This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/SOoKX4cNuYJIPao636suM6QbecU.roa File: SOoKX4cNuYJIPao636suM6QbecU.roa (raw, json) Hash identifier: AmP+tcOlMZhqBPlPO/PnVy1DrGZoadzcvOYUXfRfWD8= Subject key identifier: 48:EA:0A:5F:87:0D:B9:82:48:3D:AA:3A:DF:AB:2E:33:A4:1B:79:C5 Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b Certificate serial: 019B7F14551C3C16F9D1072937647012A7DC Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/SOoKX4cNuYJIPao636suM6QbecU.roa Signing time: Fri 02 Jan 2026 14:19:57 +0000 ROA not before: Fri 02 Jan 2026 14:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 194.45.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:55:1c:3c:16:f9:d1:07:29:37:64:70:12:a7:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b Validity Not Before: Jan 2 14:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48ea0a5f870db982483daa3adfab2e33a41b79c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:0d:bd:ce:1d:d8:03:80:3c:4a:c0:f1:35: be:87:a9:d3:71:90:87:86:97:09:61:1e:c6:9b:b6: ea:1e:fd:f6:97:07:17:f8:46:4e:35:e3:5a:66:ee: a4:b9:7d:3b:08:82:0b:ad:92:c2:45:fa:7a:05:3b: a8:9f:f4:34:6c:06:21:1c:bf:bd:10:58:f4:1c:97: 9d:6d:ca:06:6e:ed:88:92:56:c4:9f:61:fd:e3:64: 0b:02:db:17:bc:4b:c6:c8:3c:03:48:63:b0:d3:6e: 88:64:07:78:0e:3d:74:45:b2:ac:d9:4d:af:e3:b8: 6f:70:79:bc:a6:f3:b9:e2:b9:98:88:b2:3e:b9:b0: ab:f8:b3:32:5c:bd:5e:de:03:44:ab:80:5f:ee:32: 1b:e7:20:3d:76:3a:24:48:ef:0a:99:2f:51:ba:44: b9:06:ab:70:39:6e:0d:02:df:a9:d9:94:ed:52:46: 1b:2b:38:d1:84:92:97:31:6e:a8:ba:9e:b8:11:79: 59:db:d5:f8:4b:c8:cc:ad:30:81:bf:bc:48:2c:bf: 70:2f:7f:8c:17:e3:3b:b2:6a:37:1e:a7:7a:91:2c: b7:c7:54:f6:a9:66:74:83:08:40:06:e9:9c:3e:78: 0a:c0:00:8c:92:8d:28:98:81:46:e4:4e:15:69:f6: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EA:0A:5F:87:0D:B9:82:48:3D:AA:3A:DF:AB:2E:33:A4:1B:79:C5 X509v3 Authority Key Identifier: keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/SOoKX4cNuYJIPao636suM6QbecU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.45.0.0/24 Signature Algorithm: sha256WithRSAEncryption 31:79:dc:b5:54:ca:03:8a:79:c8:6f:ca:82:1d:4f:61:8d:d2: b9:a2:65:85:77:98:f8:bf:61:78:0a:41:9b:be:b8:7f:ae:85: 25:a7:ad:dc:42:15:e7:84:44:43:d6:56:3a:31:ff:22:09:62: 2b:6a:e0:3a:0e:8c:c6:6b:12:2c:e5:0c:69:d2:ce:8c:19:cc: b7:92:df:e6:9d:21:88:9b:d7:fd:f2:cb:70:fb:00:72:7f:12: 34:5e:44:e6:f4:56:79:6c:05:56:bb:c9:d1:ed:66:a4:53:e4: db:2b:1d:51:cf:55:5c:0c:10:1f:bd:d4:6c:be:68:8c:16:b4: da:66:b3:01:a4:f6:e9:c7:26:35:c3:e7:a9:92:12:07:01:89: 4e:ec:7d:eb:13:9a:05:7a:a1:82:80:5b:bd:fd:38:8a:15:ad: 55:34:46:53:93:4f:4c:51:eb:73:f1:81:4b:14:40:ea:de:0f: 38:8e:32:b8:db:e6:fb:0e:21:9f:4e:5f:da:0c:94:b2:50:97: f4:f2:15:b8:1d:05:f1:b7:1c:65:05:21:7e:7e:3c:6e:08:53: de:dd:5c:55:01:df:88:35:f5:59:3d:5a:9e:d6:33:0a:66:98: b6:9f:1f:c9:38:5a:c3:46:64:c1:7a:49:db:1a:ce:4c:a8:a8: 10:92:f0:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FFUcPBb50QcpN2RwEqfcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZWRhOGY3MjZhNjliNTA0ZGU5OTQ5NDNiMGE1ZjIzMDhj MmE5NmIwHhcNMjYwMTAyMTQxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGVhMGE1Zjg3MGRiOTgyNDgzZGFhM2FkZmFiMmUzM2E0MWI3OWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC0Nvc4d2AOAPErA8TW+h6nTcZCH hpcJYR7Gm7bqHv32lwcX+EZONeNaZu6kuX07CIILrZLCRfp6BTuon/Q0bAYhHL+9 EFj0HJedbcoGbu2IklbEn2H942QLAtsXvEvGyDwDSGOw026IZAd4Dj10RbKs2U2v 47hvcHm8pvO54rmYiLI+ubCr+LMyXL1e3gNEq4Bf7jIb5yA9djokSO8KmS9RukS5 BqtwOW4NAt+p2ZTtUkYbKzjRhJKXMW6oup64EXlZ29X4S8jMrTCBv7xILL9wL3+M F+M7smo3Hqd6kSy3x1T2qWZ0gwhABumcPngKwACMko0omIFG5E4Vafaf3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEjqCl+HDbmCSD2qOt+rLjOkG3nFMB8GA1UdIwQY MBaAFHftqPcmpptQTemUlDsKXyMIwqlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTkt NjA4NGNmYzZlNGM0LzEvU09vS1g0Y051WUpJUGFvNjM2c3VNNlFiZWNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTktNjA4NGNmYzZlNGM0 LzEvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwi0AMA0G CSqGSIb3DQEBCwUAA4IBAQAxedy1VMoDinnIb8qCHU9hjdK5omWFd5j4v2F4CkGb vrh/roUlp63cQhXnhERD1lY6Mf8iCWIrauA6DozGaxIs5Qxp0s6MGcy3kt/mnSGI m9f98stw+wByfxI0XkTm9FZ5bAVWu8nR7WakU+TbKx1Rz1VcDBAfvdRsvmiMFrTa ZrMBpPbpxyY1w+epkhIHAYlO7H3rE5oFeqGCgFu9/TiKFa1VNEZTk09MUetz8YFL FEDq3g84jjK42+b7DiGfTl/aDJSyUJf08hW4HQXxtxxlBSF+fjxuCFPe3VxVAd+I NfVZPVqe1jMKZpi2nx/JOFrDRmTBeknbGs5MqKgQkvAw -----END CERTIFICATE-----Generated at Sun Jan 18 16:38:01 2026 by rpki-client