This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/28dSOCA9FT-2cS9d1i0TH2-PohM.roa File: 28dSOCA9FT-2cS9d1i0TH2-PohM.roa (raw, json) Hash identifier: YATXe0nqwm4Q1md7ii0Qn8O8FTxpBD/JPcG/Vh9iF1Y= Subject key identifier: DB:C7:52:38:20:3D:15:3F:B6:71:2F:5D:D6:2D:13:1F:6F:8F:A2:13 Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb Certificate serial: 019A5E6B3CE9CF1C8290C4FE8E571224F47A Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/28dSOCA9FT-2cS9d1i0TH2-PohM.roa Signing time: Fri 07 Nov 2025 13:04:37 +0000 ROA not before: Fri 07 Nov 2025 13:04:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56410 IP address blocks: 5.149.168.0/21 maxlen: 21 45.137.184.0/22 maxlen: 22 45.158.112.0/22 maxlen: 24 62.146.164.0/22 maxlen: 22 80.190.0.0/22 maxlen: 22 81.173.12.0/22 maxlen: 22 91.216.236.0/24 maxlen: 24 91.216.241.0/24 maxlen: 24 93.119.24.0/22 maxlen: 22 144.2.240.0/21 maxlen: 21 159.253.224.0/22 maxlen: 22 185.32.152.0/22 maxlen: 22 185.57.100.0/22 maxlen: 22 185.57.102.0/24 maxlen: 24 185.122.132.0/22 maxlen: 22 185.156.196.0/22 maxlen: 22 2a04:b00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5e:6b:3c:e9:cf:1c:82:90:c4:fe:8e:57:12:24:f4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb Validity Not Before: Nov 7 13:04:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dbc75238203d153fb6712f5dd62d131f6f8fa213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cb:8a:c5:50:f9:a6:da:3d:f3:c6:bc:07:bf: 20:1a:71:f5:48:8f:f8:90:95:8e:60:b8:15:d1:a9: 11:da:26:c2:08:85:b0:0c:9f:79:d3:50:5d:86:f3: c8:44:94:d8:4d:6d:0e:3c:cf:a1:f5:f5:00:5b:c6: 28:cd:c5:e9:3e:cf:4e:b9:c5:ae:53:7b:c0:75:12: b9:5d:59:bf:f4:de:bd:41:28:54:f5:89:84:26:ec: c5:74:ae:2f:39:64:e0:e4:71:2e:9c:9c:50:28:a6: ca:8c:6c:a1:72:4a:cd:08:22:b6:e7:39:ea:30:c6: 79:2c:f5:40:af:e3:a3:57:db:94:ac:c5:89:d7:41: dd:32:c4:19:84:39:56:8f:7c:94:32:23:d6:37:50: 0e:50:ba:ed:ab:9d:1b:7f:65:18:89:6e:0a:58:6c: 3a:05:9e:82:ef:6d:65:66:df:87:e8:58:0c:79:91: ab:a6:f0:9b:54:7a:36:5d:90:8a:34:7c:87:b1:ac: 29:09:1a:d4:62:fa:0c:30:8b:9a:17:a5:2e:83:4d: 65:14:72:fa:d1:29:91:fd:b2:ef:30:0e:0f:06:6d: d7:95:22:a3:57:9e:37:0a:eb:e7:0b:3f:68:a6:8f: 43:a5:61:a6:3b:80:08:9c:da:53:d9:5d:fc:ab:77: bb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C7:52:38:20:3D:15:3F:B6:71:2F:5D:D6:2D:13:1F:6F:8F:A2:13 X509v3 Authority Key Identifier: keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/28dSOCA9FT-2cS9d1i0TH2-PohM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.168.0/21 45.137.184.0/22 45.158.112.0/22 62.146.164.0/22 80.190.0.0/22 81.173.12.0/22 91.216.236.0/24 91.216.241.0/24 93.119.24.0/22 144.2.240.0/21 159.253.224.0/22 185.32.152.0/22 185.57.100.0/22 185.122.132.0/22 185.156.196.0/22 IPv6: 2a04:b00::/29 Signature Algorithm: sha256WithRSAEncryption 39:cf:0d:7c:df:50:8a:39:37:fb:fe:a1:51:af:eb:07:25:b9: d9:a9:95:0d:25:68:b0:7d:19:1d:3f:3c:29:cc:cb:98:67:2f: 96:de:9a:c5:3a:91:f3:9c:f7:0d:ef:5b:6c:20:46:62:48:80: 67:c1:db:f0:17:5c:8d:09:81:52:37:ca:eb:c7:ac:15:c4:d6: 3f:3c:79:82:24:44:9b:2b:c5:d5:65:ea:b8:27:85:c7:25:7c: 15:ac:91:f3:77:b6:13:05:70:1b:75:70:8a:6e:ef:53:f4:44: 21:56:63:40:ce:01:2d:94:8e:f2:de:ed:76:36:d0:6b:90:f8: 65:f0:ed:80:18:93:5d:fa:f4:5a:ca:80:0a:3b:ee:ee:9c:ab: 24:6a:e0:34:72:f5:9f:02:20:a2:68:48:a1:c0:6a:89:51:71: 2e:34:67:5f:83:c7:cb:62:d2:75:8f:6f:06:89:c1:12:df:eb: 6a:77:e9:2c:5b:83:04:7b:71:ac:00:61:be:a8:4e:6d:60:01: 82:3b:8d:1c:f5:cc:c9:b2:a5:8e:d7:44:7a:fa:c6:be:63:76: 6f:be:ff:b3:29:36:ba:72:bb:3f:29:85:36:3b:7c:57:02:6a: 0f:e0:b9:3d:47:a8:f7:ec:4e:92:dc:89:69:28:12:2d:5b:35: 65:fe:8e:68 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZpeazzpzxyCkMT+jlcSJPR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjI5ODE5Nzg4ODU2OTZjZTFjMmJiZjRhZjk5ZGFkYzJj NjE4ZWIwHhcNMjUxMTA3MTMwNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmM3NTIzODIwM2QxNTNmYjY3MTJmNWRkNjJkMTMxZjZmOGZhMjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMuKxVD5pto988a8B78gGnH1SI/4 kJWOYLgV0akR2ibCCIWwDJ9501BdhvPIRJTYTW0OPM+h9fUAW8YozcXpPs9OucWu U3vAdRK5XVm/9N69QShU9YmEJuzFdK4vOWTg5HEunJxQKKbKjGyhckrNCCK25znq MMZ5LPVAr+OjV9uUrMWJ10HdMsQZhDlWj3yUMiPWN1AOULrtq50bf2UYiW4KWGw6 BZ6C721lZt+H6FgMeZGrpvCbVHo2XZCKNHyHsawpCRrUYvoMMIuaF6Uug01lFHL6 0SmR/bLvMA4PBm3XlSKjV543CuvnCz9opo9DpWGmO4AInNpT2V38q3e7wwIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFNvHUjggPRU/tnEvXdYtEx9vj6ITMB8GA1UdIwQY MBaAFJOymBl4iFaWzhwrv0r5na3CxhjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83OTg2YTktNGU0Ni00YzMzLTkyYzkt MzFjOTVlMmExZDZmLzEvMjhkU09DQTlGVC0yY1M5ZDFpMFRIMi1Qb2hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83OTg2YTktNGU0Ni00YzMzLTkyYzktMzFjOTVlMmExZDZm LzEvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwYAQCAAEwWgMEAwWVqAME Ai2JuAMEAi2ecAMEAj6SpAMEAlC+AAMEAlGtDAMEAFvY7AMEAFvY8QMEAl13GAME A5AC8AMEAp/94AMEArkgmAMEArk5ZAMEArl6hAMEArmcxDANBAIAAjAHAwUDKgQL ADANBgkqhkiG9w0BAQsFAAOCAQEAOc8NfN9Qijk3+/6hUa/rByW52amVDSVosH0Z HT88KczLmGcvlt6axTqR85z3De9bbCBGYkiAZ8Hb8BdcjQmBUjfK68esFcTWPzx5 giREmyvF1WXquCeFxyV8FayR83e2EwVwG3Vwim7vU/REIVZjQM4BLZSO8t7tdjbQ a5D4ZfDtgBiTXfr0WsqACjvu7pyrJGrgNHL1nwIgomhIocBqiVFxLjRnX4PHy2LS dY9vBonBEt/ranfpLFuDBHtxrABhvqhObWABgjuNHPXMybKljtdEevrGvmN2b77/ syk2unK7PymFNjt8VwJqD+C5PUeo9+xOktyJaSgSLVs1Zf6OaA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:06:53 2025 by rpki-client