This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/oPF4cC5Drz5sLj5BBwawrzW5jXo.roa File: oPF4cC5Drz5sLj5BBwawrzW5jXo.roa (raw, json) Hash identifier: EzqkrfsSG6h+o/B7Wz4RFsWwVq4nne4BmDJzoUBxrww= Subject key identifier: A0:F1:78:70:2E:43:AF:3E:6C:2E:3E:41:07:06:B0:AF:35:B9:8D:7A Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15CE6A569DF78CADF1CE591AD2BC34 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/oPF4cC5Drz5sLj5BBwawrzW5jXo.roa Signing time: Fri 02 Jan 2026 14:21:34 +0000 ROA not before: Fri 02 Jan 2026 14:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214128 IP address blocks: 88.214.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ce:6a:56:9d:f7:8c:ad:f1:ce:59:1a:d2:bc:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0f178702e43af3e6c2e3e410706b0af35b98d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:66:de:cd:9b:19:1b:2d:73:f6:b8:8e:e1:48: 65:22:e5:ea:65:e1:a3:82:3c:7b:18:68:fc:76:a8: 6b:df:60:df:61:dc:a3:84:c6:6b:ff:e1:04:52:0e: b8:14:47:84:a5:fc:b5:47:cf:a2:8e:20:9d:3d:a3: 60:2d:38:f7:dd:54:ec:ff:95:f3:ff:9b:1a:de:cf: 54:0d:cb:44:5e:ad:fc:29:41:35:a2:59:b7:63:90: c2:31:52:ce:50:20:95:54:79:39:c8:7b:1f:f4:35: fd:09:6f:be:6f:b0:c0:fc:6c:9d:56:b0:d1:c0:83: 87:59:81:5a:e3:f4:2a:66:4c:6d:76:ff:49:64:6e: 2b:6d:fb:b1:66:37:84:e9:69:3b:8e:fd:58:27:ea: 1b:70:20:8c:93:b6:39:a9:2f:01:f4:e2:02:2a:03: 00:ac:fa:9f:5a:f4:44:7a:41:88:27:8d:33:88:9e: 37:53:67:a6:0e:ec:22:ae:b8:f7:c0:dc:f3:5c:57: 78:07:62:e8:92:72:32:98:e5:3e:73:7a:dd:4b:a4: c8:4a:6d:98:b0:4a:f9:9d:18:75:26:d5:d8:7d:9e: 95:11:92:64:22:41:fd:70:25:b2:fb:fa:d2:a0:53: da:4a:d5:ab:3d:91:a6:61:a3:9e:fd:64:29:8e:49: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F1:78:70:2E:43:AF:3E:6C:2E:3E:41:07:06:B0:AF:35:B9:8D:7A X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/oPF4cC5Drz5sLj5BBwawrzW5jXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.214.55.0/24 Signature Algorithm: sha256WithRSAEncryption 25:bf:a3:48:58:0d:46:60:71:d1:4b:c8:55:0a:a7:5a:e2:74: b9:28:b8:aa:22:b2:75:cf:03:e6:32:57:24:b6:66:63:fd:10: f2:43:04:6a:30:e9:94:00:c2:0e:a9:a1:63:d7:6c:87:90:97: 31:9d:79:10:b1:d5:7d:c7:09:19:04:bb:ce:57:6f:26:66:9a: e4:ac:46:c0:61:c8:d0:cd:fc:65:47:99:bf:cc:f9:b2:22:7a: dc:9d:c5:79:2c:90:a7:dc:70:a7:ae:14:66:4a:41:9e:70:98: 48:30:a7:b0:c1:ab:34:62:ea:ad:b9:ea:5e:78:ba:27:f7:56: 51:09:81:11:a4:34:0a:32:07:5d:8c:3f:52:ab:48:e4:dc:24: d5:fe:2a:59:ac:c6:4b:88:5d:52:95:99:27:f7:e7:0b:5a:d5: d8:19:77:fb:87:32:8d:93:21:fb:41:0a:22:62:f7:bf:0f:80: e8:e9:5c:21:bf:7d:37:76:6f:ed:6e:27:8f:3b:2c:cb:16:da: 84:5a:2c:79:73:5a:dc:16:8f:15:ec:e6:71:f6:b2:8e:cb:e7: a8:b6:9f:bb:a2:26:e7:6c:41:55:be:08:98:9c:05:6f:65:c1: 6c:2c:10:7f:98:a4:de:2b:3d:4f:d5:e4:f7:64:ae:dc:cf:86: 1e:2d:a0:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fc5qVp33jK3xzlka0rw0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGYxNzg3MDJlNDNhZjNlNmMyZTNlNDEwNzA2YjBhZjM1Yjk4ZDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmbezZsZGy1z9riO4UhlIuXqZeGj gjx7GGj8dqhr32DfYdyjhMZr/+EEUg64FEeEpfy1R8+ijiCdPaNgLTj33VTs/5Xz /5sa3s9UDctEXq38KUE1olm3Y5DCMVLOUCCVVHk5yHsf9DX9CW++b7DA/GydVrDR wIOHWYFa4/QqZkxtdv9JZG4rbfuxZjeE6Wk7jv1YJ+obcCCMk7Y5qS8B9OICKgMA rPqfWvREekGIJ40ziJ43U2emDuwirrj3wNzzXFd4B2LoknIymOU+c3rdS6TISm2Y sEr5nRh1JtXYfZ6VEZJkIkH9cCWy+/rSoFPaStWrPZGmYaOe/WQpjkk54wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKDxeHAuQ68+bC4+QQcGsK81uY16MB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvb1BGNGNDNURyejVzTGo1QkJ3YXdyelc1alhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNY3MA0G CSqGSIb3DQEBCwUAA4IBAQAlv6NIWA1GYHHRS8hVCqda4nS5KLiqIrJ1zwPmMlck tmZj/RDyQwRqMOmUAMIOqaFj12yHkJcxnXkQsdV9xwkZBLvOV28mZprkrEbAYcjQ zfxlR5m/zPmyInrcncV5LJCn3HCnrhRmSkGecJhIMKewwas0YuqtuepeeLon91ZR CYERpDQKMgddjD9Sq0jk3CTV/ipZrMZLiF1SlZkn9+cLWtXYGXf7hzKNkyH7QQoi Yve/D4Do6Vwhv303dm/tbiePOyzLFtqEWix5c1rcFo8V7OZx9rKOy+eotp+7oibn bEFVvgiYnAVvZcFsLBB/mKTeKz1P1eT3ZK7cz4YeLaAt -----END CERTIFICATE-----Generated at Sun Jan 25 13:05:51 2026 by rpki-client