This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/SFOLT1rOEZcDOZOXPUlVPj2BtNM.roa File: SFOLT1rOEZcDOZOXPUlVPj2BtNM.roa (raw, json) Hash identifier: 0fxGkIsvC3CUnK4VxyOHVjTDnp5Ye/A5p/Xq805YdGc= Subject key identifier: 48:53:8B:4F:5A:CE:11:97:03:39:93:97:3D:49:55:3E:3D:81:B4:D3 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B9E55FF767EBE5A86FF955DD7D4650D92 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/SFOLT1rOEZcDOZOXPUlVPj2BtNM.roa Signing time: Thu 08 Jan 2026 15:59:54 +0000 ROA not before: Thu 08 Jan 2026 15:59:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 147.90.96.0/20 maxlen: 20 158.173.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 22:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:55:ff:76:7e:be:5a:86:ff:95:5d:d7:d4:65:0d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 8 15:59:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48538b4f5ace1197033993973d49553e3d81b4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:18:4e:8a:10:68:c3:7c:21:e9:2b:66:7f:bc: 0c:d3:fc:47:e7:a4:b7:f6:5b:be:3a:55:4b:7a:3c: 0d:80:fb:dd:d9:b3:f9:50:d7:68:fa:da:5f:9c:7d: 2b:53:18:11:2a:22:2b:79:ea:c1:04:4d:2d:eb:76: 33:96:50:b9:a3:a2:88:85:bd:df:a4:b3:65:39:4a: e5:d7:e6:4f:a6:e6:7f:69:0f:76:84:b5:77:ee:70: 39:7a:0f:40:75:13:90:22:3a:79:5f:f0:67:c7:fe: 79:56:77:73:81:62:93:a3:5e:83:19:16:76:74:f6: 75:22:c8:43:f5:5e:df:4d:d2:4b:c1:f7:46:19:c4: 38:0a:75:3f:ec:ca:5f:c4:a2:68:08:32:dc:9b:1a: 78:a7:fb:be:aa:6d:e8:cc:46:d8:f2:5b:17:2b:4d: fe:6a:34:d7:f9:e6:51:3f:c6:66:56:3e:50:07:78: 20:c0:00:3d:65:ab:4c:68:d0:e3:d0:3e:4a:cb:bb: 5d:ba:71:df:a6:33:07:d7:42:64:09:6c:1f:a7:14: 34:f9:87:f1:25:9e:9e:f0:0f:c8:7d:2e:30:d1:5d: c1:b4:12:97:45:07:14:e4:bc:50:53:0b:63:37:0d: f6:5f:66:b6:0e:91:eb:d3:ef:fa:94:77:69:db:85: c5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:53:8B:4F:5A:CE:11:97:03:39:93:97:3D:49:55:3E:3D:81:B4:D3 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/SFOLT1rOEZcDOZOXPUlVPj2BtNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.90.96.0/20 158.173.198.0/23 Signature Algorithm: sha256WithRSAEncryption e7:54:12:44:3f:a6:75:08:95:c9:81:81:1f:6e:78:5d:79:5f: fe:b5:58:42:b3:2b:70:e5:a4:a2:53:da:69:44:ce:ee:c1:59: f3:69:0a:8e:cd:3a:49:e5:f1:e4:74:8f:0b:3a:28:45:da:7c: cd:52:9c:b6:b6:72:80:f5:e0:c7:72:9c:37:39:a0:9b:fd:38: 28:bb:8d:21:16:69:06:f9:df:31:1c:14:b1:e5:e8:cf:a7:81: fd:6c:be:14:02:90:f1:ee:06:05:d9:e3:50:a2:93:ea:77:62: 9a:09:2b:04:ab:47:38:89:77:f3:e8:ed:68:9b:ba:10:db:8a: d3:66:f0:b9:f2:7e:fd:f4:5f:2d:8b:49:ad:62:e9:09:11:81: a4:2b:a9:4e:f1:10:a1:02:73:23:33:00:d8:7b:3f:57:ec:0c: 05:54:1a:13:ab:4a:ef:2f:10:8a:56:63:ff:b8:bb:82:19:66: c1:ad:c5:b6:bb:01:5f:b9:f7:49:60:c4:c0:fa:d8:42:84:b4: 8a:79:70:f5:dd:dd:1a:a5:b8:66:3c:b2:d6:3e:cd:83:88:05: 13:3e:bd:53:bd:84:e3:c8:1c:d6:87:08:db:ee:8a:67:7d:2e: 3c:dd:db:fb:1e:61:77:08:b8:5a:61:37:9b:26:9a:14:0a:45: 22:9c:3a:d4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZueVf92fr5ahv+VXdfUZQ2SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTA4MTU1OTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODUzOGI0ZjVhY2UxMTk3MDMzOTkzOTczZDQ5NTUzZTNkODFiNGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBhOihBow3wh6Stmf7wM0/xH56S3 9lu+OlVLejwNgPvd2bP5UNdo+tpfnH0rUxgRKiIreerBBE0t63YzllC5o6KIhb3f pLNlOUrl1+ZPpuZ/aQ92hLV37nA5eg9AdROQIjp5X/Bnx/55VndzgWKTo16DGRZ2 dPZ1IshD9V7fTdJLwfdGGcQ4CnU/7MpfxKJoCDLcmxp4p/u+qm3ozEbY8lsXK03+ ajTX+eZRP8ZmVj5QB3ggwAA9ZatMaNDj0D5Ky7tdunHfpjMH10JkCWwfpxQ0+Yfx JZ6e8A/IfS4w0V3BtBKXRQcU5LxQUwtjNw32X2a2DpHr0+/6lHdp24XFRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEhTi09azhGXAzmTlz1JVT49gbTTMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvU0ZPTFQxck9FWmNET1pPWFBVbFZQajJCdE5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEk1pgAwQB nq3GMA0GCSqGSIb3DQEBCwUAA4IBAQDnVBJEP6Z1CJXJgYEfbnhdeV/+tVhCsytw 5aSiU9ppRM7uwVnzaQqOzTpJ5fHkdI8LOihF2nzNUpy2tnKA9eDHcpw3OaCb/Tgo u40hFmkG+d8xHBSx5ejPp4H9bL4UApDx7gYF2eNQopPqd2KaCSsEq0c4iXfz6O1o m7oQ24rTZvC58n799F8ti0mtYukJEYGkK6lO8RChAnMjMwDYez9X7AwFVBoTq0rv LxCKVmP/uLuCGWbBrcW2uwFfufdJYMTA+thChLSKeXD13d0apbhmPLLWPs2DiAUT Pr1TvYTjyBzWhwjb7opnfS483dv7HmF3CLhaYTebJpoUCkUinDrU -----END CERTIFICATE-----Generated at Sun Jan 18 08:55:01 2026 by rpki-client