This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/so6pthwnd2X53qX1FALU-olHwCU.roa File: so6pthwnd2X53qX1FALU-olHwCU.roa (raw, json) Hash identifier: mMHJa9xAeE4NdoJ9flR6GXvaXWGM81/SXeL1Ge6uEHc= Subject key identifier: B2:8E:A9:B6:1C:27:77:65:F9:DE:A5:F5:14:02:D4:FA:89:47:C0:25 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019B79DCE2B2497607F104D5202B8193ACEF Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/so6pthwnd2X53qX1FALU-olHwCU.roa Signing time: Thu 01 Jan 2026 14:01:17 +0000 ROA not before: Thu 01 Jan 2026 14:01:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 89.187.13.0/24 maxlen: 24 89.187.16.0/24 maxlen: 24 89.187.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:dc:e2:b2:49:76:07:f1:04:d5:20:2b:81:93:ac:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Jan 1 14:01:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b28ea9b61c277765f9dea5f51402d4fa8947c025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:09:05:bb:0c:02:a4:79:af:51:10:a5:26: 36:b6:59:ec:4a:62:61:59:6b:eb:14:c6:fb:64:dd: 4b:60:92:a4:7d:5e:38:5e:fe:a1:b9:4f:77:cf:8f: af:9a:6a:17:87:58:55:f4:09:23:7c:ee:a0:b1:b8: fe:5d:10:89:dd:8e:3d:74:5f:85:8e:af:36:73:b9: 32:88:65:d8:75:5f:f1:57:87:02:1c:75:c2:eb:4a: ae:24:99:ad:8a:f2:54:df:35:0f:84:85:f8:02:4d: 8a:89:65:51:7c:ca:76:b5:ef:ca:3d:57:96:e0:b1: b9:b7:cb:7c:14:b3:c4:51:0b:3f:e2:4e:ae:69:25: db:b3:1c:98:0a:0c:6a:75:26:ba:81:18:82:19:04: ee:8b:80:ad:bb:33:cd:9a:90:08:f7:48:95:d1:37: 79:3f:37:cf:99:db:44:3e:05:2e:3b:d5:51:40:22: 9c:6d:56:30:7b:e5:2c:43:bb:85:78:e0:29:e3:75: 73:4a:ec:24:b2:28:29:20:c1:1b:8b:5c:11:b4:29: 36:4a:12:7b:dc:0d:66:e9:38:45:f6:4f:19:f6:4a: 4a:b5:0b:6e:05:68:c1:9a:35:0b:b5:f0:f6:c7:d7: 6c:61:74:0f:55:4a:3c:24:73:cf:28:6b:db:ac:e5: a7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8E:A9:B6:1C:27:77:65:F9:DE:A5:F5:14:02:D4:FA:89:47:C0:25 X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/so6pthwnd2X53qX1FALU-olHwCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.13.0/24 89.187.16.0/24 89.187.30.0/24 Signature Algorithm: sha256WithRSAEncryption 56:f6:aa:c0:ec:d6:70:96:e3:67:13:a6:bc:6a:9b:76:8b:74: f5:72:18:0d:2c:62:8b:b9:16:d1:f6:ad:34:08:fe:15:91:09: 67:44:cd:45:8d:d2:f0:c8:02:54:d1:0c:57:23:99:94:3d:63: 92:b8:bf:b6:0e:6c:91:b3:17:ef:f3:6d:f8:e9:3f:88:0a:5a: ed:05:2d:1c:61:54:cf:ed:35:c3:00:11:42:f9:95:22:2c:66: a0:67:c5:54:d0:56:ab:52:08:a4:63:0f:fa:37:08:8f:ae:2a: a9:b4:28:27:cf:06:61:31:7d:49:14:97:8e:99:b7:39:67:b3: fd:e5:51:67:50:80:b4:fb:9b:3f:84:ae:67:16:c5:d5:16:7e: 9e:b8:b7:64:79:7f:e5:7a:c9:1c:65:14:11:fb:74:4e:20:3f: f6:63:7b:57:b9:7e:cb:3c:b4:59:8c:8a:04:be:55:31:c2:4b: f8:54:29:e4:a0:67:68:13:0b:56:fe:ff:6a:09:83:35:0a:a7: bb:82:73:e9:cb:59:90:d8:34:8a:6b:38:b2:8d:57:92:7a:f5: 8f:2e:60:a8:cd:26:08:c9:75:e1:b8:cd:2d:1f:f5:8a:b0:28: 8f:77:9c:ad:9d:b7:74:1d:cd:60:12:4a:8a:c9:31:36:db:73: 01:9f:a0:49 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt53OKySXYH8QTVICuBk6zvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjYwMTAxMTQwMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjhlYTliNjFjMjc3NzY1ZjlkZWE1ZjUxNDAyZDRmYTg5NDdjMDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWAJBbsMAqR5r1EQpSY2tlnsSmJh WWvrFMb7ZN1LYJKkfV44Xv6huU93z4+vmmoXh1hV9AkjfO6gsbj+XRCJ3Y49dF+F jq82c7kyiGXYdV/xV4cCHHXC60quJJmtivJU3zUPhIX4Ak2KiWVRfMp2te/KPVeW 4LG5t8t8FLPEUQs/4k6uaSXbsxyYCgxqdSa6gRiCGQTui4CtuzPNmpAI90iV0Td5 PzfPmdtEPgUuO9VRQCKcbVYwe+UsQ7uFeOAp43VzSuwksigpIMEbi1wRtCk2ShJ7 3A1m6ThF9k8Z9kpKtQtuBWjBmjULtfD2x9dsYXQPVUo8JHPPKGvbrOWnLQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLKOqbYcJ3dl+d6l9RQC1PqJR8AlMB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvc282cHRod25kMlg1M3FYMUZBTFUtb2xId0NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWbsNAwQA WbsQAwQAWbseMA0GCSqGSIb3DQEBCwUAA4IBAQBW9qrA7NZwluNnE6a8apt2i3T1 chgNLGKLuRbR9q00CP4VkQlnRM1FjdLwyAJU0QxXI5mUPWOSuL+2DmyRsxfv8234 6T+IClrtBS0cYVTP7TXDABFC+ZUiLGagZ8VU0FarUgikYw/6NwiPriqptCgnzwZh MX1JFJeOmbc5Z7P95VFnUIC0+5s/hK5nFsXVFn6euLdkeX/leskcZRQR+3ROID/2 Y3tXuX7LPLRZjIoEvlUxwkv4VCnkoGdoEwtW/v9qCYM1Cqe7gnPpy1mQ2DSKaziy jVeSevWPLmCozSYIyXXhuM0tH/WKsCiPd5ytnbd0Hc1gEkqKyTE223MBn6BJ -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:36 2026 by rpki-client