This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FOovXjMUPVN5DYFOgDzGTfLBu8M.roa File: FOovXjMUPVN5DYFOgDzGTfLBu8M.roa (raw, json) Hash identifier: Q4hg5YtWPZqnoTMhS02ZguUOC80z2wVOLiGqjcjSju4= Subject key identifier: 14:EA:2F:5E:33:14:3D:53:79:0D:81:4E:80:3C:C6:4D:F2:C1:BB:C3 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78344BD154236F3BEAC4EBDD5DE487DE Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FOovXjMUPVN5DYFOgDzGTfLBu8M.roa Signing time: Thu 01 Jan 2026 06:17:31 +0000 ROA not before: Thu 01 Jan 2026 06:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20513 IP address blocks: 194.71.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4b:d1:54:23:6f:3b:ea:c4:eb:dd:5d:e4:87:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14ea2f5e33143d53790d814e803cc64df2c1bbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:26:de:ae:d5:3a:9b:95:ea:7b:70:77:a3:0d: 7d:4f:12:14:29:bb:f3:5d:98:59:65:0a:48:48:dd: 79:b9:f5:af:4a:29:6c:14:8c:9e:f5:d8:86:b4:07: 3b:ae:82:e5:a7:f9:b1:41:2c:9e:8e:b6:86:7f:43: eb:50:6a:ad:99:87:e3:ba:e3:42:e8:c6:2a:31:12: 71:e2:1a:04:8f:a5:e3:fb:8d:3e:f8:f4:21:1d:19: 50:35:82:a5:fa:e5:56:da:bb:7e:ed:1d:eb:2c:2a: 69:b2:ad:f3:6a:54:55:1d:a1:a5:27:54:60:d4:01: b2:be:46:a3:c5:aa:ba:82:07:f2:3f:f4:c3:63:0f: 83:d3:ea:18:cb:af:0e:b5:91:3c:e8:cb:9f:57:00: 7b:2a:57:2a:dd:d7:da:aa:57:9a:a2:28:dd:59:6f: d7:d2:44:b2:d6:71:81:19:b5:41:34:03:08:47:bd: f3:95:f2:9f:4b:58:86:9f:6a:32:f3:4b:85:cc:1a: 1b:f0:ca:4a:72:95:83:df:ab:0a:1e:c9:cc:8f:e2: 6e:20:32:b3:37:26:6c:03:06:07:f0:46:44:64:da: 09:a2:d8:f0:b7:9d:30:8c:4e:11:87:0e:43:d0:60: 37:c3:94:6d:e1:8a:65:c6:26:03:51:a2:e4:75:fe: f0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EA:2F:5E:33:14:3D:53:79:0D:81:4E:80:3C:C6:4D:F2:C1:BB:C3 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FOovXjMUPVN5DYFOgDzGTfLBu8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.71.188.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:33:5f:13:2e:97:81:40:41:07:5d:2c:1f:36:6e:9d:91:5f: 4a:4c:3e:85:08:24:26:80:b2:14:8a:67:65:68:51:c7:59:64: 33:3b:81:61:93:ad:bb:5f:ba:24:4c:be:2b:95:1d:ca:48:4b: b1:21:bb:08:71:87:9f:65:4a:02:41:cf:76:dc:d4:0e:fe:65: fb:4f:dd:b5:be:27:8c:3e:95:fd:02:45:a6:e4:1b:60:e2:fc: 6b:ea:5a:62:32:13:f7:7a:ce:9b:4a:c9:54:0d:e4:56:9f:0b: cb:4c:85:d6:75:63:96:29:60:ae:7c:28:25:c4:3e:1c:2a:3a: f1:84:72:c8:a3:b9:a2:57:4f:0a:e1:a0:14:88:58:0c:59:20: 25:3a:46:3b:92:14:53:78:ba:2a:9e:e1:fa:ed:bd:95:04:ed: 14:6d:c5:4c:78:80:d5:bb:90:69:e9:cc:d6:b8:fc:3b:c7:17: c1:86:fd:a4:cf:47:b0:e0:14:0c:c4:83:3d:e3:88:05:22:97: b7:5e:8c:2a:4c:69:27:6c:48:f7:e8:2d:31:73:b0:1c:35:9a: 82:9b:a9:b7:f3:f0:32:04:90:82:93:8f:d8:71:50:d5:66:2a: 93:6b:69:ab:b6:57:14:73:c7:9c:9e:3a:6e:02:03:5d:a5:8b: 07:2c:13:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEvRVCNvO+rE691d5IfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGVhMmY1ZTMzMTQzZDUzNzkwZDgxNGU4MDNjYzY0ZGYyYzFiYmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSbertU6m5Xqe3B3ow19TxIUKbvz XZhZZQpISN15ufWvSilsFIye9diGtAc7roLlp/mxQSyejraGf0PrUGqtmYfjuuNC 6MYqMRJx4hoEj6Xj+40++PQhHRlQNYKl+uVW2rt+7R3rLCppsq3zalRVHaGlJ1Rg 1AGyvkajxaq6ggfyP/TDYw+D0+oYy68OtZE86MufVwB7Klcq3dfaqleaoijdWW/X 0kSy1nGBGbVBNAMIR73zlfKfS1iGn2oy80uFzBob8MpKcpWD36sKHsnMj+JuIDKz NyZsAwYH8EZEZNoJotjwt50wjE4Rhw5D0GA3w5Rt4YplxiYDUaLkdf7wwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBTqL14zFD1TeQ2BToA8xk3ywbvDMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvRk9vdlhqTVVQVk41RFlGT2dEekdUZkxCdThNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwke8MA0G CSqGSIb3DQEBCwUAA4IBAQB+M18TLpeBQEEHXSwfNm6dkV9KTD6FCCQmgLIUimdl aFHHWWQzO4Fhk627X7okTL4rlR3KSEuxIbsIcYefZUoCQc923NQO/mX7T921vieM PpX9AkWm5Btg4vxr6lpiMhP3es6bSslUDeRWnwvLTIXWdWOWKWCufCglxD4cKjrx hHLIo7miV08K4aAUiFgMWSAlOkY7khRTeLoqnuH67b2VBO0UbcVMeIDVu5Bp6czW uPw7xxfBhv2kz0ew4BQMxIM944gFIpe3XowqTGknbEj36C0xc7AcNZqCm6m38/Ay BJCCk4/YcVDVZiqTa2mrtlcUc8ecnjpuAgNdpYsHLBPN -----END CERTIFICATE-----Generated at Sun Jan 25 09:41:03 2026 by rpki-client