This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/1-SOCJvMJXIRmSmOPl6NPphF6_WM.roa File: 1-SOCJvMJXIRmSmOPl6NPphF6_WM.roa (raw, json) Hash identifier: vXugVxE98o8Z5wA/8D/Y9pi3M5AMGKyN8v2Sry/3Otg= Subject key identifier: F9:23:82:26:F3:09:5C:84:66:4A:63:8F:97:A3:4F:A6:11:7A:FD:63 Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 019B79EBC268EACCF5A6ED396FEDA98CB602 Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/1-SOCJvMJXIRmSmOPl6NPphF6_WM.roa Signing time: Thu 01 Jan 2026 14:17:32 +0000 ROA not before: Thu 01 Jan 2026 14:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48955 IP address blocks: 86.107.58.0/23 maxlen: 24 94.154.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:c2:68:ea:cc:f5:a6:ed:39:6f:ed:a9:8c:b6:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Jan 1 14:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9238226f3095c84664a638f97a34fa6117afd63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f6:4a:1f:15:91:d4:ac:41:9f:5a:68:ce:36: 7f:5b:5c:16:f2:7d:6a:75:33:88:2e:dc:2b:c3:1c: cf:8c:bf:06:9e:dc:51:f1:f1:4c:b5:3d:00:78:35: 7c:a7:30:e7:03:22:32:98:a4:a2:0e:98:79:14:d4: 72:94:d9:d1:3f:14:db:58:a9:9d:ef:98:86:84:22: 27:76:fd:05:d5:d8:ee:76:7d:52:8b:0a:a0:50:43: 1f:4d:a2:d0:7b:fc:22:fc:b3:5e:c5:d4:cf:31:da: e7:7a:7d:7d:ab:4c:c5:7a:9f:11:13:88:8c:64:c6: f1:45:d1:4f:be:25:d3:f1:d8:7e:59:2d:e4:0c:6b: 3a:92:3d:3e:4a:b3:5b:8f:e1:96:3b:b6:a6:2e:46: 6c:fd:11:ad:0b:0c:05:c3:5e:f7:9c:e6:84:42:1d: 0b:d7:4f:bc:42:70:80:b5:37:7a:63:4a:2e:9a:87: 94:6c:78:08:8b:83:bb:39:e6:d0:79:82:b6:5e:59: 48:2e:d9:86:82:4b:8f:d9:78:bc:bb:d5:cd:b0:52: 11:08:fa:d7:a2:00:25:9c:5c:26:e0:9b:db:fa:f5: 9a:2d:04:f5:4b:f1:50:d0:4f:af:67:8a:3a:35:36: 23:6c:cd:03:e8:e5:8a:47:cb:40:05:4d:97:b6:ac: 46:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:23:82:26:F3:09:5C:84:66:4A:63:8F:97:A3:4F:A6:11:7A:FD:63 X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/1-SOCJvMJXIRmSmOPl6NPphF6_WM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.107.58.0/23 94.154.122.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:8c:f0:02:e7:f7:da:88:53:75:4d:d1:c9:cf:bf:4a:4a:68: b3:7a:b7:1f:cd:a5:3e:99:77:f3:0a:e1:89:63:3a:49:f6:c9: 74:f0:c2:b2:2b:09:ee:45:a3:43:68:a4:95:e4:4e:73:78:2c: 4e:92:48:37:5a:f8:4e:35:de:3d:6d:74:5a:ab:8c:e0:3e:4e: 68:23:4f:b8:0b:cb:55:b3:62:83:a4:a7:db:d2:70:34:d6:ed: 3b:d8:4f:ad:91:8a:e6:65:d7:ab:79:fb:fe:c8:cb:8e:6c:5a: ea:bb:c1:8c:ef:b2:b6:15:84:7f:6a:4b:ce:63:2b:e6:b0:7f: 48:b4:71:42:ce:c2:76:af:4f:e6:2b:d1:83:4b:3b:da:fa:03: 73:20:0b:f5:61:70:94:66:ec:9c:93:1c:1c:72:62:37:ff:21: a6:77:e1:b7:5b:c7:36:5f:bb:e4:ad:26:33:51:4f:d1:91:13: 00:77:de:3c:b7:61:c7:01:09:b5:d8:75:96:5f:4b:23:6b:fd: 38:5a:51:0f:80:9e:7b:49:d6:f2:8d:55:89:b0:f7:1c:c4:68: 22:6d:76:51:53:77:dc:70:63:c2:05:60:68:ab:a8:d5:c1:dd: 77:78:74:89:a7:16:29:f2:6c:d4:61:b6:a6:2e:7b:d2:2c:82: f5:4a:2d:84 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt568Jo6sz1pu05b+2pjLYCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjYwMTAxMTQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTIzODIyNmYzMDk1Yzg0NjY0YTYzOGY5N2EzNGZhNjExN2FmZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/ZKHxWR1KxBn1pozjZ/W1wW8n1q dTOILtwrwxzPjL8GntxR8fFMtT0AeDV8pzDnAyIymKSiDph5FNRylNnRPxTbWKmd 75iGhCIndv0F1djudn1SiwqgUEMfTaLQe/wi/LNexdTPMdrnen19q0zFep8RE4iM ZMbxRdFPviXT8dh+WS3kDGs6kj0+SrNbj+GWO7amLkZs/RGtCwwFw173nOaEQh0L 10+8QnCAtTd6Y0oumoeUbHgIi4O7OebQeYK2XllILtmGgkuP2Xi8u9XNsFIRCPrX ogAlnFwm4Jvb+vWaLQT1S/FQ0E+vZ4o6NTYjbM0D6OWKR8tABU2XtqxGaQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPkjgibzCVyEZkpjj5ejT6YRev1jMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvMS1TT0NKdk1KWElSbVNtT1BsNk5QcGhGNl9XTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGEvZmI3OTFiLTgwMTMtNDU4YS05YTFlLTI1ZGJmNDM4MDRj NS8xL25GUXZYZlBCckxoWF9WRHVzQmJ1MEhPRl80dy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAVZrOgME AF6aejANBgkqhkiG9w0BAQsFAAOCAQEACozwAuf32ohTdU3Ryc+/Skpos3q3H82l Ppl38wrhiWM6SfbJdPDCsisJ7kWjQ2ikleROc3gsTpJIN1r4TjXePW10WquM4D5O aCNPuAvLVbNig6Sn29JwNNbtO9hPrZGK5mXXq3n7/sjLjmxa6rvBjO+ythWEf2pL zmMr5rB/SLRxQs7Cdq9P5ivRg0s72voDcyAL9WFwlGbsnJMcHHJiN/8hpnfht1vH Nl+75K0mM1FP0ZETAHfePLdhxwEJtdh1ll9LI2v9OFpRD4Cee0nW8o1VibD3HMRo Im12UVN33HBjwgVgaKuo1cHdd3h0iacWKfJs1GG2pi570iyC9UothA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:31 2026 by rpki-client