This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/07OOHdmV5hEQolio37YsYELpfmM.roa File: 07OOHdmV5hEQolio37YsYELpfmM.roa (raw, json) Hash identifier: ZakJp9i9YRT4a4PvS+En0I9CXQ4v7HJRNOWS65tarGM= Subject key identifier: D3:B3:8E:1D:D9:95:E6:11:10:A2:58:A8:DF:B6:2C:60:42:E9:7E:63 Certificate issuer: /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df Certificate serial: 019B7F83400919F12020EC11665C1D20BD63 Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/07OOHdmV5hEQolio37YsYELpfmM.roa Signing time: Fri 02 Jan 2026 16:21:06 +0000 ROA not before: Fri 02 Jan 2026 16:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39702 IP address blocks: 194.127.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:40:09:19:f1:20:20:ec:11:66:5c:1d:20:bd:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df Validity Not Before: Jan 2 16:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3b38e1dd995e61110a258a8dfb62c6042e97e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:e4:fa:32:65:69:5c:55:2f:c1:a0:92:56: d3:ad:51:f0:4f:15:a8:bf:47:12:f0:f2:02:26:e7: 8d:be:f1:d0:a8:08:6d:c8:72:ae:56:d3:59:88:94: 0d:90:ab:89:71:5d:06:19:91:f7:1d:82:09:78:ff: 37:9d:fa:d4:08:13:31:7c:13:5f:59:b6:0d:89:e9: ba:15:34:53:4b:5e:8f:bb:dc:fb:08:f6:b2:06:e8: 13:74:4c:1c:03:2c:b9:7a:a7:fc:2f:e7:90:99:1a: 5f:de:27:1e:0d:1f:cd:cd:5b:02:77:60:f6:e6:ef: 75:6d:3d:b2:1d:ef:70:c2:89:63:bc:01:14:21:1f: e9:ce:98:71:d4:62:3a:5a:dd:13:e8:dc:1e:ef:d3: 19:ff:17:5f:0b:c9:da:c2:d9:3d:64:13:a5:4d:13: 1e:0c:a4:6c:b7:84:c6:cd:0c:3b:d6:29:2e:49:08: 8c:83:ca:bc:91:04:d7:33:c0:16:2b:f8:ef:51:af: 0c:b3:72:3e:d7:41:52:63:0a:ba:fb:eb:1d:7a:80: 57:e5:3b:a2:dd:98:49:62:16:7a:d4:eb:1b:de:ac: 9b:d7:0d:72:ea:c9:e8:01:b3:b8:e4:0c:95:ab:56: 58:ca:00:cd:61:6e:ea:95:da:04:89:62:75:4f:6e: da:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B3:8E:1D:D9:95:E6:11:10:A2:58:A8:DF:B6:2C:60:42:E9:7E:63 X509v3 Authority Key Identifier: keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/07OOHdmV5hEQolio37YsYELpfmM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.208.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:b5:c7:26:9c:a9:86:79:39:fc:93:8e:aa:1d:df:d6:9f:9d: a1:13:77:95:f3:4b:5d:63:7b:8e:0d:e6:13:14:f2:78:5c:39: b5:63:17:35:e0:dc:ad:33:27:9b:a2:77:8e:49:d0:08:24:e3: cb:44:87:6e:66:03:8a:51:9c:56:0e:4d:4a:59:7d:33:1b:93: 66:55:70:5e:24:97:4c:5a:00:b0:a1:b5:07:39:b5:fe:8b:3b: 48:5e:2d:24:a4:80:fa:00:14:b1:15:6a:e7:2a:5d:97:11:8a: b4:43:4c:56:24:97:d1:f6:93:25:3f:23:46:c6:67:19:f3:56: c3:27:1e:66:18:e9:b9:89:0e:42:7c:07:c2:cb:b7:26:63:34: d9:8f:98:d4:82:69:19:bc:75:bb:9c:89:e1:df:6f:80:f5:a5: a4:2e:27:bf:0a:3d:fe:9e:68:7d:dc:d5:79:92:1a:3f:c7:0c: f4:ec:21:77:12:e9:d8:76:32:37:43:74:07:e0:3d:9c:19:e3: 54:d5:01:14:32:88:99:d8:92:f5:7e:5b:da:5d:71:f4:a7:d4: ce:c4:60:88:7d:24:5f:d3:39:ef:0b:04:87:21:fb:bd:bf:11: 01:23:44:ec:53:3a:0d:23:eb:60:9c:5c:84:52:9f:d3:24:e6: 61:b7:d6:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g0AJGfEgIOwRZlwdIL1jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYTA2YzZjMTA4ZTk0MTliMmNkYjIxZDQ4YjQ5YTZiYmQ2 YzE2ZGYwHhcNMjYwMTAyMTYyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2IzOGUxZGQ5OTVlNjExMTBhMjU4YThkZmI2MmM2MDQyZTk3ZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtLk+jJlaVxVL8GgklbTrVHwTxWo v0cS8PICJueNvvHQqAhtyHKuVtNZiJQNkKuJcV0GGZH3HYIJeP83nfrUCBMxfBNf WbYNiem6FTRTS16Pu9z7CPayBugTdEwcAyy5eqf8L+eQmRpf3iceDR/NzVsCd2D2 5u91bT2yHe9wwoljvAEUIR/pzphx1GI6Wt0T6Nwe79MZ/xdfC8nawtk9ZBOlTRMe DKRst4TGzQw71ikuSQiMg8q8kQTXM8AWK/jvUa8Ms3I+10FSYwq6++sdeoBX5Tui 3ZhJYhZ61Osb3qyb1w1y6snoAbO45AyVq1ZYygDNYW7qldoEiWJ1T27auQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNOzjh3ZleYREKJYqN+2LGBC6X5jMB8GA1UdIwQY MBaAFPGgbGwQjpQZss2yHUi0mmu9bBbfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGFCc2JCQ09sQm15emJJZFNMU2FhNzFzRnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kZWY2NDctOTE4Ni00NzI5LWJiOTkt MTQyZWJlODY5MzE2LzEvMDdPT0hkbVY1aEVRb2xpbzM3WXNZRUxwZm1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kZWY2NDctOTE4Ni00NzI5LWJiOTktMTQyZWJlODY5MzE2 LzEvOGFCc2JCQ09sQm15emJJZFNMU2FhNzFzRnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwn/QMA0G CSqGSIb3DQEBCwUAA4IBAQA8tccmnKmGeTn8k46qHd/Wn52hE3eV80tdY3uODeYT FPJ4XDm1Yxc14NytMyeboneOSdAIJOPLRIduZgOKUZxWDk1KWX0zG5NmVXBeJJdM WgCwobUHObX+iztIXi0kpID6ABSxFWrnKl2XEYq0Q0xWJJfR9pMlPyNGxmcZ81bD Jx5mGOm5iQ5CfAfCy7cmYzTZj5jUgmkZvHW7nInh32+A9aWkLie/Cj3+nmh93NV5 kho/xwz07CF3EunYdjI3Q3QH4D2cGeNU1QEUMoiZ2JL1flvaXXH0p9TOxGCIfSRf 0znvCwSHIfu9vxEBI0TsUzoNI+tgnFyEUp/TJOZht9bZ -----END CERTIFICATE-----Generated at Mon Jan 26 05:44:46 2026 by rpki-client