This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/oAsWXs4gepUgdtyVum1Sl5zQ0yQ.roa File: oAsWXs4gepUgdtyVum1Sl5zQ0yQ.roa (raw, json) Hash identifier: On+gGjr8rTU+wqF8jInBbdR1DrtmCg/UcweFh0kLfjU= Subject key identifier: A0:0B:16:5E:CE:20:7A:95:20:76:DC:95:BA:6D:52:97:9C:D0:D3:24 Certificate issuer: /CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba Certificate serial: 019B7E3859EFFBE235C20FAB3B272A87CC90 Authority key identifier: 65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/oAsWXs4gepUgdtyVum1Sl5zQ0yQ.roa Signing time: Fri 02 Jan 2026 10:19:40 +0000 ROA not before: Fri 02 Jan 2026 10:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20570 IP address blocks: 194.93.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:59:ef:fb:e2:35:c2:0f:ab:3b:27:2a:87:cc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba Validity Not Before: Jan 2 10:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a00b165ece207a952076dc95ba6d52979cd0d324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b2:ba:b7:9b:60:2a:ab:ce:2b:96:1a:3c:43: 5e:e9:d4:c0:4c:40:a8:87:9e:f6:25:b6:1d:85:5e: b7:47:7e:b8:5e:89:2c:8d:a2:79:2b:0a:2e:7c:b8: 83:08:a9:62:56:58:10:09:35:11:20:e7:1b:56:90: 12:77:04:81:54:fd:8a:f1:00:f2:d4:e6:1c:f1:29: f1:50:37:17:7f:dc:a3:63:bc:39:4f:c4:e6:10:3c: 88:38:0c:2e:6a:90:6a:0e:3a:47:78:ef:5a:18:38: 3a:96:97:d8:6f:02:4f:48:0f:6a:69:68:cf:ef:5a: 3c:4e:12:ac:79:df:f5:81:bf:ad:c0:f1:93:46:61: 60:7f:dc:d5:40:71:6a:1c:ec:78:88:68:d8:6a:be: 6c:7d:4e:77:8b:9e:b6:a2:38:62:7a:63:11:b2:ab: 7e:8e:65:12:7e:ef:32:23:94:62:f5:d4:42:aa:ba: ca:54:78:5a:2a:b6:ec:a0:87:87:ed:ab:e8:35:4f: 02:04:a8:80:8b:fe:55:d6:38:43:89:2d:73:e9:ea: 94:9d:46:eb:56:d0:27:63:11:46:b9:82:39:ed:4e: 40:10:4c:83:4e:3f:c6:5d:ce:6d:ce:3a:ba:e0:4e: 04:33:2e:84:31:e9:b7:5b:43:5f:0b:6b:02:f1:ae: 63:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0B:16:5E:CE:20:7A:95:20:76:DC:95:BA:6D:52:97:9C:D0:D3:24 X509v3 Authority Key Identifier: keyid:65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/oAsWXs4gepUgdtyVum1Sl5zQ0yQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.93.96.0/24 Signature Algorithm: sha256WithRSAEncryption 38:34:17:86:0f:72:d0:26:20:44:8d:1e:d3:ab:8e:ec:5c:13: 04:a1:34:47:e9:02:4b:71:48:e7:f2:4e:ba:6e:47:00:84:9d: 81:35:2f:37:c6:00:d1:c8:bb:03:4f:4d:c4:1d:6a:ad:a6:e7: d3:4d:06:30:28:5f:48:d1:19:cb:a2:fd:d8:06:7d:d1:0c:fd: d8:c6:3b:1e:6f:ae:88:76:b4:17:8e:01:2e:e8:0d:08:03:8e: 03:09:f1:4f:69:23:a9:f0:e7:d1:9d:58:78:5a:8f:b3:07:a5: 01:d3:45:90:41:0e:ab:ef:c4:d4:d4:1a:a7:fe:d6:1b:d6:59: 8c:20:fb:4b:39:86:4a:ff:3a:68:ca:5f:b3:15:23:2c:7b:c7: 73:f0:03:2b:11:30:c7:d2:7d:e5:0e:0d:2e:bc:7d:a2:8f:b7: c6:6f:81:df:17:27:ce:78:e4:9d:54:ba:41:ed:2b:e1:43:bc: c2:70:03:e6:22:0c:53:dc:ae:d5:a6:c7:56:07:a9:8f:76:13: 51:37:f4:34:63:8c:d3:8f:f9:4d:f9:94:63:fc:a9:db:8f:4f: 8b:c0:59:a1:01:a5:53:83:eb:2d:7b:db:fe:38:8d:47:31:d4: 8d:65:4d:94:ca:b5:5d:e4:fe:6f:87:dc:99:1a:6a:da:46:5d: b4:72:a9:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OFnv++I1wg+rOycqh8yQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NTJkMmNiNWE5ZThkNTY4OWZhZDY3YTk2MDUxNDljNmQ1 ZWY3YmEwHhcNMjYwMTAyMTAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDBiMTY1ZWNlMjA3YTk1MjA3NmRjOTViYTZkNTI5NzljZDBkMzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbK6t5tgKqvOK5YaPENe6dTATECo h572JbYdhV63R364XoksjaJ5KwoufLiDCKliVlgQCTURIOcbVpASdwSBVP2K8QDy 1OYc8SnxUDcXf9yjY7w5T8TmEDyIOAwuapBqDjpHeO9aGDg6lpfYbwJPSA9qaWjP 71o8ThKsed/1gb+twPGTRmFgf9zVQHFqHOx4iGjYar5sfU53i562ojhiemMRsqt+ jmUSfu8yI5Ri9dRCqrrKVHhaKrbsoIeH7avoNU8CBKiAi/5V1jhDiS1z6eqUnUbr VtAnYxFGuYI57U5AEEyDTj/GXc5tzjq64E4EMy6EMem3W0NfC2sC8a5j9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKALFl7OIHqVIHbclbptUpec0NMkMB8GA1UdIwQY MBaAFGVS0stano1WifrWepYFFJxtXve6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlZMU3kxcWVqVmFKLXRaNmxnVVVuRzFlOTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kMWZhYzctN2M1Yi00ZmE2LWI3ZTUt OWE1ZDhiYTdkODAzLzEvb0FzV1hzNGdlcFVnZHR5VnVtMVNsNXpRMHlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9kMWZhYzctN2M1Yi00ZmE2LWI3ZTUtOWE1ZDhiYTdkODAz LzEvWlZMU3kxcWVqVmFKLXRaNmxnVVVuRzFlOTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwl1gMA0G CSqGSIb3DQEBCwUAA4IBAQA4NBeGD3LQJiBEjR7Tq47sXBMEoTRH6QJLcUjn8k66 bkcAhJ2BNS83xgDRyLsDT03EHWqtpufTTQYwKF9I0RnLov3YBn3RDP3Yxjseb66I drQXjgEu6A0IA44DCfFPaSOp8OfRnVh4Wo+zB6UB00WQQQ6r78TU1Bqn/tYb1lmM IPtLOYZK/zpoyl+zFSMse8dz8AMrETDH0n3lDg0uvH2ij7fGb4HfFyfOeOSdVLpB 7SvhQ7zCcAPmIgxT3K7VpsdWB6mPdhNRN/Q0Y4zTj/lN+ZRj/Knbj0+LwFmhAaVT g+ste9v+OI1HMdSNZU2UyrVd5P5vh9yZGmraRl20cqme -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:50 2026 by rpki-client