This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/S-bwMSos2-eKtENDykR1_8Qkp_I.roa File: S-bwMSos2-eKtENDykR1_8Qkp_I.roa (raw, json) Hash identifier: xbxuJbxZkr/mH223J2YVdm3uiis0Dm1Iy28FKMjVeRU= Subject key identifier: 4B:E6:F0:31:2A:2C:DB:E7:8A:B4:43:43:CA:44:75:FF:C4:24:A7:F2 Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419 Certificate serial: 019B7C80B24BB1C3376F582AA543E5A7E589 Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/S-bwMSos2-eKtENDykR1_8Qkp_I.roa Signing time: Fri 02 Jan 2026 02:19:27 +0000 ROA not before: Fri 02 Jan 2026 02:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201992 IP address blocks: 217.23.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b2:4b:b1:c3:37:6f:58:2a:a5:43:e5:a7:e5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419 Validity Not Before: Jan 2 02:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4be6f0312a2cdbe78ab44343ca4475ffc424a7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1a:c6:21:25:b0:55:04:76:b6:fd:22:14:a4: f2:80:d4:55:8e:41:72:8b:57:c3:f5:bc:a4:ec:38: 2f:9f:db:81:b7:13:66:97:3a:37:0f:45:e1:d7:c9: 29:b3:36:ce:a3:9a:c4:87:44:09:32:89:ba:7e:8b: 43:d8:e1:6f:45:92:51:70:82:02:c7:e8:71:2d:a5: 62:05:35:d1:a1:4d:03:ee:85:cb:e3:c1:8d:31:b2: 5b:aa:a3:b7:76:e7:6c:23:81:fa:d3:f2:43:ad:d8: b4:d9:c5:54:0d:0c:17:c3:ae:33:df:20:d7:51:4f: e6:fe:ba:3f:3c:42:29:68:89:e4:ff:c9:12:10:0d: 5a:dd:b9:4e:ba:0b:bf:9c:12:9a:9a:ca:9c:8b:9b: 49:df:42:97:3b:90:50:6c:8a:67:92:cc:2a:79:da: 7c:b5:60:12:e1:6c:f8:e9:73:b6:04:d6:0f:c4:36: 28:83:25:de:97:b6:61:9d:71:d8:d6:61:a6:cb:96: b1:4e:e1:48:c2:df:94:39:a3:f2:22:eb:80:ec:a9: 6d:64:89:43:b7:ce:ec:ad:bc:29:6e:cb:a8:fb:63: 5a:74:5c:d4:e6:8e:69:6f:5b:b1:00:1d:70:71:8e: c4:ac:98:13:40:56:b2:51:1a:bf:24:0e:7e:03:b9: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E6:F0:31:2A:2C:DB:E7:8A:B4:43:43:CA:44:75:FF:C4:24:A7:F2 X509v3 Authority Key Identifier: keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/S-bwMSos2-eKtENDykR1_8Qkp_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.23.112.0/24 Signature Algorithm: sha256WithRSAEncryption 05:14:7d:75:67:96:18:8b:f7:5a:14:a8:69:36:e1:9b:4f:37: cd:02:62:e3:b2:5e:38:ba:d9:46:ef:b9:b9:db:f7:d6:5b:44: 98:e8:d4:51:26:b3:0f:82:97:45:79:d7:38:d8:cd:23:fc:26: ec:09:e7:82:f2:23:10:3f:2d:05:4c:ea:5e:c7:02:b6:ba:9d: 2c:bf:3f:7b:4a:58:c3:95:64:40:47:81:df:16:0d:7b:39:36: d4:f6:f9:d9:c3:f3:5c:52:fd:45:b2:8b:36:43:dc:97:b0:07: b6:b2:17:2a:4c:38:2c:68:2d:33:8d:ac:a8:af:bf:3b:e3:bc: 0f:5d:f0:58:5e:9d:13:df:25:df:22:4e:83:b6:a0:09:31:34: 54:4d:15:e2:c1:25:06:f2:3c:7f:08:0d:a9:cb:56:b5:35:b8: f4:a5:07:39:1b:94:6c:66:a6:36:23:a0:f7:ab:8d:ce:a8:e8: 3b:3f:9d:f6:d5:d3:be:6f:91:52:27:6d:84:92:03:e4:ef:82: 96:c7:2c:70:a2:ba:84:c0:43:5b:14:8c:91:c4:d9:d8:06:c5: 48:80:86:54:0d:ec:d6:3a:68:75:cc:b7:b9:e1:9b:b6:ec:80: 27:d2:17:e0:23:e9:96:56:bc:4a:fa:71:d0:0f:04:ad:4d:81: 6b:69:ec:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLJLscM3b1gqpUPlp+WJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MTAxMDM1ZDUzMzc3YzVhNzJiZWRjYTUyMmZjMTQ1NmUw Yjg0MTkwHhcNMjYwMTAyMDIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmU2ZjAzMTJhMmNkYmU3OGFiNDQzNDNjYTQ0NzVmZmM0MjRhN2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxrGISWwVQR2tv0iFKTygNRVjkFy i1fD9byk7Dgvn9uBtxNmlzo3D0Xh18kpszbOo5rEh0QJMom6fotD2OFvRZJRcIIC x+hxLaViBTXRoU0D7oXL48GNMbJbqqO3dudsI4H60/JDrdi02cVUDQwXw64z3yDX UU/m/ro/PEIpaInk/8kSEA1a3blOugu/nBKamsqci5tJ30KXO5BQbIpnkswqedp8 tWAS4Wz46XO2BNYPxDYogyXel7ZhnXHY1mGmy5axTuFIwt+UOaPyIuuA7KltZIlD t87srbwpbsuo+2NadFzU5o5pb1uxAB1wcY7ErJgTQFayURq/JA5+A7nxSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEvm8DEqLNvnirRDQ8pEdf/EJKfyMB8GA1UdIwQY MBaAFHkQEDXVM3fFpyvtylIvwUVuC4QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt MGNjODNiMDBmYzU4LzEvUy1id01Tb3MyLWVLdEVORHlrUjFfOFFrcF9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4 LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RdwMA0G CSqGSIb3DQEBCwUAA4IBAQAFFH11Z5YYi/daFKhpNuGbTzfNAmLjsl44utlG77m5 2/fWW0SY6NRRJrMPgpdFedc42M0j/CbsCeeC8iMQPy0FTOpexwK2up0svz97SljD lWRAR4HfFg17OTbU9vnZw/NcUv1Fsos2Q9yXsAe2shcqTDgsaC0zjayor78747wP XfBYXp0T3yXfIk6DtqAJMTRUTRXiwSUG8jx/CA2py1a1Nbj0pQc5G5RsZqY2I6D3 q43OqOg7P5321dO+b5FSJ22EkgPk74KWxyxworqEwENbFIyRxNnYBsVIgIZUDezW Omh1zLe54Zu27IAn0hfgI+mWVrxK+nHQDwStTYFraexH -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:17 2026 by rpki-client