This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/SOxrQfiAHoz0SZ75Sv07WpvNkd4.roa File: SOxrQfiAHoz0SZ75Sv07WpvNkd4.roa (raw, json) Hash identifier: uIUOOzCmCZIfAItCkWriSRWvWy1Wi25C++tLdPRufDc= Subject key identifier: 48:EC:6B:41:F8:80:1E:8C:F4:49:9E:F9:4A:FD:3B:5A:9B:CD:91:DE Certificate issuer: /CN=cc215f58159ec576a2022776ea64f61c5bb00194 Certificate serial: 019B77C6840F443495DF4001ED9008CB69DE Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/SOxrQfiAHoz0SZ75Sv07WpvNkd4.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12564 IP address blocks: 185.181.148.0/22 maxlen: 22 185.181.148.0/24 maxlen: 24 185.181.149.0/24 maxlen: 24 185.181.150.0/24 maxlen: 24 185.181.151.0/24 maxlen: 24 212.122.160.0/19 maxlen: 19 212.122.160.0/23 maxlen: 23 212.122.160.0/24 maxlen: 24 212.122.161.0/24 maxlen: 24 212.122.162.0/23 maxlen: 23 212.122.162.0/24 maxlen: 24 212.122.163.0/24 maxlen: 24 212.122.167.0/24 maxlen: 24 212.122.168.0/24 maxlen: 24 212.122.169.0/24 maxlen: 24 212.122.170.0/24 maxlen: 24 212.122.171.0/24 maxlen: 24 212.122.172.0/24 maxlen: 24 212.122.173.0/24 maxlen: 24 212.122.174.0/24 maxlen: 24 212.122.175.0/24 maxlen: 24 212.122.176.0/24 maxlen: 24 212.122.177.0/24 maxlen: 24 212.122.178.0/24 maxlen: 24 212.122.179.0/24 maxlen: 24 212.122.180.0/24 maxlen: 24 212.122.181.0/24 maxlen: 24 212.122.182.0/24 maxlen: 24 212.122.183.0/24 maxlen: 24 212.122.184.0/24 maxlen: 24 212.122.185.0/24 maxlen: 24 212.122.186.0/24 maxlen: 24 212.122.187.0/24 maxlen: 24 212.122.188.0/24 maxlen: 24 212.122.189.0/24 maxlen: 24 212.122.190.0/24 maxlen: 24 212.122.191.0/24 maxlen: 24 2a04:43c0::/29 maxlen: 29 2a04:43c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:84:0f:44:34:95:df:40:01:ed:90:08:cb:69:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48ec6b41f8801e8cf4499ef94afd3b5a9bcd91de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:64:15:57:36:5c:7e:5c:12:15:5e:b7:fb:8a: 24:0b:67:24:3e:d4:eb:62:af:fb:3f:6d:52:ac:88: 02:42:36:ae:d5:e2:6e:ec:e9:c4:b0:fa:5f:ec:d8: 72:44:e8:c1:5c:ee:a1:63:3a:d3:c6:b5:dc:51:3a: f6:e6:04:37:66:6d:b6:22:7f:23:36:c3:b7:57:eb: a2:3e:a9:bc:0e:09:d3:77:4d:6b:36:37:cd:e4:fc: 2e:a0:ec:4f:7d:b7:19:a3:bd:99:18:31:f8:4a:e6: 40:4e:ba:5d:ce:a8:6b:6f:af:f2:ad:f4:37:3e:9c: 1d:09:f0:ed:05:3c:31:25:e4:35:87:5c:bb:d3:ff: 5b:44:f0:e1:4f:81:93:66:7e:da:d0:fc:09:de:da: 0c:9a:f8:bd:2e:e6:23:a1:06:ce:9d:26:5d:ae:d3: 36:c9:20:cc:1d:35:23:49:de:1e:c6:7b:d1:2e:c3: 1e:a5:b1:73:96:8d:79:73:cf:f1:38:54:65:c1:71: 48:17:88:2a:96:33:a9:65:59:e2:00:05:3a:34:91: b0:b5:6a:3c:0b:63:e5:e2:d1:d4:73:63:5e:53:88: 1d:3a:1a:15:ea:91:c5:7d:6b:59:dc:4a:a5:54:17: 32:f4:23:e5:6d:58:06:fb:12:86:06:ac:34:39:cc: c3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EC:6B:41:F8:80:1E:8C:F4:49:9E:F9:4A:FD:3B:5A:9B:CD:91:DE X509v3 Authority Key Identifier: keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/SOxrQfiAHoz0SZ75Sv07WpvNkd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.148.0/22 212.122.160.0/19 IPv6: 2a04:43c0::/29 Signature Algorithm: sha256WithRSAEncryption 1f:ed:03:d0:86:ce:eb:42:f2:60:b1:cc:80:09:db:24:5f:ac: 75:fe:ba:ff:21:e6:7f:09:6d:1a:83:87:cf:f3:cb:34:68:8b: 53:0e:2e:c8:ef:c3:68:98:a9:52:05:80:5f:1a:11:7a:68:d4: d7:c2:2e:01:09:0c:d1:95:19:49:d6:00:51:21:93:78:5c:27: e0:95:cc:15:ec:79:18:20:45:63:99:f2:d4:6f:76:eb:1e:72: 63:4a:97:c6:ee:3c:af:09:6b:ac:2c:f1:e9:04:f7:81:90:07: 0a:60:bc:84:17:69:b1:52:79:99:67:89:dc:c9:16:f8:7b:c3: fc:5b:79:76:3e:fa:4e:a6:35:54:3c:42:d8:a7:13:98:32:6c: 6e:72:7e:d2:30:8e:6f:74:37:ca:c5:e4:e1:2d:22:73:a0:8a: e6:de:38:50:04:92:73:b1:07:23:c7:27:9e:9e:d8:b5:4a:99: ef:7d:7c:46:8f:b7:e7:f2:c5:57:0f:2b:d6:1d:79:5f:d5:f4: b3:d6:1f:b2:cb:cd:e5:14:7f:96:2a:26:c9:42:ca:ec:8d:45: 23:22:dc:a2:84:b1:b9:98:0b:3f:c7:e9:f9:84:ba:69:3b:40: 7e:53:32:b6:54:7f:54:78:a8:47:b4:f4:1f:e0:eb:5e:01:cd: ca:e3:23:b8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xoQPRDSV30AB7ZAIy2neMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMjE1ZjU4MTU5ZWM1NzZhMjAyMjc3NmVhNjRmNjFjNWJi MDAxOTQwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGVjNmI0MWY4ODAxZThjZjQ0OTllZjk0YWZkM2I1YTliY2Q5MWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWQVVzZcflwSFV63+4okC2ckPtTr Yq/7P21SrIgCQjau1eJu7OnEsPpf7NhyROjBXO6hYzrTxrXcUTr25gQ3Zm22In8j NsO3V+uiPqm8DgnTd01rNjfN5PwuoOxPfbcZo72ZGDH4SuZATrpdzqhrb6/yrfQ3 PpwdCfDtBTwxJeQ1h1y70/9bRPDhT4GTZn7a0PwJ3toMmvi9LuYjoQbOnSZdrtM2 ySDMHTUjSd4exnvRLsMepbFzlo15c8/xOFRlwXFIF4gqljOpZVniAAU6NJGwtWo8 C2Pl4tHUc2NeU4gdOhoV6pHFfWtZ3EqlVBcy9CPlbVgG+xKGBqw0OczDuQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEjsa0H4gB6M9Eme+Ur9O1qbzZHeMB8GA1UdIwQY MBaAFMwhX1gVnsV2ogIndupk9hxbsAGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAt ODQzZWVlZTBhMjYwLzEvU094clFmaUFIb3owU1o3NVN2MDdXcHZOa2Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAtODQzZWVlZTBhMjYw LzEvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCubWUAwQF 1HqgMA0EAgACMAcDBQMqBEPAMA0GCSqGSIb3DQEBCwUAA4IBAQAf7QPQhs7rQvJg scyACdskX6x1/rr/IeZ/CW0ag4fP88s0aItTDi7I78NomKlSBYBfGhF6aNTXwi4B CQzRlRlJ1gBRIZN4XCfglcwV7HkYIEVjmfLUb3brHnJjSpfG7jyvCWusLPHpBPeB kAcKYLyEF2mxUnmZZ4ncyRb4e8P8W3l2PvpOpjVUPELYpxOYMmxucn7SMI5vdDfK xeThLSJzoIrm3jhQBJJzsQcjxyeenti1SpnvfXxGj7fn8sVXDyvWHXlf1fSz1h+y y83lFH+WKibJQsrsjUUjItyihLG5mAs/x+n5hLppO0B+UzK2VH9UeKhHtPQf4Ote Ac3K4yO4 -----END CERTIFICATE-----Generated at Wed Jan 7 06:55:48 2026 by rpki-client