This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/Som9pdt2cBfqpNs_uoKUr5V86tc.roa File: Som9pdt2cBfqpNs_uoKUr5V86tc.roa (raw, json) Hash identifier: Er0ATXdFVQI+dlPzaVCGDkbogKEk2cw3WoLgdwrv/rM= Subject key identifier: 4A:89:BD:A5:DB:76:70:17:EA:A4:DB:3F:BA:82:94:AF:95:7C:EA:D7 Certificate issuer: /CN=b44f8539174d00bfa8bfde49043f485c3a587525 Certificate serial: 019B7D5B9697DFDC73E1D0405340E195984B Authority key identifier: B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/Som9pdt2cBfqpNs_uoKUr5V86tc.roa Signing time: Fri 02 Jan 2026 06:18:32 +0000 ROA not before: Fri 02 Jan 2026 06:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48972 IP address blocks: 95.130.232.0/21 maxlen: 21 185.100.140.0/22 maxlen: 22 2a02:b70::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:96:97:df:dc:73:e1:d0:40:53:40:e1:95:98:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b44f8539174d00bfa8bfde49043f485c3a587525 Validity Not Before: Jan 2 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a89bda5db767017eaa4db3fba8294af957cead7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3f:87:1c:c8:6a:4d:aa:64:8e:1b:f3:54:d6: 4d:fc:e4:e8:95:8d:a9:49:56:63:c5:e0:dc:da:10: 39:fb:7c:be:87:e5:db:6c:52:24:47:32:53:80:54: e2:b8:36:58:c5:32:1e:30:17:a6:cd:6c:91:e4:19: 22:93:78:01:e2:2f:1d:9f:5c:8d:4c:14:54:5c:99: 8a:2a:bc:8d:b1:a6:dc:17:84:70:0f:21:37:3f:be: c8:9f:20:87:29:63:5f:fc:af:6b:ad:c5:53:b7:92: d6:9c:b1:be:32:a9:36:23:aa:9c:e6:32:c8:d5:68: 3e:24:c1:0e:23:0c:19:12:08:7a:f9:b0:43:8f:70: 69:4b:92:da:1e:c5:4d:64:ee:83:97:ec:f6:c1:0c: be:5d:4a:e3:27:89:79:ef:ae:59:fe:80:e9:51:d7: 79:3d:3b:95:2e:64:71:d1:42:a0:46:9a:44:13:a9: bb:39:5e:f2:3e:41:44:09:42:d0:f3:e0:4f:fa:4a: 66:a3:b5:2c:51:89:c5:18:e2:61:a2:e0:08:0e:28: 92:c7:ad:6a:3a:f9:f3:42:5f:e6:d7:eb:27:90:af: f3:23:63:f8:4b:f7:f1:99:c7:25:df:1d:08:f6:ee: a6:a9:b0:5a:fa:56:0b:6c:3c:cf:2e:ce:5d:d9:e8: 93:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:89:BD:A5:DB:76:70:17:EA:A4:DB:3F:BA:82:94:AF:95:7C:EA:D7 X509v3 Authority Key Identifier: keyid:B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/Som9pdt2cBfqpNs_uoKUr5V86tc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.130.232.0/21 185.100.140.0/22 IPv6: 2a02:b70::/32 Signature Algorithm: sha256WithRSAEncryption 6a:5b:b3:16:10:3d:e3:ad:a7:4c:35:3a:9f:cb:8d:5a:79:62: 00:47:84:01:8d:4a:ae:59:70:00:2b:69:a4:04:f8:b9:44:09: ed:4b:79:cc:34:59:f2:6a:8c:3b:27:cb:56:a3:d2:3e:7b:be: 28:98:09:b2:f7:45:39:01:14:d5:96:46:6b:c7:81:b5:e8:d1: b8:c1:1c:ee:92:71:75:53:06:34:eb:20:88:7c:22:19:51:be: c0:9d:02:05:24:79:d0:fd:07:fa:37:97:ab:2a:16:e2:c2:59: 29:0f:80:f6:8a:ce:f4:e2:8e:01:9c:a9:7c:e9:aa:50:5e:ef: 34:b5:54:de:d8:0d:b4:1a:d7:9e:9c:b0:e7:bb:49:16:40:12: b9:44:0a:9e:38:3f:43:37:8b:4c:c3:bc:94:e2:0e:64:69:90: ab:2f:ed:37:b5:6b:c5:ae:5a:c8:d1:57:f3:be:4b:d5:13:5f: 24:8f:02:88:57:13:67:35:bd:63:c6:03:5a:25:d1:e2:df:9f: da:00:a0:a4:14:e1:8d:9c:b3:b8:38:cc:99:04:27:58:bb:46: 8d:19:1f:d9:a7:21:dc:ef:47:b6:45:63:bb:1f:8b:ad:66:39: 39:c3:52:96:c6:c2:01:74:2c:89:51:cf:fd:76:03:c4:7e:11: 89:fa:de:91 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9W5aX39xz4dBAU0DhlZhLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NGY4NTM5MTc0ZDAwYmZhOGJmZGU0OTA0M2Y0ODVjM2E1 ODc1MjUwHhcNMjYwMTAyMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTg5YmRhNWRiNzY3MDE3ZWFhNGRiM2ZiYTgyOTRhZjk1N2NlYWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T+HHMhqTapkjhvzVNZN/OTolY2p SVZjxeDc2hA5+3y+h+XbbFIkRzJTgFTiuDZYxTIeMBemzWyR5Bkik3gB4i8dn1yN TBRUXJmKKryNsabcF4RwDyE3P77InyCHKWNf/K9rrcVTt5LWnLG+Mqk2I6qc5jLI 1Wg+JMEOIwwZEgh6+bBDj3BpS5LaHsVNZO6Dl+z2wQy+XUrjJ4l5765Z/oDpUdd5 PTuVLmRx0UKgRppEE6m7OV7yPkFECULQ8+BP+kpmo7UsUYnFGOJhouAIDiiSx61q OvnzQl/m1+snkK/zI2P4S/fxmccl3x0I9u6mqbBa+lYLbDzPLs5d2eiTmQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEqJvaXbdnAX6qTbP7qClK+VfOrXMB8GA1UdIwQY MBaAFLRPhTkXTQC/qL/eSQQ/SFw6WHUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEUtRk9SZE5BTC1vdjk1SkJEOUlYRHBZZFNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mNzU1OTYtNzc5MC00MzJjLTg4Y2Qt MzMzZTUzY2ZhMDIxLzEvU29tOXBkdDJjQmZxcE5zX3VvS1VyNVY4NnRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mNzU1OTYtNzc5MC00MzJjLTg4Y2QtMzMzZTUzY2ZhMDIx LzEvdEUtRk9SZE5BTC1vdjk1SkJEOUlYRHBZZFNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDX4LoAwQC uWSMMA0EAgACMAcDBQAqAgtwMA0GCSqGSIb3DQEBCwUAA4IBAQBqW7MWED3jradM NTqfy41aeWIAR4QBjUquWXAAK2mkBPi5RAntS3nMNFnyaow7J8tWo9I+e74omAmy 90U5ARTVlkZrx4G16NG4wRzuknF1UwY06yCIfCIZUb7AnQIFJHnQ/Qf6N5erKhbi wlkpD4D2is704o4BnKl86apQXu80tVTe2A20GteenLDnu0kWQBK5RAqeOD9DN4tM w7yU4g5kaZCrL+03tWvFrlrI0VfzvkvVE18kjwKIVxNnNb1jxgNaJdHi35/aAKCk FOGNnLO4OMyZBCdYu0aNGR/ZpyHc70e2RWO7H4utZjk5w1KWxsIBdCyJUc/9dgPE fhGJ+t6R -----END CERTIFICATE-----Generated at Tue Feb 10 04:26:50 2026 by rpki-client