This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/0ekA97_3VRQ08hV0uz6EOhaN0DE.roa File: 0ekA97_3VRQ08hV0uz6EOhaN0DE.roa (raw, json) Hash identifier: rD08lKhny8O0yJf+dMzirJji6WJRCtgenWrivGjxIr0= Subject key identifier: D1:E9:00:F7:BF:F7:55:14:34:F2:15:74:BB:3E:84:3A:16:8D:D0:31 Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e Certificate serial: 019B7A5B8B40410CF99C300CF420ED0DBB2D Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/0ekA97_3VRQ08hV0uz6EOhaN0DE.roa Signing time: Thu 01 Jan 2026 16:19:38 +0000 ROA not before: Thu 01 Jan 2026 16:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201011 IP address blocks: 91.194.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8b:40:41:0c:f9:9c:30:0c:f4:20:ed:0d:bb:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e Validity Not Before: Jan 1 16:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1e900f7bff7551434f21574bb3e843a168dd031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ac:d0:3b:cc:35:0e:9c:de:8c:d1:61:7f:bd: fa:bf:e2:7c:8e:b4:08:f3:1d:05:6b:3b:d2:aa:6b: ea:fd:94:71:15:da:d7:34:6d:98:34:ab:1d:25:38: 5f:b7:6c:86:1e:10:d6:bf:bb:54:c2:7c:92:4a:50: d9:21:64:f5:c2:a5:f7:6e:cf:88:8b:90:f4:b2:b5: d5:5e:e5:41:55:d6:18:da:68:27:6f:60:99:38:0d: 30:da:8f:5b:80:19:12:90:9e:92:80:d9:73:18:b0: d2:ae:90:6a:8c:43:94:a9:85:cc:1a:d1:72:16:69: b4:c7:f0:d6:60:0a:6c:16:55:aa:35:73:56:2c:16: ef:40:c4:09:56:c7:6b:3c:22:f8:a5:33:d9:40:d4: ca:44:a0:66:a0:35:32:18:e3:37:fc:8c:80:3a:fb: ce:35:f4:08:14:f6:b1:5b:a5:dc:40:8f:90:a9:82: 20:0d:4c:ac:b6:43:dd:76:d0:f2:80:78:3a:dc:cc: 07:3e:10:dc:c9:1f:b1:e4:77:2b:f8:b3:95:dc:5b: f9:33:ab:5d:01:2d:bc:94:05:b5:db:0e:5a:82:84: e4:75:10:a7:96:26:e8:c4:78:63:ee:62:9a:eb:6b: 23:e2:4e:d9:b0:40:c6:6e:f0:84:32:23:bb:6e:8c: ec:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E9:00:F7:BF:F7:55:14:34:F2:15:74:BB:3E:84:3A:16:8D:D0:31 X509v3 Authority Key Identifier: keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/0ekA97_3VRQ08hV0uz6EOhaN0DE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.237.0/24 Signature Algorithm: sha256WithRSAEncryption 44:eb:0e:f4:1d:5c:29:e4:bf:fe:50:09:8c:03:e3:5d:0c:8c: 44:81:d6:8a:d7:61:67:87:c4:6c:a8:2d:08:10:99:d0:f7:1d: 4e:e1:68:82:c8:69:15:9d:87:71:dd:f1:47:8c:41:b6:0a:95: 49:c8:ba:c8:24:ab:64:59:08:ed:d9:3d:f1:97:6f:5b:02:ac: 70:af:5c:10:8c:e2:21:37:24:04:2f:c2:78:ce:e1:42:8e:2e: d2:b8:38:8f:1f:c5:e4:f6:b1:4b:d7:bd:47:17:55:4f:6f:74: ec:44:6c:e9:42:0a:10:70:c8:43:08:bf:c5:86:65:31:5a:71: 52:20:f1:a2:db:04:9c:d8:99:32:43:75:3a:74:77:6d:be:41: 83:b9:01:f8:d0:59:21:bd:4c:25:68:56:fb:8f:ea:a6:d7:e5: e7:d1:df:65:1f:1c:df:88:50:74:d4:cb:1d:96:bb:3f:08:4a: b8:f9:b6:8d:b8:a0:b5:3a:6b:ea:30:46:6f:f9:08:f1:2c:61: 33:d4:55:45:bc:50:34:ff:3a:df:6a:a1:a9:0a:5a:d3:36:93: 38:2a:1b:e2:2d:c1:a6:51:e7:ea:20:43:09:b4:83:8b:f0:4c: 9a:28:2a:ac:87:e2:4a:bc:34:7e:27:03:8c:c4:20:ba:f2:7f: c0:cf:14:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W4tAQQz5nDAM9CDtDbstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYzAzMTU4YWVkODExNjFkNGY1N2MxNzQyZDQ2MDgzNDE3 M2E3OWUwHhcNMjYwMTAxMTYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWU5MDBmN2JmZjc1NTE0MzRmMjE1NzRiYjNlODQzYTE2OGRkMDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6zQO8w1DpzejNFhf736v+J8jrQI 8x0FazvSqmvq/ZRxFdrXNG2YNKsdJThft2yGHhDWv7tUwnySSlDZIWT1wqX3bs+I i5D0srXVXuVBVdYY2mgnb2CZOA0w2o9bgBkSkJ6SgNlzGLDSrpBqjEOUqYXMGtFy Fmm0x/DWYApsFlWqNXNWLBbvQMQJVsdrPCL4pTPZQNTKRKBmoDUyGOM3/IyAOvvO NfQIFPaxW6XcQI+QqYIgDUystkPddtDygHg63MwHPhDcyR+x5Hcr+LOV3Fv5M6td AS28lAW12w5agoTkdRCnliboxHhj7mKa62sj4k7ZsEDGbvCEMiO7bozsiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNHpAPe/91UUNPIVdLs+hDoWjdAxMB8GA1UdIwQY MBaAFKPAMViu2BFh1PV8F0LUYINBc6eeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzhBeFdLN1lFV0hVOVh3WFF0UmdnMEZ6cDU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iNjY0MjktNGYyMC00YjkwLWE2Yjgt NGMxMGUzMzYwNTc3LzEvMGVrQTk3XzNWUlEwOGhWMHV6NkVPaGFOMERFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9iNjY0MjktNGYyMC00YjkwLWE2YjgtNGMxMGUzMzYwNTc3 LzEvbzhBeFdLN1lFV0hVOVh3WFF0UmdnMEZ6cDU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8LtMA0G CSqGSIb3DQEBCwUAA4IBAQBE6w70HVwp5L/+UAmMA+NdDIxEgdaK12Fnh8RsqC0I EJnQ9x1O4WiCyGkVnYdx3fFHjEG2CpVJyLrIJKtkWQjt2T3xl29bAqxwr1wQjOIh NyQEL8J4zuFCji7SuDiPH8Xk9rFL171HF1VPb3TsRGzpQgoQcMhDCL/FhmUxWnFS IPGi2wSc2JkyQ3U6dHdtvkGDuQH40FkhvUwlaFb7j+qm1+Xn0d9lHxzfiFB01Msd lrs/CEq4+baNuKC1OmvqMEZv+QjxLGEz1FVFvFA0/zrfaqGpClrTNpM4KhviLcGm UefqIEMJtIOL8EyaKCqsh+JKvDR+JwOMxCC68n/AzxTG -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:44 2026 by rpki-client