This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/oqUI-8PGNVmFA_M5R4fsLH6ZiRk.roa File: oqUI-8PGNVmFA_M5R4fsLH6ZiRk.roa (raw, json) Hash identifier: 4fovLfWRpSLz2X0DxYTBcpEpEP4cPQ62MemPJBVRYPI= Subject key identifier: A2:A5:08:FB:C3:C6:35:59:85:03:F3:39:47:87:EC:2C:7E:99:89:19 Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718 Certificate serial: 019B7F1502E799AE78FF1F69D7FB9055C770 Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/oqUI-8PGNVmFA_M5R4fsLH6ZiRk.roa Signing time: Fri 02 Jan 2026 14:20:42 +0000 ROA not before: Fri 02 Jan 2026 14:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8254 IP address blocks: 94.131.16.0/24 maxlen: 24 2a06:fcc0:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:02:e7:99:ae:78:ff:1f:69:d7:fb:90:55:c7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718 Validity Not Before: Jan 2 14:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2a508fbc3c635598503f3394787ec2c7e998919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:5e:c8:16:a5:8e:95:27:e8:0a:ff:30:95: 4a:1b:27:01:76:4f:74:62:c5:b0:1c:2a:aa:09:73: 95:24:d8:51:06:2a:a7:99:24:40:fb:29:90:eb:c5: 07:fe:79:fc:cc:b9:33:77:70:0b:be:4a:9b:a8:48: 1b:72:8d:52:4d:ed:79:4f:d2:d4:12:78:49:8c:1f: ee:33:2b:cc:2b:92:e9:8b:ce:89:ca:43:75:a5:16: aa:96:a0:7c:f5:4d:43:11:66:90:38:dd:ed:87:85: 29:87:aa:63:b4:ae:47:52:e7:6b:02:15:7d:1b:49: 55:28:06:1c:8d:7e:d0:46:c0:b7:f4:ee:bc:62:6d: f8:90:3c:ae:05:4b:87:52:02:7f:1d:0e:d6:a7:d1: 35:50:3e:b9:d3:8f:32:dd:28:d9:6f:bd:5e:3f:4b: ca:12:56:71:c2:e9:71:53:07:33:8c:93:e5:42:65: a9:16:7c:d6:7e:2e:3b:c9:b0:6c:b7:c0:57:c7:d8: ce:36:6f:33:e7:75:3b:3e:35:d2:87:eb:7d:6a:77: da:b7:76:d0:c0:cf:17:51:de:70:53:89:e1:de:d3: 55:e0:c2:a7:f8:a8:70:3e:ba:dc:c1:51:65:d4:c4: 72:a8:23:56:f7:2d:71:21:0a:bb:23:ac:6f:a7:37: aa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A5:08:FB:C3:C6:35:59:85:03:F3:39:47:87:EC:2C:7E:99:89:19 X509v3 Authority Key Identifier: keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/oqUI-8PGNVmFA_M5R4fsLH6ZiRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.131.16.0/24 IPv6: 2a06:fcc0:5::/48 Signature Algorithm: sha256WithRSAEncryption a2:35:bd:bc:f8:c8:a4:a5:0f:3d:6e:03:55:88:fc:ff:5a:e9: 56:17:bd:0a:d0:39:ed:72:c5:25:33:e1:6c:e3:a9:17:dd:17: 7c:99:bc:88:0e:e8:78:6d:d1:91:22:f6:7d:e8:1b:44:2e:1e: 3b:1b:4e:8d:8a:3a:92:d3:19:ed:6f:09:c5:f5:c2:82:c3:d1: e4:d6:88:dd:da:37:4d:b8:eb:6e:a9:4b:c7:df:83:6f:34:df: 7d:73:22:e4:c1:05:e0:13:c5:1c:7b:f2:2a:d5:09:ad:1f:be: 0b:2a:9a:ab:44:52:8d:f4:06:a4:e6:9b:6c:45:0c:09:52:89: 8f:5e:7d:2e:90:48:78:62:42:9e:7c:aa:cb:e2:91:0c:06:de: 78:80:19:14:d2:4e:70:2b:f0:e8:75:db:b9:e7:a3:f7:7d:b0: 66:89:11:46:28:5f:12:17:b1:d7:8e:53:a2:b0:e0:f0:ff:03: a2:d2:f5:05:5f:ac:48:ab:b1:40:eb:58:15:fb:5d:61:28:16: a9:ae:96:af:eb:da:2a:cd:e8:ee:dc:e7:c5:a3:5d:9d:71:76: 96:df:d7:9a:ea:1e:c9:2d:9b:6b:4b:7c:dd:31:41:c9:ec:7a: 48:6c:5e:43:77:6a:c5:e8:c1:56:9b:67:c5:2b:e0:5a:99:c5: f8:8c:4c:15 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FQLnma54/x9p1/uQVcdwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmY2NkZmZkYTZhNGM0ODkxNGI1ZThjZGU3ZGE1ZDgyMGI5 Yzk3MTgwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmE1MDhmYmMzYzYzNTU5ODUwM2YzMzk0Nzg3ZWMyYzdlOTk4OTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZpeyBaljpUn6Ar/MJVKGycBdk90 YsWwHCqqCXOVJNhRBiqnmSRA+ymQ68UH/nn8zLkzd3ALvkqbqEgbco1STe15T9LU EnhJjB/uMyvMK5Lpi86JykN1pRaqlqB89U1DEWaQON3th4Uph6pjtK5HUudrAhV9 G0lVKAYcjX7QRsC39O68Ym34kDyuBUuHUgJ/HQ7Wp9E1UD65048y3SjZb71eP0vK ElZxwulxUwczjJPlQmWpFnzWfi47ybBst8BXx9jONm8z53U7PjXSh+t9anfat3bQ wM8XUd5wU4nh3tNV4MKn+KhwPrrcwVFl1MRyqCNW9y1xIQq7I6xvpzeqcwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKKlCPvDxjVZhQPzOUeH7Cx+mYkZMB8GA1UdIwQY MBaAFG/M3/2mpMSJFLXozefaXYILnJcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQt YTc3NGU0MWQyNjRjLzEvb3FVSS04UEdOVm1GQV9NNVI0ZnNMSDZaaVJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQtYTc3NGU0MWQyNjRj LzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAXoMQMA8E AgACMAkDBwAqBvzAAAUwDQYJKoZIhvcNAQELBQADggEBAKI1vbz4yKSlDz1uA1WI /P9a6VYXvQrQOe1yxSUz4WzjqRfdF3yZvIgO6Hht0ZEi9n3oG0QuHjsbTo2KOpLT Ge1vCcX1woLD0eTWiN3aN024626pS8ffg280331zIuTBBeATxRx78irVCa0fvgsq mqtEUo30BqTmm2xFDAlSiY9efS6QSHhiQp58qsvikQwG3niAGRTSTnAr8Oh127nn o/d9sGaJEUYoXxIXsdeOU6Kw4PD/A6LS9QVfrEirsUDrWBX7XWEoFqmulq/r2irN 6O7c58WjXZ1xdpbf15rqHsktm2tLfN0xQcnsekhsXkN3asXowVabZ8Ur4FqZxfiM TBU= -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:15 2026 by rpki-client