This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/SoUQ5tjPimIs5vL0jQz1k3-Y_k4.roa File: SoUQ5tjPimIs5vL0jQz1k3-Y_k4.roa (raw, json) Hash identifier: rxeG5Q9fjMcRXTA3/mQpeB3InL8UbHM8sXy68JYVcRc= Subject key identifier: 4A:85:10:E6:D8:CF:8A:62:2C:E6:F2:F4:8D:0C:F5:93:7F:98:FE:4E Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729 Certificate serial: 019B7D5B06CE54E08154C32D59F7BFF152F0 Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/SoUQ5tjPimIs5vL0jQz1k3-Y_k4.roa Signing time: Fri 02 Jan 2026 06:17:55 +0000 ROA not before: Fri 02 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 37.18.192.0/19 maxlen: 24 185.140.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:06:ce:54:e0:81:54:c3:2d:59:f7:bf:f1:52:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729 Validity Not Before: Jan 2 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a8510e6d8cf8a622ce6f2f48d0cf5937f98fe4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:59:c9:db:e9:db:4f:18:b2:6f:01:d1:71:95: 33:f1:32:2c:3c:b3:b1:8b:8b:df:e2:73:58:44:92: c6:15:8c:3b:9c:06:0b:a1:76:07:72:95:9f:b2:d9: fb:ca:7e:36:0d:38:8f:2d:a7:2c:86:a4:98:55:18: a0:02:c9:07:ea:aa:5f:4a:d3:8d:44:9a:0b:2f:8c: 9d:19:a9:dd:09:f2:57:9e:4c:c3:6b:51:85:fb:ea: e1:57:4b:77:f4:b8:92:96:b8:fb:a0:9e:c0:a8:01: 22:38:78:7f:f9:e6:58:e0:cc:34:6a:d7:88:71:7e: 91:fb:6c:ee:2a:6e:a3:cf:bf:46:6d:a9:08:32:5d: 75:cd:d4:de:fd:15:3e:4d:84:00:d8:1c:51:f2:d5: 33:3a:a6:4d:6f:99:ec:34:17:4c:45:01:ee:6e:b7: fa:1d:9f:90:81:6e:92:68:79:af:8c:98:1a:da:7e: 84:84:3c:25:55:51:25:d4:80:5e:6a:e1:92:9e:5d: a1:83:1d:10:c4:0a:a5:d9:49:29:58:01:d5:ff:d7: 95:4c:44:44:b7:c2:96:39:83:7b:41:90:c9:6a:5e: 9f:31:9a:16:51:ed:79:b0:b4:e8:d1:fb:2c:7d:5e: 3d:e9:cf:61:b5:32:a4:6f:1a:cb:53:ec:f7:60:df: 31:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:85:10:E6:D8:CF:8A:62:2C:E6:F2:F4:8D:0C:F5:93:7F:98:FE:4E X509v3 Authority Key Identifier: keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/SoUQ5tjPimIs5vL0jQz1k3-Y_k4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.192.0/19 185.140.36.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:c7:bc:14:58:f0:39:70:ae:2c:7a:59:00:cd:2d:cc:ee:7c: 87:84:59:47:9f:bd:94:d2:ad:54:a0:c5:8d:c0:5b:bb:25:2e: 29:a0:9e:37:86:55:b4:cc:fb:9f:5e:52:2c:ba:d9:e1:1c:3e: 03:ff:b1:2f:b2:e2:37:c0:17:6a:ae:6e:28:a4:dd:6e:ad:8a: b0:5e:fe:63:d4:3a:01:09:6c:15:b9:a5:11:38:13:3f:8b:07: 3e:ad:ba:f4:ad:64:91:ec:e4:cf:33:cf:75:f0:09:02:75:ae: 87:07:c0:39:74:8f:fc:18:02:cd:21:8f:2a:38:26:ca:04:9f: 34:0c:3a:eb:06:de:f4:9b:45:8a:f2:8a:87:3b:05:be:64:4a: fd:7a:4c:9b:b6:92:25:83:1a:29:4f:dc:f5:58:87:af:9b:6c: fc:19:05:8e:01:46:d1:2b:56:c7:c6:1a:c6:19:a5:8e:3b:07: bc:ce:86:8f:f8:2a:31:7f:ba:0e:54:a8:87:a0:4b:7e:aa:8e: 6b:d1:16:18:2a:53:1b:80:a2:e6:42:8d:70:8b:e1:92:5d:78: 9f:eb:82:6a:90:41:64:82:e2:cd:52:bf:57:c6:05:b0:77:ab: 15:0e:6c:2a:58:67:58:74:fb:e1:97:cc:fd:8c:02:c7:f4:b0: 5e:03:1e:90 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WwbOVOCBVMMtWfe/8VLwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNThhOTM0MTg5Y2YwNTg5MWY4YzRlNTk5ZDBiOTg5NTdl OTk3MjkwHhcNMjYwMTAyMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTg1MTBlNmQ4Y2Y4YTYyMmNlNmYyZjQ4ZDBjZjU5MzdmOThmZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31nJ2+nbTxiybwHRcZUz8TIsPLOx i4vf4nNYRJLGFYw7nAYLoXYHcpWfstn7yn42DTiPLacshqSYVRigAskH6qpfStON RJoLL4ydGandCfJXnkzDa1GF++rhV0t39LiSlrj7oJ7AqAEiOHh/+eZY4Mw0ateI cX6R+2zuKm6jz79GbakIMl11zdTe/RU+TYQA2BxR8tUzOqZNb5nsNBdMRQHubrf6 HZ+QgW6SaHmvjJga2n6EhDwlVVEl1IBeauGSnl2hgx0QxAql2UkpWAHV/9eVTERE t8KWOYN7QZDJal6fMZoWUe15sLTo0fssfV496c9htTKkbxrLU+z3YN8xwwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEqFEObYz4piLOby9I0M9ZN/mP5OMB8GA1UdIwQY MBaAFDFYqTQYnPBYkfjE5ZnQuYlX6ZcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVZpcE5CaWM4RmlSLU1UbG1kQzVpVmZwbHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jY2NmOGItMDI3NC00YmIyLThkYmIt ZDM4NmQyMDQ5MDQyLzEvU29VUTV0alBpbUlzNXZMMGpRejFrMy1ZX2s0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9jY2NmOGItMDI3NC00YmIyLThkYmItZDM4NmQyMDQ5MDQy LzEvTVZpcE5CaWM4RmlSLU1UbG1kQzVpVmZwbHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFJRLAAwQC uYwkMA0GCSqGSIb3DQEBCwUAA4IBAQBrx7wUWPA5cK4selkAzS3M7nyHhFlHn72U 0q1UoMWNwFu7JS4poJ43hlW0zPufXlIsutnhHD4D/7EvsuI3wBdqrm4opN1urYqw Xv5j1DoBCWwVuaUROBM/iwc+rbr0rWSR7OTPM8918AkCda6HB8A5dI/8GALNIY8q OCbKBJ80DDrrBt70m0WK8oqHOwW+ZEr9ekybtpIlgxopT9z1WIevm2z8GQWOAUbR K1bHxhrGGaWOOwe8zoaP+Coxf7oOVKiHoEt+qo5r0RYYKlMbgKLmQo1wi+GSXXif 64JqkEFkguLNUr9XxgWwd6sVDmwqWGdYdPvhl8z9jALH9LBeAx6Q -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:24 2026 by rpki-client