This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/c_so8ZAo99s903KgX6q1bd_ayQY.roa File: c_so8ZAo99s903KgX6q1bd_ayQY.roa (raw, json) Hash identifier: qk06hv+tknoEnl/WncFnILZI0t8DHr6k+PuJJrOlT6s= Subject key identifier: 73:FB:28:F1:90:28:F7:DB:3D:D3:72:A0:5F:AA:B5:6D:DF:DA:C9:06 Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Certificate serial: 019B7FF263D51E4CE862963254801834F114 Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/c_so8ZAo99s903KgX6q1bd_ayQY.roa Signing time: Fri 02 Jan 2026 18:22:30 +0000 ROA not before: Fri 02 Jan 2026 18:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214208 IP address blocks: 91.102.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:63:d5:1e:4c:e8:62:96:32:54:80:18:34:f1:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Validity Not Before: Jan 2 18:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73fb28f19028f7db3dd372a05faab56ddfdac906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1c:84:e3:33:84:96:86:cb:c8:57:2b:8a:19: cb:3f:c4:13:cc:6e:a1:b2:56:fe:37:9d:90:09:70: b0:8c:a1:e1:ef:ae:aa:d6:42:b4:30:3c:6c:d8:e9: d8:8a:ed:9b:b4:7e:1f:7f:e8:c6:ea:ee:3f:c6:4f: 28:8b:c2:f3:c1:18:72:29:c2:cc:ee:fb:29:bf:76: c0:7c:79:f8:c1:ee:3f:1a:14:d2:bd:97:9e:ec:f7: ae:19:7a:30:69:f7:73:26:3c:45:62:62:6e:1c:2b: b0:82:64:00:ff:16:b2:36:48:91:75:2b:3f:1d:8d: cc:a7:ae:bc:90:8a:73:c2:85:5d:11:62:8d:a4:2e: d7:b5:44:98:63:0e:14:44:86:c1:4c:bb:e2:40:0e: e9:9d:57:05:e0:91:e3:17:8b:5d:a0:84:2c:f7:c7: cb:4c:0d:7f:f1:ed:2d:10:6c:b5:a6:1f:5f:67:36: 46:56:d7:3d:06:1e:02:6e:53:ec:dc:ac:b4:9b:ac: 1f:ea:ef:f3:03:7f:21:da:a1:89:fe:b2:07:1b:23: 62:4f:92:36:87:6b:6d:ef:13:fa:59:53:50:89:be: 1d:64:26:8f:20:53:aa:d2:48:6c:bf:cc:99:ae:88: 0b:61:63:97:bc:20:24:08:1b:37:03:b1:b2:8d:94: 11:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FB:28:F1:90:28:F7:DB:3D:D3:72:A0:5F:AA:B5:6D:DF:DA:C9:06 X509v3 Authority Key Identifier: keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/c_so8ZAo99s903KgX6q1bd_ayQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.167.0/24 Signature Algorithm: sha256WithRSAEncryption a4:4e:98:c9:d6:98:a8:c1:57:36:a7:ee:f0:e0:5b:89:35:42: fd:14:1f:64:22:9a:1d:90:1c:ba:3a:5c:0d:32:66:05:d1:c7: 83:c8:c0:e7:92:0d:6e:19:cc:75:1c:7a:95:7b:e8:af:87:b5: 19:f4:a7:f8:6d:7e:b0:5f:da:a0:9f:6a:bf:27:c1:15:15:62: 48:4c:0c:4c:1d:15:7c:77:2b:b0:a4:fa:89:26:79:c5:2b:57: 34:93:c7:0c:fe:c0:57:38:00:cc:ae:78:0e:46:e1:a6:7a:1a: c1:e5:79:f0:bf:f6:b8:07:85:8d:05:e6:53:40:5e:d5:4b:89: e3:4b:a1:16:47:cf:b7:c5:11:84:a1:f9:20:b8:87:e9:30:3a: 35:ca:bb:4b:af:7c:d0:3a:26:07:10:39:ff:f9:c2:c3:e2:86: 6a:ec:11:e1:86:76:2a:37:93:b5:14:6c:a7:3a:7b:da:a5:4e: d6:86:9e:d9:dd:9b:04:b4:42:4a:7f:08:d7:15:9a:5e:ae:5f: 26:8c:37:e5:61:77:12:d2:fd:3d:36:2f:9f:3c:80:d5:be:a7: 5b:08:81:ba:2a:8e:58:2c:c0:2c:18:c6:77:6c:53:df:fc:44: 5e:51:20:b4:81:81:0f:8f:ef:e6:19:96:cc:8b:f8:41:64:0f: d4:fc:ba:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8mPVHkzoYpYyVIAYNPEUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5 ZmMyYzkwHhcNMjYwMTAyMTgyMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2ZiMjhmMTkwMjhmN2RiM2RkMzcyYTA1ZmFhYjU2ZGRmZGFjOTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RyE4zOElobLyFcrihnLP8QTzG6h slb+N52QCXCwjKHh766q1kK0MDxs2OnYiu2btH4ff+jG6u4/xk8oi8LzwRhyKcLM 7vspv3bAfHn4we4/GhTSvZee7PeuGXowafdzJjxFYmJuHCuwgmQA/xayNkiRdSs/ HY3Mp668kIpzwoVdEWKNpC7XtUSYYw4URIbBTLviQA7pnVcF4JHjF4tdoIQs98fL TA1/8e0tEGy1ph9fZzZGVtc9Bh4CblPs3Ky0m6wf6u/zA38h2qGJ/rIHGyNiT5I2 h2tt7xP6WVNQib4dZCaPIFOq0khsv8yZrogLYWOXvCAkCBs3A7GyjZQRDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHP7KPGQKPfbPdNyoF+qtW3f2skGMB8GA1UdIwQY MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct MWM2ZWU0NGUxMWFkLzEvY19zbzhaQW85OXM5MDNLZ1g2cTFiZF9heVFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2anMA0G CSqGSIb3DQEBCwUAA4IBAQCkTpjJ1piowVc2p+7w4FuJNUL9FB9kIpodkBy6OlwN MmYF0ceDyMDnkg1uGcx1HHqVe+ivh7UZ9Kf4bX6wX9qgn2q/J8EVFWJITAxMHRV8 dyuwpPqJJnnFK1c0k8cM/sBXOADMrngORuGmehrB5Xnwv/a4B4WNBeZTQF7VS4nj S6EWR8+3xRGEofkguIfpMDo1yrtLr3zQOiYHEDn/+cLD4oZq7BHhhnYqN5O1FGyn OnvapU7Whp7Z3ZsEtEJKfwjXFZperl8mjDflYXcS0v09Ni+fPIDVvqdbCIG6Ko5Y LMAsGMZ3bFPf/EReUSC0gYEPj+/mGZbMi/hBZA/U/Lo+ -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:10 2026 by rpki-client