This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/0QnIkefnuCyNADPWQDEt46KvHYY.roa File: 0QnIkefnuCyNADPWQDEt46KvHYY.roa (raw, json) Hash identifier: p4FaIxdfU/bMHE03Z6/6tIotfzDos7ZMc/SRmQ0vDVw= Subject key identifier: D1:09:C8:91:E7:E7:B8:2C:8D:00:33:D6:40:31:2D:E3:A2:AF:1D:86 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCAC236A328013E811CDA4D93E9CEC4 Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/0QnIkefnuCyNADPWQDEt46KvHYY.roa Signing time: Fri 02 Jan 2026 08:19:58 +0000 ROA not before: Fri 02 Jan 2026 08:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60077 IP address blocks: 194.225.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c2:36:a3:28:01:3e:81:1c:da:4d:93:e9:ce:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d109c891e7e7b82c8d0033d640312de3a2af1d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b2:27:5d:75:cf:07:98:99:6d:81:54:e4:ab: 51:08:fd:7e:b9:26:9d:92:3c:ea:96:97:2e:75:cd: 98:35:8d:51:a0:64:8f:4b:ee:45:33:3e:d3:ea:0d: 18:9b:cc:a0:14:e3:c8:f1:f7:34:e2:b6:ea:88:f6: 0e:fd:eb:60:8f:1b:b1:7f:c6:0f:ec:b5:36:5e:f1: 70:b7:21:2e:0d:14:29:e5:47:51:44:0d:09:08:3e: 59:ae:d9:c4:e5:c8:b6:6e:a5:39:74:39:2b:58:f3: f0:fe:8a:32:e1:ef:e7:c2:c7:8f:ca:b1:b1:ac:43: 0e:bd:ae:c2:8e:71:d7:d3:90:a6:64:9b:51:cd:df: cb:c3:05:e0:89:96:93:49:9e:7c:67:4d:2e:41:c6: 17:80:a8:54:05:c1:63:b5:b3:80:2e:70:77:be:04: 13:e7:23:fb:45:4d:4d:7e:e7:23:c4:53:f1:6a:7b: 68:75:34:87:a3:6e:ff:19:fa:42:3e:5f:4c:11:db: 4f:a0:e9:5b:7a:e1:df:88:32:d0:4a:a9:1d:99:f8: f4:e3:21:9b:01:71:36:90:cf:56:91:40:a3:99:68: b3:de:d7:0b:95:17:21:a0:49:fd:ae:c3:ab:2e:9d: 68:e8:bb:0a:d9:5e:d4:f3:a2:4d:5f:04:87:5e:56: 14:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:09:C8:91:E7:E7:B8:2C:8D:00:33:D6:40:31:2D:E3:A2:AF:1D:86 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/0QnIkefnuCyNADPWQDEt46KvHYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.225.130.0/23 Signature Algorithm: sha256WithRSAEncryption 91:a8:1d:63:33:31:52:3e:54:ca:07:2b:34:33:41:80:a0:da: 25:37:49:8f:26:16:4f:af:0f:28:15:e8:be:83:84:ab:56:b6: 60:ee:e5:6b:c5:7a:7c:95:1e:75:cd:cf:8e:ab:a1:52:02:b2: 00:2f:7f:39:3f:f9:14:11:d5:c0:c5:8c:73:6d:a7:ab:15:61: ba:4f:83:8c:48:12:81:2c:e3:89:d7:be:1f:cd:0b:8d:df:d4: cf:54:93:0c:25:3c:bd:52:ef:24:fc:d4:d6:e9:30:eb:ac:28: 82:1e:a4:69:21:cd:d6:df:0a:b1:64:0f:75:bb:a0:a1:f6:6b: 12:93:53:0f:b7:e5:d7:29:af:f1:20:48:b6:a9:02:2a:39:7b: 6d:44:36:a9:87:24:1a:9b:f9:d9:ff:98:50:0a:f5:b2:97:6b: 3b:ae:3a:ed:53:4f:fd:62:db:3b:57:2b:1f:3e:6c:d3:ed:d3: 25:35:b1:38:11:df:9c:85:f2:71:da:43:a4:15:e3:42:d1:62: f5:ac:4a:40:22:63:44:a8:20:c5:ae:e2:54:67:18:1d:95:a6: 67:80:7b:6b:ea:3c:d3:a2:d7:af:43:4d:e2:f7:34:33:a1:67: 38:03:9d:92:1a:79:4b:95:20:2e:d9:8e:f9:0a:83:49:d6:16: 29:96:5a:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ysI2oygBPoEc2k2T6c7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTA5Yzg5MWU3ZTdiODJjOGQwMDMzZDY0MDMxMmRlM2EyYWYxZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bInXXXPB5iZbYFU5KtRCP1+uSad kjzqlpcudc2YNY1RoGSPS+5FMz7T6g0Ym8ygFOPI8fc04rbqiPYO/etgjxuxf8YP 7LU2XvFwtyEuDRQp5UdRRA0JCD5ZrtnE5ci2bqU5dDkrWPPw/ooy4e/nwsePyrGx rEMOva7CjnHX05CmZJtRzd/LwwXgiZaTSZ58Z00uQcYXgKhUBcFjtbOALnB3vgQT 5yP7RU1NfucjxFPxantodTSHo27/GfpCPl9MEdtPoOlbeuHfiDLQSqkdmfj04yGb AXE2kM9WkUCjmWiz3tcLlRchoEn9rsOrLp1o6LsK2V7U86JNXwSHXlYU3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNEJyJHn57gsjQAz1kAxLeOirx2GMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvMFFuSWtlZm51Q3lOQURQV1FERXQ0Nkt2SFlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwuGCMA0G CSqGSIb3DQEBCwUAA4IBAQCRqB1jMzFSPlTKBys0M0GAoNolN0mPJhZPrw8oFei+ g4SrVrZg7uVrxXp8lR51zc+Oq6FSArIAL385P/kUEdXAxYxzbaerFWG6T4OMSBKB LOOJ174fzQuN39TPVJMMJTy9Uu8k/NTW6TDrrCiCHqRpIc3W3wqxZA91u6Ch9msS k1MPt+XXKa/xIEi2qQIqOXttRDaphyQam/nZ/5hQCvWyl2s7rjrtU0/9Yts7Vysf PmzT7dMlNbE4Ed+chfJx2kOkFeNC0WL1rEpAImNEqCDFruJUZxgdlaZngHtr6jzT otevQ03i9zQzoWc4A52SGnlLlSAu2Y75CoNJ1hYpllp3 -----END CERTIFICATE-----Generated at Mon Jan 26 01:17:21 2026 by rpki-client