This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/lP0Otoi5FEsx4Sjn_XQp3w7krL4.roa File: lP0Otoi5FEsx4Sjn_XQp3w7krL4.roa (raw, json) Hash identifier: qcCySn5tj9h14UpAI2UnCKnAlV7VQfAi0DGrUD+71GM= Subject key identifier: 94:FD:0E:B6:88:B9:14:4B:31:E1:28:E7:FD:74:29:DF:0E:E4:AC:BE Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375 Certificate serial: 019BC8405ADC13BD00C17349A4323B8769BE Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/lP0Otoi5FEsx4Sjn_XQp3w7krL4.roa Signing time: Fri 16 Jan 2026 19:20:19 +0000 ROA not before: Fri 16 Jan 2026 19:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 188.64.16.0/24 maxlen: 24 188.64.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c8:40:5a:dc:13:bd:00:c1:73:49:a4:32:3b:87:69:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375 Validity Not Before: Jan 16 19:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94fd0eb688b9144b31e128e7fd7429df0ee4acbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:35:dd:b6:43:f3:71:b0:07:ee:07:81:63:b7: 0d:3d:ae:06:31:6e:08:38:ff:bf:d3:7b:aa:76:dc: da:90:99:1a:a6:39:d8:12:68:6b:0e:b8:be:45:75: cd:af:45:9e:26:d5:33:5a:25:dc:dc:b4:2f:19:d2: 3e:9e:d0:15:ed:d0:32:e7:8f:05:f0:3f:24:97:fa: 54:3a:98:ad:a8:7c:c0:d6:4e:67:c2:4d:da:1c:69: 57:34:55:ca:64:eb:b1:74:0a:62:f7:7c:c1:d4:b7: d2:8a:3f:66:28:68:6d:f9:3c:36:ee:c6:94:80:46: 93:44:74:d3:ef:6d:4d:c8:92:23:cb:9a:92:50:ba: 34:81:a9:6e:e1:29:6f:4e:d1:5b:9a:e4:c6:4a:f6: 5c:93:12:5d:0f:45:25:3d:a2:2a:d9:33:aa:b6:2e: dd:92:4d:da:e9:d8:7d:fd:b1:8d:79:af:68:e3:09: 96:7b:d8:2c:18:25:cd:5a:99:d0:0f:e9:2c:6a:bc: 97:2e:f7:a4:b3:17:8b:0c:a6:a6:b5:76:90:8d:7a: 3c:95:86:b2:14:8c:68:e2:86:6b:d8:42:18:4d:82: 17:33:a6:84:6f:f5:bd:a9:e9:7e:66:9a:87:18:95: 05:dd:f1:37:ba:fb:c9:0a:2b:3f:f3:6d:38:9d:69: f2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FD:0E:B6:88:B9:14:4B:31:E1:28:E7:FD:74:29:DF:0E:E4:AC:BE X509v3 Authority Key Identifier: keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/lP0Otoi5FEsx4Sjn_XQp3w7krL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.64.16.0/24 188.64.22.0/24 Signature Algorithm: sha256WithRSAEncryption 49:ee:0b:a4:3b:d3:ad:f8:9c:50:2b:b1:2e:14:78:c8:77:e3: dc:c8:f2:69:82:44:aa:aa:ee:a0:30:fc:e9:97:8e:01:30:ed: 20:34:62:42:63:b9:f4:96:d5:0d:71:c9:34:e9:ad:d0:e8:d9: 37:8f:f1:00:19:cb:1e:34:71:c7:5e:79:af:bf:16:19:bc:3b: 69:e9:76:0d:87:2c:e9:8a:00:65:23:fd:39:74:dc:08:d2:3a: 04:98:13:29:a1:9a:e5:be:8c:2b:9e:5b:2f:b5:01:fa:99:20: 2c:9e:61:62:9a:f7:4c:56:2f:f7:b2:8f:d5:44:6c:72:a4:bc: 57:8e:24:04:99:fb:38:21:5f:2c:14:e1:e9:22:d6:5c:df:d0: 12:d5:27:b2:83:d9:65:ec:d4:54:76:9a:93:ed:1d:5b:db:f0: 9b:46:24:94:75:86:34:3a:63:25:84:48:f3:b3:a6:51:dd:d4: 32:1f:ab:99:94:91:e3:4a:fe:0a:91:f8:9e:04:14:fc:3c:ea: 4b:c1:63:e2:de:00:80:f8:c9:9b:c4:0c:4c:d3:61:b9:37:e4: c1:b6:1c:d9:ad:f7:5b:4e:49:29:10:80:e9:ae:33:ce:44:65: 50:a7:08:a8:2f:96:59:ac:c9:3b:a6:db:4e:b4:85:20:6f:9a: c1:4c:7d:41 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvIQFrcE70AwXNJpDI7h2m+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjOWRjY2Y5ZTJmMzdlYjEwNzQ5NmE3YWFmMTM4OTRlYzQ3 NmUzNzUwHhcNMjYwMTE2MTkyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGZkMGViNjg4YjkxNDRiMzFlMTI4ZTdmZDc0MjlkZjBlZTRhY2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozXdtkPzcbAH7geBY7cNPa4GMW4I OP+/03uqdtzakJkapjnYEmhrDri+RXXNr0WeJtUzWiXc3LQvGdI+ntAV7dAy548F 8D8kl/pUOpitqHzA1k5nwk3aHGlXNFXKZOuxdApi93zB1LfSij9mKGht+Tw27saU gEaTRHTT721NyJIjy5qSULo0galu4SlvTtFbmuTGSvZckxJdD0UlPaIq2TOqti7d kk3a6dh9/bGNea9o4wmWe9gsGCXNWpnQD+ksaryXLveksxeLDKamtXaQjXo8lYay FIxo4oZr2EIYTYIXM6aEb/W9qel+ZpqHGJUF3fE3uvvJCis/8204nWnycwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJT9DraIuRRLMeEo5/10Kd8O5Ky+MB8GA1UdIwQY MBaAFIydzPni836xB0lqeq8TiU7EduN1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEt NmE4YzNiNjc2YjU3LzEvbFAwT3RvaTVGRXN4NFNqbl9YUXAzdzdrckw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEtNmE4YzNiNjc2YjU3 LzEvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvEAQAwQA vEAWMA0GCSqGSIb3DQEBCwUAA4IBAQBJ7gukO9Ot+JxQK7EuFHjId+PcyPJpgkSq qu6gMPzpl44BMO0gNGJCY7n0ltUNcck06a3Q6Nk3j/EAGcseNHHHXnmvvxYZvDtp 6XYNhyzpigBlI/05dNwI0joEmBMpoZrlvowrnlsvtQH6mSAsnmFimvdMVi/3so/V RGxypLxXjiQEmfs4IV8sFOHpItZc39AS1Seyg9ll7NRUdpqT7R1b2/CbRiSUdYY0 OmMlhEjzs6ZR3dQyH6uZlJHjSv4KkfieBBT8POpLwWPi3gCA+MmbxAxM02G5N+TB thzZrfdbTkkpEIDprjPORGVQpwioL5ZZrMk7pttOtIUgb5rBTH1B -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:58 2026 by rpki-client