This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/sos9OQo7SQuATzDAO-88fckXZrM.roa File: sos9OQo7SQuATzDAO-88fckXZrM.roa (raw, json) Hash identifier: BvLpnURp1OXbUtdg+BiPw0Dsxp8uR19uuIXSDPU3W0k= Subject key identifier: B2:8B:3D:39:0A:3B:49:0B:80:4F:30:C0:3B:EF:3C:7D:C9:17:66:B3 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F844711AFF7EA72CA7C219EF5107701 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/sos9OQo7SQuATzDAO-88fckXZrM.roa Signing time: Fri 02 Jan 2026 16:22:13 +0000 ROA not before: Fri 02 Jan 2026 16:22:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47447 IP address blocks: 2a0b:3c40:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:47:11:af:f7:ea:72:ca:7c:21:9e:f5:10:77:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b28b3d390a3b490b804f30c03bef3c7dc91766b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bf:77:00:5b:37:71:4b:92:92:a7:e3:2a:9b: 54:a5:bf:4f:96:d1:71:92:43:c3:a7:3e:91:c9:25: 2b:55:35:5c:d3:2e:7c:2c:a9:11:62:31:2d:60:be: f4:a4:e5:e4:54:98:b7:09:e3:18:21:03:67:31:8a: d3:51:73:3f:b4:43:54:65:bb:de:a0:09:ef:cd:88: c8:ef:b4:35:31:54:b0:24:8d:0e:6d:d0:93:84:ef: bd:1f:87:36:e9:1c:f5:bc:60:91:c8:6c:7f:f3:59: ee:59:2d:d8:5e:28:71:c6:bb:2f:85:d2:fa:5c:d3: b4:df:0b:bc:8c:86:60:d7:20:e5:29:72:4a:8a:11: 90:47:6a:c6:7a:ae:90:3c:c2:a3:25:90:7f:ef:9c: 4d:5d:4b:47:8c:d1:47:f4:ab:7b:dd:ed:dd:2d:b8: 2b:9c:7c:27:05:19:12:b9:2c:d9:7f:cb:b5:ea:a5: 30:dc:4a:a1:49:78:0a:6a:7f:10:83:d4:df:28:f4: 26:70:35:11:fa:ec:59:94:c9:99:00:c7:98:31:4a: eb:af:cb:84:53:0b:9e:11:6d:f1:e7:d5:54:de:1c: bf:2c:f8:3c:03:11:be:3d:c9:d6:c0:4a:e8:c7:a1: 3c:10:09:14:75:fb:f3:88:3a:09:33:cd:ba:b8:84: 47:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8B:3D:39:0A:3B:49:0B:80:4F:30:C0:3B:EF:3C:7D:C9:17:66:B3 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/sos9OQo7SQuATzDAO-88fckXZrM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:3c40:22::/48 Signature Algorithm: sha256WithRSAEncryption 32:5f:69:7f:b8:e6:f5:72:e2:24:ff:17:2a:25:72:99:b0:86: d2:8b:a0:7a:04:d4:d5:2d:ac:cc:97:58:38:44:e6:c4:a9:6c: 56:cb:57:31:45:18:ae:04:53:50:4c:37:71:ed:f6:f8:1f:45: 3c:3c:25:6c:82:88:db:c9:ce:12:c9:3a:ce:15:9f:45:99:ff: c8:d4:bc:06:df:97:ba:2b:7e:6a:9f:0d:c9:8d:c0:75:ed:42: 68:92:c6:8d:62:25:be:f7:b8:13:83:59:f6:ab:14:04:dd:b8: 32:0e:d2:c0:7e:e2:20:70:69:11:1d:a3:dd:40:19:4c:0c:17: ca:39:2e:a0:a6:ba:c6:d2:1c:be:50:69:12:db:ce:89:90:07: ed:ce:fd:06:58:52:5a:7b:a9:61:8f:aa:c4:e5:0e:92:4d:3a: 25:ab:3d:56:65:8a:09:bc:44:39:3b:00:70:95:6d:c1:22:1e: 0d:46:a0:77:76:51:c1:b8:65:c9:90:cc:2d:0d:06:f7:00:22: 40:06:c2:c1:18:60:62:f5:fd:89:2e:28:08:84:6b:79:35:40: 14:e1:35:21:76:c8:ce:25:97:7a:ac:f3:58:d0:9d:9f:e9:2d: 1d:48:64:de:48:a6:7c:76:99:ef:ba:cd:f6:c1:0d:0a:2d:6a: 2f:c5:1e:1f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hEcRr/fqcsp8IZ71EHcBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjhiM2QzOTBhM2I0OTBiODA0ZjMwYzAzYmVmM2M3ZGM5MTc2NmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob93AFs3cUuSkqfjKptUpb9PltFx kkPDpz6RySUrVTVc0y58LKkRYjEtYL70pOXkVJi3CeMYIQNnMYrTUXM/tENUZbve oAnvzYjI77Q1MVSwJI0ObdCThO+9H4c26Rz1vGCRyGx/81nuWS3YXihxxrsvhdL6 XNO03wu8jIZg1yDlKXJKihGQR2rGeq6QPMKjJZB/75xNXUtHjNFH9Kt73e3dLbgr nHwnBRkSuSzZf8u16qUw3EqhSXgKan8Qg9TfKPQmcDUR+uxZlMmZAMeYMUrrr8uE UwueEW3x59VU3hy/LPg8AxG+PcnWwErox6E8EAkUdfvziDoJM826uIRHxQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLKLPTkKO0kLgE8wwDvvPH3JF2azMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvc29zOU9RbzdTUXVBVHpEQU8tODhmY2tYWnJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgs8QAAi MA0GCSqGSIb3DQEBCwUAA4IBAQAyX2l/uOb1cuIk/xcqJXKZsIbSi6B6BNTVLazM l1g4RObEqWxWy1cxRRiuBFNQTDdx7fb4H0U8PCVsgojbyc4SyTrOFZ9Fmf/I1LwG 35e6K35qnw3JjcB17UJoksaNYiW+97gTg1n2qxQE3bgyDtLAfuIgcGkRHaPdQBlM DBfKOS6gprrG0hy+UGkS286JkAftzv0GWFJae6lhj6rE5Q6STTolqz1WZYoJvEQ5 OwBwlW3BIh4NRqB3dlHBuGXJkMwtDQb3ACJABsLBGGBi9f2JLigIhGt5NUAU4TUh dsjOJZd6rPNY0J2f6S0dSGTeSKZ8dpnvus32wQ0KLWovxR4f -----END CERTIFICATE-----Generated at Wed Jan 21 16:57:00 2026 by rpki-client