This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/sOyLous1lcVglNsttXQzSfJQQoY.roa File: sOyLous1lcVglNsttXQzSfJQQoY.roa (raw, json) Hash identifier: HK4au5F4Xcxrx2YlmpZX3D2cv+tRYiiQColDX6MpT7E= Subject key identifier: B0:EC:8B:A2:EB:35:95:C5:60:94:DB:2D:B5:74:33:49:F2:50:42:86 Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2 Certificate serial: 019B7EA6F8399FE9CA12DA04544BBBD56E03 Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/sOyLous1lcVglNsttXQzSfJQQoY.roa Signing time: Fri 02 Jan 2026 12:20:30 +0000 ROA not before: Fri 02 Jan 2026 12:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44066 IP address blocks: 212.79.212.0/22 maxlen: 22 212.79.216.0/22 maxlen: 22 212.79.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f8:39:9f:e9:ca:12:da:04:54:4b:bb:d5:6e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2 Validity Not Before: Jan 2 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0ec8ba2eb3595c56094db2db5743349f2504286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:40:d5:d6:f1:e4:88:a2:dd:26:9a:cf:8e: 19:a7:32:f6:b8:5e:ca:ed:fe:ae:a3:aa:77:f6:29: 0c:0b:05:8b:ac:d6:3f:f8:b4:a9:61:97:25:5e:e9: d0:61:41:60:c1:35:20:19:8a:0f:6c:5c:8b:03:a2: 31:18:70:d4:49:f5:b6:28:8f:8f:4d:c6:a8:0b:ae: 50:a7:9f:e0:5e:c0:85:20:98:b2:c4:2c:d7:c2:de: 04:a8:94:34:80:18:2e:b1:79:e6:cb:26:a2:41:ac: a1:1e:16:7a:a9:3b:f4:ed:db:5e:b1:30:af:9f:c6: 9e:31:5f:3d:fb:8c:5b:71:56:8b:81:07:11:6f:7b: b3:64:19:66:22:53:da:b2:bd:cb:16:1f:f9:67:38: b8:e2:d2:9b:76:c2:80:d3:ff:71:86:09:21:fc:87: 0a:32:0d:4b:46:f3:d6:f8:72:79:44:bf:66:5f:74: b6:a4:54:f3:ea:35:2e:68:0d:8e:f6:e3:b9:6d:8a: db:cc:74:e2:29:db:6e:89:c8:cb:8e:d7:97:a0:48: 15:9e:e9:55:d8:a7:5d:1a:35:5a:8a:28:f1:24:a9: 8f:0a:88:a3:9b:9e:58:5b:1b:91:51:d8:1a:d8:fe: 5c:3a:ff:67:8e:a3:a7:b9:46:57:3d:8c:79:f8:a0: b3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EC:8B:A2:EB:35:95:C5:60:94:DB:2D:B5:74:33:49:F2:50:42:86 X509v3 Authority Key Identifier: keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/sOyLous1lcVglNsttXQzSfJQQoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.79.212.0-212.79.223.255 Signature Algorithm: sha256WithRSAEncryption 5c:a2:65:31:ef:3c:69:79:9f:48:ef:6f:82:66:0a:68:63:23: 34:bd:70:55:b9:75:a0:6d:3c:00:88:92:f3:f4:22:ee:57:3a: ad:93:d0:4e:8f:1e:1f:8a:0d:17:d4:d8:36:6f:2f:2b:da:cd: 45:95:38:3b:7c:28:24:2a:1d:8a:d6:9c:47:98:8a:a8:1f:32: 6e:bf:df:16:7b:b4:c6:12:76:98:50:cf:92:e0:34:7e:25:44: e5:7f:a7:c7:d4:0d:74:53:3e:85:d1:48:f4:65:7b:db:ce:02: 01:c3:22:78:b9:9f:7b:2f:ba:07:72:e7:ff:49:9a:49:fa:40: c4:1e:bd:4d:53:b6:71:1a:84:bb:c2:97:c5:1d:75:0f:e9:35: e8:44:85:ea:75:9d:54:68:ff:e2:37:c1:6c:ca:1d:83:26:1b: 5d:2f:ea:92:3f:b4:b6:09:8b:25:ba:97:37:c9:a3:eb:35:23: c1:2a:0b:65:b5:1d:44:a2:47:96:2b:64:ca:1f:66:48:87:cb: 97:7e:e0:53:7f:d1:18:37:b5:ee:28:be:ef:9b:05:1f:a8:89: d1:75:71:f2:1d:3e:d1:a7:0b:7a:a1:fc:d0:fc:35:1f:25:7d: 7b:e3:df:22:c0:c5:76:97:bc:2a:34:5f:7a:9d:23:49:a7:de: 29:ee:05:c9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+pvg5n+nKEtoEVEu71W4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYmJiYmFhM2VlMjRjN2FkOWIyYzYwNDMyZTE0ZWRhMzg0 OWI1ZTIwHhcNMjYwMTAyMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGVjOGJhMmViMzU5NWM1NjA5NGRiMmRiNTc0MzM0OWYyNTA0Mjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApphA1dbx5Iii3Saaz44ZpzL2uF7K 7f6uo6p39ikMCwWLrNY/+LSpYZclXunQYUFgwTUgGYoPbFyLA6IxGHDUSfW2KI+P TcaoC65Qp5/gXsCFIJiyxCzXwt4EqJQ0gBgusXnmyyaiQayhHhZ6qTv07dtesTCv n8aeMV89+4xbcVaLgQcRb3uzZBlmIlPasr3LFh/5Zzi44tKbdsKA0/9xhgkh/IcK Mg1LRvPW+HJ5RL9mX3S2pFTz6jUuaA2O9uO5bYrbzHTiKdtuicjLjteXoEgVnulV 2KddGjVaiijxJKmPCoijm55YWxuRUdga2P5cOv9njqOnuUZXPYx5+KCzhwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLDsi6LrNZXFYJTbLbV0M0nyUEKGMB8GA1UdIwQY MBaAFFO7u6o+4kx62bLGBDLhTto4SbXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUt MDBlY2YwYzRkMGVmLzEvc095TG91czFsY1ZnbE5zdHRYUXpTZkpRUW9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUtMDBlY2YwYzRkMGVm LzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALUT9QD BAXUT8AwDQYJKoZIhvcNAQELBQADggEBAFyiZTHvPGl5n0jvb4JmCmhjIzS9cFW5 daBtPACIkvP0Iu5XOq2T0E6PHh+KDRfU2DZvLyvazUWVODt8KCQqHYrWnEeYiqgf Mm6/3xZ7tMYSdphQz5LgNH4lROV/p8fUDXRTPoXRSPRle9vOAgHDIni5n3svugdy 5/9Jmkn6QMQevU1TtnEahLvCl8UddQ/pNehEhep1nVRo/+I3wWzKHYMmG10v6pI/ tLYJiyW6lzfJo+s1I8EqC2W1HUSiR5YrZMofZkiHy5d+4FN/0Rg3te4ovu+bBR+o idF1cfIdPtGnC3qh/ND8NR8lfXvj3yLAxXaXvCo0X3qdI0mn3inuBck= -----END CERTIFICATE-----Generated at Mon Jan 12 01:43:49 2026 by rpki-client