This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/1so34E8eiJbU3SBH98Un9cOyxZA.roa File: 1so34E8eiJbU3SBH98Un9cOyxZA.roa (raw, json) Hash identifier: 1ldGTGYNQmiwKAKpaJZD0c4cvg8xFAkpG1EIpaEahUw= Subject key identifier: D6:CA:37:E0:4F:1E:88:96:D4:DD:20:47:F7:C5:27:F5:C3:B2:C5:90 Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 019B775892249F1B4824EBA2B9747ACCDE5E Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/1so34E8eiJbU3SBH98Un9cOyxZA.roa Signing time: Thu 01 Jan 2026 02:17:31 +0000 ROA not before: Thu 01 Jan 2026 02:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 185.251.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:92:24:9f:1b:48:24:eb:a2:b9:74:7a:cc:de:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Jan 1 02:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6ca37e04f1e8896d4dd2047f7c527f5c3b2c590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bb:78:06:14:2a:d4:fb:8a:9e:68:a8:3b:34: 62:17:b1:8c:7e:07:19:79:3a:c7:c6:ed:33:f2:57: e2:5b:f0:dd:13:fc:a8:cc:4b:93:f9:79:a8:29:79: cc:99:fa:f2:f3:f1:36:19:8d:7c:e0:01:69:b8:5f: 18:e8:19:77:2e:57:76:9c:43:49:3b:2e:47:6b:83: 1d:09:c0:b8:e9:59:7a:b7:ff:40:ef:22:5a:20:3d: 70:4f:e7:7a:41:0a:5a:b9:52:23:36:28:e7:73:3f: 0d:bc:97:b1:3b:a2:9c:e8:db:b2:70:d2:84:b7:11: 00:ef:25:82:23:9c:3e:57:2c:4c:66:01:22:61:85: 3b:03:0b:af:b6:29:c5:07:5d:d0:23:ee:07:7a:a0: 35:9d:dc:27:d6:30:8c:e0:32:9e:63:88:5e:10:dc: 03:5c:07:52:79:97:7d:92:01:41:3f:28:61:49:33: 11:0c:c7:31:3b:0c:d4:fb:0f:98:8b:ae:55:c9:59: b7:67:55:32:d6:80:04:8f:0f:e0:2d:93:62:c5:18: 1c:79:81:22:7e:72:b9:24:73:3e:8b:ea:55:2e:6d: 42:95:55:a8:a2:49:03:ab:81:5f:b1:c7:90:bd:6f: 95:98:2f:67:42:47:d4:40:2c:4e:84:1a:c7:5a:69: fd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CA:37:E0:4F:1E:88:96:D4:DD:20:47:F7:C5:27:F5:C3:B2:C5:90 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/1so34E8eiJbU3SBH98Un9cOyxZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.82.0/23 Signature Algorithm: sha256WithRSAEncryption 47:aa:7f:a2:01:97:8b:e5:21:69:1f:08:37:b4:a3:65:7f:a1: 22:93:c4:ad:86:e2:65:bd:ee:b6:d0:ba:a3:e7:0b:c2:cc:ff: 5c:f4:9b:d3:45:d2:25:01:22:4a:05:21:1b:49:29:25:2a:e7: 36:d1:c4:9e:7a:3e:e6:05:02:ba:30:88:93:07:cf:07:af:da: 61:a5:43:69:1f:da:ef:5b:5d:18:ce:89:fb:45:01:50:26:7d: 74:34:01:61:94:60:5a:3e:02:1c:d1:a0:10:82:22:50:1f:91: b5:0f:02:01:b9:8e:59:cd:99:ff:72:89:2e:2b:ac:71:14:89: 44:ab:01:39:e1:b5:36:3b:77:f5:c2:f1:d9:bd:d4:4b:87:7a: 80:45:77:f5:32:fc:79:51:b7:5f:21:2a:64:07:c7:ed:83:6c: 36:13:df:ab:df:e3:97:41:38:e1:74:1e:20:25:dd:7f:87:91: 0b:92:6c:5e:3e:4b:ca:50:d7:be:f5:d4:a4:2c:c2:e5:07:e7: a8:94:00:a3:bd:52:ce:2b:37:34:e9:46:67:c9:68:2a:bd:a5: 8e:5e:4e:ec:a9:f3:43:83:da:f3:b8:b3:44:c0:4e:9e:f3:d1: d2:22:67:f2:24:2a:e7:eb:47:e5:a5:ce:77:10:16:b3:c8:f9: 59:0d:67:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJIknxtIJOuiuXR6zN5eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjYwMTAxMDIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmNhMzdlMDRmMWU4ODk2ZDRkZDIwNDdmN2M1MjdmNWMzYjJjNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7t4BhQq1PuKnmioOzRiF7GMfgcZ eTrHxu0z8lfiW/DdE/yozEuT+XmoKXnMmfry8/E2GY184AFpuF8Y6Bl3Lld2nENJ Oy5Ha4MdCcC46Vl6t/9A7yJaID1wT+d6QQpauVIjNijncz8NvJexO6Kc6NuycNKE txEA7yWCI5w+VyxMZgEiYYU7AwuvtinFB13QI+4HeqA1ndwn1jCM4DKeY4heENwD XAdSeZd9kgFBPyhhSTMRDMcxOwzU+w+Yi65VyVm3Z1Uy1oAEjw/gLZNixRgceYEi fnK5JHM+i+pVLm1ClVWookkDq4FfsceQvW+VmC9nQkfUQCxOhBrHWmn9rQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNbKN+BPHoiW1N0gR/fFJ/XDssWQMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvMXNvMzRFOGVpSmJVM1NCSDk4VW45Y095eFpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuftSMA0G CSqGSIb3DQEBCwUAA4IBAQBHqn+iAZeL5SFpHwg3tKNlf6Eik8SthuJlve620Lqj 5wvCzP9c9JvTRdIlASJKBSEbSSklKuc20cSeej7mBQK6MIiTB88Hr9phpUNpH9rv W10Yzon7RQFQJn10NAFhlGBaPgIc0aAQgiJQH5G1DwIBuY5ZzZn/cokuK6xxFIlE qwE54bU2O3f1wvHZvdRLh3qARXf1Mvx5UbdfISpkB8ftg2w2E9+r3+OXQTjhdB4g Jd1/h5ELkmxePkvKUNe+9dSkLMLlB+eolACjvVLOKzc06UZnyWgqvaWOXk7sqfND g9rzuLNEwE6e89HSImfyJCrn60flpc53EBazyPlZDWe6 -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:06 2026 by rpki-client