This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/SodBob46gHvkE9f0X3aM1jnjv_0.roa
File: SodBob46gHvkE9f0X3aM1jnjv_0.roa (raw, json)
Hash identifier: USjt5jELYEu1iaW09TQw060b9YelZ/w0+6LrYh++vTo=
Subject key identifier: 4A:87:41:A1:BE:3A:80:7B:E4:13:D7:F4:5F:76:8C:D6:39:E3:BF:FD
Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f
Certificate serial: 019B7910A6B741E5B1415F1DC375D551A94F
Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/SodBob46gHvkE9f0X3aM1jnjv_0.roa
Signing time: Thu 01 Jan 2026 10:18:12 +0000
ROA not before: Thu 01 Jan 2026 10:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212438
IP address blocks: 185.179.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 15:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:a6:b7:41:e5:b1:41:5f:1d:c3:75:d5:51:a9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f
Validity
Not Before: Jan 1 10:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a8741a1be3a807be413d7f45f768cd639e3bffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:06:2d:1f:67:07:f6:c4:e8:97:c6:97:5b:
b3:89:df:74:80:99:bb:21:5a:e7:e2:ad:30:f5:6c:
f1:3c:3a:8d:72:36:54:09:f5:09:74:ca:1c:02:71:
c8:9f:c0:59:ff:ca:14:93:6e:7e:87:cd:53:78:6b:
d6:df:3c:2c:8c:88:56:1f:ab:8d:2b:31:8d:c0:9f:
9b:21:f6:91:2f:2b:d2:17:23:41:9f:a7:bf:1a:a9:
e7:03:2c:d0:f4:28:db:62:92:57:36:9e:45:18:09:
42:f2:2a:16:47:f2:72:ad:f7:a5:64:c4:13:d5:dd:
46:b9:e7:03:a1:6b:ed:17:38:8b:1c:48:cd:20:01:
8b:f4:92:d6:ac:e1:64:e7:a4:f3:19:3a:ea:56:2a:
36:4c:40:69:e0:c2:63:c8:68:c1:06:db:0e:41:a5:
48:89:7c:35:8d:49:07:42:d2:89:24:92:eb:f5:37:
ea:fd:89:e9:5a:09:1a:30:06:79:2b:52:4b:7b:f0:
31:5d:15:3e:32:87:a6:b0:96:e6:af:9f:4c:26:5f:
c6:f5:76:d6:01:40:29:14:3d:97:52:f4:e9:2b:b6:
6f:93:15:aa:94:79:1a:ca:85:63:6f:78:30:d9:d8:
7f:ba:83:9b:97:1a:4a:5c:3e:a9:ad:c5:ba:51:f8:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:87:41:A1:BE:3A:80:7B:E4:13:D7:F4:5F:76:8C:D6:39:E3:BF:FD
X509v3 Authority Key Identifier:
keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/SodBob46gHvkE9f0X3aM1jnjv_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.213.0/24
Signature Algorithm: sha256WithRSAEncryption
23:cc:15:9a:18:00:87:2b:c7:0e:f6:c7:89:d4:39:9f:47:61:
1f:39:d9:d7:e1:fe:39:0c:51:13:61:c6:f2:f6:72:fe:76:0d:
87:35:6d:f0:a6:7f:91:80:94:a8:2d:81:bb:f9:a7:b3:1d:b5:
34:b1:f6:3b:aa:9b:59:75:a5:43:ed:db:fc:08:8c:d9:20:da:
ac:b6:66:c9:a1:0b:09:4f:88:ca:42:9e:57:0b:59:6c:80:e1:
1a:59:16:ac:8c:4a:f4:08:ee:c7:37:59:e1:3f:71:80:b5:47:
32:e6:a6:5e:b5:36:d9:1f:13:33:97:be:2a:30:a9:3b:02:c4:
c6:ef:fe:28:dc:34:a2:c4:ab:44:75:11:ab:0d:49:ca:68:ba:
24:62:70:79:90:86:03:aa:b5:85:0b:34:b5:93:e3:6f:90:26:
e9:2b:35:bf:f0:2c:7b:82:d0:43:55:e1:ac:a9:5c:2e:66:b6:
21:c8:a6:be:b2:9a:d6:18:f8:d0:3b:08:b9:04:67:4a:a7:6a:
43:0c:16:af:4e:b7:84:6b:56:5f:6f:89:3b:83:d8:56:a3:55:
1a:6a:4a:e0:2f:2f:38:52:75:4b:62:d1:3c:d6:a5:04:90:89:
85:c3:3c:f0:12:4a:c6:bd:db:19:5d:1b:98:51:6f:d2:94:d4:
f0:94:b9:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5EKa3QeWxQV8dw3XVUalPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1
Y2YzNGYwHhcNMjYwMTAxMTAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTg3NDFhMWJlM2E4MDdiZTQxM2Q3ZjQ1Zjc2OGNkNjM5ZTNiZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx94GLR9nB/bE6JfGl1uzid90gJm7
IVrn4q0w9WzxPDqNcjZUCfUJdMocAnHIn8BZ/8oUk25+h81TeGvW3zwsjIhWH6uN
KzGNwJ+bIfaRLyvSFyNBn6e/GqnnAyzQ9CjbYpJXNp5FGAlC8ioWR/JyrfelZMQT
1d1GuecDoWvtFziLHEjNIAGL9JLWrOFk56TzGTrqVio2TEBp4MJjyGjBBtsOQaVI
iXw1jUkHQtKJJJLr9Tfq/YnpWgkaMAZ5K1JLe/AxXRU+MoemsJbmr59MJl/G9XbW
AUApFD2XUvTpK7ZvkxWqlHkayoVjb3gw2dh/uoOblxpKXD6prcW6Ufi9YwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEqHQaG+OoB75BPX9F92jNY547/9MB8GA1UdIwQY
MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It
YzdjY2Q3OTQzMTA2LzEvU29kQm9iNDZnSHZrRTlmMFgzYU0xam5qdl8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2
LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubPVMA0G
CSqGSIb3DQEBCwUAA4IBAQAjzBWaGACHK8cO9seJ1DmfR2EfOdnX4f45DFETYcby
9nL+dg2HNW3wpn+RgJSoLYG7+aezHbU0sfY7qptZdaVD7dv8CIzZINqstmbJoQsJ
T4jKQp5XC1lsgOEaWRasjEr0CO7HN1nhP3GAtUcy5qZetTbZHxMzl74qMKk7AsTG
7/4o3DSixKtEdRGrDUnKaLokYnB5kIYDqrWFCzS1k+NvkCbpKzW/8Cx7gtBDVeGs
qVwuZrYhyKa+sprWGPjQOwi5BGdKp2pDDBavTreEa1Zfb4k7g9hWo1UaakrgLy84
UnVLYtE81qUEkImFwzzwEkrGvdsZXRuYUW/SlNTwlLlU
-----END CERTIFICATE-----
Generated at Tue Feb 3 00:04:50 2026 by rpki-client