This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/RSoSsFPa67XJSU_rYMFvnteNoQk.roa File: RSoSsFPa67XJSU_rYMFvnteNoQk.roa (raw, json) Hash identifier: EJat0fz8NMFL7YZfeXLEntqwJOOPR75hReV0Lx+zuHc= Subject key identifier: 45:2A:12:B0:53:DA:EB:B5:C9:49:4F:EB:60:C1:6F:9E:D7:8D:A1:09 Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Certificate serial: 019B7F83E81BA983B49EAFFB4CCD7229F71C Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/RSoSsFPa67XJSU_rYMFvnteNoQk.roa Signing time: Fri 02 Jan 2026 16:21:49 +0000 ROA not before: Fri 02 Jan 2026 16:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199671 IP address blocks: 31.135.168.0/21 maxlen: 21 78.31.209.0/24 maxlen: 24 195.225.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:e8:1b:a9:83:b4:9e:af:fb:4c:cd:72:29:f7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Validity Not Before: Jan 2 16:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=452a12b053daebb5c9494feb60c16f9ed78da109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:9e:05:cf:c7:f4:da:bf:30:9e:e5:93:e4: 76:9e:e2:bb:ab:79:86:0b:d5:bf:e4:7a:1a:bb:8c: 09:63:b3:6f:13:10:f3:c1:2c:68:ff:ea:da:6c:24: 21:cb:82:59:01:b9:1d:d0:75:5a:50:5a:af:13:1d: 73:e4:c0:c0:b2:bb:08:19:d5:a8:0c:0f:62:7e:a2: 89:0d:4f:7f:7e:28:09:31:9d:c0:e4:b7:30:3a:ed: b0:a4:ac:cf:7a:f6:69:88:ec:9d:44:04:27:1f:b9: 58:38:78:ab:8d:dc:f5:c5:ce:4a:92:12:bc:7f:d1: 49:80:45:87:e8:09:34:0c:89:42:0e:e6:3e:a3:e9: 3c:fc:99:a0:20:91:5e:e3:02:96:11:02:80:3e:28: de:f4:27:59:61:ac:1d:58:1b:54:53:9b:61:da:50: 60:85:0e:9b:92:79:d1:63:1b:0f:4a:51:e9:6d:df: 74:77:7f:73:2d:c8:17:89:cd:e5:71:eb:1d:95:e3: cf:f9:f8:66:f9:d1:6f:a5:28:e3:cd:27:0d:d8:fb: c6:8e:e3:fb:c2:15:dd:09:1d:76:01:00:08:86:e3: 0c:b0:0a:db:90:51:2c:d4:78:71:19:64:ca:97:ad: 1f:db:67:6b:6a:95:06:37:ae:a2:eb:4a:42:6f:28: ae:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2A:12:B0:53:DA:EB:B5:C9:49:4F:EB:60:C1:6F:9E:D7:8D:A1:09 X509v3 Authority Key Identifier: keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/RSoSsFPa67XJSU_rYMFvnteNoQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.135.168.0/21 78.31.209.0/24 195.225.92.0/22 Signature Algorithm: sha256WithRSAEncryption b2:66:13:52:08:44:79:e0:b8:d0:e0:7c:6d:87:03:f8:57:97: 99:97:45:3b:ec:2c:bc:24:67:2b:44:93:08:8f:3c:b0:f4:50: f5:7f:a5:60:85:b8:54:1e:51:64:23:2f:fc:51:14:95:db:1b: df:09:4e:41:55:2c:ff:61:5c:64:4b:4f:c0:5e:e3:54:c8:31: 0b:c9:30:c7:dc:f8:8e:a0:65:51:09:06:28:78:a2:13:81:09: aa:06:39:4b:66:76:88:e3:e0:7a:ab:07:a0:30:06:bc:02:75: df:9c:87:00:a1:43:ea:c6:52:70:b5:a2:0a:be:e3:cf:2f:2a: b6:dc:36:8d:00:ea:a1:2f:87:02:39:48:8f:7c:12:60:ea:0e: 95:f3:1d:4d:c3:81:b2:6b:c9:4f:81:17:14:bf:d7:ea:58:44: 63:9c:0b:d3:0d:00:09:ff:95:f8:d5:0f:b7:83:f7:78:41:20: 41:e5:3e:7b:a0:91:c3:36:8a:4d:6b:12:d4:d1:f8:6b:e0:50: 07:e3:35:11:37:d9:9e:b3:eb:02:2c:2b:e3:cf:37:74:c6:0b: d8:a1:64:8e:ed:22:79:2a:45:86:0b:e3:64:3a:29:a0:f2:00: 12:dd:45:3c:e3:65:fe:e9:cb:83:75:58:52:7b:1c:7e:10:1a: ee:44:ef:4a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/g+gbqYO0nq/7TM1yKfccMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh MjI5NjIwHhcNMjYwMTAyMTYyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTJhMTJiMDUzZGFlYmI1Yzk0OTRmZWI2MGMxNmY5ZWQ3OGRhMTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7SeBc/H9Nq/MJ7lk+R2nuK7q3mG C9W/5Hoau4wJY7NvExDzwSxo/+rabCQhy4JZAbkd0HVaUFqvEx1z5MDAsrsIGdWo DA9ifqKJDU9/figJMZ3A5LcwOu2wpKzPevZpiOydRAQnH7lYOHirjdz1xc5KkhK8 f9FJgEWH6Ak0DIlCDuY+o+k8/JmgIJFe4wKWEQKAPije9CdZYawdWBtUU5th2lBg hQ6bknnRYxsPSlHpbd90d39zLcgXic3lcesdlePP+fhm+dFvpSjjzScN2PvGjuP7 whXdCR12AQAIhuMMsArbkFEs1HhxGWTKl60f22drapUGN66i60pCbyiuqQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEUqErBT2uu1yUlP62DBb57XjaEJMB8GA1UdIwQY MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt ZTA1MzRlMjM4NTliLzEvUlNvU3NGUGE2N1hKU1VfcllNRnZudGVOb1FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDH4eoAwQA Th/RAwQCw+FcMA0GCSqGSIb3DQEBCwUAA4IBAQCyZhNSCER54LjQ4HxthwP4V5eZ l0U77Cy8JGcrRJMIjzyw9FD1f6VghbhUHlFkIy/8URSV2xvfCU5BVSz/YVxkS0/A XuNUyDELyTDH3PiOoGVRCQYoeKITgQmqBjlLZnaI4+B6qwegMAa8AnXfnIcAoUPq xlJwtaIKvuPPLyq23DaNAOqhL4cCOUiPfBJg6g6V8x1Nw4Gya8lPgRcUv9fqWERj nAvTDQAJ/5X41Q+3g/d4QSBB5T57oJHDNopNaxLU0fhr4FAH4zURN9mes+sCLCvj zzd0xgvYoWSO7SJ5KkWGC+NkOimg8gAS3UU842X+6cuDdVhSexx+EBruRO9K -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:44 2026 by rpki-client