This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/SO4ODwKZaMZRbg45FP2nZyJ5JQk.roa File: SO4ODwKZaMZRbg45FP2nZyJ5JQk.roa (raw, json) Hash identifier: qBOkD1BZLnNRkElqmAEiwmS3WVpC4bigU1naLXiimqw= Subject key identifier: 48:EE:0E:0F:02:99:68:C6:51:6E:0E:39:14:FD:A7:67:22:79:25:09 Certificate issuer: /CN=edff0ab25662757afb831675319296f63d989b69 Certificate serial: 019B797F3B07B48C6F602BFFDEF2EAB8B52E Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/SO4ODwKZaMZRbg45FP2nZyJ5JQk.roa Signing time: Thu 01 Jan 2026 12:18:59 +0000 ROA not before: Thu 01 Jan 2026 12:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206556 IP address blocks: 185.182.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3b:07:b4:8c:6f:60:2b:ff:de:f2:ea:b8:b5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edff0ab25662757afb831675319296f63d989b69 Validity Not Before: Jan 1 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48ee0e0f029968c6516e0e3914fda76722792509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:26:77:a1:d2:e4:b5:25:f3:e2:ed:a8:95:f2: 07:4d:d6:34:05:7a:cb:be:0a:14:38:2f:52:1a:17: d6:e1:67:14:4f:f7:82:31:07:6d:fc:37:c4:d9:a0: 7e:24:2f:12:c0:1d:60:1d:15:94:17:b3:57:13:b2: 51:0a:5d:f9:65:2d:d6:8e:6a:77:0c:e7:af:bb:45: 7e:69:f1:af:16:8a:d0:16:bf:d4:82:65:60:de:27: a0:fc:bf:12:33:e0:82:4c:66:8a:d1:df:e4:19:da: a7:ac:2c:4c:c8:09:9e:8f:4c:ee:c8:db:cf:15:3c: 2b:66:f2:56:d6:32:7f:c1:9f:b0:18:26:7e:e5:1d: b4:2a:ad:93:85:ed:20:d5:31:2b:9a:7a:5e:40:a5: 8a:4a:b1:72:f6:59:f6:ee:a6:e5:ae:e1:8e:42:35: da:d5:4f:d2:ed:5c:14:cf:31:d3:fa:8a:19:57:70: 1a:21:1a:5b:ce:8e:14:7d:f4:8e:31:0c:45:fc:df: 54:6b:bd:c3:23:99:60:9e:f9:c5:64:71:cc:3b:8f: d8:4c:1f:dd:38:c5:d2:ea:23:a6:e2:fb:37:98:5e: 12:71:ff:61:9c:ad:8f:0c:10:3b:69:51:b6:91:9e: 87:fa:01:82:7d:1b:2f:e7:93:53:89:f8:26:47:3f: a7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EE:0E:0F:02:99:68:C6:51:6E:0E:39:14:FD:A7:67:22:79:25:09 X509v3 Authority Key Identifier: keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/SO4ODwKZaMZRbg45FP2nZyJ5JQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.239.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:a0:4b:cf:f2:e4:20:83:8b:5e:ca:3b:71:fe:f1:f5:a4:39: c7:b3:d2:2c:8d:a4:2a:4b:7f:c9:13:c7:ab:f6:dd:30:47:ab: 1b:a4:33:d4:9a:93:7d:b8:93:db:a5:ec:67:0b:85:70:d7:fa: 63:50:9d:c6:7a:e3:99:ca:cd:14:1f:b4:2b:45:b8:74:5f:0e: a9:d0:08:5f:98:8e:ea:61:ca:a1:f6:70:53:ab:2b:4d:f5:7f: d0:50:70:1a:9a:3e:6e:26:fb:d7:34:77:8a:6c:20:5d:94:78: d2:cf:85:ed:85:e7:ed:99:c6:a0:f1:9c:3a:ce:d9:a6:ec:5d: 00:24:36:17:74:37:5d:5f:de:9b:bd:a4:d2:e5:0c:af:d0:fe: f8:3c:21:33:4b:50:c5:8c:91:1f:8a:a9:d3:8d:a2:94:36:4e: 89:ac:05:fe:5e:4e:bd:77:b8:07:cc:57:95:a3:25:d8:fc:4f: 7d:a5:23:ba:f7:63:53:97:cd:6a:0f:96:fb:47:2f:51:8f:50: bc:d3:5f:e7:f0:df:23:e0:2d:f1:5c:75:75:c8:6b:fd:a5:c1: d5:50:b2:df:ef:c7:10:ac:05:1b:f5:25:73:e7:a5:51:bf:b8: 61:60:87:6d:97:27:9a:b9:01:ae:26:eb:78:0a:53:f3:4a:58: c3:78:50:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzsHtIxvYCv/3vLquLUuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZmYwYWIyNTY2Mjc1N2FmYjgzMTY3NTMxOTI5NmY2M2Q5 ODliNjkwHhcNMjYwMTAxMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGVlMGUwZjAyOTk2OGM2NTE2ZTBlMzkxNGZkYTc2NzIyNzkyNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyZ3odLktSXz4u2olfIHTdY0BXrL vgoUOC9SGhfW4WcUT/eCMQdt/DfE2aB+JC8SwB1gHRWUF7NXE7JRCl35ZS3Wjmp3 DOevu0V+afGvForQFr/UgmVg3ieg/L8SM+CCTGaK0d/kGdqnrCxMyAmej0zuyNvP FTwrZvJW1jJ/wZ+wGCZ+5R20Kq2The0g1TErmnpeQKWKSrFy9ln27qblruGOQjXa 1U/S7VwUzzHT+ooZV3AaIRpbzo4UffSOMQxF/N9Ua73DI5lgnvnFZHHMO4/YTB/d OMXS6iOm4vs3mF4Scf9hnK2PDBA7aVG2kZ6H+gGCfRsv55NTifgmRz+nDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEjuDg8CmWjGUW4OORT9p2cieSUJMB8GA1UdIwQY MBaAFO3/CrJWYnV6+4MWdTGSlvY9mJtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lMmQ3MjktYmE5ZS00NzIzLWEzNjgt NjQ0YmZkY2ViOWY2LzEvU080T0R3S1phTVpSYmc0NUZQMm5aeUo1SlFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9lMmQ3MjktYmE5ZS00NzIzLWEzNjgtNjQ0YmZkY2ViOWY2 LzEvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubbvMA0G CSqGSIb3DQEBCwUAA4IBAQAPoEvP8uQgg4teyjtx/vH1pDnHs9IsjaQqS3/JE8er 9t0wR6sbpDPUmpN9uJPbpexnC4Vw1/pjUJ3GeuOZys0UH7QrRbh0Xw6p0AhfmI7q Ycqh9nBTqytN9X/QUHAamj5uJvvXNHeKbCBdlHjSz4Xtheftmcag8Zw6ztmm7F0A JDYXdDddX96bvaTS5Qyv0P74PCEzS1DFjJEfiqnTjaKUNk6JrAX+Xk69d7gHzFeV oyXY/E99pSO692NTl81qD5b7Ry9Rj1C801/n8N8j4C3xXHV1yGv9pcHVULLf78cQ rAUb9SVz56VRv7hhYIdtlyeauQGuJut4ClPzSljDeFAw -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:04 2026 by rpki-client