This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/a7oKAtXpujbjcSp7xIWIBbpbuwo.roa File: a7oKAtXpujbjcSp7xIWIBbpbuwo.roa (raw, json) Hash identifier: uOToHNzKGxHUJP96PSZDBVfJ0h4D91Ag2KcuZFpXViQ= Subject key identifier: 6B:BA:0A:02:D5:E9:BA:36:E3:71:2A:7B:C4:85:88:05:BA:5B:BB:0A Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac Certificate serial: 019B79ED556136342D2E2C4938651AE880A2 Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/a7oKAtXpujbjcSp7xIWIBbpbuwo.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199938 IP address blocks: 194.76.122.0/23 maxlen: 24 2001:678:e28::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:55:61:36:34:2d:2e:2c:49:38:65:1a:e8:80:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bba0a02d5e9ba36e3712a7bc4858805ba5bbb0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5c:bc:c4:99:a7:60:12:d9:cc:55:f7:ab:57: ec:04:9e:18:e9:7e:09:07:ae:9a:9a:82:59:b3:78: dd:6b:c0:69:96:35:5d:1e:e9:c3:74:ef:16:ef:35: 3d:c7:41:83:c5:07:a7:43:b4:8b:8e:36:58:8e:bc: 46:7f:8c:24:21:06:19:e7:d3:d7:60:a5:f9:0b:7b: 57:dd:be:37:39:23:b1:9b:2d:ff:f4:17:ed:71:30: 2e:fa:b8:2e:db:62:21:f7:78:98:c8:b9:5e:9d:45: a9:ec:55:a9:b1:5b:c2:1d:04:36:e1:c6:48:59:ac: b9:28:d9:0e:1f:d1:5a:36:e5:83:2b:01:e8:d1:ba: ad:48:e4:ad:ef:57:c8:02:23:0e:78:2a:95:55:6e: 3a:69:7a:75:33:0f:c2:5c:59:df:56:d0:37:03:12: 4f:5f:e9:47:f8:2f:ac:1b:a8:f6:be:37:83:b0:06: 2f:c9:9c:d0:c6:9c:46:21:6c:4f:bd:be:72:42:d7: 35:61:46:84:bf:74:d8:e2:d8:7a:e2:4e:cf:5b:40: 97:cd:39:8c:07:7a:01:1d:ae:25:b4:82:cd:d0:4a: a2:5e:57:d9:f3:92:d5:4b:b0:ad:f2:c0:42:d7:c7: 7a:f9:1f:69:ab:ab:f6:b0:50:ab:9b:36:7b:77:09: c1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BA:0A:02:D5:E9:BA:36:E3:71:2A:7B:C4:85:88:05:BA:5B:BB:0A X509v3 Authority Key Identifier: keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/a7oKAtXpujbjcSp7xIWIBbpbuwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.122.0/23 IPv6: 2001:678:e28::/48 Signature Algorithm: sha256WithRSAEncryption 74:a0:4f:fd:d5:b0:65:27:2c:25:cd:5b:40:f7:03:07:3d:9c: bc:c3:7d:ee:32:8d:17:c5:b2:cf:e2:4f:2e:c3:7f:09:fe:d5: 00:0b:82:e1:14:75:16:96:2b:b1:c6:c3:a5:55:09:85:5b:34: ab:7c:eb:b3:15:c9:bd:66:b7:7d:3d:ec:8b:f6:d1:5f:e2:c6: 44:21:09:f4:80:bc:f8:e5:09:b5:cb:27:4b:2a:a8:62:41:2b: 4f:3f:5e:d5:56:c0:a6:66:bd:30:5a:6e:dc:49:fd:41:31:af: 45:d0:81:f5:e5:3c:56:34:84:f0:4a:24:ab:0b:97:1c:cb:a6: 6f:61:ea:7f:c9:b0:84:6f:6b:9d:c2:2c:11:19:91:52:4b:94: 46:df:34:3c:a6:dd:40:a8:79:d5:7a:44:3f:32:59:6a:f4:16: c5:72:f3:2a:3a:5e:df:93:ba:ed:6e:0b:b4:93:8c:2f:2c:75: 4d:d9:e2:03:0f:ad:db:e8:c4:b9:8d:ac:0f:eb:e7:04:b1:21: 79:49:cc:05:9d:d7:18:fe:9f:54:96:09:ba:aa:35:96:05:95: eb:e1:e0:61:e1:4a:82:0d:35:98:5c:f0:b2:ed:c6:b6:be:0c: 83:22:2d:2f:84:2e:a0:b5:51:80:1f:9f:7c:47:eb:e7:7b:16: 41:93:e7:d2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57VVhNjQtLixJOGUa6ICiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjU2MzIxZWI3ZWEzZWU0NWNkZWQwMjg2Njg0MjBlMzdm YTJmYWMwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmJhMGEwMmQ1ZTliYTM2ZTM3MTJhN2JjNDg1ODgwNWJhNWJiYjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ly8xJmnYBLZzFX3q1fsBJ4Y6X4J B66amoJZs3jda8BpljVdHunDdO8W7zU9x0GDxQenQ7SLjjZYjrxGf4wkIQYZ59PX YKX5C3tX3b43OSOxmy3/9BftcTAu+rgu22Ih93iYyLlenUWp7FWpsVvCHQQ24cZI Way5KNkOH9FaNuWDKwHo0bqtSOSt71fIAiMOeCqVVW46aXp1Mw/CXFnfVtA3AxJP X+lH+C+sG6j2vjeDsAYvyZzQxpxGIWxPvb5yQtc1YUaEv3TY4th64k7PW0CXzTmM B3oBHa4ltILN0EqiXlfZ85LVS7Ct8sBC18d6+R9pq6v2sFCrmzZ7dwnBBwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGu6CgLV6bo243Eqe8SFiAW6W7sKMB8GA1UdIwQY MBaAFFz1YyHrfqPuRc3tAoZoQg43+i+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODIt ODQzZTI2MmRkOGRjLzEvYTdvS0F0WHB1amJqY1NwN3hJV0lCYnBidXdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODItODQzZTI2MmRkOGRj LzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwkx6MA8E AgACMAkDBwAgAQZ4DigwDQYJKoZIhvcNAQELBQADggEBAHSgT/3VsGUnLCXNW0D3 Awc9nLzDfe4yjRfFss/iTy7Dfwn+1QALguEUdRaWK7HGw6VVCYVbNKt867MVyb1m t3097Iv20V/ixkQhCfSAvPjlCbXLJ0sqqGJBK08/XtVWwKZmvTBabtxJ/UExr0XQ gfXlPFY0hPBKJKsLlxzLpm9h6n/JsIRva53CLBEZkVJLlEbfNDym3UCoedV6RD8y WWr0FsVy8yo6Xt+Tuu1uC7STjC8sdU3Z4gMPrdvoxLmNrA/r5wSxIXlJzAWd1xj+ n1SWCbqqNZYFlevh4GHhSoINNZhc8LLtxra+DIMiLS+ELqC1UYAfn3xH6+d7FkGT 59I= -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:15 2026 by rpki-client