This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/SOx3AgvmBANgGuRBvGIZv19ZcA0.roa File: SOx3AgvmBANgGuRBvGIZv19ZcA0.roa (raw, json) Hash identifier: 6aOAX3w5YQajoC0CEbqRBxH+zCfnhhkE4sDztjd3jWI= Subject key identifier: 48:EC:77:02:0B:E6:04:03:60:1A:E4:41:BC:62:19:BF:5F:59:70:0D Certificate issuer: /CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf Certificate serial: 019B7F84F30D6499F790AC68B3FEF6376879 Authority key identifier: C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/SOx3AgvmBANgGuRBvGIZv19ZcA0.roa Signing time: Fri 02 Jan 2026 16:22:58 +0000 ROA not before: Fri 02 Jan 2026 16:22:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49515 IP address blocks: 185.230.32.0/22 maxlen: 22 188.95.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f3:0d:64:99:f7:90:ac:68:b3:fe:f6:37:68:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf Validity Not Before: Jan 2 16:22:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48ec77020be60403601ae441bc6219bf5f59700d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:77:4e:a8:a6:e0:1e:67:79:6b:ba:8d:41:38: 99:8a:a1:ac:a3:3e:1b:c4:79:ce:e2:5b:4a:c3:e2: 2f:18:0e:00:ce:21:66:70:d9:f3:af:69:61:41:96: b9:3c:73:3f:d0:22:5c:22:78:15:96:ff:18:b9:1e: ff:dd:0c:eb:4a:eb:eb:02:c2:1b:9b:ee:ee:c1:4b: 23:a2:34:90:b4:6e:96:e8:64:c5:3e:30:48:07:84: 74:cc:18:8a:68:74:80:22:cf:5c:56:18:37:8e:7e: e8:33:80:8e:01:d8:fd:9c:d0:4f:5b:c6:97:d5:a7: 1c:55:59:d4:a7:87:32:e4:dc:1e:34:ee:3e:a2:7e: ae:d8:ba:68:92:e9:1a:69:a0:e0:60:87:4a:ea:ae: 72:14:34:90:61:3a:92:05:3b:42:c3:8c:a0:5a:4f: b8:93:11:83:82:4b:50:a3:f3:b4:1a:22:c4:b4:70: ab:dd:2f:70:b6:93:f9:68:59:ef:ae:ea:f8:69:26: 60:99:06:8a:02:04:bf:be:37:4f:3e:49:37:47:38: ff:af:dd:63:95:9e:4e:42:46:44:bb:40:94:72:76: fa:93:e9:9c:b7:90:13:da:80:e8:df:39:02:62:bb: 88:e0:7d:b6:ac:ec:44:5d:7d:c0:46:0b:2c:ef:a7: 82:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EC:77:02:0B:E6:04:03:60:1A:E4:41:BC:62:19:BF:5F:59:70:0D X509v3 Authority Key Identifier: keyid:C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/SOx3AgvmBANgGuRBvGIZv19ZcA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.32.0/22 188.95.32.0/21 Signature Algorithm: sha256WithRSAEncryption a5:c2:38:37:2b:5b:25:37:02:00:21:05:50:97:22:e3:9e:88: 82:67:b9:c6:47:e8:17:6c:48:1f:86:f1:f1:11:f2:f3:3a:3f: 26:6e:8f:81:64:cb:fa:d9:09:b9:18:11:10:a2:dd:a8:f4:5f: a7:ba:1b:33:b6:89:16:e6:78:7e:9a:55:d9:2a:6a:c0:cb:92: e1:4c:1c:8e:39:67:95:ca:58:e9:38:aa:84:41:2a:62:3c:3f: 33:fb:c0:3e:cc:8b:9a:b7:08:66:db:92:23:07:fc:7b:4d:42: 94:c0:4f:58:2e:bf:1d:b5:80:a7:98:97:0f:e3:7f:40:3a:79: b1:d1:28:b4:1e:31:eb:1e:a7:98:2a:55:73:45:3b:0e:f0:3e: f1:bf:23:28:5b:fa:30:37:77:0a:0f:a9:55:5c:5a:7f:e1:fd: d0:e4:02:d2:20:24:fd:e8:30:fe:50:0c:96:33:d4:0e:32:9d: 73:1f:73:4e:f3:91:14:4d:fa:00:9b:95:13:bc:c6:cc:95:6a: ae:bb:ba:ff:19:73:2e:97:b3:3d:49:56:16:7a:5f:91:eb:4e: 1b:0f:10:80:ec:4f:98:3b:b0:05:f1:c5:e1:ce:b6:da:58:27: 99:c7:1f:f6:6e:dc:c9:5a:5e:22:2c:1b:eb:29:c5:fc:c1:15: 01:5e:a1:51 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hPMNZJn3kKxos/72N2h5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTVhYTZjZWM4NmRmMjExNWUyYTEwZTkyMDlkOGFhMmRm OThiYmYwHhcNMjYwMTAyMTYyMjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGVjNzcwMjBiZTYwNDAzNjAxYWU0NDFiYzYyMTliZjVmNTk3MDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3dOqKbgHmd5a7qNQTiZiqGsoz4b xHnO4ltKw+IvGA4AziFmcNnzr2lhQZa5PHM/0CJcIngVlv8YuR7/3QzrSuvrAsIb m+7uwUsjojSQtG6W6GTFPjBIB4R0zBiKaHSAIs9cVhg3jn7oM4COAdj9nNBPW8aX 1accVVnUp4cy5NweNO4+on6u2LpokukaaaDgYIdK6q5yFDSQYTqSBTtCw4ygWk+4 kxGDgktQo/O0GiLEtHCr3S9wtpP5aFnvrur4aSZgmQaKAgS/vjdPPkk3Rzj/r91j lZ5OQkZEu0CUcnb6k+mct5AT2oDo3zkCYruI4H22rOxEXX3ARgss76eC2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEjsdwIL5gQDYBrkQbxiGb9fWXANMB8GA1UdIwQY MBaAFMAVqmzsht8hFeKhDpIJ2Kot+Yu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JXcWJPeUczeUVWNHFFT2tnbllxaTM1aTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83NGUwODUtM2EyOS00YzE5LTg0ODUt YjdmOWI3MDJlZDQ4LzEvU094M0Fndm1CQU5nR3VSQnZHSVp2MTlaY0EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS83NGUwODUtM2EyOS00YzE5LTg0ODUtYjdmOWI3MDJlZDQ4 LzEvd0JXcWJPeUczeUVWNHFFT2tnbllxaTM1aTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCueYgAwQD vF8gMA0GCSqGSIb3DQEBCwUAA4IBAQClwjg3K1slNwIAIQVQlyLjnoiCZ7nGR+gX bEgfhvHxEfLzOj8mbo+BZMv62Qm5GBEQot2o9F+nuhsztokW5nh+mlXZKmrAy5Lh TByOOWeVyljpOKqEQSpiPD8z+8A+zIuatwhm25IjB/x7TUKUwE9YLr8dtYCnmJcP 439AOnmx0Si0HjHrHqeYKlVzRTsO8D7xvyMoW/owN3cKD6lVXFp/4f3Q5ALSICT9 6DD+UAyWM9QOMp1zH3NO85EUTfoAm5UTvMbMlWquu7r/GXMul7M9SVYWel+R604b DxCA7E+YO7AF8cXhzrbaWCeZxx/2btzJWl4iLBvrKcX8wRUBXqFR -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:33 2026 by rpki-client