This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/SosxbjlFtLu-lsuh4-rF3Rw-rK0.roa File: SosxbjlFtLu-lsuh4-rF3Rw-rK0.roa (raw, json) Hash identifier: c0C1OZyGN1Qv/oPDh5sJipEydB/aVrMAT59EdQMDAY4= Subject key identifier: 4A:8B:31:6E:39:45:B4:BB:BE:96:CB:A1:E3:EA:C5:DD:1C:3E:AC:AD Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15 Certificate serial: 019B7A5B21D18FE6CA3829F4CB1C6377963B Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/SosxbjlFtLu-lsuh4-rF3Rw-rK0.roa Signing time: Thu 01 Jan 2026 16:19:11 +0000 ROA not before: Thu 01 Jan 2026 16:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34177 IP address blocks: 46.255.160.0/21 maxlen: 24 91.207.254.0/23 maxlen: 24 185.100.4.0/22 maxlen: 24 194.110.192.0/24 maxlen: 24 195.144.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:21:d1:8f:e6:ca:38:29:f4:cb:1c:63:77:96:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15 Validity Not Before: Jan 1 16:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a8b316e3945b4bbbe96cba1e3eac5dd1c3eacad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:04:b7:7a:f5:00:93:75:d6:e5:4b:1c:93: 98:bf:9f:22:4d:90:ee:95:09:5a:e5:6e:ca:45:45: db:a0:b1:f2:bd:7e:5a:2b:b8:6c:51:74:de:79:88: 66:97:3e:e8:aa:8a:0a:f4:48:eb:fb:5f:b5:c6:2e: c1:56:89:6f:dc:7d:a0:e8:13:f0:67:6f:35:76:19: 5b:bd:09:88:6e:cb:d3:ba:84:0c:58:49:8b:77:f5: 28:82:ad:0d:d0:db:ac:0f:27:98:9d:d9:8c:c0:27: 8c:bf:99:0e:0f:26:dd:e8:0b:5a:98:4e:a0:ba:01: e1:15:ac:8b:74:23:0d:01:48:17:95:29:af:bc:4e: 0f:1c:0d:6c:fa:49:43:af:24:63:53:aa:a2:25:21: 57:72:cc:8f:12:75:52:e2:dc:64:d3:89:7a:12:14: 9d:45:e9:2e:d8:48:d9:44:2f:e3:78:76:79:42:6a: 91:44:fc:57:4c:5d:90:47:b7:82:50:39:25:28:b9: 43:83:57:aa:0f:97:23:cf:3d:9c:1e:f3:2d:19:4a: ad:8d:bf:82:e3:6a:fc:fd:e9:9f:ca:b8:c3:3f:77: fd:b4:b8:12:ed:3d:31:d9:55:c0:23:d2:ea:a9:49: 33:5d:18:18:57:86:2e:21:e8:9a:17:69:c2:31:5c: 20:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8B:31:6E:39:45:B4:BB:BE:96:CB:A1:E3:EA:C5:DD:1C:3E:AC:AD X509v3 Authority Key Identifier: keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/SosxbjlFtLu-lsuh4-rF3Rw-rK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.160.0/21 91.207.254.0/23 185.100.4.0/22 194.110.192.0/24 195.144.11.0/24 Signature Algorithm: sha256WithRSAEncryption 92:f3:2d:97:92:a2:44:2a:21:e6:e3:af:73:5c:a0:a1:89:7f: c4:8e:3b:76:0a:2a:19:dd:a1:55:64:b6:58:7b:fc:4a:82:bb: 2b:44:31:0a:cc:80:d8:ad:e2:14:2e:20:73:a0:0f:ad:80:10: 8d:06:84:a9:a1:e6:f9:be:17:df:e7:77:2d:6d:51:ac:3d:7d: cd:bc:17:af:f5:22:b9:1d:76:fd:09:a5:07:e3:34:5e:75:98: 7b:19:46:52:6c:56:9c:07:d4:10:d9:f6:07:fd:43:bc:6c:d9: 66:b7:9b:46:d7:e9:ed:4c:b4:5c:d4:a1:ab:c4:b3:f1:c6:58: 3b:4a:e0:74:b4:6e:e8:f4:bc:ec:57:7a:27:68:3f:c8:e3:d3: ff:77:68:92:d5:3f:68:c6:72:8f:86:c9:23:bc:c9:ed:30:3b: c7:58:92:09:f2:9c:31:6e:42:7f:54:70:d3:93:d8:c9:9c:d6: ba:5f:12:f0:96:84:81:dc:2e:ba:15:3a:cd:23:1d:d0:29:a8: 46:d2:d2:70:01:c7:23:e4:f8:6e:02:14:d0:d7:87:8b:58:11: a1:4a:07:d7:a5:51:74:75:2b:7c:94:66:98:da:b0:66:ab:4f: da:a1:d0:a2:bd:d7:c6:9f:93:02:84:4e:ba:ca:43:ac:ac:47: 0f:b1:6f:da -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6WyHRj+bKOCn0yxxjd5Y7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDk2MjAzNWM1ZTk1MTAxM2NhMDY3MGNhNTY5ZTc5Zjhk NjNjMTUwHhcNMjYwMTAxMTYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YThiMzE2ZTM5NDViNGJiYmU5NmNiYTFlM2VhYzVkZDFjM2VhY2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwUEt3r1AJN11uVLHJOYv58iTZDu lQla5W7KRUXboLHyvX5aK7hsUXTeeYhmlz7oqooK9Ejr+1+1xi7BVolv3H2g6BPw Z281dhlbvQmIbsvTuoQMWEmLd/Uogq0N0NusDyeYndmMwCeMv5kODybd6AtamE6g ugHhFayLdCMNAUgXlSmvvE4PHA1s+klDryRjU6qiJSFXcsyPEnVS4txk04l6EhSd Reku2EjZRC/jeHZ5QmqRRPxXTF2QR7eCUDklKLlDg1eqD5cjzz2cHvMtGUqtjb+C 42r8/emfyrjDP3f9tLgS7T0x2VXAI9LqqUkzXRgYV4YuIeiaF2nCMVwgwwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFEqLMW45RbS7vpbLoePqxd0cPqytMB8GA1UdIwQY MBaAFNUJYgNcXpUQE8oGcMpWnnn41jwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFsaUExeGVsUkFUeWdad3lsYWVlZmpXUEJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kNGU4ZTktMGQ0Ny00MTliLWIzZTIt MDU0YTM2MzExNWY1LzEvU29zeGJqbEZ0THUtbHN1aDQtckYzUnctckswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kNGU4ZTktMGQ0Ny00MTliLWIzZTItMDU0YTM2MzExNWY1 LzEvMVFsaUExeGVsUkFUeWdad3lsYWVlZmpXUEJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDLv+gAwQB W8/+AwQCuWQEAwQAwm7AAwQAw5ALMA0GCSqGSIb3DQEBCwUAA4IBAQCS8y2XkqJE KiHm469zXKChiX/Ejjt2CioZ3aFVZLZYe/xKgrsrRDEKzIDYreIULiBzoA+tgBCN BoSpoeb5vhff53ctbVGsPX3NvBev9SK5HXb9CaUH4zRedZh7GUZSbFacB9QQ2fYH /UO8bNlmt5tG1+ntTLRc1KGrxLPxxlg7SuB0tG7o9LzsV3onaD/I49P/d2iS1T9o xnKPhskjvMntMDvHWJIJ8pwxbkJ/VHDTk9jJnNa6XxLwloSB3C66FTrNIx3QKahG 0tJwAccj5PhuAhTQ14eLWBGhSgfXpVF0dSt8lGaY2rBmq0/aodCivdfGn5MChE66 ykOsrEcPsW/a -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:45 2026 by rpki-client