This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/qOowaPdAtIoEeA8UwWKl0WeOo_E.roa File: qOowaPdAtIoEeA8UwWKl0WeOo_E.roa (raw, json) Hash identifier: qf6D/9fKMsy5vRBqrt+Mp9eken3A/z5tlK1SkhHLKO8= Subject key identifier: A8:EA:30:68:F7:40:B4:8A:04:78:0F:14:C1:62:A5:D1:67:8E:A3:F1 Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb Certificate serial: 019B7758D18EB6657CB90C6E3D19A49EFD0C Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/qOowaPdAtIoEeA8UwWKl0WeOo_E.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2200 IP address blocks: 145.238.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d1:8e:b6:65:7c:b9:0c:6e:3d:19:a4:9e:fd:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8ea3068f740b48a04780f14c162a5d1678ea3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:66:fa:82:b1:d6:4c:6e:dd:f1:3f:aa:40:b6: 72:6f:77:35:3e:c5:04:6c:6e:7e:08:6a:50:4f:4b: 2d:21:fa:6e:d8:c3:a7:9e:d7:f0:0c:3b:ec:b1:61: d2:15:03:27:49:54:6a:2a:6c:0b:62:5f:33:e5:21: fe:d6:8f:fe:1b:15:81:9f:65:85:bf:07:bb:d7:71: 2c:2e:8b:cc:43:83:b3:fe:33:dd:44:73:cc:8c:b2: b7:da:b3:3f:e4:46:ba:59:92:01:3d:c5:04:59:99: 98:6a:4e:2e:77:09:ba:43:b1:62:29:9a:cb:a5:dd: 85:cc:ab:75:3f:33:6e:4a:a9:b8:5c:73:56:ed:92: f3:e9:cb:a0:17:8b:42:bd:9d:66:1b:80:95:06:54: f6:ea:af:d9:e4:70:43:75:ca:90:e1:a9:8a:46:11: d6:eb:1c:58:33:dc:ba:46:a8:a6:3e:70:06:7e:6f: 6a:d4:9b:09:2b:13:56:e0:0c:aa:ad:c1:9a:02:2a: b5:99:b7:b6:01:c6:30:6f:49:58:8f:50:7c:d4:18: 21:a2:73:69:fb:07:ca:cd:8c:96:24:c9:78:9b:ef: c7:23:b3:de:f9:0b:a9:5d:08:f6:b0:38:c4:a3:6f: 2c:4f:c1:3e:2f:ac:46:3e:7c:28:03:6e:a0:52:74: b6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EA:30:68:F7:40:B4:8A:04:78:0F:14:C1:62:A5:D1:67:8E:A3:F1 X509v3 Authority Key Identifier: keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/qOowaPdAtIoEeA8UwWKl0WeOo_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.238.0.0/16 Signature Algorithm: sha256WithRSAEncryption 18:6b:0f:df:a6:b9:36:ce:2a:a1:e4:e1:d3:5c:e4:02:4a:6f: 64:c8:31:61:88:f6:21:a5:ca:39:f8:81:e3:f7:4e:47:fe:47: 42:da:8f:a0:a7:28:34:dc:5a:2f:0f:6d:58:cc:a7:9f:f0:d3: 8c:cf:33:b4:11:ef:d9:cb:01:fb:2c:32:d4:56:c7:57:50:11: 54:d4:0d:cf:db:27:59:80:93:00:67:a5:80:94:2d:7c:a2:cf: a3:26:b5:5e:7a:af:13:e8:5c:54:c2:43:95:63:a8:59:0d:61: ae:3f:f9:e7:98:d9:53:60:8e:6d:5f:15:fb:81:74:3a:f4:e4: ab:a8:c4:52:a2:56:58:e3:37:bd:d1:f1:86:4a:23:71:75:29: f8:8f:f7:02:08:77:fd:47:79:8a:68:19:25:da:43:3b:00:72: e4:82:7c:ab:b7:c9:e0:36:df:7c:c1:d3:f0:d9:8a:95:52:8a: 3f:88:8b:c5:bf:40:04:b1:a3:a0:8f:63:6f:c8:b1:20:c1:7a: 5d:6f:35:70:29:40:36:c6:f7:1d:2f:a3:6a:59:13:a2:07:e4: e6:d3:10:04:97:d7:4a:1a:fd:14:6a:62:5d:63:57:a1:59:e4: 23:f0:41:71:2a:82:a9:b6:71:73:5f:2a:a2:72:ab:48:37:8e: 3e:e4:d5:d8 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt3WNGOtmV8uQxuPRmknv0MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZTQwNTllNTE5ZTdjYWQwNTM2YmQ1NGQ5MWJjOTc4NzU2 NDRjZGIwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGVhMzA2OGY3NDBiNDhhMDQ3ODBmMTRjMTYyYTVkMTY3OGVhM2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2b6grHWTG7d8T+qQLZyb3c1PsUE bG5+CGpQT0stIfpu2MOnntfwDDvssWHSFQMnSVRqKmwLYl8z5SH+1o/+GxWBn2WF vwe713EsLovMQ4Oz/jPdRHPMjLK32rM/5Ea6WZIBPcUEWZmYak4udwm6Q7FiKZrL pd2FzKt1PzNuSqm4XHNW7ZLz6cugF4tCvZ1mG4CVBlT26q/Z5HBDdcqQ4amKRhHW 6xxYM9y6RqimPnAGfm9q1JsJKxNW4AyqrcGaAiq1mbe2AcYwb0lYj1B81BghonNp +wfKzYyWJMl4m+/HI7Pe+QupXQj2sDjEo28sT8E+L6xGPnwoA26gUnS2pQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFKjqMGj3QLSKBHgPFMFipdFnjqPxMB8GA1UdIwQY MBaAFDnkBZ5RnnytBTa9VNkbyXh1ZEzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYt ODRlNTk2YTNjMTIxLzEvcU9vd2FQZEF0SW9FZUE4VXdXS2wwV2VPb19FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYtODRlNTk2YTNjMTIx LzEvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAke4wDQYJ KoZIhvcNAQELBQADggEBABhrD9+muTbOKqHk4dNc5AJKb2TIMWGI9iGlyjn4geP3 Tkf+R0Laj6CnKDTcWi8PbVjMp5/w04zPM7QR79nLAfssMtRWx1dQEVTUDc/bJ1mA kwBnpYCULXyiz6MmtV56rxPoXFTCQ5VjqFkNYa4/+eeY2VNgjm1fFfuBdDr05Kuo xFKiVljjN73R8YZKI3F1KfiP9wIId/1HeYpoGSXaQzsAcuSCfKu3yeA233zB0/DZ ipVSij+Ii8W/QASxo6CPY2/IsSDBel1vNXApQDbG9x0vo2pZE6IH5ObTEASX10oa /RRqYl1jV6FZ5CPwQXEqgqm2cXNfKqJyq0g3jj7k1dg= -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:43 2026 by rpki-client