This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/_SO3ZcEL-NxbVo2zGUmXJKashh4.roa File: _SO3ZcEL-NxbVo2zGUmXJKashh4.roa (raw, json) Hash identifier: DQyiiOHyh7kvQrHckqHxzZTNIDfF/xOylq73UWhMnm0= Subject key identifier: FD:23:B7:65:C1:0B:F8:DC:5B:56:8D:B3:19:49:97:24:A6:AC:86:1E Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689 Certificate serial: 019B78A33D52F435D939BE1E2ACC81B1F1CE Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/_SO3ZcEL-NxbVo2zGUmXJKashh4.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202152 IP address blocks: 185.49.132.0/22 maxlen: 22 185.49.132.0/23 maxlen: 23 185.49.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 17:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3d:52:f4:35:d9:39:be:1e:2a:cc:81:b1:f1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af935603e52e831537716d458b360192f99a3689 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd23b765c10bf8dc5b568db319499724a6ac861e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:eb:19:50:86:15:09:09:d3:aa:c5:7d:86: c2:df:a8:bc:9f:ea:d9:b5:7d:74:f4:45:55:6e:8b: bd:4d:89:9d:c3:4e:61:53:ec:72:24:8e:fd:b1:ca: 91:76:67:47:65:91:fb:eb:7c:a0:1f:2b:85:e0:05: bb:e0:d4:b4:db:17:27:66:d9:55:06:ca:94:dd:18: 0e:95:2c:47:c7:01:76:d9:29:68:42:c8:7d:ac:19: 04:4c:2b:16:b2:58:50:86:bb:c4:5c:0a:75:f7:2c: 76:4f:e9:46:04:9f:1c:b4:ce:f8:e8:0a:d5:74:99: 9b:c2:6a:51:98:6d:16:e4:e6:89:6c:d8:d2:af:6c: 00:d6:aa:b1:ac:7b:31:b5:9f:12:fc:18:93:23:10: 58:09:b9:44:e3:63:48:5c:85:e6:e3:37:07:88:1a: 54:73:97:ee:16:81:f2:17:5f:b4:7b:4a:6b:0d:2e: cc:4c:b1:84:6b:30:ed:00:fb:86:b5:2b:14:88:34: ad:0d:17:54:95:38:bb:36:b0:c8:89:21:27:0e:ec: ad:11:fd:f9:72:6e:38:4b:e6:60:0d:73:34:a6:39: e3:b7:ae:97:bd:fb:70:b9:0d:93:10:12:d1:c2:ce: 71:dd:29:a3:6f:e3:45:34:c1:52:7b:b8:c2:e3:57: eb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:23:B7:65:C1:0B:F8:DC:5B:56:8D:B3:19:49:97:24:A6:AC:86:1E X509v3 Authority Key Identifier: keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/_SO3ZcEL-NxbVo2zGUmXJKashh4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.132.0/22 Signature Algorithm: sha256WithRSAEncryption 44:65:75:ae:e6:b2:9c:1a:9f:ef:60:96:6a:a4:53:a7:0f:e0: 47:fd:7f:63:0d:17:02:30:f6:59:8d:20:da:49:56:22:90:8a: bf:c8:59:33:a9:bc:af:59:25:f3:e8:4e:7b:56:4e:fa:ea:35: 0b:eb:37:e0:df:be:bb:53:06:d7:a9:75:63:9f:b1:4b:d3:65: bd:64:9d:9e:4a:09:a3:08:50:f2:06:3d:20:26:12:bf:a3:58: 86:71:14:3b:67:d9:e8:43:8d:b2:aa:4e:11:2e:fb:a6:2c:66: bb:d1:3b:bb:88:c1:b9:14:75:53:76:17:f6:51:aa:f3:1e:56: e7:a0:1a:ff:fc:e1:1b:4d:37:7d:21:d1:13:d3:2a:c4:3d:2a: c2:25:59:b7:6f:a2:ff:08:04:b4:3f:45:cb:be:f8:65:09:93: df:7c:65:6a:c5:b8:95:00:07:b0:41:6a:01:d4:71:86:60:4e: d2:86:1a:4d:5b:ae:c6:64:92:da:db:a0:f9:d2:6d:3f:52:d6: 18:39:66:2d:d8:3e:3b:e4:6c:1a:7d:20:a0:92:3d:42:ef:5f: cf:12:d6:65:37:20:2f:6d:21:77:ed:0c:c9:6d:f5:89:39:42: 40:3d:10:09:3a:d1:8b:fa:85:23:cc:9a:3a:2a:40:2b:39:6e: a3:57:d8:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oz1S9DXZOb4eKsyBsfHOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTM1NjAzZTUyZTgzMTUzNzcxNmQ0NThiMzYwMTkyZjk5 YTM2ODkwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDIzYjc2NWMxMGJmOGRjNWI1NjhkYjMxOTQ5OTcyNGE2YWM4NjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0HrGVCGFQkJ06rFfYbC36i8n+rZ tX109EVVbou9TYmdw05hU+xyJI79scqRdmdHZZH763ygHyuF4AW74NS02xcnZtlV BsqU3RgOlSxHxwF22SloQsh9rBkETCsWslhQhrvEXAp19yx2T+lGBJ8ctM746ArV dJmbwmpRmG0W5OaJbNjSr2wA1qqxrHsxtZ8S/BiTIxBYCblE42NIXIXm4zcHiBpU c5fuFoHyF1+0e0prDS7MTLGEazDtAPuGtSsUiDStDRdUlTi7NrDIiSEnDuytEf35 cm44S+ZgDXM0pjnjt66XvftwuQ2TEBLRws5x3Smjb+NFNMFSe7jC41frgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP0jt2XBC/jcW1aNsxlJlySmrIYeMB8GA1UdIwQY MBaAFK+TVgPlLoMVN3FtRYs2AZL5mjaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zMDAxYWQtZGU5MC00MzYwLTgxMWYt MGEwZDA1ZWQwYzZiLzEvX1NPM1pjRUwtTnhiVm8yekdVbVhKS2FzaGg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8zMDAxYWQtZGU5MC00MzYwLTgxMWYtMGEwZDA1ZWQwYzZi LzEvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTGEMA0G CSqGSIb3DQEBCwUAA4IBAQBEZXWu5rKcGp/vYJZqpFOnD+BH/X9jDRcCMPZZjSDa SVYikIq/yFkzqbyvWSXz6E57Vk766jUL6zfg3767UwbXqXVjn7FL02W9ZJ2eSgmj CFDyBj0gJhK/o1iGcRQ7Z9noQ42yqk4RLvumLGa70Tu7iMG5FHVTdhf2UarzHlbn oBr//OEbTTd9IdET0yrEPSrCJVm3b6L/CAS0P0XLvvhlCZPffGVqxbiVAAewQWoB 1HGGYE7ShhpNW67GZJLa26D50m0/UtYYOWYt2D475GwafSCgkj1C71/PEtZlNyAv bSF37QzJbfWJOUJAPRAJOtGL+oUjzJo6KkArOW6jV9i9 -----END CERTIFICATE-----Generated at Sun Jan 11 03:38:56 2026 by rpki-client