This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa File: soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa (raw, json) Hash identifier: 0b15G9tWrr98FbmkVjBIZ+RDO8284jHjeMknUdoswGE= Subject key identifier: B2:84:8E:C4:7A:34:67:44:A6:38:E9:9E:6E:9F:9F:B7:16:7A:55:7B Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019B7F823D796C7083BC42ECDABA9B317D1E Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa Signing time: Fri 02 Jan 2026 16:20:00 +0000 ROA not before: Fri 02 Jan 2026 16:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39668 IP address blocks: 92.87.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:3d:79:6c:70:83:bc:42:ec:da:ba:9b:31:7d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Jan 2 16:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2848ec47a346744a638e99e6e9f9fb7167a557b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5c:36:79:30:e6:bd:a4:ca:26:e9:5c:ea:80: fe:77:0a:8f:e3:ca:70:a0:b5:14:8a:fc:0e:a2:9e: a7:71:d9:ae:d2:68:ba:75:6a:52:c3:24:d5:32:d2: ee:b4:94:68:e4:78:d8:72:61:fc:da:29:d9:a9:3c: 62:fd:0f:df:28:24:4c:f2:55:7d:9d:69:52:53:64: 05:ef:ed:c0:84:40:44:ee:aa:63:6b:47:d2:3c:48: ca:b1:ca:12:96:90:c3:27:08:27:e8:ff:80:0e:b3: 2f:9d:ee:41:f7:95:13:49:ee:57:73:f1:67:d9:bf: ea:ca:4d:6a:0f:22:89:c4:f3:4a:0c:d6:87:ff:08: b1:2c:5e:30:de:7c:88:73:f1:43:0e:28:82:fe:ba: 04:b2:62:35:c7:e8:f2:09:6a:29:6d:84:c5:fa:6f: a2:88:8f:75:46:ef:df:25:9e:10:b4:3e:3c:72:0e: 94:6d:ab:64:9f:5b:84:19:a9:ee:c8:cd:61:2f:b1: 7e:3f:19:34:db:81:34:d7:09:48:6d:ac:95:92:4a: f4:ff:89:e0:75:4a:70:9e:83:d5:2c:a8:63:d2:79: 8d:a3:52:12:41:76:3b:71:60:80:7e:9e:5c:bb:31: 9e:3c:9c:8d:53:30:d4:c6:4e:58:b8:8c:1e:1b:13: 78:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:84:8E:C4:7A:34:67:44:A6:38:E9:9E:6E:9F:9F:B7:16:7A:55:7B X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.87.105.0/24 Signature Algorithm: sha256WithRSAEncryption 54:e1:3f:38:35:3b:2d:d3:bf:a9:c1:cc:88:b5:52:62:a7:54: ea:70:7c:13:a7:a3:1e:4f:7e:a5:11:5b:34:7b:d0:fe:29:5b: 43:e7:33:54:3e:ca:a6:26:b4:f0:21:43:c4:3b:38:e6:fa:cc: 09:bd:3a:e1:31:c1:78:dd:de:c2:ff:c1:64:9c:9a:a7:82:54: a0:fa:7e:2f:a1:c3:0b:ef:0e:4d:68:6c:51:37:b5:9b:d1:f3: dd:d8:d7:6b:b7:5d:a4:9e:40:01:70:dc:fb:6d:59:c4:69:05: 54:99:49:44:12:59:a5:20:e1:84:61:7a:12:30:a3:b9:60:b3: 27:20:63:03:25:6e:42:e6:47:7d:69:31:17:2d:b3:23:7c:1e: a3:97:df:1f:ba:22:4c:f6:ed:a7:92:12:90:7b:0d:99:54:f0: e3:5e:10:0e:92:30:7a:14:73:6e:b2:4f:2d:f9:81:0f:f7:e2: 25:47:3e:d7:1b:a5:40:ed:55:e1:03:8e:bc:b9:69:5a:33:d7: 1c:e8:3f:c3:18:c9:e3:c3:10:a3:6c:47:a3:18:e7:51:04:2e: 3b:47:41:ec:c2:b5:de:50:f4:c8:61:74:37:77:a9:67:2b:47: 9a:76:fe:a8:83:ed:f7:0d:f9:8a:f3:2a:45:8e:eb:6d:2c:8a: 7f:4a:6f:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gj15bHCDvELs2rqbMX0eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwMTAyMTYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjg0OGVjNDdhMzQ2NzQ0YTYzOGU5OWU2ZTlmOWZiNzE2N2E1NTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lw2eTDmvaTKJulc6oD+dwqP48pw oLUUivwOop6ncdmu0mi6dWpSwyTVMtLutJRo5HjYcmH82inZqTxi/Q/fKCRM8lV9 nWlSU2QF7+3AhEBE7qpja0fSPEjKscoSlpDDJwgn6P+ADrMvne5B95UTSe5Xc/Fn 2b/qyk1qDyKJxPNKDNaH/wixLF4w3nyIc/FDDiiC/roEsmI1x+jyCWopbYTF+m+i iI91Ru/fJZ4QtD48cg6Ubatkn1uEGanuyM1hL7F+Pxk024E01wlIbayVkkr0/4ng dUpwnoPVLKhj0nmNo1ISQXY7cWCAfp5cuzGePJyNUzDUxk5YuIweGxN4lQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLKEjsR6NGdEpjjpnm6fn7cWelV7MB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvc29TT3hIbzBaMFNtT09tZWJwLWZ0eFo2VlhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXFdpMA0G CSqGSIb3DQEBCwUAA4IBAQBU4T84NTst07+pwcyItVJip1TqcHwTp6MeT36lEVs0 e9D+KVtD5zNUPsqmJrTwIUPEOzjm+swJvTrhMcF43d7C/8FknJqnglSg+n4vocML 7w5NaGxRN7Wb0fPd2Ndrt12knkABcNz7bVnEaQVUmUlEElmlIOGEYXoSMKO5YLMn IGMDJW5C5kd9aTEXLbMjfB6jl98fuiJM9u2nkhKQew2ZVPDjXhAOkjB6FHNusk8t +YEP9+IlRz7XG6VA7VXhA468uWlaM9cc6D/DGMnjwxCjbEejGOdRBC47R0HswrXe UPTIYXQ3d6lnK0eadv6og+33DfmK8ypFjuttLIp/Sm+J -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:56 2026 by rpki-client