This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa File: ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa (raw, json) Hash identifier: xJD4AS2qcydvJ4nIFIToFd7KJeX/bcKOS0Cq1Ky05fE= Subject key identifier: A2:84:C3:2B:9C:01:23:E5:C9:AB:CC:DF:BF:F6:12:74:55:3E:BE:5A Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 019B7FF217952D8588A19194E80AAF71A8F4 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa Signing time: Fri 02 Jan 2026 18:22:10 +0000 ROA not before: Fri 02 Jan 2026 18:22:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204715 IP address blocks: 194.183.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:17:95:2d:85:88:a1:91:94:e8:0a:af:71:a8:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Jan 2 18:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a284c32b9c0123e5c9abccdfbff61274553ebe5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:cd:6d:14:5b:84:12:fa:3a:97:ee:e0:a9: be:0d:cb:36:4c:48:f5:ce:e8:d5:62:ac:bf:89:94: 89:d2:14:d5:9e:14:09:20:c4:2e:4a:ed:89:85:41: d2:97:5d:0c:d7:8d:9e:2d:de:67:9e:b3:36:f9:10: 24:05:9b:d3:9b:6c:23:5b:01:61:88:1c:de:07:97: e5:4f:36:c0:f6:24:d4:40:33:18:0e:d9:6f:72:0e: 76:f7:7e:94:0f:f3:47:40:b5:71:27:cb:f5:f7:84: 6a:b9:89:e6:87:40:3e:f3:0c:40:74:6c:a8:91:25: 0c:86:49:d6:60:d4:11:22:17:ab:d9:1b:5b:7d:63: 6c:16:4e:ce:b8:42:5d:33:f1:5a:d3:53:2d:7d:22: 97:cf:22:8b:f3:8d:99:b0:76:6a:b2:9c:4b:36:fc: 7e:d1:4b:1d:ed:8d:46:3f:37:3f:4c:f5:b8:71:ab: 6b:19:bf:0d:80:a9:6c:87:36:1d:ad:87:78:28:30: 4e:63:05:d1:17:d6:e2:29:31:be:c1:ef:82:35:c6: 66:4b:73:78:ea:96:40:53:b1:04:c1:2a:86:63:46: 2a:a3:c3:b6:01:29:c9:a7:25:f7:71:af:9a:93:d9: dc:07:77:37:27:d0:89:3d:3d:ab:bf:9c:11:72:9b: 1d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:84:C3:2B:9C:01:23:E5:C9:AB:CC:DF:BF:F6:12:74:55:3E:BE:5A X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.183.163.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:ec:aa:be:b9:e0:56:b9:49:85:36:f2:63:81:14:6d:e5:c6: e6:98:b0:56:a4:12:0c:e9:85:4c:35:f0:c4:cd:f0:76:a7:19: 14:90:65:53:2a:4f:55:05:79:6b:73:2d:e1:28:1d:cd:ed:ef: 33:ee:1a:0d:11:74:3f:76:dc:9b:71:d3:1e:8b:ff:c6:ce:c3: fc:fe:56:d5:1f:f6:02:45:1b:d5:34:0f:67:18:66:6f:67:9a: 67:7e:3d:df:fe:b2:c4:64:9c:70:07:e0:ad:79:c0:1e:59:77: 8c:7f:b9:55:f1:ad:26:da:08:5f:c7:4b:72:80:e2:94:d6:8e: 63:ab:de:16:1e:65:62:e4:23:ff:c4:b3:75:ff:79:41:2d:9e: 3c:21:58:01:91:29:a8:45:62:05:4a:e5:c9:37:07:f1:7d:d4: ca:be:33:62:42:6f:c8:1a:b8:87:cc:1f:53:85:db:cb:cf:11: a6:9e:7f:5e:71:6b:d9:b4:43:07:d5:fc:58:16:d7:b2:a5:70: 16:f0:2c:d1:98:78:6e:7f:cc:e3:5a:f5:d0:fc:ac:ce:a9:df: 13:b3:5e:75:24:c5:a5:ea:af:a7:8a:36:bd:43:9b:03:5c:63: c9:40:85:44:fc:b2:57:69:8f:7e:e6:1a:1d:c5:c8:22:02:b6: 85:48:a0:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8heVLYWIoZGU6Aqvcaj0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjYwMTAyMTgyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjg0YzMyYjljMDEyM2U1YzlhYmNjZGZiZmY2MTI3NDU1M2ViZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytHNbRRbhBL6Opfu4Km+Dcs2TEj1 zujVYqy/iZSJ0hTVnhQJIMQuSu2JhUHSl10M142eLd5nnrM2+RAkBZvTm2wjWwFh iBzeB5flTzbA9iTUQDMYDtlvcg52936UD/NHQLVxJ8v194RquYnmh0A+8wxAdGyo kSUMhknWYNQRIher2RtbfWNsFk7OuEJdM/Fa01MtfSKXzyKL842ZsHZqspxLNvx+ 0Usd7Y1GPzc/TPW4catrGb8NgKlshzYdrYd4KDBOYwXRF9biKTG+we+CNcZmS3N4 6pZAU7EEwSqGY0Yqo8O2ASnJpyX3ca+ak9ncB3c3J9CJPT2rv5wRcpsdGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKKEwyucASPlyavM37/2EnRVPr5aMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvb29UREs1d0JJLVhKcTh6ZnZfWVNkRlUtdmxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrejMA0G CSqGSIb3DQEBCwUAA4IBAQAf7Kq+ueBWuUmFNvJjgRRt5cbmmLBWpBIM6YVMNfDE zfB2pxkUkGVTKk9VBXlrcy3hKB3N7e8z7hoNEXQ/dtybcdMei//GzsP8/lbVH/YC RRvVNA9nGGZvZ5pnfj3f/rLEZJxwB+CtecAeWXeMf7lV8a0m2ghfx0tygOKU1o5j q94WHmVi5CP/xLN1/3lBLZ48IVgBkSmoRWIFSuXJNwfxfdTKvjNiQm/IGriHzB9T hdvLzxGmnn9ecWvZtEMH1fxYFteypXAW8CzRmHhuf8zjWvXQ/KzOqd8Ts151JMWl 6q+nija9Q5sDXGPJQIVE/LJXaY9+5hodxcgiAraFSKAK -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:58 2026 by rpki-client