This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/Q4oVtB_GG7eovbLinG-u2kk_sok.roa File: Q4oVtB_GG7eovbLinG-u2kk_sok.roa (raw, json) Hash identifier: cM5qIsneZAmTqIZg9DeB6vafwKefGN204JmC+NSInLk= Subject key identifier: 43:8A:15:B4:1F:C6:1B:B7:A8:BD:B2:E2:9C:6F:AE:DA:49:3F:B2:89 Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Certificate serial: 019B7B36724589F85A0EED987D095752A485 Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/Q4oVtB_GG7eovbLinG-u2kk_sok.roa Signing time: Thu 01 Jan 2026 20:18:44 +0000 ROA not before: Thu 01 Jan 2026 20:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151704 IP address blocks: 46.70.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:72:45:89:f8:5a:0e:ed:98:7d:09:57:52:a4:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=438a15b41fc61bb7a8bdb2e29c6faeda493fb289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:a0:65:41:e4:d1:4a:21:32:09:1c:e0:de: ad:aa:e2:34:1f:61:6b:b9:0f:ff:27:47:08:5a:dd: 75:22:60:60:29:5b:d7:16:53:7a:14:bb:91:9d:7a: 90:e0:78:8d:ca:32:8f:38:5e:69:9c:18:b0:53:20: c0:92:04:14:e6:99:99:15:7d:14:91:09:86:84:b5: c7:9a:31:f0:6a:54:47:78:e2:c8:73:e9:0d:75:e3: be:d3:a9:50:24:2a:20:35:60:d1:7d:a2:83:d6:97: f2:6b:3f:17:f5:a2:19:3a:b8:07:34:9b:2d:cb:b5: 8e:da:a4:3e:53:06:2d:a2:cd:aa:89:d4:84:e7:00: 73:bd:ad:da:65:a4:5c:ac:fd:05:d1:54:c7:35:dc: e5:be:6b:10:e7:2e:b0:15:b0:41:f7:58:1a:fa:1e: 55:cc:0c:29:e1:f3:64:ec:3c:f5:d4:7f:f5:67:a5: e9:bb:9e:26:f3:13:75:48:0b:e1:65:5d:e3:f7:77: 15:5c:8a:6b:66:0f:63:19:1b:fb:c5:c5:ae:7f:c4: aa:a8:48:3a:bd:59:f6:de:47:19:9b:70:22:1e:96: 88:21:cb:a3:fb:36:f1:54:95:c8:2f:ff:4c:d5:f9: 66:be:1a:13:1c:e3:ce:be:44:3d:52:06:23:9f:19: 79:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8A:15:B4:1F:C6:1B:B7:A8:BD:B2:E2:9C:6F:AE:DA:49:3F:B2:89 X509v3 Authority Key Identifier: keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/Q4oVtB_GG7eovbLinG-u2kk_sok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.70.192.0/19 Signature Algorithm: sha256WithRSAEncryption 41:54:1c:b7:77:a2:03:10:a7:12:62:8b:36:5a:9c:ad:4f:16: 72:0b:e4:09:67:ec:f3:7f:dc:b2:b5:d8:00:b4:f5:b3:55:20: 60:d6:ca:cd:70:0a:47:4f:38:9b:95:f3:12:03:b6:3c:13:02: ba:ce:d2:23:e0:26:83:30:bd:d3:70:54:4b:ba:b0:52:ee:14: d5:df:a1:4a:a8:b9:18:87:18:62:38:94:2a:0f:a5:00:df:1b: aa:79:36:76:56:4c:a6:ee:98:fc:41:ac:e4:c1:64:81:ea:1b: 8a:33:7d:34:01:31:39:8e:01:9f:20:e4:82:8e:95:56:82:7b: 18:0d:11:65:ce:b0:ea:d7:26:61:2d:9c:07:19:98:b7:bf:0e: 48:8f:32:60:ba:01:cf:b7:50:f3:61:3a:03:0b:ae:d7:2a:4f: ee:2e:55:95:0a:b5:36:49:d2:e7:39:0f:60:58:46:7e:21:82: 63:42:b1:0b:04:04:ed:2b:cd:00:1b:b0:31:dc:58:76:e5:db: e6:84:c5:49:dc:32:62:e6:c9:41:6d:01:39:db:c0:f0:a8:51: a1:eb:db:60:78:8a:b6:47:ce:72:16:50:5e:ce:b9:8f:13:38: fa:0d:82:7a:ac:45:f9:ba:3d:57:96:91:29:6c:1a:17:d3:47: ac:c9:d0:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NnJFifhaDu2YfQlXUqSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZmYxNTI3OGY1M2Y3NzYxYzJmM2QzM2RkOWJlNzdhOGE0 ZmJkOTQwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzhhMTViNDFmYzYxYmI3YThiZGIyZTI5YzZmYWVkYTQ5M2ZiMjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWOgZUHk0UohMgkc4N6tquI0H2Fr uQ//J0cIWt11ImBgKVvXFlN6FLuRnXqQ4HiNyjKPOF5pnBiwUyDAkgQU5pmZFX0U kQmGhLXHmjHwalRHeOLIc+kNdeO+06lQJCogNWDRfaKD1pfyaz8X9aIZOrgHNJst y7WO2qQ+UwYtos2qidSE5wBzva3aZaRcrP0F0VTHNdzlvmsQ5y6wFbBB91ga+h5V zAwp4fNk7Dz11H/1Z6Xpu54m8xN1SAvhZV3j93cVXIprZg9jGRv7xcWuf8SqqEg6 vVn23kcZm3AiHpaIIcuj+zbxVJXIL/9M1flmvhoTHOPOvkQ9UgYjnxl5ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEOKFbQfxhu3qL2y4pxvrtpJP7KJMB8GA1UdIwQY MBaAFJv/FSePU/d2HC89M92b53qKT72UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDIt NTY5NzI0OWY1MTI0LzEvUTRvVnRCX0dHN2VvdmJMaW5HLXUya2tfc29rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDItNTY5NzI0OWY1MTI0 LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLkbAMA0G CSqGSIb3DQEBCwUAA4IBAQBBVBy3d6IDEKcSYos2WpytTxZyC+QJZ+zzf9yytdgA tPWzVSBg1srNcApHTziblfMSA7Y8EwK6ztIj4CaDML3TcFRLurBS7hTV36FKqLkY hxhiOJQqD6UA3xuqeTZ2Vkym7pj8QazkwWSB6huKM300ATE5jgGfIOSCjpVWgnsY DRFlzrDq1yZhLZwHGZi3vw5IjzJgugHPt1DzYToDC67XKk/uLlWVCrU2SdLnOQ9g WEZ+IYJjQrELBATtK80AG7Ax3Fh25dvmhMVJ3DJi5slBbQE528DwqFGh69tgeIq2 R85yFlBezrmPEzj6DYJ6rEX5uj1XlpEpbBoX00esydCD -----END CERTIFICATE-----Generated at Wed Jan 21 18:51:50 2026 by rpki-client