This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qOoJseflRKTNV5OE7LkDrUoWnZw.roa File: qOoJseflRKTNV5OE7LkDrUoWnZw.roa (raw, json) Hash identifier: Np1p8Ym9NStHRuEYDJX7WlNTRKvH/MEWYMWuZIZsk5Y= Subject key identifier: A8:EA:09:B1:E7:E5:44:A4:CD:57:93:84:EC:B9:03:AD:4A:16:9D:9C Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C7682B6C63ECBC36393E4661D7C5A1 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qOoJseflRKTNV5OE7LkDrUoWnZw.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35000 IP address blocks: 195.144.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:68:2b:6c:63:ec:bc:36:39:3e:46:61:d7:c5:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8ea09b1e7e544a4cd579384ecb903ad4a169d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:54:ce:f0:1e:99:82:fd:ec:a2:67:1c:9f: 8a:e4:4e:f1:39:c4:bb:e0:44:68:56:44:84:db:47: 7c:63:a9:d4:d7:b5:0c:dc:7c:6b:15:d1:5f:bb:44: 77:8b:0e:ed:51:ce:d0:4d:be:02:fb:3c:62:11:66: de:6f:51:28:c0:ac:94:af:fb:ca:1c:8e:55:25:98: 39:f4:8a:88:87:ec:86:47:cb:4f:ed:9f:9b:65:38: de:87:29:35:f7:36:8f:e9:29:9e:95:f7:6d:6c:1a: 58:50:c1:d2:5f:5b:83:39:00:d0:68:1c:9f:bb:ff: a4:45:84:2e:74:b9:2e:98:96:06:35:f2:24:24:d6: ec:d9:67:87:f7:cf:b6:88:ee:c8:06:d3:5d:0f:20: 6a:3f:32:4e:8d:8e:e9:89:d9:d5:60:c5:a9:c6:f7: 32:27:a9:40:2e:95:6d:9a:ca:65:16:cd:19:bb:aa: ae:77:34:c2:d8:51:99:13:d8:60:da:68:2d:27:85: 8b:4c:c7:55:bf:42:3f:ae:59:91:09:f0:ab:77:92: 0e:2d:f0:3b:0f:27:ed:90:48:0f:a5:a5:14:51:f5: 58:f7:80:6d:9e:1c:22:e2:67:2c:5f:53:f5:db:fa: 8a:fe:cf:57:71:6f:e3:10:2f:84:51:74:f1:db:65: bf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EA:09:B1:E7:E5:44:A4:CD:57:93:84:EC:B9:03:AD:4A:16:9D:9C X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/qOoJseflRKTNV5OE7LkDrUoWnZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.144.243.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:75:67:07:0d:b2:00:d1:3a:ea:4b:a7:e1:af:cb:8b:bd:8a: 95:26:d1:10:46:6a:40:a3:64:1b:b2:70:8f:7b:73:5a:39:f2: dd:bc:3d:e6:35:03:07:46:05:cc:56:1d:89:2b:7e:a0:a8:d5: 4a:3e:ec:f5:fd:bd:d4:35:f8:85:a9:d5:e9:bc:83:9d:89:c2: 33:10:14:02:a9:71:ce:79:dc:68:6d:27:d8:db:7e:8c:1c:0b: d6:67:8a:b4:55:52:10:f0:54:3d:c0:85:2d:7e:40:67:8d:d0: 22:f7:3d:07:99:48:b0:33:da:a2:c5:a6:61:f8:5f:f5:a3:03: 2a:b7:99:58:28:aa:dd:a5:87:0f:c7:db:e5:ca:e7:ac:c5:a5: 24:e5:8a:e2:34:89:f2:47:f4:31:f8:df:e5:60:56:5f:6c:4f: aa:d5:25:b2:3b:1f:aa:e1:66:5d:07:9d:68:f8:e5:a8:2e:35: 07:72:de:9e:97:a6:c5:cf:32:64:d9:c8:9f:e5:2e:42:5f:86: 54:a7:55:63:45:ea:4e:8b:70:a3:02:f5:19:dd:09:dd:dc:98: 91:71:55:5e:86:79:05:ca:23:6e:db:83:c4:1c:1a:ab:c5:89: 69:1f:86:9a:ab:3f:42:3a:18:c1:5a:cb:e7:52:c1:82:3b:f1: 1a:cc:70:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2grbGPsvDY5PkZh18WhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGVhMDliMWU3ZTU0NGE0Y2Q1NzkzODRlY2I5MDNhZDRhMTY5ZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJdUzvAemYL97KJnHJ+K5E7xOcS7 4ERoVkSE20d8Y6nU17UM3HxrFdFfu0R3iw7tUc7QTb4C+zxiEWbeb1EowKyUr/vK HI5VJZg59IqIh+yGR8tP7Z+bZTjehyk19zaP6SmelfdtbBpYUMHSX1uDOQDQaByf u/+kRYQudLkumJYGNfIkJNbs2WeH98+2iO7IBtNdDyBqPzJOjY7pidnVYMWpxvcy J6lALpVtmsplFs0Zu6qudzTC2FGZE9hg2mgtJ4WLTMdVv0I/rlmRCfCrd5IOLfA7 DyftkEgPpaUUUfVY94Btnhwi4mcsX1P12/qK/s9XcW/jEC+EUXTx22W/tQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKjqCbHn5USkzVeThOy5A61KFp2cMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvcU9vSnNlZmxSS1ROVjVPRTdMa0RyVW9Xblp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5DzMA0G CSqGSIb3DQEBCwUAA4IBAQAcdWcHDbIA0TrqS6fhr8uLvYqVJtEQRmpAo2QbsnCP e3NaOfLdvD3mNQMHRgXMVh2JK36gqNVKPuz1/b3UNfiFqdXpvIOdicIzEBQCqXHO edxobSfY236MHAvWZ4q0VVIQ8FQ9wIUtfkBnjdAi9z0HmUiwM9qixaZh+F/1owMq t5lYKKrdpYcPx9vlyuesxaUk5YriNInyR/Qx+N/lYFZfbE+q1SWyOx+q4WZdB51o +OWoLjUHct6el6bFzzJk2cif5S5CX4ZUp1VjRepOi3CjAvUZ3Qnd3JiRcVVehnkF yiNu24PEHBqrxYlpH4aaqz9COhjBWsvnUsGCO/EazHAA -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:20 2026 by rpki-client