This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/sOku3N3KZszAOFumnTXtTbq-B-c.roa File: sOku3N3KZszAOFumnTXtTbq-B-c.roa (raw, json) Hash identifier: yLoxiYlnu++lQGhDSvrC57wgm5LZG/94BrnNBBtWbWM= Subject key identifier: B0:E9:2E:DC:DD:CA:66:CC:C0:38:5B:A6:9D:35:ED:4D:BA:BE:07:E7 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F14FCE50774C1CBFC3D5E4FEFB490AD Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/sOku3N3KZszAOFumnTXtTbq-B-c.roa Signing time: Fri 02 Jan 2026 14:20:40 +0000 ROA not before: Fri 02 Jan 2026 14:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51431 IP address blocks: 87.107.102.0/24 maxlen: 24 87.107.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:fc:e5:07:74:c1:cb:fc:3d:5e:4f:ef:b4:90:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0e92edcddca66ccc0385ba69d35ed4dbabe07e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:6c:52:7e:ad:6f:00:ff:7e:c6:61:0b:db: 8d:5f:cf:44:d9:a9:a4:31:18:82:ce:9b:1d:26:06: 50:98:cb:2e:db:1e:27:1a:f6:8e:a4:2a:02:f5:8e: ca:9e:ab:85:26:00:6b:af:ab:f2:ac:79:18:87:51: 5e:a1:72:6f:17:55:c7:11:7e:92:84:bb:45:e4:8a: 16:fd:0a:5c:25:32:35:ee:87:e1:89:c3:71:b2:e2: 1f:f3:45:4b:4b:78:a8:e3:99:c0:23:08:77:bb:e3: 67:0e:a4:e8:87:b0:04:6d:8c:31:08:42:29:ee:8f: 2c:c7:f8:b5:f4:f0:b4:23:ec:9b:0a:0a:00:54:e9: d4:e4:3c:10:e9:fc:8c:33:e1:45:11:67:aa:fa:f6: a8:05:0b:a3:fd:fb:6b:0f:cc:75:c4:4d:be:88:5c: 17:ae:fb:33:90:65:67:a6:69:c9:ad:96:55:10:3a: 40:99:1b:81:2f:38:57:a3:2d:9d:f7:24:8d:b5:7e: 78:09:0c:bc:a5:2a:28:7d:70:b3:59:7d:b6:21:cc: 1e:8d:d4:6f:8c:26:fe:f3:9e:95:74:2e:66:c6:52: 17:c0:92:af:f2:34:6d:77:22:d7:fc:12:a0:97:bb: d7:64:43:89:d4:d2:fb:82:78:03:6f:bb:1d:c8:41: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E9:2E:DC:DD:CA:66:CC:C0:38:5B:A6:9D:35:ED:4D:BA:BE:07:E7 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/sOku3N3KZszAOFumnTXtTbq-B-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.107.102.0/24 87.107.172.0/24 Signature Algorithm: sha256WithRSAEncryption c5:aa:01:93:45:8a:43:f6:71:cf:5f:1f:62:09:b3:e0:cc:02: 4a:ea:db:68:f3:b4:60:0b:2c:f0:db:bd:ce:50:20:c6:0d:db: 11:0a:ed:ba:75:90:77:b9:3a:14:8d:a3:4a:92:56:a3:2f:df: 76:aa:cb:ba:c6:aa:6a:ad:2b:a4:1b:86:4c:00:7e:58:a2:b3: bd:b9:5f:dd:26:a6:00:c4:a5:fd:76:4b:ee:4c:fc:ec:85:27: 32:41:2a:b5:95:6a:e3:12:dc:66:89:a6:96:84:54:32:9c:7a: 66:1a:d2:39:00:df:c3:2a:b4:73:ea:a7:af:63:c5:06:d7:b1: 08:ca:de:02:be:59:c0:22:b4:73:16:c6:4e:a9:a6:c5:8e:3d: b2:e3:20:ff:90:5a:d9:29:cc:93:85:0f:28:03:6c:96:fd:4b: 31:37:3e:70:38:0e:ef:03:15:5a:3c:ea:6e:b0:d9:b8:8a:30: 0b:9b:d1:d0:0f:ab:a8:09:d8:20:d0:18:dc:ba:13:7d:b6:90: fa:15:25:51:73:0f:f2:84:22:ca:96:84:f8:08:f4:60:c5:ed: 29:8c:3f:53:c1:72:92:15:94:05:0b:ab:b5:65:af:c5:17:72: cf:06:6d:93:47:ee:2a:e8:b3:e9:10:9c:ed:60:f9:70:13:07: 0d:43:66:8f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FPzlB3TBy/w9Xk/vtJCtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGU5MmVkY2RkY2E2NmNjYzAzODViYTY5ZDM1ZWQ0ZGJhYmUwN2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmdsUn6tbwD/fsZhC9uNX89E2amk MRiCzpsdJgZQmMsu2x4nGvaOpCoC9Y7KnquFJgBrr6vyrHkYh1FeoXJvF1XHEX6S hLtF5IoW/QpcJTI17ofhicNxsuIf80VLS3io45nAIwh3u+NnDqToh7AEbYwxCEIp 7o8sx/i19PC0I+ybCgoAVOnU5DwQ6fyMM+FFEWeq+vaoBQuj/ftrD8x1xE2+iFwX rvszkGVnpmnJrZZVEDpAmRuBLzhXoy2d9ySNtX54CQy8pSoofXCzWX22IcwejdRv jCb+856VdC5mxlIXwJKv8jRtdyLX/BKgl7vXZEOJ1NL7gngDb7sdyEFvNQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLDpLtzdymbMwDhbpp017U26vgfnMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvc09rdTNOM0tac3pBT0Z1bW5UWHRUYnEtQi1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV2tmAwQA V2usMA0GCSqGSIb3DQEBCwUAA4IBAQDFqgGTRYpD9nHPXx9iCbPgzAJK6tto87Rg Cyzw273OUCDGDdsRCu26dZB3uToUjaNKklajL992qsu6xqpqrSukG4ZMAH5YorO9 uV/dJqYAxKX9dkvuTPzshScyQSq1lWrjEtxmiaaWhFQynHpmGtI5AN/DKrRz6qev Y8UG17EIyt4CvlnAIrRzFsZOqabFjj2y4yD/kFrZKcyThQ8oA2yW/UsxNz5wOA7v AxVaPOpusNm4ijALm9HQD6uoCdgg0BjcuhN9tpD6FSVRcw/yhCLKloT4CPRgxe0p jD9TwXKSFZQFC6u1Za/FF3LPBm2TR+4q6LPpEJztYPlwEwcNQ2aP -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:42 2026 by rpki-client