATE-----Generated at Mon Jan 26 17:25:43 2026 by rpki-client