This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/so34H4EHsb2bvFRzdgNld87kNq8.roa File: so34H4EHsb2bvFRzdgNld87kNq8.roa (raw, json) Hash identifier: tntM2l7FDBGtsKGRGPXiqst0BOOsbh2THcmt/BZuxRQ= Subject key identifier: B2:8D:F8:1F:81:07:B1:BD:9B:BC:54:73:76:03:65:77:CE:E4:36:AF Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6 Certificate serial: 019B7AC7EF836A8C0B2AE0E63A2D3D061F65 Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/so34H4EHsb2bvFRzdgNld87kNq8.roa Signing time: Thu 01 Jan 2026 18:18:01 +0000 ROA not before: Thu 01 Jan 2026 18:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 185.155.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ef:83:6a:8c:0b:2a:e0:e6:3a:2d:3d:06:1f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6 Validity Not Before: Jan 1 18:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b28df81f8107b1bd9bbc547376036577cee436af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:f7:5c:b8:40:16:bb:e1:29:1b:8e:e5:dd: 4e:78:ff:f5:5e:0c:70:3c:bd:65:5b:c5:e4:f0:cf: c3:fb:7c:97:51:ab:d0:d6:74:20:28:75:e2:30:40: 87:f2:77:32:86:9d:fe:36:e7:2e:50:b3:7e:e4:43: ae:5d:7c:f1:72:ae:9a:c2:55:e2:a5:f1:d6:82:fa: cb:2c:50:ba:16:6c:ef:27:9f:3d:23:00:ea:f5:e0: 5c:7d:77:bb:43:4b:30:32:35:31:8f:a6:a5:c6:69: 06:af:3e:cf:aa:3f:4a:85:6d:5b:19:f4:c9:71:6a: 51:7b:06:05:42:9d:f3:ef:a5:da:4f:b2:e0:d5:59: 0f:e0:c8:30:52:35:1d:a5:76:26:4b:11:13:99:48: 67:59:e0:16:74:9b:3d:b6:40:ee:54:24:1b:7a:54: 52:fd:69:9d:19:ea:af:d1:39:ac:7e:cd:e4:8c:23: 85:54:c1:0b:0c:26:7f:2f:e7:a0:8f:91:b7:d5:f8: 80:c6:65:05:6f:74:c1:d4:f5:12:70:16:be:8c:cd: d4:da:9c:16:8a:30:a7:c1:70:ea:c2:bc:95:58:ed: db:e3:2d:00:fe:c3:f0:6c:8e:b7:20:7e:bd:e8:cd: 7d:67:5f:e3:2f:3b:c8:7b:71:5b:47:dc:30:5f:42: 01:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8D:F8:1F:81:07:B1:BD:9B:BC:54:73:76:03:65:77:CE:E4:36:AF X509v3 Authority Key Identifier: keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/so34H4EHsb2bvFRzdgNld87kNq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.232.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:6f:7d:a8:42:6a:0b:74:40:fa:1c:f7:95:bf:1d:16:71:ba: 8a:db:92:d2:40:43:a8:3f:23:56:9f:a3:87:3d:72:83:f2:8f: 03:6b:51:1e:7d:4e:d4:4c:7a:00:ed:15:b1:cb:e6:4f:65:b2: ce:88:83:4e:b9:e7:4c:78:47:47:64:1f:7a:0f:cb:12:db:1c: 27:92:26:fa:af:01:96:f2:51:18:e3:ce:fd:c6:e3:88:f9:4b: 54:46:52:22:ed:23:d4:ff:35:f6:07:04:25:12:0d:93:ff:b9: 26:4e:58:68:7b:72:82:e6:6b:ea:7a:9d:ac:73:de:fd:5d:96: 66:d3:6b:9b:cc:57:39:81:6e:1c:78:a3:06:c5:56:a7:12:24: 4a:8e:e2:84:90:4c:40:9b:1e:18:0c:ee:c6:89:67:83:da:17: 64:a4:8b:35:9a:98:e8:ba:bf:a6:79:d5:d5:ed:1c:15:14:94: 49:3b:60:0f:05:3b:64:25:2d:be:f1:9a:09:2f:ea:0e:71:70: c1:12:a7:f4:13:1e:b7:97:8e:a2:5a:77:0d:45:a4:5f:1e:6b: 7e:26:4b:52:9e:68:9c:a1:bd:d5:4d:44:7f:de:ae:70:11:5c: d0:99:ad:a0:48:1c:12:19:71:b6:15:cd:ce:34:e2:10:46:78: c5:f9:4d:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x++DaowLKuDmOi09Bh9lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTdjOWRlOTI3ZmE3NWJlYWVmNzg4NWYwZDg4ZjZmNGQy YTBlZDYwHhcNMjYwMTAxMTgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjhkZjgxZjgxMDdiMWJkOWJiYzU0NzM3NjAzNjU3N2NlZTQzNmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4D3XLhAFrvhKRuO5d1OeP/1Xgxw PL1lW8Xk8M/D+3yXUavQ1nQgKHXiMECH8ncyhp3+NucuULN+5EOuXXzxcq6awlXi pfHWgvrLLFC6FmzvJ589IwDq9eBcfXe7Q0swMjUxj6alxmkGrz7Pqj9KhW1bGfTJ cWpRewYFQp3z76XaT7Lg1VkP4MgwUjUdpXYmSxETmUhnWeAWdJs9tkDuVCQbelRS /WmdGeqv0Tmsfs3kjCOFVMELDCZ/L+egj5G31fiAxmUFb3TB1PUScBa+jM3U2pwW ijCnwXDqwryVWO3b4y0A/sPwbI63IH696M19Z1/jLzvIe3FbR9wwX0IBrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLKN+B+BB7G9m7xUc3YDZXfO5DavMB8GA1UdIwQY MBaAFDUXyd6Sf6db6u94hfDYj29NKg7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTIt ZmQzYjMwMDJjMGJiLzEvc28zNEg0RUhzYjJidkZSemRnTmxkODdrTnE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTItZmQzYjMwMDJjMGJi LzEvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZvoMA0G CSqGSIb3DQEBCwUAA4IBAQCdb32oQmoLdED6HPeVvx0WcbqK25LSQEOoPyNWn6OH PXKD8o8Da1EefU7UTHoA7RWxy+ZPZbLOiINOuedMeEdHZB96D8sS2xwnkib6rwGW 8lEY4879xuOI+UtURlIi7SPU/zX2BwQlEg2T/7kmTlhoe3KC5mvqep2sc979XZZm 02ubzFc5gW4ceKMGxVanEiRKjuKEkExAmx4YDO7GiWeD2hdkpIs1mpjour+medXV 7RwVFJRJO2APBTtkJS2+8ZoJL+oOcXDBEqf0Ex63l46iWncNRaRfHmt+JktSnmic ob3VTUR/3q5wEVzQma2gSBwSGXG2Fc3ONOIQRnjF+U3M -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:59 2026 by rpki-client