This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/ISogQh6QwDS4WqmRWDRDC0aPBY4.roa File: ISogQh6QwDS4WqmRWDRDC0aPBY4.roa (raw, json) Hash identifier: 25nzQ6cM0A1+BLJDqBPIcNwyNh5oOrug8KrgFXgei7A= Subject key identifier: 21:2A:20:42:1E:90:C0:34:B8:5A:A9:91:58:34:43:0B:46:8F:05:8E Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1 Certificate serial: 019B77C661D7705E1A818CBE134C6A834207 Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/ISogQh6QwDS4WqmRWDRDC0aPBY4.roa Signing time: Thu 01 Jan 2026 04:17:28 +0000 ROA not before: Thu 01 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 192.112.151.0/24 maxlen: 24 192.112.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:61:d7:70:5e:1a:81:8c:be:13:4c:6a:83:42:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1 Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=212a20421e90c034b85aa9915834430b468f058e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:c1:94:c1:43:c3:af:d4:c9:7c:78:d4:ae: e0:5d:dc:fb:f0:1e:ab:f0:d4:cf:be:a3:29:cf:54: 7c:22:a6:5b:d0:7e:af:07:ff:aa:d9:cc:5c:f8:8c: 74:29:aa:27:0e:6a:56:de:0b:0b:27:58:b4:26:b2: 2e:de:46:87:a3:ca:e0:6f:9a:81:ad:3f:c7:dc:5c: 1c:61:fe:99:a2:d0:89:0c:94:12:5f:17:3a:fd:ac: 31:9b:80:1a:e5:0b:f7:4d:0f:5a:42:db:c0:a7:29: fd:35:61:ed:4d:43:d0:d2:e0:09:b2:c1:97:65:ff: 77:c0:2a:3b:4b:e9:98:b9:ee:02:f1:34:1a:a3:3b: 6f:a2:ad:cf:7b:c2:a6:d2:64:33:36:c3:f2:a8:6f: 59:5d:73:53:ab:4f:16:09:f7:75:53:59:d2:4b:22: fe:2f:cd:27:81:03:36:c0:99:5c:41:14:a6:c5:b4: d5:49:09:7a:d4:b3:62:71:76:34:81:b9:10:a6:4e: 16:4c:76:b7:2d:82:49:63:0b:0d:94:5b:2d:fb:a0: 51:1f:4e:25:a4:d1:3e:4c:91:98:22:87:27:29:e3: ba:83:c1:69:72:95:1b:ca:b4:a3:c8:20:c7:53:e0: d1:04:4e:e5:ec:c3:fb:af:b9:87:e1:aa:da:12:a1: 6d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2A:20:42:1E:90:C0:34:B8:5A:A9:91:58:34:43:0B:46:8F:05:8E X509v3 Authority Key Identifier: keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/ISogQh6QwDS4WqmRWDRDC0aPBY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.112.151.0/24 192.112.178.0/24 Signature Algorithm: sha256WithRSAEncryption 23:a5:9f:30:a9:c0:df:10:f1:ae:60:52:be:2e:18:49:88:97: a1:43:1d:40:f5:53:c0:69:e1:ea:f3:17:42:58:f0:8d:a3:7d: 5b:a5:26:df:e1:de:7e:bf:a5:74:4f:79:91:20:e6:61:b2:ee: 4c:99:d8:94:dc:bd:46:56:b6:81:fb:a2:48:71:b1:9e:b8:e7: 53:4d:9f:99:29:86:1f:66:bd:83:2d:21:5f:f6:d1:81:46:91: 38:56:1e:40:e2:af:c7:f6:d0:53:74:12:ab:6d:b9:f0:35:43: d5:ba:e5:94:1e:6b:c0:10:0e:02:be:eb:7e:1c:d7:69:27:24: 89:22:75:29:61:b8:2e:b1:31:cb:2e:25:4b:7d:a6:ae:14:21: 74:64:35:d2:95:c8:ee:e7:17:f8:9a:1b:b4:86:fd:8c:14:54: 24:34:58:9b:f2:e8:17:ba:74:ad:94:6a:6a:6b:cb:23:f9:be: a9:95:9d:9e:23:a4:32:c5:2f:a6:26:35:26:f8:9f:a4:75:92: 78:31:1e:cd:33:51:e5:d1:2d:d6:07:e1:db:67:ac:85:53:f8: 4d:6b:3c:08:a2:99:1a:b1:cf:d8:e0:bd:7d:f3:3f:f3:65:3e: 10:09:d4:01:95:d7:4b:78:75:dc:b3:c7:20:0a:fb:90:d4:05: 32:d9:97:8c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xmHXcF4agYy+E0xqg0IHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZDZjZGM2ZmQzMzJkODhiZTJhYjA5MWVjZTc0ZDc2MjRk MzU5ZjEwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTJhMjA0MjFlOTBjMDM0Yjg1YWE5OTE1ODM0NDMwYjQ2OGYwNThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY3BlMFDw6/UyXx41K7gXdz78B6r 8NTPvqMpz1R8IqZb0H6vB/+q2cxc+Ix0KaonDmpW3gsLJ1i0JrIu3kaHo8rgb5qB rT/H3FwcYf6ZotCJDJQSXxc6/awxm4Aa5Qv3TQ9aQtvApyn9NWHtTUPQ0uAJssGX Zf93wCo7S+mYue4C8TQaoztvoq3Pe8Km0mQzNsPyqG9ZXXNTq08WCfd1U1nSSyL+ L80ngQM2wJlcQRSmxbTVSQl61LNicXY0gbkQpk4WTHa3LYJJYwsNlFst+6BRH04l pNE+TJGYIocnKeO6g8FpcpUbyrSjyCDHU+DRBE7l7MP7r7mH4araEqFtUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCEqIEIekMA0uFqpkVg0QwtGjwWOMB8GA1UdIwQY MBaAFHvWzcb9My2IviqwkeznTXYk01nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTliTnh2MHpMWWktS3JDUjdPZE5kaVRUV2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8yOWYzODYtNDI0Ny00ZTZhLTliZjEt NjFjNGEyNTZmOWFkLzEvSVNvZ1FoNlF3RFM0V3FtUldEUkRDMGFQQlk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8yOWYzODYtNDI0Ny00ZTZhLTliZjEtNjFjNGEyNTZmOWFk LzEvZTliTnh2MHpMWWktS3JDUjdPZE5kaVRUV2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHCXAwQA wHCyMA0GCSqGSIb3DQEBCwUAA4IBAQAjpZ8wqcDfEPGuYFK+LhhJiJehQx1A9VPA aeHq8xdCWPCNo31bpSbf4d5+v6V0T3mRIOZhsu5MmdiU3L1GVraB+6JIcbGeuOdT TZ+ZKYYfZr2DLSFf9tGBRpE4Vh5A4q/H9tBTdBKrbbnwNUPVuuWUHmvAEA4Cvut+ HNdpJySJInUpYbgusTHLLiVLfaauFCF0ZDXSlcju5xf4mhu0hv2MFFQkNFib8ugX unStlGpqa8sj+b6plZ2eI6QyxS+mJjUm+J+kdZJ4MR7NM1Hl0S3WB+HbZ6yFU/hN azwIopkasc/Y4L198z/zZT4QCdQBlddLeHXcs8cgCvuQ1AUy2ZeM -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:24 2026 by rpki-client