This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/sao4QdKJ2zOtzhzLqEmuNyMN0as.roa File: sao4QdKJ2zOtzhzLqEmuNyMN0as.roa (raw, json) Hash identifier: PzIbh0KTO1J4efJaWw/Rzl0kAt4CC7fNxs+1iCoN+dg= Subject key identifier: B1:AA:38:41:D2:89:DB:33:AD:CE:1C:CB:A8:49:AE:37:23:0D:D1:AB Certificate issuer: /CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2 Certificate serial: 019B79ECD6071EA61F44B1241DE76CB88C31 Authority key identifier: 9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/sao4QdKJ2zOtzhzLqEmuNyMN0as.roa Signing time: Thu 01 Jan 2026 14:18:42 +0000 ROA not before: Thu 01 Jan 2026 14:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212401 IP address blocks: 185.209.241.0/24 maxlen: 24 2a10:ee00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d6:07:1e:a6:1f:44:b1:24:1d:e7:6c:b8:8c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2 Validity Not Before: Jan 1 14:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1aa3841d289db33adce1ccba849ae37230dd1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f6:fc:7c:81:c3:9a:6e:1f:2a:86:77:32:c6: 59:1e:c4:c5:55:5b:6b:7a:f8:84:0c:24:db:78:08: 2f:97:66:f8:38:aa:bd:41:48:46:ef:be:1e:00:1c: f1:94:56:33:59:89:62:5a:b2:54:83:8d:08:fc:44: 78:ee:27:e9:e7:e2:b6:e9:ec:33:a1:e1:e4:ce:98: 91:5a:c1:78:f6:23:bf:d9:e1:75:4d:0d:7c:40:d4: b1:be:a1:3a:d3:60:dc:68:e2:64:d0:ee:96:41:4a: 0d:94:8f:7d:b9:40:1b:bc:ad:59:d1:2b:88:22:c7: c5:58:2e:86:90:63:90:1b:f2:5f:40:fc:a1:cd:5c: 84:a1:4e:5f:63:28:da:f0:81:e0:b4:8f:44:6f:a2: fc:6d:8f:c9:72:3d:e1:7d:af:b7:5b:3e:90:93:4c: 4c:41:26:2c:1b:16:02:15:8f:50:ac:44:4f:00:b9: 01:0e:5b:95:2d:d6:eb:27:34:84:1a:46:7e:34:3e: 22:31:91:4f:76:8b:28:ea:5d:bf:6b:7a:73:cf:54: 2e:80:72:d1:19:db:38:e7:16:c2:75:cb:0e:cf:fa: e1:9c:80:82:c1:84:8e:1c:f1:00:f7:9e:c3:53:cc: 14:06:96:a5:ac:30:8b:41:33:a3:82:59:91:81:9f: 1a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AA:38:41:D2:89:DB:33:AD:CE:1C:CB:A8:49:AE:37:23:0D:D1:AB X509v3 Authority Key Identifier: keyid:9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/sao4QdKJ2zOtzhzLqEmuNyMN0as.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.241.0/24 IPv6: 2a10:ee00::/32 Signature Algorithm: sha256WithRSAEncryption 33:c6:c4:c0:7a:55:5c:f7:b9:4c:29:34:64:4e:1a:d8:b3:a7: 20:0b:03:67:4a:b8:11:08:51:ae:c4:22:06:38:8c:29:84:b4: 87:fb:38:d6:45:0a:63:af:36:af:71:45:ec:be:0e:4a:03:6d: 90:ef:f4:fd:12:af:55:69:ba:e2:06:d3:f6:39:9f:ca:d1:cb: b9:bb:6b:15:a4:84:a4:ed:1a:b8:8e:d4:43:a0:4a:8e:ec:e6: 77:3b:40:d2:f5:fd:20:15:1c:24:eb:83:b0:64:b5:bd:58:40: 73:62:2e:91:84:c7:34:55:84:a1:4a:52:b6:7b:c9:f6:f7:2e: 44:8a:21:79:fa:ad:e8:5a:fa:a1:30:5c:cd:18:a4:1b:a0:db: ab:d7:19:e8:de:d2:0a:54:6b:01:7c:45:58:56:af:19:92:8a: 61:ce:dd:c4:c8:91:1e:21:f9:a1:cb:72:e7:61:78:ff:c4:d9: 22:91:8e:d7:4a:50:41:f5:f7:5f:92:e4:8b:50:09:39:60:f3: 99:5b:18:27:5c:ca:42:d4:8d:96:88:67:3d:4a:a9:23:53:22: 9c:bc:79:a4:1c:96:08:56:91:85:a5:e3:04:ee:38:25:66:b2: 1b:3c:f7:4e:5c:44:2d:ab:9b:44:0a:48:ff:a9:92:66:58:96: fe:29:ae:b8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57NYHHqYfRLEkHedsuIwxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNDMwM2EwYTk5OWQ4MTE4YmJjN2U5NmFkMzhlZmJiMTQ0 OTZlYTIwHhcNMjYwMTAxMTQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWFhMzg0MWQyODlkYjMzYWRjZTFjY2JhODQ5YWUzNzIzMGRkMWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fb8fIHDmm4fKoZ3MsZZHsTFVVtr eviEDCTbeAgvl2b4OKq9QUhG774eABzxlFYzWYliWrJUg40I/ER47ifp5+K26ewz oeHkzpiRWsF49iO/2eF1TQ18QNSxvqE602DcaOJk0O6WQUoNlI99uUAbvK1Z0SuI IsfFWC6GkGOQG/JfQPyhzVyEoU5fYyja8IHgtI9Eb6L8bY/Jcj3hfa+3Wz6Qk0xM QSYsGxYCFY9QrERPALkBDluVLdbrJzSEGkZ+ND4iMZFPdoso6l2/a3pzz1QugHLR Gds45xbCdcsOz/rhnICCwYSOHPEA957DU8wUBpalrDCLQTOjglmRgZ8aNQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLGqOEHSidszrc4cy6hJrjcjDdGrMB8GA1UdIwQY MBaAFJ1DA6CpmdgRi7x+lq0477sUSW6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblVNRG9LbVoyQkdMdkg2V3JUanZ1eFJKYnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iZDllMDItYzQyNC00ZTE0LWFhYjct Mzk0NjFhYWE1YmU3LzEvc2FvNFFkS0oyek90emh6THFFbXVOeU1OMGFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iZDllMDItYzQyNC00ZTE0LWFhYjctMzk0NjFhYWE1YmU3 LzEvblVNRG9LbVoyQkdMdkg2V3JUanZ1eFJKYnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAudHxMA0E AgACMAcDBQAqEO4AMA0GCSqGSIb3DQEBCwUAA4IBAQAzxsTAelVc97lMKTRkThrY s6cgCwNnSrgRCFGuxCIGOIwphLSH+zjWRQpjrzavcUXsvg5KA22Q7/T9Eq9Vabri BtP2OZ/K0cu5u2sVpISk7Rq4jtRDoEqO7OZ3O0DS9f0gFRwk64OwZLW9WEBzYi6R hMc0VYShSlK2e8n29y5EiiF5+q3oWvqhMFzNGKQboNur1xno3tIKVGsBfEVYVq8Z kophzt3EyJEeIfmhy3LnYXj/xNkikY7XSlBB9fdfkuSLUAk5YPOZWxgnXMpC1I2W iGc9SqkjUyKcvHmkHJYIVpGFpeME7jglZrIbPPdOXEQtq5tECkj/qZJmWJb+Ka64 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:52 2026 by rpki-client