This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/So8muBWRfIb_bocA-uBwGx60z8Q.roa File: So8muBWRfIb_bocA-uBwGx60z8Q.roa (raw, json) Hash identifier: +k1Cxl6IomOBFkqSLBR7RHbQcbohSLtfyOMpxls2/Pc= Subject key identifier: 4A:8F:26:B8:15:91:7C:86:FF:6E:87:00:FA:E0:70:1B:1E:B4:CF:C4 Certificate issuer: /CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92 Certificate serial: 019B77C6B6719EAB734AD054D1FA26F05F4B Authority key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/So8muBWRfIb_bocA-uBwGx60z8Q.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20860 IP address blocks: 91.245.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b6:71:9e:ab:73:4a:d0:54:d1:fa:26:f0:5f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a8f26b815917c86ff6e8700fae0701b1eb4cfc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:52:5a:af:2e:5b:7d:b0:76:91:ff:53:ba: a4:d4:7f:c7:e3:61:c0:d3:18:35:fa:96:5a:8e:82: 0d:98:0e:15:41:b7:73:48:8b:9d:c4:ac:ed:79:dd: 3f:2e:76:53:4c:25:f7:9d:03:b3:51:b7:fb:40:87: 99:60:6a:0d:61:52:37:0e:92:3c:73:ba:5c:7b:00: b4:47:da:81:b0:e1:02:0b:1b:3f:38:67:1f:c5:9c: 8a:66:9f:01:7f:61:1b:6a:84:c8:8f:60:b5:5a:4b: 8d:b9:69:22:f2:b0:72:64:4a:62:58:33:f7:29:24: 93:ee:ef:11:e1:cb:cc:f1:b7:d1:06:e3:f1:5a:f7: cf:1c:02:fa:c1:70:76:96:12:7d:1d:ac:9e:da:6c: 7f:20:8b:e3:a7:a1:fc:74:8e:fd:04:31:4a:ba:5e: 19:cd:6f:ea:78:fc:94:96:9d:c9:fe:fb:00:1e:3c: 8b:eb:44:bb:e1:cc:79:6a:18:d4:92:6b:77:dc:89: 5c:60:43:2f:cf:db:95:4d:19:ab:13:04:dd:3a:68: dc:9d:b1:ca:04:28:1c:e7:f5:27:9f:45:72:e3:36: da:d2:87:33:29:65:a6:26:39:c1:2b:79:0b:5a:24: 15:3f:66:91:83:3d:c9:bd:6f:ae:c6:d5:d4:8d:65: af:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8F:26:B8:15:91:7C:86:FF:6E:87:00:FA:E0:70:1B:1E:B4:CF:C4 X509v3 Authority Key Identifier: keyid:67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/So8muBWRfIb_bocA-uBwGx60z8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.218.0/24 Signature Algorithm: sha256WithRSAEncryption 71:d5:a8:18:86:d5:f5:89:83:77:45:fd:31:6f:92:38:5d:ac: 86:1d:3b:98:b9:51:da:19:7d:f7:ca:31:d1:14:5a:4a:64:ed: 3b:48:57:c4:87:ab:f6:ad:d9:a5:eb:ed:05:8f:ac:82:fc:f2: e1:ac:3b:17:ae:2b:44:ce:67:f4:3a:2a:48:8a:37:fe:34:1d: 5b:a5:c6:24:ea:af:7c:c0:70:99:b9:2b:40:3f:64:d7:7a:cb: 78:56:8b:c3:ba:63:80:33:e8:4d:a0:f1:da:30:58:c4:f4:cc: 59:39:4f:4e:1f:02:cb:5e:47:3e:27:1f:42:38:64:5a:e3:05: 17:a3:2f:9c:11:5d:0a:01:dd:c9:5d:f4:a9:59:79:6d:ad:6e: 82:69:a0:48:13:ff:44:82:b3:98:4c:13:4e:a1:29:bb:f3:d7: 9d:e7:a9:24:60:46:56:2f:a9:8b:14:04:90:03:4c:9a:3d:d2: da:89:49:06:2d:43:71:84:48:3e:f5:eb:a6:49:f5:9e:01:75: c5:d7:b9:ea:a3:25:a4:c2:51:89:ec:76:a3:7c:c0:d1:9a:6d: 8d:c5:20:16:2e:42:2f:1e:f8:3e:65:f4:76:16:59:ed:8e:2c: 55:44:b5:7c:01:97:13:78:19:14:0a:df:05:f2:cc:73:b2:19: e4:61:4b:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrZxnqtzStBU0fom8F9LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MDNmMjU4ZDQ3YmVjYzJjYjRiNGZjNTcyYjIyOWIyZTY0 YjZiOTIwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YThmMjZiODE1OTE3Yzg2ZmY2ZTg3MDBmYWUwNzAxYjFlYjRjZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuttSWq8uW32wdpH/U7qk1H/H42HA 0xg1+pZajoINmA4VQbdzSIudxKzted0/LnZTTCX3nQOzUbf7QIeZYGoNYVI3DpI8 c7pcewC0R9qBsOECCxs/OGcfxZyKZp8Bf2EbaoTIj2C1WkuNuWki8rByZEpiWDP3 KSST7u8R4cvM8bfRBuPxWvfPHAL6wXB2lhJ9Haye2mx/IIvjp6H8dI79BDFKul4Z zW/qePyUlp3J/vsAHjyL60S74cx5ahjUkmt33IlcYEMvz9uVTRmrEwTdOmjcnbHK BCgc5/Unn0Vy4zba0oczKWWmJjnBK3kLWiQVP2aRgz3JvW+uxtXUjWWvaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEqPJrgVkXyG/26HAPrgcBsetM/EMB8GA1UdIwQY MBaAFGcD8ljUe+zCy0tPxXKyKbLmS2uSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWndQeVdOUjc3TUxMUzBfRmNySXBzdVpMYTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYTA3Y2ItZjZjMC00OWJhLWE3ZDEt MWIwMTQ1MzM0N2RhLzEvU284bXVCV1JmSWJfYm9jQS11QndHeDYwejhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yYTA3Y2ItZjZjMC00OWJhLWE3ZDEtMWIwMTQ1MzM0N2Rh LzEvWndQeVdOUjc3TUxMUzBfRmNySXBzdVpMYTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/XaMA0G CSqGSIb3DQEBCwUAA4IBAQBx1agYhtX1iYN3Rf0xb5I4XayGHTuYuVHaGX33yjHR FFpKZO07SFfEh6v2rdml6+0Fj6yC/PLhrDsXritEzmf0OipIijf+NB1bpcYk6q98 wHCZuStAP2TXest4VovDumOAM+hNoPHaMFjE9MxZOU9OHwLLXkc+Jx9COGRa4wUX oy+cEV0KAd3JXfSpWXltrW6CaaBIE/9EgrOYTBNOoSm789ed56kkYEZWL6mLFASQ A0yaPdLaiUkGLUNxhEg+9eumSfWeAXXF17nqoyWkwlGJ7HajfMDRmm2NxSAWLkIv Hvg+ZfR2FlntjixVRLV8AZcTeBkUCt8F8sxzshnkYUsx -----END CERTIFICATE-----Generated at Mon Jan 19 17:33:04 2026 by rpki-client