This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/0quk8yFCaAT37LSj27nfsEsyYa0.roa File: 0quk8yFCaAT37LSj27nfsEsyYa0.roa (raw, json) Hash identifier: kjVH3PIcolbOXzfDdgURWGa/iVxgGSimg2ymBQo9Q1Y= Subject key identifier: D2:AB:A4:F3:21:42:68:04:F7:EC:B4:A3:DB:B9:DF:B0:4B:32:61:AD Certificate issuer: /CN=49596cecc21dd02677a727ef37f0689546ea5097 Certificate serial: 019B77588CD06041460FF32C5C13D79367E9 Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/0quk8yFCaAT37LSj27nfsEsyYa0.roa Signing time: Thu 01 Jan 2026 02:17:30 +0000 ROA not before: Thu 01 Jan 2026 02:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48714 IP address blocks: 83.119.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8c:d0:60:41:46:0f:f3:2c:5c:13:d7:93:67:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097 Validity Not Before: Jan 1 02:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2aba4f321426804f7ecb4a3dbb9dfb04b3261ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d1:f2:96:4e:96:61:33:2a:2b:9a:39:08:60: 2b:74:df:36:4c:16:fd:4c:69:28:40:b4:19:06:a1: 41:85:67:0c:46:82:6c:50:e2:67:05:85:b8:b9:b1: 85:38:d9:24:d8:1b:3c:87:26:ba:8a:b8:bc:d0:c2: 68:7d:9f:2c:53:1a:f6:f7:1b:19:af:50:9a:8e:37: 9b:70:33:a9:74:d5:ef:00:f9:85:f5:6d:9f:3c:86: 81:d6:fa:ea:ab:75:60:b9:06:bb:db:6c:79:26:31: b0:3e:c7:50:01:5a:c8:c8:ae:f5:f9:2c:34:c2:55: 4b:c8:21:fe:91:57:2e:83:c9:e1:5b:42:48:d1:a3: 2b:af:b0:57:08:4e:d0:bc:bc:cb:62:41:bc:26:62: 0e:7c:71:1c:06:9b:9e:7a:b4:17:69:46:28:b2:87: e7:ed:1c:03:2f:b1:e2:ef:bc:fb:86:dc:21:94:f7: 65:0b:74:92:29:2f:ea:76:66:68:49:86:9a:49:53: c0:b8:1b:0a:09:c7:d8:8b:12:3c:b9:f9:d8:47:cb: 4e:8c:47:8f:7a:b4:46:03:c7:df:9b:33:2c:ae:b1: 8a:3b:e8:32:80:7e:de:52:32:f7:20:5e:78:6c:66: 6c:d1:86:c6:50:72:44:3d:12:a0:e9:97:90:8a:de: 27:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AB:A4:F3:21:42:68:04:F7:EC:B4:A3:DB:B9:DF:B0:4B:32:61:AD X509v3 Authority Key Identifier: keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/0quk8yFCaAT37LSj27nfsEsyYa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.119.7.0/24 Signature Algorithm: sha256WithRSAEncryption 17:ed:1c:8f:4f:af:63:92:c3:58:f1:f2:ee:79:46:58:f0:85: 1e:d5:c9:b4:c8:8e:56:7d:d2:e0:26:40:97:2c:01:17:e6:cc: 90:99:a7:a0:23:a0:23:36:0b:67:26:da:e4:f8:f0:3e:e8:ff: 9c:0d:ba:97:64:90:5a:fb:ae:7b:dc:4b:32:dc:3d:1e:0a:74: 1e:e0:4b:eb:c9:32:e3:3b:70:6a:77:c5:aa:07:56:6f:a2:4d: 63:25:da:37:9c:c6:ac:6e:3a:58:f4:ea:25:dd:b7:33:f3:48: c2:11:b3:9c:6e:f6:02:f2:9f:75:a5:7f:37:1a:9b:10:d8:47: 06:70:58:56:ae:3e:d1:a4:06:cd:5a:ca:45:78:0f:ba:58:25: df:04:ad:52:1a:9d:e1:05:c7:86:cf:97:b6:ff:0b:6e:da:66: b2:5b:9e:c0:27:eb:9b:5f:8a:9c:d9:c8:76:bc:c8:e6:1e:21: 80:bd:e1:97:71:c5:b6:9f:09:db:c0:5b:b9:ef:6d:8d:4d:bf: 00:00:cc:c7:04:e3:04:6c:a3:9a:86:88:75:84:ab:6c:19:6c: 1c:c7:96:ef:11:09:1d:01:bb:ac:b9:52:56:fc:da:ce:91:76: c5:28:1d:19:6b:f4:35:b5:e0:6e:25:46:8c:1c:01:63:86:50: e3:87:e3:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WIzQYEFGD/MsXBPXk2fpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NTk2Y2VjYzIxZGQwMjY3N2E3MjdlZjM3ZjA2ODk1NDZl YTUwOTcwHhcNMjYwMTAxMDIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmFiYTRmMzIxNDI2ODA0ZjdlY2I0YTNkYmI5ZGZiMDRiMzI2MWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9Hylk6WYTMqK5o5CGArdN82TBb9 TGkoQLQZBqFBhWcMRoJsUOJnBYW4ubGFONkk2Bs8hya6iri80MJofZ8sUxr29xsZ r1CajjebcDOpdNXvAPmF9W2fPIaB1vrqq3VguQa722x5JjGwPsdQAVrIyK71+Sw0 wlVLyCH+kVcug8nhW0JI0aMrr7BXCE7QvLzLYkG8JmIOfHEcBpueerQXaUYosofn 7RwDL7Hi77z7htwhlPdlC3SSKS/qdmZoSYaaSVPAuBsKCcfYixI8ufnYR8tOjEeP erRGA8ffmzMsrrGKO+gygH7eUjL3IF54bGZs0YbGUHJEPRKg6ZeQit4nFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNKrpPMhQmgE9+y0o9u537BLMmGtMB8GA1UdIwQY MBaAFElZbOzCHdAmd6cn7zfwaJVG6lCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUt ODk3ZDAwOTc3ZmYyLzEvMHF1azh5RkNhQVQzN0xTajI3bmZzRXN5WWEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lN2JkMDEtNDMyZi00YmY5LTgwYzUtODk3ZDAwOTc3ZmYy LzEvU1ZsczdNSWQwQ1ozcHlmdk5fQm9sVWJxVUpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU3cHMA0G CSqGSIb3DQEBCwUAA4IBAQAX7RyPT69jksNY8fLueUZY8IUe1cm0yI5WfdLgJkCX LAEX5syQmaegI6AjNgtnJtrk+PA+6P+cDbqXZJBa+6573Esy3D0eCnQe4EvryTLj O3Bqd8WqB1Zvok1jJdo3nMasbjpY9Ool3bcz80jCEbOcbvYC8p91pX83GpsQ2EcG cFhWrj7RpAbNWspFeA+6WCXfBK1SGp3hBceGz5e2/wtu2mayW57AJ+ubX4qc2ch2 vMjmHiGAveGXccW2nwnbwFu5722NTb8AAMzHBOMEbKOahoh1hKtsGWwcx5bvEQkd AbusuVJW/NrOkXbFKB0Za/Q1teBuJUaMHAFjhlDjh+Ns -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:43 2026 by rpki-client