This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/SO-Fb5_RWNG-vJxWilHy0Ub7D3c.roa File: SO-Fb5_RWNG-vJxWilHy0Ub7D3c.roa (raw, json) Hash identifier: VzvW0l4p4/QU6FVquXlxf/LHE0LvlRpqoxeKSXp+Yqo= Subject key identifier: 48:EF:85:6F:9F:D1:58:D1:BE:BC:9C:56:8A:51:F2:D1:46:FB:0F:77 Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e Certificate serial: 019B7F1396E2707436A4C0B7799998AF6F74 Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/SO-Fb5_RWNG-vJxWilHy0Ub7D3c.roa Signing time: Fri 02 Jan 2026 14:19:08 +0000 ROA not before: Fri 02 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206991 IP address blocks: 185.169.64.0/24 maxlen: 24 185.169.65.0/24 maxlen: 24 185.169.66.0/24 maxlen: 24 185.169.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:96:e2:70:74:36:a4:c0:b7:79:99:98:af:6f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e Validity Not Before: Jan 2 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48ef856f9fd158d1bebc9c568a51f2d146fb0f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:65:df:a6:fb:07:83:d0:19:da:3a:66:89: 85:9d:02:30:aa:65:a5:0b:cc:ff:ee:1a:f9:f8:3e: ae:66:b0:9b:9a:66:bf:8b:65:0d:ea:f0:8d:76:cd: 28:3d:28:53:8f:df:39:3e:1b:35:29:1d:72:38:91: f4:b3:2f:7a:00:ff:03:7d:79:86:15:f1:90:6b:13: a0:a5:fd:32:e7:ae:7a:60:5d:fa:c8:97:84:d6:1e: 09:e2:9f:2e:76:7b:9f:d4:c4:d8:45:3f:80:e6:35: 8f:db:8b:0d:71:a1:05:1c:e5:bb:dc:45:83:4e:a5: a6:82:f9:cf:46:93:3c:46:8a:22:85:6b:db:63:af: 0c:98:0a:52:22:f1:56:9f:91:f9:1f:ba:f5:fd:6c: 29:29:17:e8:71:26:5f:fc:5e:d0:bb:14:ed:d2:e4: 28:09:a5:66:0f:1a:79:12:ba:e5:a8:64:36:fd:a5: 20:07:d1:2c:81:0a:95:63:af:10:cf:84:5d:54:9b: b7:7a:5a:7a:46:4a:d2:e6:3a:d7:57:2e:8c:ad:5a: f5:40:72:d7:45:c9:ca:fb:a6:b5:42:58:ce:25:d2: 79:c9:69:d7:2c:21:ef:5a:ab:ee:eb:8b:18:57:cb: 14:40:09:4f:a5:22:ee:5f:1f:e8:56:e4:ce:54:88: c4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EF:85:6F:9F:D1:58:D1:BE:BC:9C:56:8A:51:F2:D1:46:FB:0F:77 X509v3 Authority Key Identifier: keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/SO-Fb5_RWNG-vJxWilHy0Ub7D3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.64.0/22 Signature Algorithm: sha256WithRSAEncryption bb:68:d9:23:aa:9c:3f:11:7f:1f:a6:d5:3a:9c:16:e4:d9:96: 5a:e5:eb:a3:f0:0c:82:51:84:21:79:04:b6:73:ac:2d:8b:f0: 08:b8:2b:d3:a0:0b:b0:1f:86:2b:13:db:ba:0a:04:29:7d:e8: db:24:ba:31:26:6d:f8:3d:61:f6:98:56:6e:48:c3:cb:b7:cc: 3e:e4:13:43:43:19:fd:29:db:c3:9c:5c:9c:54:0a:28:f3:1a: f9:e7:22:6e:62:36:38:58:22:46:41:3e:57:ea:9b:8c:fc:54: fb:53:67:9b:6b:6f:81:7f:f2:53:56:6b:97:bb:83:77:86:2b: 10:dd:e3:89:74:77:f6:1c:3d:12:ea:7a:70:c0:6e:a5:8e:02: 6f:1b:29:c5:4f:f7:86:e2:f1:77:cc:48:a7:7f:50:8b:96:fe: 62:1e:68:89:77:fc:16:7a:57:90:20:2d:a4:1b:c2:87:9c:50: 26:da:41:d9:21:85:e0:51:04:45:32:6c:ce:4a:88:6c:e0:ad: 54:fb:09:d3:86:3c:9c:19:c5:1f:0a:e3:a7:37:cf:a2:07:55: e2:fc:2a:df:5a:39:fe:2a:b1:68:8e:9f:83:e3:6d:68:5b:2b: 45:21:56:9a:e3:e1:70:a5:ab:b2:c4:f2:38:eb:53:09:9a:27: a1:58:7c:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E5bicHQ2pMC3eZmYr290MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4OTU2NDdkOWZkMTZhMTY5NGY4MDI2ZWJlODc3NjBjYjUz MWViMGUwHhcNMjYwMTAyMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGVmODU2ZjlmZDE1OGQxYmViYzljNTY4YTUxZjJkMTQ2ZmIwZjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwJl36b7B4PQGdo6ZomFnQIwqmWl C8z/7hr5+D6uZrCbmma/i2UN6vCNds0oPShTj985Phs1KR1yOJH0sy96AP8DfXmG FfGQaxOgpf0y5656YF36yJeE1h4J4p8udnuf1MTYRT+A5jWP24sNcaEFHOW73EWD TqWmgvnPRpM8RooihWvbY68MmApSIvFWn5H5H7r1/WwpKRfocSZf/F7QuxTt0uQo CaVmDxp5ErrlqGQ2/aUgB9EsgQqVY68Qz4RdVJu3elp6RkrS5jrXVy6MrVr1QHLX RcnK+6a1QljOJdJ5yWnXLCHvWqvu64sYV8sUQAlPpSLuXx/oVuTOVIjERwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEjvhW+f0VjRvrycVopR8tFG+w93MB8GA1UdIwQY MBaAFCiVZH2f0WoWlPgCbr6Hdgy1MesOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMt ZWNjZGMwY2U3ZDE0LzEvU08tRmI1X1JXTkctdkp4V2lsSHkwVWI3RDNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMtZWNjZGMwY2U3ZDE0 LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCualAMA0G CSqGSIb3DQEBCwUAA4IBAQC7aNkjqpw/EX8fptU6nBbk2ZZa5euj8AyCUYQheQS2 c6wti/AIuCvToAuwH4YrE9u6CgQpfejbJLoxJm34PWH2mFZuSMPLt8w+5BNDQxn9 KdvDnFycVAoo8xr55yJuYjY4WCJGQT5X6puM/FT7U2eba2+Bf/JTVmuXu4N3hisQ 3eOJdHf2HD0S6npwwG6ljgJvGynFT/eG4vF3zEinf1CLlv5iHmiJd/wWeleQIC2k G8KHnFAm2kHZIYXgUQRFMmzOSohs4K1U+wnThjycGcUfCuOnN8+iB1Xi/CrfWjn+ KrFojp+D421oWytFIVaa4+FwpauyxPI461MJmiehWHz0 -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:17 2026 by rpki-client