This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/sOmpuPCLYpahxsGvREwdkZCts6E.roa File: sOmpuPCLYpahxsGvREwdkZCts6E.roa (raw, json) Hash identifier: +Ykse+Iaifida8MRKiAN/7Sv66Fy30UjeI2B9pn/l0c= Subject key identifier: B0:E9:A9:B8:F0:8B:62:96:A1:C6:C1:AF:44:4C:1D:91:90:AD:B3:A1 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C699208A74E8ED1263EFB0FAA1D5B1 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/sOmpuPCLYpahxsGvREwdkZCts6E.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207944 IP address blocks: 178.156.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:99:20:8a:74:e8:ed:12:63:ef:b0:fa:a1:d5:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0e9a9b8f08b6296a1c6c1af444c1d9190adb3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:aa:33:bc:fd:81:9c:aa:f9:a0:ae:f7:ec:b9: 89:ee:29:9c:9b:77:d0:27:8b:d5:eb:a9:10:4a:48: 8e:fa:ba:9f:92:4b:4e:a4:c7:37:d3:75:a4:70:fa: dc:30:c2:88:57:87:ef:02:18:03:6f:c8:ee:86:ae: 7d:f3:1b:52:3f:fb:ad:2b:e2:e6:65:06:4b:9b:38: a2:43:2a:85:a3:14:76:f6:0e:c1:0f:a7:b2:e6:36: 4c:35:31:d1:b5:a2:4b:2c:4e:85:55:9b:7a:72:f9: 32:c1:af:01:a1:74:cf:22:0e:21:38:93:d3:d2:d8: 36:61:dc:a8:6c:38:81:51:a9:a7:0b:e1:ca:34:e0: 53:ac:2e:cd:d7:ea:7b:77:39:9d:fb:0d:52:49:50: 53:77:22:53:de:3e:fb:36:2e:db:97:22:85:4a:c5: 4c:d8:db:a1:48:14:2f:03:5b:8e:28:a1:84:25:15: fd:1d:e7:f1:43:a4:e8:95:68:f7:9e:c1:7c:f6:cb: 07:5d:54:4b:57:0a:9c:af:a5:40:35:ba:30:80:5c: 04:ee:1a:a2:69:93:e8:ef:72:df:2f:53:28:27:da: bb:58:78:d5:72:e1:48:93:2a:d2:37:2e:2a:ee:99: 61:fb:43:1a:e6:dd:5c:9a:68:8f:68:07:20:ef:28: f5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E9:A9:B8:F0:8B:62:96:A1:C6:C1:AF:44:4C:1D:91:90:AD:B3:A1 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/sOmpuPCLYpahxsGvREwdkZCts6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.156.22.0/24 Signature Algorithm: sha256WithRSAEncryption 34:02:f6:99:fa:00:70:2b:0d:09:0d:81:a0:ef:91:13:84:ca: 31:c7:e2:91:af:0e:2a:53:0b:65:5b:61:78:92:4a:ec:d1:14: 9c:38:cc:f4:20:79:08:4c:2f:ca:47:fd:e3:9a:16:ce:af:9c: e7:b7:c0:fe:59:21:7d:96:a6:ac:da:21:37:2d:30:bf:41:32: 99:52:41:58:36:99:1f:17:71:1c:6b:08:e5:f9:68:2e:b5:2d: b5:a2:01:87:b7:94:b2:0d:82:74:bd:f2:ac:2e:18:44:69:93: 8d:56:c5:ce:91:d7:44:b3:45:d6:61:b1:ce:61:f4:8e:6e:c3: c7:08:d1:59:75:67:45:38:a9:96:4e:26:e8:9e:86:4e:c3:06: 0a:a8:6a:4a:b6:53:dd:28:45:59:fd:ff:f9:d3:0b:13:6c:47: bf:b1:c0:bb:ba:74:21:d0:9b:e6:b4:f5:09:2e:7a:0d:70:e1: e0:b5:d2:49:94:1f:e9:6d:04:a7:58:3b:98:a8:d8:f1:49:5b: 59:9b:c3:84:aa:40:27:2e:34:88:06:31:5c:dc:0d:cc:78:e6: 95:f4:c1:c8:da:f0:12:89:95:77:12:9c:9e:e4:32:aa:b5:4b: 0c:be:ed:66:d7:b2:4d:38:5a:db:be:86:2c:15:66:e8:a1:86: 81:0c:99:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpkginTo7RJj77D6odWxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGU5YTliOGYwOGI2Mjk2YTFjNmMxYWY0NDRjMWQ5MTkwYWRiM2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aozvP2BnKr5oK737LmJ7imcm3fQ J4vV66kQSkiO+rqfkktOpMc303WkcPrcMMKIV4fvAhgDb8juhq598xtSP/utK+Lm ZQZLmziiQyqFoxR29g7BD6ey5jZMNTHRtaJLLE6FVZt6cvkywa8BoXTPIg4hOJPT 0tg2YdyobDiBUamnC+HKNOBTrC7N1+p7dzmd+w1SSVBTdyJT3j77Ni7blyKFSsVM 2NuhSBQvA1uOKKGEJRX9HefxQ6TolWj3nsF89ssHXVRLVwqcr6VANbowgFwE7hqi aZPo73LfL1MoJ9q7WHjVcuFIkyrSNy4q7plh+0Ma5t1cmmiPaAcg7yj1NwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLDpqbjwi2KWocbBr0RMHZGQrbOhMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvc09tcHVQQ0xZcGFoeHNHdlJFd2RrWkN0czZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAspwWMA0G CSqGSIb3DQEBCwUAA4IBAQA0AvaZ+gBwKw0JDYGg75EThMoxx+KRrw4qUwtlW2F4 kkrs0RScOMz0IHkITC/KR/3jmhbOr5znt8D+WSF9lqas2iE3LTC/QTKZUkFYNpkf F3Ecawjl+WgutS21ogGHt5SyDYJ0vfKsLhhEaZONVsXOkddEs0XWYbHOYfSObsPH CNFZdWdFOKmWTibonoZOwwYKqGpKtlPdKEVZ/f/50wsTbEe/scC7unQh0JvmtPUJ LnoNcOHgtdJJlB/pbQSnWDuYqNjxSVtZm8OEqkAnLjSIBjFc3A3MeOaV9MHI2vAS iZV3Epye5DKqtUsMvu1m17JNOFrbvoYsFWbooYaBDJln -----END CERTIFICATE-----Generated at Sun Jan 25 08:51:34 2026 by rpki-client