This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/SoyEFopk-R4dS6W4GId_dIzG6Fo.roa File: SoyEFopk-R4dS6W4GId_dIzG6Fo.roa (raw, json) Hash identifier: 8Qh9O/rztM/wDJzj5wDIv0KZPNCBmgUCZ7Xbj18mMsE= Subject key identifier: 4A:8C:84:16:8A:64:F9:1E:1D:4B:A5:B8:18:87:7F:74:8C:C6:E8:5A Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05 Certificate serial: 019B7D5D1C34233CD085563B35919087F7CE Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/SoyEFopk-R4dS6W4GId_dIzG6Fo.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.40.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1c:34:23:3c:d0:85:56:3b:35:91:90:87:f7:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05 Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a8c84168a64f91e1d4ba5b818877f748cc6e85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3d:96:d9:19:e8:35:4c:27:b3:f3:c7:ca:18: ed:43:7e:8f:56:e5:97:8b:51:d4:b1:7a:12:98:54: 43:dd:55:78:06:f9:c6:7a:82:28:ef:fb:5e:ce:e2: 8f:2f:46:c0:25:e8:27:cc:78:10:0f:ce:1d:84:04: 25:a4:0f:2c:ce:91:e5:75:a5:4f:63:24:de:55:44: 92:41:55:78:a6:3b:f1:27:39:93:e3:3d:46:ea:a3: da:fa:22:72:c7:0e:45:bc:4b:a0:dc:36:2f:ba:4c: 32:de:7d:55:97:5a:c5:e2:b8:05:7e:6f:e5:6b:a9: f1:74:34:37:82:cd:88:49:0f:5f:98:ac:28:83:8e: a2:af:6c:a3:62:12:79:57:e0:05:2e:8f:45:a8:f9: 36:70:4d:c2:a6:fe:27:e9:b7:23:41:52:a3:60:af: c5:75:14:f0:a0:e8:95:11:08:02:72:20:c6:d9:b6: 56:42:72:9d:51:f3:f8:65:35:f6:ca:e3:00:27:88: 95:09:2f:b4:a3:7d:7f:26:0d:3a:f0:26:9b:9a:33: ef:99:ef:44:66:f1:34:09:40:cf:ea:48:42:e5:55: d5:1f:1f:43:db:c7:5f:a0:d3:b4:a8:f2:70:f4:ad: a7:30:93:21:02:ea:2d:42:27:23:d8:a8:16:48:ce: ef:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8C:84:16:8A:64:F9:1E:1D:4B:A5:B8:18:87:7F:74:8C:C6:E8:5A X509v3 Authority Key Identifier: keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/SoyEFopk-R4dS6W4GId_dIzG6Fo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.110.0/24 Signature Algorithm: sha256WithRSAEncryption 67:c1:e1:13:81:f8:9c:c9:e2:10:cf:fa:c5:84:82:2a:b5:e0: 44:cf:ef:a4:bd:c2:c7:3f:1a:36:52:d6:ba:64:e7:e8:76:b2: fc:99:40:59:89:fb:95:2f:a1:4c:77:01:77:12:e7:0a:e2:57: 3a:0e:1d:05:0d:4f:b3:d3:f8:7e:7a:77:3b:b2:0c:f4:57:44: 0b:63:95:19:b2:0e:1f:3a:40:38:e0:d1:7b:e8:b6:a1:e6:97: 41:e6:cb:50:9d:8f:3b:e2:25:e0:c2:e9:84:b6:3d:d0:cd:05: d7:59:e5:93:de:d7:e9:cb:80:97:29:50:66:a9:28:45:83:d5: 3f:a6:bc:75:75:86:b4:a3:23:ea:d1:80:6e:0c:64:9b:3a:46: 19:ce:eb:a5:5e:24:8d:4f:24:8d:71:41:8e:cc:a6:df:6f:17: 2c:ad:a5:8c:fa:78:0f:df:b7:13:3c:6b:0c:b7:12:db:a4:6b: 4c:7b:f8:a5:aa:35:c2:cf:58:41:57:6d:4b:b3:20:6c:58:96: c6:49:94:26:6e:d8:85:6b:25:04:21:a1:db:52:69:29:64:d2: b7:47:b6:d8:48:70:d3:f1:81:12:a3:de:e4:5d:91:6c:a9:08: 4a:fc:db:55:ff:5c:82:6e:7d:42:4a:ad:9a:85:5c:55:6e:a2: 2b:37:94:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XRw0IzzQhVY7NZGQh/fOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTZmMjg5NDhjODMyZjJkNDM0YmI0NGQ1ZGUwZWExMjI2 MDFiMDUwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YThjODQxNjhhNjRmOTFlMWQ0YmE1YjgxODg3N2Y3NDhjYzZlODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz2W2RnoNUwns/PHyhjtQ36PVuWX i1HUsXoSmFRD3VV4BvnGeoIo7/tezuKPL0bAJegnzHgQD84dhAQlpA8szpHldaVP YyTeVUSSQVV4pjvxJzmT4z1G6qPa+iJyxw5FvEug3DYvukwy3n1Vl1rF4rgFfm/l a6nxdDQ3gs2ISQ9fmKwog46ir2yjYhJ5V+AFLo9FqPk2cE3Cpv4n6bcjQVKjYK/F dRTwoOiVEQgCciDG2bZWQnKdUfP4ZTX2yuMAJ4iVCS+0o31/Jg068CabmjPvme9E ZvE0CUDP6khC5VXVHx9D28dfoNO0qPJw9K2nMJMhAuotQicj2KgWSM7veQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEqMhBaKZPkeHUuluBiHf3SMxuhaMB8GA1UdIwQY MBaAFH9W8olIyDLy1DS7RNXeDqEiYBsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWZiY2EtODBlMC00YjhjLTg2MjIt NGU4NmFkNjRmNzc0LzEvU295RUZvcGstUjRkUzZXNEdJZF9kSXpHNkZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yMWZiY2EtODBlMC00YjhjLTg2MjItNGU4NmFkNjRmNzc0 LzEvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuShuMA0G CSqGSIb3DQEBCwUAA4IBAQBnweETgficyeIQz/rFhIIqteBEz++kvcLHPxo2Uta6 ZOfodrL8mUBZifuVL6FMdwF3EucK4lc6Dh0FDU+z0/h+enc7sgz0V0QLY5UZsg4f OkA44NF76Lah5pdB5stQnY874iXgwumEtj3QzQXXWeWT3tfpy4CXKVBmqShFg9U/ prx1dYa0oyPq0YBuDGSbOkYZzuulXiSNTySNcUGOzKbfbxcsraWM+ngP37cTPGsM txLbpGtMe/ilqjXCz1hBV21LsyBsWJbGSZQmbtiFayUEIaHbUmkpZNK3R7bYSHDT 8YESo97kXZFsqQhK/NtV/1yCbn1CSq2ahVxVbqIrN5ST -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:22 2026 by rpki-client