This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/oPCuq54P2bsSATikpn82yn6-AEM.roa File: oPCuq54P2bsSATikpn82yn6-AEM.roa (raw, json) Hash identifier: lHLmqu6Ruee6ZqCasWZKuPLRXPXPUX8ZgrdyBMM4hU8= Subject key identifier: A0:F0:AE:AB:9E:0F:D9:BB:12:01:38:A4:A6:7F:36:CA:7E:BE:00:43 Certificate issuer: /CN=4c325637cd4de9afe53bd4f121abf62245f6714f Certificate serial: 019B7DCADC1AAFDE51065B496B12BE76E719 Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/oPCuq54P2bsSATikpn82yn6-AEM.roa Signing time: Fri 02 Jan 2026 08:20:05 +0000 ROA not before: Fri 02 Jan 2026 08:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42093 IP address blocks: 194.48.214.0/24 maxlen: 24 2001:67c:1724::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:dc:1a:af:de:51:06:5b:49:6b:12:be:76:e7:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f Validity Not Before: Jan 2 08:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0f0aeab9e0fd9bb120138a4a67f36ca7ebe0043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:a6:2b:4a:06:52:fd:ca:46:fe:24:1b:17: 10:c7:71:3a:d3:13:48:4c:aa:6e:12:b9:37:4b:73: 15:4d:a1:f3:a3:63:45:ff:bf:e1:6b:bc:ea:6d:24: 60:e6:40:5c:20:4d:61:f8:22:f5:da:7b:a9:07:37: 1a:a6:42:47:d4:dc:d5:38:90:b5:e0:a3:9c:e3:77: e7:42:d4:f9:28:58:f3:42:13:d6:95:73:e4:ea:30: bb:ba:9b:a8:1e:a2:50:b6:a5:f7:c5:d4:2f:be:46: 9c:9d:f1:db:e9:71:3d:13:ef:f9:15:ce:95:4d:90: a7:41:65:b7:25:c8:71:05:ab:05:10:2a:eb:ec:8f: 21:f0:7f:99:b4:75:b9:a2:d7:0e:f9:8e:4b:17:20: a3:9a:e3:99:6a:1d:a5:e3:a9:56:31:35:3f:6e:a2: 72:54:9e:85:fa:6b:bd:c1:46:52:ed:52:fc:ad:09: 48:2f:63:6d:35:82:1c:31:d1:be:e9:85:9a:12:28: 35:8d:4c:b3:92:31:f3:12:86:3b:d7:b1:7a:8d:e9: a2:5f:67:e1:bb:e0:79:59:fc:b4:9d:b6:ca:28:7f: 39:b4:68:7a:9a:6b:c7:0e:2a:51:3c:33:d0:75:43: cc:25:87:21:57:32:fa:6b:00:8a:4e:a3:56:6b:7b: 41:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F0:AE:AB:9E:0F:D9:BB:12:01:38:A4:A6:7F:36:CA:7E:BE:00:43 X509v3 Authority Key Identifier: keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/oPCuq54P2bsSATikpn82yn6-AEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.48.214.0/24 IPv6: 2001:67c:1724::/48 Signature Algorithm: sha256WithRSAEncryption 3b:b3:e0:41:80:28:ad:f2:6e:1b:36:3e:b3:26:57:1d:17:46: c1:bc:02:65:0b:1d:03:f8:8d:b3:7d:9f:1f:e0:01:8b:f4:85: 22:38:07:4d:1f:d4:0c:7e:17:d0:b3:d8:92:f3:26:40:83:48: 4b:18:b5:9a:5b:b8:51:4c:15:17:a5:0a:9c:74:4a:dc:34:64: 18:c6:d2:4c:0a:ee:13:ee:40:08:7f:b3:e1:44:3f:f4:b3:3d: 9f:db:54:37:74:34:d4:a4:46:12:da:e4:d4:eb:31:e7:10:4f: 55:b7:c0:3a:71:5e:0f:1e:02:d4:61:86:dd:58:d6:c6:5f:c7: e7:ab:1a:fb:61:35:08:00:10:c9:bf:66:96:11:a3:0a:cb:3d: 1e:dd:52:c7:9e:49:b4:7a:8d:29:15:b1:37:39:61:9a:76:b8: e7:5b:3b:41:84:53:d6:41:93:e2:2b:f6:2a:67:c3:29:8f:f0: 65:86:f2:5c:0b:e1:e8:ab:18:5e:24:85:b8:07:a9:04:03:4c: 53:68:9b:f5:ca:41:6a:eb:32:9f:90:66:37:3d:4c:35:4a:ec: 4d:14:f0:e1:4e:62:cc:14:51:da:bd:24:f3:47:a8:45:6e:3e: bb:66:64:89:d2:fe:f6:ee:bc:d3:78:73:33:3e:35:0b:0d:da: 07:cc:5c:9c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9ytwar95RBltJaxK+ducZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzI1NjM3Y2Q0ZGU5YWZlNTNiZDRmMTIxYWJmNjIyNDVm NjcxNGYwHhcNMjYwMTAyMDgyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGYwYWVhYjllMGZkOWJiMTIwMTM4YTRhNjdmMzZjYTdlYmUwMDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjumK0oGUv3KRv4kGxcQx3E60xNI TKpuErk3S3MVTaHzo2NF/7/ha7zqbSRg5kBcIE1h+CL12nupBzcapkJH1NzVOJC1 4KOc43fnQtT5KFjzQhPWlXPk6jC7upuoHqJQtqX3xdQvvkacnfHb6XE9E+/5Fc6V TZCnQWW3JchxBasFECrr7I8h8H+ZtHW5otcO+Y5LFyCjmuOZah2l46lWMTU/bqJy VJ6F+mu9wUZS7VL8rQlIL2NtNYIcMdG+6YWaEig1jUyzkjHzEoY717F6jemiX2fh u+B5Wfy0nbbKKH85tGh6mmvHDipRPDPQdUPMJYchVzL6awCKTqNWa3tB3wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKDwrqueD9m7EgE4pKZ/Nsp+vgBDMB8GA1UdIwQY MBaAFEwyVjfNTemv5TvU8SGr9iJF9nFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OTg0MTUtNDQ1ZS00NjhkLTlmOGUt ZDE5ODM5MjA2Y2U2LzEvb1BDdXE1NFAyYnNTQVRpa3BuODJ5bjYtQUVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OTg0MTUtNDQ1ZS00NjhkLTlmOGUtZDE5ODM5MjA2Y2U2 LzEvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwjDWMA8E AgACMAkDBwAgAQZ8FyQwDQYJKoZIhvcNAQELBQADggEBADuz4EGAKK3ybhs2PrMm Vx0XRsG8AmULHQP4jbN9nx/gAYv0hSI4B00f1Ax+F9Cz2JLzJkCDSEsYtZpbuFFM FRelCpx0Stw0ZBjG0kwK7hPuQAh/s+FEP/SzPZ/bVDd0NNSkRhLa5NTrMecQT1W3 wDpxXg8eAtRhht1Y1sZfx+erGvthNQgAEMm/ZpYRowrLPR7dUseeSbR6jSkVsTc5 YZp2uOdbO0GEU9ZBk+Ir9ipnwymP8GWG8lwL4eirGF4khbgHqQQDTFNom/XKQWrr Mp+QZjc9TDVK7E0U8OFOYswUUdq9JPNHqEVuPrtmZInS/vbuvNN4czM+NQsN2gfM XJw= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:08 2026 by rpki-client