This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/Sofdrg0QnOjUtQMqZfgwqYXhb6U.roa File: Sofdrg0QnOjUtQMqZfgwqYXhb6U.roa (raw, json) Hash identifier: akxM1ULNfux4cSJzKmej1AQZXAU7j1qSHqgRSQx0jHE= Subject key identifier: 4A:87:DD:AE:0D:10:9C:E8:D4:B5:03:2A:65:F8:30:A9:85:E1:6F:A5 Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2 Certificate serial: 019B7C12867517C2B618C31A6AD0170AD49D Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/Sofdrg0QnOjUtQMqZfgwqYXhb6U.roa Signing time: Fri 02 Jan 2026 00:19:07 +0000 ROA not before: Fri 02 Jan 2026 00:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16302 IP address blocks: 77.246.192.0/20 maxlen: 20 79.134.96.0/19 maxlen: 19 80.248.240.0/20 maxlen: 20 83.142.72.0/21 maxlen: 21 185.9.8.0/22 maxlen: 22 185.163.14.0/23 maxlen: 23 188.127.192.0/19 maxlen: 19 217.119.32.0/20 maxlen: 20 2a00:1190::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:86:75:17:c2:b6:18:c3:1a:6a:d0:17:0a:d4:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2 Validity Not Before: Jan 2 00:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a87ddae0d109ce8d4b5032a65f830a985e16fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:59:bc:37:b1:86:30:2d:a3:e7:f4:64:f5:4c: 81:09:b8:a5:c6:3a:68:02:48:5d:be:a9:b7:35:33: cf:d6:da:09:a7:33:f1:51:18:1c:ba:3e:3e:67:80: b6:fe:a3:b0:3a:b6:b8:b7:72:9f:90:57:ee:24:fd: 7f:0a:d8:48:53:6a:0c:8c:e1:11:f9:fe:2c:d6:1d: 8e:72:10:b5:cf:1d:3f:74:08:1e:98:26:26:b7:a3: be:13:04:8d:42:a4:e5:e1:f6:63:53:77:0a:45:d0: b8:39:fd:56:ca:d1:c4:ff:57:28:3b:3f:ad:5d:27: b0:69:4a:a6:32:0d:bb:3a:ea:20:30:09:7b:9d:bf: 49:34:e5:10:56:5e:34:0e:8a:bc:5b:a9:25:a1:ec: b3:14:31:48:33:5b:6d:1e:84:b5:db:bc:c2:d1:c8: 58:14:f4:5e:1d:ee:12:5b:47:67:2e:1b:c5:c3:f5: ce:50:f3:fd:7c:6f:8b:e1:5a:b5:3a:b5:4c:51:cc: 98:6a:b5:82:d2:f8:58:d6:8c:b2:ac:c3:df:6b:6f: 96:f8:88:d5:03:5b:6e:a9:35:5d:db:37:a4:03:d9: 4e:1d:9f:c2:cd:ce:2f:b8:94:8c:ee:31:3f:8b:62: 8c:dc:46:e3:77:c7:a2:e9:9a:c9:f8:5d:33:b3:bc: 79:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:87:DD:AE:0D:10:9C:E8:D4:B5:03:2A:65:F8:30:A9:85:E1:6F:A5 X509v3 Authority Key Identifier: keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/Sofdrg0QnOjUtQMqZfgwqYXhb6U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.246.192.0/20 79.134.96.0/19 80.248.240.0/20 83.142.72.0/21 185.9.8.0/22 185.163.14.0/23 188.127.192.0/19 217.119.32.0/20 IPv6: 2a00:1190::/32 Signature Algorithm: sha256WithRSAEncryption 5e:2d:c4:71:f1:99:6d:f0:16:84:b6:7f:77:1c:cf:14:6e:a1: e3:29:02:8b:21:f6:84:78:95:25:13:0b:25:b0:f8:b7:51:20: 84:a6:2d:7e:a2:7a:89:aa:58:6f:da:07:44:d2:5a:fe:02:c0: cb:b7:c5:66:1d:77:8d:0c:60:82:7d:a9:79:de:48:63:e3:44: 77:88:ba:ae:59:2e:45:a5:c2:e5:f9:60:33:26:3a:50:07:5d: 5b:c4:6d:2d:cc:15:f8:0e:2b:34:07:25:78:98:06:64:28:6b: 2b:b5:21:10:6c:ac:ad:48:69:27:a5:49:fb:16:b9:78:2e:63: 0b:15:c2:5e:91:da:b3:bb:8b:49:0b:10:f6:af:5a:d8:26:76: 51:b4:a3:ea:16:34:b6:fb:a7:37:86:ba:dd:fa:d2:43:65:87: 8e:26:3e:ed:63:62:90:ed:84:89:9d:3c:eb:91:54:40:a3:a3: 5b:80:80:bb:65:0d:8a:15:f5:26:f7:2c:86:9d:7c:e9:ff:07: b0:ff:20:8f:d8:58:e8:17:2e:18:6d:db:18:db:e9:4f:d0:66: 9c:b9:0a:f4:34:90:41:22:cf:ea:02:11:63:60:d3:9a:8b:b8: 9d:95:38:8c:ed:47:99:31:db:55:a5:79:81:60:71:e9:78:24: 18:be:ff:7d -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt8EoZ1F8K2GMMaatAXCtSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNjlhNDk3MDBlMGMzYjhlMzlhNzkxMzBjOTg3YTUwMDBj Y2ZmZTIwHhcNMjYwMTAyMDAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTg3ZGRhZTBkMTA5Y2U4ZDRiNTAzMmE2NWY4MzBhOTg1ZTE2ZmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFm8N7GGMC2j5/Rk9UyBCbilxjpo Akhdvqm3NTPP1toJpzPxURgcuj4+Z4C2/qOwOra4t3KfkFfuJP1/CthIU2oMjOER +f4s1h2OchC1zx0/dAgemCYmt6O+EwSNQqTl4fZjU3cKRdC4Of1WytHE/1coOz+t XSewaUqmMg27OuogMAl7nb9JNOUQVl40Doq8W6kloeyzFDFIM1ttHoS127zC0chY FPReHe4SW0dnLhvFw/XOUPP9fG+L4Vq1OrVMUcyYarWC0vhY1oyyrMPfa2+W+IjV A1tuqTVd2zekA9lOHZ/Czc4vuJSM7jE/i2KM3Ebjd8ei6ZrJ+F0zs7x5NwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFEqH3a4NEJzo1LUDKmX4MKmF4W+lMB8GA1UdIwQY MBaAFLFppJcA4MO445p5EwyYelAAzP/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1dta2x3RGd3N2pqbW5rVERKaDZVQURNXy1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zOTA4MWYtNTAwMy00MWVkLWI4MGEt M2ZhZTAzNGM0ODllLzEvU29mZHJnMFFuT2pVdFFNcVpmZ3dxWVhoYjZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zOTA4MWYtNTAwMy00MWVkLWI4MGEtM2ZhZTAzNGM0ODll LzEvc1dta2x3RGd3N2pqbW5rVERKaDZVQURNXy1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQETfbAAwQF T4ZgAwQEUPjwAwQDU45IAwQCuQkIAwQBuaMOAwQFvH/AAwQE2XcgMA0EAgACMAcD BQAqABGQMA0GCSqGSIb3DQEBCwUAA4IBAQBeLcRx8Zlt8BaEtn93HM8UbqHjKQKL IfaEeJUlEwslsPi3USCEpi1+onqJqlhv2gdE0lr+AsDLt8VmHXeNDGCCfal53khj 40R3iLquWS5FpcLl+WAzJjpQB11bxG0tzBX4Dis0ByV4mAZkKGsrtSEQbKytSGkn pUn7Frl4LmMLFcJekdqzu4tJCxD2r1rYJnZRtKPqFjS2+6c3hrrd+tJDZYeOJj7t Y2KQ7YSJnTzrkVRAo6NbgIC7ZQ2KFfUm9yyGnXzp/wew/yCP2FjoFy4YbdsY2+lP 0GacuQr0NJBBIs/qAhFjYNOai7idlTiM7UeZMdtVpXmBYHHpeCQYvv99 -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:46 2026 by rpki-client