This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/o9zphKniYIOfAnPWBApq0ZN0I4E.roa File: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (raw, json) Hash identifier: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8= Subject key identifier: A3:DC:E9:84:A9:E2:60:83:9F:02:73:D6:04:0A:6A:D1:93:74:23:81 Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019B79ECF2730462DFB1925ABD6CBF4859A8 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/o9zphKniYIOfAnPWBApq0ZN0I4E.roa Signing time: Thu 01 Jan 2026 14:18:50 +0000 ROA not before: Thu 01 Jan 2026 14:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135158 IP address blocks: 194.49.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f2:73:04:62:df:b1:92:5a:bd:6c:bf:48:59:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Jan 1 14:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3dce984a9e260839f0273d6040a6ad193742381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:d3:1f:71:02:7d:ea:5a:c1:94:4a:79:38:93: 1a:a3:8a:e1:f0:6f:67:59:56:e0:80:8d:54:72:a4: d5:7f:0a:2a:a0:fe:01:a6:6c:b1:4e:c0:9e:df:f4: c2:80:a4:0e:a4:40:e3:f4:9c:3b:70:d5:18:e5:17: c5:3d:e0:dd:63:77:78:1a:98:6c:07:97:a5:18:04: 0a:93:77:ba:f7:d2:1d:ae:38:59:0f:11:2f:2b:88: 1d:73:42:67:45:76:fa:d8:99:c5:01:85:bd:84:b3: 67:17:94:c6:47:9d:5c:eb:ec:03:e6:d1:7c:a4:23: d8:44:4d:08:af:6c:dc:41:2d:ec:8d:51:2a:43:b3: 54:bc:c8:02:4a:c0:fc:6f:c2:fa:8c:0f:04:4f:00: 9c:36:58:1b:52:1a:f0:c1:73:72:fb:b4:45:58:a8: 5c:1e:d1:22:44:d1:eb:84:70:8c:af:38:b8:34:63: 21:bd:ef:02:93:70:1a:e5:59:1f:9e:8b:37:46:80: 06:a5:61:7e:86:15:77:3f:b2:a6:a1:10:c3:f0:ea: 34:ee:6f:68:fd:59:73:20:6b:20:8c:19:67:0e:64: 9b:e1:81:a5:ed:43:f2:f9:27:ee:24:25:97:a3:1b: f2:19:c6:28:1f:0f:e4:c7:66:cb:9e:ee:9d:63:19: 26:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DC:E9:84:A9:E2:60:83:9F:02:73:D6:04:0A:6A:D1:93:74:23:81 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/o9zphKniYIOfAnPWBApq0ZN0I4E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.49.55.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:4b:b1:73:74:fe:2c:82:0f:da:7e:82:01:69:55:01:fd:13: f1:ba:77:33:c9:d9:4f:7b:e5:f9:8a:1a:e4:00:ff:12:81:49: 99:dd:7f:71:39:4c:7b:3d:e5:08:9c:67:50:48:00:2b:72:d5: 3e:9f:7a:c2:78:d8:c7:1a:ea:88:b8:a4:a7:7b:0e:d7:51:45: 37:1d:1a:23:e1:6c:e2:99:13:5c:09:65:48:23:3a:a2:54:f3: aa:59:5b:fe:d4:dd:1c:7c:77:05:32:9d:ea:25:20:88:43:c8: 28:c8:17:f4:03:fe:c3:6b:2e:08:b5:5d:17:4e:fb:47:28:f1: d8:4f:a2:4d:c3:d7:30:5d:f8:8b:53:53:cf:4e:a4:40:36:a3: 13:98:df:6e:19:d8:89:96:06:3f:e5:d5:9f:78:e6:eb:61:8d: 6d:8d:82:c7:c7:83:aa:31:77:3a:d9:58:27:4c:47:dc:37:0f: 06:75:0e:92:a2:79:3a:8f:9e:7f:ee:59:ee:fb:9a:06:0b:82: f1:7c:bf:bf:65:fa:8b:f9:85:ac:f8:fc:81:6f:4f:9f:f0:59: 85:f5:c0:cc:0d:f1:4f:b7:88:86:80:c7:5f:65:51:c9:74:f9: f4:ec:78:4a:3e:14:a4:6f:84:95:67:59:40:7d:ab:35:f2:35: 27:27:50:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57PJzBGLfsZJavWy/SFmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwMTAxMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2RjZTk4NGE5ZTI2MDgzOWYwMjczZDYwNDBhNmFkMTkzNzQyMzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+9MfcQJ96lrBlEp5OJMao4rh8G9n WVbggI1UcqTVfwoqoP4BpmyxTsCe3/TCgKQOpEDj9Jw7cNUY5RfFPeDdY3d4Gphs B5elGAQKk3e699IdrjhZDxEvK4gdc0JnRXb62JnFAYW9hLNnF5TGR51c6+wD5tF8 pCPYRE0Ir2zcQS3sjVEqQ7NUvMgCSsD8b8L6jA8ETwCcNlgbUhrwwXNy+7RFWKhc HtEiRNHrhHCMrzi4NGMhve8Ck3Aa5Vkfnos3RoAGpWF+hhV3P7KmoRDD8Oo07m9o /VlzIGsgjBlnDmSb4YGl7UPy+SfuJCWXoxvyGcYoHw/kx2bLnu6dYxkmywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKPc6YSp4mCDnwJz1gQKatGTdCOBMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvbzl6cGhLbmlZSU9mQW5QV0JBcHEwWk4wSTRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjE3MA0G CSqGSIb3DQEBCwUAA4IBAQBOS7FzdP4sgg/afoIBaVUB/RPxunczydlPe+X5ihrk AP8SgUmZ3X9xOUx7PeUInGdQSAArctU+n3rCeNjHGuqIuKSnew7XUUU3HRoj4Wzi mRNcCWVIIzqiVPOqWVv+1N0cfHcFMp3qJSCIQ8goyBf0A/7Day4ItV0XTvtHKPHY T6JNw9cwXfiLU1PPTqRANqMTmN9uGdiJlgY/5dWfeObrYY1tjYLHx4OqMXc62Vgn TEfcNw8GdQ6Sonk6j55/7lnu+5oGC4LxfL+/ZfqL+YWs+PyBb0+f8FmF9cDMDfFP t4iGgMdfZVHJdPn07HhKPhSkb4SVZ1lAfas18jUnJ1Bv -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:21 2026 by rpki-client