This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SOeq-_cUF-hBUElnh76e4dt6TJw.roa File: SOeq-_cUF-hBUElnh76e4dt6TJw.roa (raw, json) Hash identifier: IZkRAX7yPwakOZ8sPWA0/HD2/zFQ9GbGRfdIf2vCpi8= Subject key identifier: 48:E7:AA:FB:F7:14:17:E8:41:50:49:67:87:BE:9E:E1:DB:7A:4C:9C Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB94F6848FFFFF2AEB25496EC2A319 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SOeq-_cUF-hBUElnh76e4dt6TJw.roa Signing time: Fri 02 Jan 2026 08:20:52 +0000 ROA not before: Fri 02 Jan 2026 08:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214279 IP address blocks: 151.241.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:94:f6:84:8f:ff:ff:2a:eb:25:49:6e:c2:a3:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48e7aafbf71417e84150496787be9ee1db7a4c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:71:54:77:8a:4d:63:96:c7:73:9d:60:33:8d: 37:d1:cf:32:93:dd:c8:21:f3:d1:de:74:60:63:63: f8:82:fa:9a:0a:c0:d9:94:eb:3c:d4:07:bb:7c:36: 98:0c:be:08:fb:93:cf:cc:c0:27:de:b9:65:73:f3: 03:14:39:ef:b9:b2:58:fa:bc:46:86:b7:8b:26:33: 5e:9c:e7:e5:62:ec:16:69:fb:37:09:a3:66:da:77: 7f:eb:37:74:22:69:28:3a:24:60:54:57:6c:a2:34: a2:cf:d2:a7:b5:c3:f1:58:ee:4e:9a:36:6e:2f:ce: 4a:e1:4d:03:77:41:65:34:1e:a1:7a:21:3c:a6:40: bd:3b:b2:cc:5e:47:a3:43:9d:df:7d:4a:37:92:01: 94:0a:5d:fd:44:a3:a9:2e:97:0a:0e:cd:f4:28:39: 2c:f9:98:99:32:b5:e6:f3:7f:57:7e:09:03:76:7b: b2:ab:30:b6:99:0e:1b:82:bd:ee:6f:4d:86:40:a8: f3:03:10:56:89:89:28:1b:fd:ab:a8:5b:64:cc:96: 5f:d3:e3:1f:d8:92:46:38:f8:1e:df:48:c1:63:d7: 0e:94:46:4c:57:ab:7c:bd:ff:ec:62:dc:21:c4:29: d3:e2:b7:56:b0:cf:d4:c7:2e:7f:ab:91:9d:35:65: 24:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E7:AA:FB:F7:14:17:E8:41:50:49:67:87:BE:9E:E1:DB:7A:4C:9C X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SOeq-_cUF-hBUElnh76e4dt6TJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.14.0/24 Signature Algorithm: sha256WithRSAEncryption 65:1f:e3:a7:aa:e2:6e:f6:18:47:92:8e:2c:25:32:0f:e3:23: f0:7a:8d:c3:93:eb:2e:50:78:d1:01:c4:48:62:60:09:82:be: bf:e0:05:93:a1:25:4a:05:bc:3d:f8:0f:ce:66:e4:68:8e:19: 86:3c:bb:10:c3:a2:f0:49:7c:5c:3d:23:fc:dc:f6:9c:d2:81: b4:d8:38:2b:8e:22:47:72:aa:82:fc:b8:45:f0:70:5e:83:7c: d2:b1:70:cf:5a:95:a8:73:24:8f:f6:59:4f:ac:dc:74:b1:a2: 59:01:2c:35:fc:c1:a7:2a:b6:94:1e:19:b6:2e:41:e6:fb:ea: 57:44:0c:0f:1a:50:65:c9:31:27:0e:72:ba:9b:09:06:16:40: be:14:bb:cd:01:c8:d3:4b:7a:24:5d:ca:08:cc:7a:b3:f4:91: ae:57:3d:7c:7b:1a:ff:3d:fb:29:d9:5e:48:cc:c8:c0:ec:bd: 39:90:85:13:23:60:a4:5f:d5:50:c7:c6:23:8d:b9:71:cb:a9: 0b:18:64:d7:c8:ac:4c:37:de:99:75:98:fa:c1:a6:c5:f8:64: 78:06:66:61:2d:92:1a:a7:09:11:17:c4:ab:d3:7f:2b:41:4b: a0:7f:2e:7b:dd:8f:00:01:f4:d6:69:28:02:37:0d:aa:cc:8d: 95:eb:6f:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y5T2hI///yrrJUluwqMZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGU3YWFmYmY3MTQxN2U4NDE1MDQ5Njc4N2JlOWVlMWRiN2E0YzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3FUd4pNY5bHc51gM4030c8yk93I IfPR3nRgY2P4gvqaCsDZlOs81Ae7fDaYDL4I+5PPzMAn3rllc/MDFDnvubJY+rxG hreLJjNenOflYuwWafs3CaNm2nd/6zd0ImkoOiRgVFdsojSiz9KntcPxWO5OmjZu L85K4U0Dd0FlNB6heiE8pkC9O7LMXkejQ53ffUo3kgGUCl39RKOpLpcKDs30KDks +ZiZMrXm839XfgkDdnuyqzC2mQ4bgr3ub02GQKjzAxBWiYkoG/2rqFtkzJZf0+Mf 2JJGOPge30jBY9cOlEZMV6t8vf/sYtwhxCnT4rdWsM/Uxy5/q5GdNWUkaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEjnqvv3FBfoQVBJZ4e+nuHbekycMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvU09lcS1fY1VGLWhCVUVsbmg3NmU0ZHQ2VEp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/EOMA0G CSqGSIb3DQEBCwUAA4IBAQBlH+OnquJu9hhHko4sJTIP4yPweo3Dk+suUHjRAcRI YmAJgr6/4AWToSVKBbw9+A/OZuRojhmGPLsQw6LwSXxcPSP83Pac0oG02DgrjiJH cqqC/LhF8HBeg3zSsXDPWpWocySP9llPrNx0saJZASw1/MGnKraUHhm2LkHm++pX RAwPGlBlyTEnDnK6mwkGFkC+FLvNAcjTS3okXcoIzHqz9JGuVz18exr/Pfsp2V5I zMjA7L05kIUTI2CkX9VQx8Yjjblxy6kLGGTXyKxMN96ZdZj6wabF+GR4BmZhLZIa pwkRF8Sr038rQUugfy573Y8AAfTWaSgCNw2qzI2V628k -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:50 2026 by rpki-client