This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Soyj7spnuh2GvlYRAJM8FdcXP0A.roa File: Soyj7spnuh2GvlYRAJM8FdcXP0A.roa (raw, json) Hash identifier: ZFoD5dVGZOCyFXYtmkJd9lVkfIDZRnjzN6teGcrt9lQ= Subject key identifier: 4A:8C:A3:EE:CA:67:BA:1D:86:BE:56:11:00:93:3C:15:D7:17:3F:40 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80A8A5375F0525FD1C95678158FA47 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Soyj7spnuh2GvlYRAJM8FdcXP0A.roa Signing time: Fri 02 Jan 2026 02:19:25 +0000 ROA not before: Fri 02 Jan 2026 02:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62179 IP address blocks: 84.32.192.0/21 maxlen: 24 84.32.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a8:a5:37:5f:05:25:fd:1c:95:67:81:58:fa:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a8ca3eeca67ba1d86be561100933c15d7173f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9b:fe:7a:51:d9:b7:a8:2b:bf:0a:1a:c1:79: 64:9d:a0:b9:e5:37:46:fe:53:a6:6c:cf:7e:ea:ec: 96:bd:16:2e:47:0b:fd:f3:b4:93:2d:41:fd:cc:02: 96:4e:27:f2:24:14:71:55:38:a7:36:cb:57:ce:08: 73:a9:37:de:28:45:ea:90:69:50:bf:71:bb:f5:f6: 09:db:e0:9b:85:ef:65:ff:30:ae:18:81:55:08:03: 0a:fe:0e:0b:9a:34:a6:63:ac:c2:be:6f:f9:60:05: 78:17:b8:a8:14:fd:45:07:35:12:e6:53:2b:0f:a7: 45:5c:92:4e:e9:ab:d8:93:99:3b:b4:0a:4c:a9:75: 57:9f:51:ed:fc:a2:8a:88:96:fa:c2:53:c6:0f:df: 27:86:3a:76:9a:9d:1e:c8:e5:11:c1:a8:3c:0e:3c: e9:ff:f6:3c:8d:49:3c:dc:69:a0:bc:c6:15:02:56: a4:74:d9:6e:a3:22:0c:b3:b1:51:b0:f3:c8:51:57: 54:b9:a1:14:59:2a:0a:51:72:6d:92:7c:14:e7:de: e0:ae:98:d2:9c:f8:21:f9:4c:c6:0b:15:fb:95:42: 3e:1f:e9:83:39:04:24:26:33:8e:fe:c5:e8:5b:da: 21:ac:f1:9b:62:ce:7c:ab:89:85:0c:ce:b7:94:7b: 95:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8C:A3:EE:CA:67:BA:1D:86:BE:56:11:00:93:3C:15:D7:17:3F:40 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Soyj7spnuh2GvlYRAJM8FdcXP0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.192.0/20 Signature Algorithm: sha256WithRSAEncryption 19:30:2f:69:32:80:f8:41:42:ae:a8:94:19:cc:0b:93:49:d6: 9a:f5:91:5e:51:65:2c:b2:d7:99:ce:1c:5b:4a:4d:61:7c:e1: 69:42:4e:42:1a:06:62:b4:53:98:dc:8b:8d:d1:b5:5d:1e:74: 69:f0:1b:31:c3:9c:4c:92:df:ee:9c:38:5c:96:c8:bc:cb:31: fb:84:89:1c:97:21:2d:8f:6e:89:27:c5:b5:92:53:5a:56:75: 6d:e6:3f:b0:ec:bc:7a:27:c0:3e:32:4f:ac:56:0a:7e:d6:2a: 13:87:a8:0a:87:12:0a:0d:21:c8:87:3d:45:b0:f5:31:62:c5: 09:bf:4a:cd:6a:ca:af:10:51:a4:c4:43:f3:73:fa:dd:0b:95: 27:3f:06:7f:7e:b2:f3:d8:9b:e7:8f:97:5c:43:74:41:16:a1: ce:a2:2c:56:a3:13:bc:8b:41:93:02:6e:9a:f4:94:94:74:a2: 3f:e2:ae:84:4b:6d:1a:d4:39:cf:e0:0d:d2:1c:a9:95:a5:15: d3:c1:6d:ab:04:de:a8:6f:85:1a:16:33:86:fe:c8:4a:e3:64: 93:f9:1c:e7:52:23:0e:71:5f:e7:de:03:e7:4c:38:d4:04:3e: fc:cd:ae:42:58:2f:7e:df:ed:13:24:c2:b6:25:9b:2e:c7:94: 01:c2:1c:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKilN18FJf0clWeBWPpHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YThjYTNlZWNhNjdiYTFkODZiZTU2MTEwMDkzM2MxNWQ3MTczZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJv+elHZt6grvwoawXlknaC55TdG /lOmbM9+6uyWvRYuRwv987STLUH9zAKWTifyJBRxVTinNstXzghzqTfeKEXqkGlQ v3G79fYJ2+Cbhe9l/zCuGIFVCAMK/g4LmjSmY6zCvm/5YAV4F7ioFP1FBzUS5lMr D6dFXJJO6avYk5k7tApMqXVXn1Ht/KKKiJb6wlPGD98nhjp2mp0eyOURwag8Djzp //Y8jUk83GmgvMYVAlakdNluoyIMs7FRsPPIUVdUuaEUWSoKUXJtknwU597grpjS nPgh+UzGCxX7lUI+H+mDOQQkJjOO/sXoW9ohrPGbYs58q4mFDM63lHuVJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEqMo+7KZ7odhr5WEQCTPBXXFz9AMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvU295ajdzcG51aDJHdmxZUkFKTThGZGNYUDBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEVCDAMA0G CSqGSIb3DQEBCwUAA4IBAQAZMC9pMoD4QUKuqJQZzAuTSdaa9ZFeUWUssteZzhxb Sk1hfOFpQk5CGgZitFOY3IuN0bVdHnRp8Bsxw5xMkt/unDhclsi8yzH7hIkclyEt j26JJ8W1klNaVnVt5j+w7Lx6J8A+Mk+sVgp+1ioTh6gKhxIKDSHIhz1FsPUxYsUJ v0rNasqvEFGkxEPzc/rdC5UnPwZ/frLz2Jvnj5dcQ3RBFqHOoixWoxO8i0GTAm6a 9JSUdKI/4q6ES20a1DnP4A3SHKmVpRXTwW2rBN6ob4UaFjOG/shK42ST+RznUiMO cV/n3gPnTDjUBD78za5CWC9+3+0TJMK2JZsux5QBwhxd -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:32 2026 by rpki-client