This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/SoVNckei1TZS01RLg6ip1YkBFdU.roa File: SoVNckei1TZS01RLg6ip1YkBFdU.roa (raw, json) Hash identifier: KPfyNB1/7HOPIBk4Fgq8x7IV18jBNl24nXpSJtvP3V8= Subject key identifier: 4A:85:4D:72:47:A2:D5:36:52:D3:54:4B:83:A8:A9:D5:89:01:15:D5 Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5 Certificate serial: 019AA03E186FB757476331A2541375EC5769 Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/SoVNckei1TZS01RLg6ip1YkBFdU.roa Signing time: Thu 20 Nov 2025 07:50:15 +0000 ROA not before: Thu 20 Nov 2025 07:50:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213312 IP address blocks: 104.204.244.0/22 maxlen: 22 104.204.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:3e:18:6f:b7:57:47:63:31:a2:54:13:75:ec:57:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5 Validity Not Before: Nov 20 07:50:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4a854d7247a2d53652d3544b83a8a9d5890115d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:32:48:11:7f:85:1b:ed:ae:26:82:4c:ae:33: aa:b8:64:07:e9:8b:b9:0b:9e:16:07:ea:78:6f:ca: 41:12:80:c0:f0:d1:6f:d1:24:15:88:9d:f7:69:e5: 69:b9:ae:56:19:ea:63:19:7a:e0:22:77:54:7a:23: bc:81:1f:d4:0c:77:d0:6a:d8:7f:f8:9e:ee:17:ee: 5d:5c:b2:64:6b:0d:32:4f:89:d7:c4:7c:66:1b:07: 0d:ad:79:2c:4e:e6:e6:04:85:96:a0:d1:26:1d:19: ab:1c:d7:87:46:4e:1c:ee:c0:f5:84:ec:b0:c7:c6: 2a:8e:4d:73:8d:34:d4:2d:d7:62:3f:1f:f8:fd:09: e6:a0:6b:47:d8:96:20:74:9f:2f:99:f4:5c:0b:48: d8:51:f1:ef:47:38:33:1f:e9:fe:7d:da:dd:e1:46: 2f:c4:bc:01:92:27:01:89:5d:af:ab:bf:fd:2c:33: 59:cb:7c:3f:41:71:32:6a:4b:9a:81:06:80:96:86: f4:04:bb:55:49:42:b1:97:f5:ba:91:a7:3c:f4:f0: 6b:41:17:34:cd:0d:a0:d4:ea:c4:ee:cb:bd:94:64: f8:1e:09:b7:02:bf:e8:1c:03:cc:59:aa:7d:96:46: 28:c4:bb:5b:53:74:7b:85:bf:70:7b:26:25:57:3f: 5e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:85:4D:72:47:A2:D5:36:52:D3:54:4B:83:A8:A9:D5:89:01:15:D5 X509v3 Authority Key Identifier: keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/SoVNckei1TZS01RLg6ip1YkBFdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.204.244.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:f9:fb:f5:7a:c9:8b:75:ca:dd:e9:7d:62:6a:7e:eb:64:bc: 88:2c:69:36:bf:70:d4:6c:77:6a:cc:3a:1b:41:ba:f0:d8:1f: 0b:82:08:8e:f7:62:fc:a2:66:db:5c:4f:7d:4a:de:a4:1c:89: a8:83:bc:10:14:60:11:e3:3a:18:b0:42:9e:94:6e:c5:7d:38: 9b:00:39:5c:75:8f:c1:0b:b2:a2:92:f5:c7:89:80:ce:ab:ca: 5b:5e:8c:7c:d3:47:8b:ca:07:7b:c8:35:79:7c:7f:e8:59:3f: 0f:5c:6b:b9:c1:41:b4:16:48:0f:f3:3b:d0:3b:ef:14:15:d3: bc:f0:28:12:96:ed:8d:d7:51:99:05:ca:d1:79:08:e8:69:e4: 89:1d:2c:94:8f:e5:1f:e3:56:ad:3e:46:ab:21:ec:b9:a4:51: 6a:42:e4:7d:40:99:f1:e7:53:d0:52:94:25:91:1d:26:7e:01: 07:61:b3:9a:14:c3:de:51:bd:03:e9:9d:a9:56:38:0d:c9:00: 1b:68:0b:2f:8c:47:0b:52:ee:41:3e:aa:c7:f8:29:61:29:48: d9:ec:89:20:95:b1:96:b8:90:e2:7c:2e:65:6e:26:e0:4d:82: 1b:34:19:bb:93:de:1c:1b:73:11:cc:b8:d4:cb:f8:12:bc:4a: 8b:c6:80:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqgPhhvt1dHYzGiVBN17FdpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZjQzYjViYmNjNDk2MjgwNmVhOTMyMmVjMjkyZTliNjZk ZGNjYzUwHhcNMjUxMTIwMDc1MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTg1NGQ3MjQ3YTJkNTM2NTJkMzU0NGI4M2E4YTlkNTg5MDExNWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jJIEX+FG+2uJoJMrjOquGQH6Yu5 C54WB+p4b8pBEoDA8NFv0SQViJ33aeVpua5WGepjGXrgIndUeiO8gR/UDHfQath/ +J7uF+5dXLJkaw0yT4nXxHxmGwcNrXksTubmBIWWoNEmHRmrHNeHRk4c7sD1hOyw x8Yqjk1zjTTULddiPx/4/QnmoGtH2JYgdJ8vmfRcC0jYUfHvRzgzH+n+fdrd4UYv xLwBkicBiV2vq7/9LDNZy3w/QXEyakuagQaAlob0BLtVSUKxl/W6kac89PBrQRc0 zQ2g1OrE7su9lGT4Hgm3Ar/oHAPMWap9lkYoxLtbU3R7hb9weyYlVz9eLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEqFTXJHotU2UtNUS4OoqdWJARXVMB8GA1UdIwQY MBaAFGj0O1u8xJYoBuqTIuwpLptm3czFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wNDZmZmUtMDVlYi00YzhjLTg1NDUt MDI0ODNlNjQ4MmNiLzEvU29WTmNrZWkxVFpTMDFSTGc2aXAxWWtCRmRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wNDZmZmUtMDVlYi00YzhjLTg1NDUtMDI0ODNlNjQ4MmNi LzEvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMz0MA0G CSqGSIb3DQEBCwUAA4IBAQA9+fv1esmLdcrd6X1ian7rZLyILGk2v3DUbHdqzDob Qbrw2B8LggiO92L8ombbXE99St6kHImog7wQFGAR4zoYsEKelG7FfTibADlcdY/B C7KikvXHiYDOq8pbXox800eLygd7yDV5fH/oWT8PXGu5wUG0FkgP8zvQO+8UFdO8 8CgSlu2N11GZBcrReQjoaeSJHSyUj+Uf41atPkarIey5pFFqQuR9QJnx51PQUpQl kR0mfgEHYbOaFMPeUb0D6Z2pVjgNyQAbaAsvjEcLUu5BPqrH+ClhKUjZ7IkglbGW uJDifC5lbibgTYIbNBm7k94cG3MRzLjUy/gSvEqLxoAI -----END CERTIFICATE-----Generated at Sat Dec 6 09:53:54 2025 by rpki-client