This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/SoqrwvBIu0WD7xvFCRrQj5ER8Ck.roa File: SoqrwvBIu0WD7xvFCRrQj5ER8Ck.roa (raw, json) Hash identifier: u3RjjkaVFf/cQV+4yoRBPleDxt+ksRUQRSNCbsoYFqU= Subject key identifier: 4A:8A:AB:C2:F0:48:BB:45:83:EF:1B:C5:09:1A:D0:8F:91:11:F0:29 Certificate issuer: /CN=1517d4f58af84f50ce42f13293ede4aff12d173f Certificate serial: 019B7E38C78C51C001820EFF6726707D0316 Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/SoqrwvBIu0WD7xvFCRrQj5ER8Ck.roa Signing time: Fri 02 Jan 2026 10:20:08 +0000 ROA not before: Fri 02 Jan 2026 10:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51207 IP address blocks: 37.1.232.0/21 maxlen: 21 37.8.160.0/19 maxlen: 19 37.160.0.0/12 maxlen: 17 2a0d:e480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c7:8c:51:c0:01:82:0e:ff:67:26:70:7d:03:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f Validity Not Before: Jan 2 10:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a8aabc2f048bb4583ef1bc5091ad08f9111f029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:02:55:83:3c:4d:52:3d:f3:1d:15:b4:f4: 73:fc:6d:a9:5d:43:12:ee:3e:1e:fb:e1:fb:d6:3f: 96:01:30:6e:b4:b4:15:20:6a:92:aa:49:6d:3b:5b: 98:1a:21:dc:16:57:3a:bd:a3:1c:79:7f:03:e2:92: 7e:ad:97:03:fd:6c:24:fd:c5:09:a7:70:dd:b9:ef: d2:2e:8b:e5:67:66:a7:36:f7:54:d9:fa:a1:b8:dc: a2:9b:65:55:c5:71:01:1d:02:87:6a:00:60:8c:46: 96:41:d7:17:75:4d:46:9a:ea:3a:b3:76:4f:a9:c4: 34:10:56:8f:7d:91:45:9e:3a:4a:e0:ec:8f:12:97: a8:bf:f9:ef:16:0c:e1:b7:2a:c1:4c:c1:a9:36:78: 80:49:fc:86:0e:2a:70:c8:9c:20:20:96:ec:05:b6: 3c:fb:50:2f:5f:20:b5:59:52:d7:a9:81:84:fb:78: 78:08:e5:83:dc:bb:02:7a:26:e7:e7:9c:43:ec:71: 89:9d:e3:4b:d9:d2:6c:9c:06:48:fb:ed:94:2c:18: 1b:7f:b9:06:eb:78:80:85:f5:69:f0:44:1d:ca:5a: 77:b0:e0:f5:03:99:8e:2b:15:2b:23:1b:8e:58:10: cd:a7:ab:c0:6d:d2:4b:5e:99:3b:79:6f:d7:c0:3a: 7c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8A:AB:C2:F0:48:BB:45:83:EF:1B:C5:09:1A:D0:8F:91:11:F0:29 X509v3 Authority Key Identifier: keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/SoqrwvBIu0WD7xvFCRrQj5ER8Ck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.232.0/21 37.8.160.0/19 37.160.0.0/12 IPv6: 2a0d:e480::/29 Signature Algorithm: sha256WithRSAEncryption ab:9a:a8:d2:7e:95:e9:7e:57:5e:77:a5:a1:54:0b:59:79:eb: df:84:3e:53:ba:58:15:46:05:57:c6:95:25:29:c9:87:c6:9f: 7f:47:6d:4f:78:59:56:fb:00:06:eb:a7:00:92:e2:3d:8b:30: e3:39:06:50:ff:b9:29:bf:9c:3f:67:10:17:aa:24:77:36:e0: 26:ed:40:07:a3:35:3e:7b:ec:ae:a2:5e:0e:96:b0:a2:d1:a3: 12:54:ba:a8:7c:44:d6:4d:6f:45:03:32:80:79:ca:3e:f0:3e: 02:69:1f:4f:d7:8d:36:97:4e:97:6e:04:12:26:3e:be:66:8f: f2:13:37:be:8b:61:13:5d:a8:dd:b5:c6:7a:82:f1:bd:2f:32: 04:be:51:3b:a8:3f:42:79:4d:70:d4:4a:10:91:4b:c6:10:05: e8:40:94:0c:ab:05:ce:aa:0e:88:0f:ed:06:96:a1:8d:f9:bf: a6:49:63:06:b9:5c:e1:de:9b:94:f5:c4:44:98:47:72:97:ce: c8:89:94:7d:fc:02:24:e7:2a:19:6c:48:b7:1b:dd:59:48:8c: 84:20:39:17:9a:3d:a7:a0:4d:74:ee:46:53:db:55:0f:ca:c6: 9e:e1:2e:d0:42:f7:57:f8:1b:3b:79:5f:30:f7:e0:8b:8d:dc: b1:7a:63:2e -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt+OMeMUcABgg7/ZyZwfQMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MTdkNGY1OGFmODRmNTBjZTQyZjEzMjkzZWRlNGFmZjEy ZDE3M2YwHhcNMjYwMTAyMTAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YThhYWJjMmYwNDhiYjQ1ODNlZjFiYzUwOTFhZDA4ZjkxMTFmMDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTACVYM8TVI98x0VtPRz/G2pXUMS 7j4e++H71j+WATButLQVIGqSqkltO1uYGiHcFlc6vaMceX8D4pJ+rZcD/Wwk/cUJ p3Ddue/SLovlZ2anNvdU2fqhuNyim2VVxXEBHQKHagBgjEaWQdcXdU1Gmuo6s3ZP qcQ0EFaPfZFFnjpK4OyPEpeov/nvFgzhtyrBTMGpNniASfyGDipwyJwgIJbsBbY8 +1AvXyC1WVLXqYGE+3h4COWD3LsCeibn55xD7HGJneNL2dJsnAZI++2ULBgbf7kG 63iAhfVp8EQdylp3sOD1A5mOKxUrIxuOWBDNp6vAbdJLXpk7eW/XwDp8xwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFEqKq8LwSLtFg+8bxQka0I+REfApMB8GA1UdIwQY MBaAFBUX1PWK+E9QzkLxMpPt5K/xLRc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jNGY4MGMtN2I2OS00ZmVjLWFhNTQt ZTVmOThkZGFmYzk4LzEvU29xcnd2Qkl1MFdEN3h2RkNSclFqNUVSOENrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9jNGY4MGMtN2I2OS00ZmVjLWFhNTQtZTVmOThkZGFmYzk4 LzEvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwQDJQHoAwQF JQigAwMEJaAwDQQCAAIwBwMFAyoN5IAwDQYJKoZIhvcNAQELBQADggEBAKuaqNJ+ lel+V153paFUC1l569+EPlO6WBVGBVfGlSUpyYfGn39HbU94WVb7AAbrpwCS4j2L MOM5BlD/uSm/nD9nEBeqJHc24CbtQAejNT577K6iXg6WsKLRoxJUuqh8RNZNb0UD MoB5yj7wPgJpH0/XjTaXTpduBBImPr5mj/ITN76LYRNdqN21xnqC8b0vMgS+UTuo P0J5TXDUShCRS8YQBehAlAyrBc6qDogP7QaWoY35v6ZJYwa5XOHem5T1xESYR3KX zsiJlH38AiTnKhlsSLcb3VlIjIQgOReaPaegTXTuRlPbVQ/Kxp7hLtBC91f4Gzt5 XzD34IuN3LF6Yy4= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:29 2026 by rpki-client