This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Oo3ap3FWMfZFuKT_5X4cPgbvWBY.roa File: Oo3ap3FWMfZFuKT_5X4cPgbvWBY.roa (raw, json) Hash identifier: SClF6a/p5GxrqHhEbYnu5sljGKEXM6UG1fAy0VW6itY= Subject key identifier: 3A:8D:DA:A7:71:56:31:F6:45:B8:A4:FF:E5:7E:1C:3E:06:EF:58:16 Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3 Certificate serial: 019B7E38A9D2BABA3FCEAC05A48568D5C690 Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Oo3ap3FWMfZFuKT_5X4cPgbvWBY.roa Signing time: Fri 02 Jan 2026 10:20:01 +0000 ROA not before: Fri 02 Jan 2026 10:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 194.50.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a9:d2:ba:ba:3f:ce:ac:05:a4:85:68:d5:c6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3 Validity Not Before: Jan 2 10:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a8ddaa7715631f645b8a4ffe57e1c3e06ef5816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b1:51:b0:38:94:5e:ee:7c:5d:1e:e8:ba:73: eb:32:4b:c8:94:a1:f4:f9:3d:d8:f0:7e:d4:d9:37: 34:7d:a6:db:0e:4b:f6:fc:75:8b:a4:2a:9e:8d:95: 9b:3f:08:53:94:ea:ca:b6:60:f5:35:04:9d:1f:62: b7:05:00:05:bb:07:53:98:13:74:de:9d:3b:57:fe: c3:1f:be:e8:45:6e:9c:59:69:b3:e8:b1:1d:41:fb: a0:df:54:ef:42:c0:85:24:f5:e4:49:ea:76:b7:2d: 21:31:92:ae:de:c0:39:6d:93:d6:d8:87:c4:f2:f7: 4a:4e:29:14:4c:9c:cd:09:c8:df:b6:be:98:0c:e8: cb:12:3b:cc:00:fd:91:c8:22:81:a7:d7:6b:17:34: 37:4b:b9:74:f3:63:d0:4e:cc:08:03:10:8a:f3:12: 32:08:50:a5:63:49:84:79:db:88:7b:cc:dd:33:fc: 78:ff:99:c5:6a:3e:8f:a8:85:d0:a6:c9:fe:2a:0f: 9f:12:18:bc:20:f6:ff:27:e4:eb:30:0e:39:40:54: 61:ec:05:24:d9:f0:49:ca:24:ba:f1:f5:fc:c0:bd: ee:1d:27:91:a4:d8:d6:52:45:35:57:d7:a5:cb:7e: 6a:e1:6f:54:63:6f:ed:47:da:5c:fe:75:33:47:2f: a9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8D:DA:A7:71:56:31:F6:45:B8:A4:FF:E5:7E:1C:3E:06:EF:58:16 X509v3 Authority Key Identifier: keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Oo3ap3FWMfZFuKT_5X4cPgbvWBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.198.0/24 Signature Algorithm: sha256WithRSAEncryption 72:97:0c:01:f3:83:94:98:45:9a:0f:f4:3d:b4:69:ff:8c:9c: 19:14:12:43:3a:09:51:17:4d:1d:a0:f3:0f:2a:a0:54:73:79: d9:36:b1:c7:3d:ef:e3:56:45:e7:ae:90:d5:44:7b:d1:d2:03: dd:f6:09:e9:07:01:66:dc:46:58:b6:e8:71:7f:da:54:35:be: 39:d6:fd:bf:35:c2:3f:47:28:48:f4:ce:90:92:98:a7:93:86: f2:ea:9b:96:1a:5c:4b:f6:52:37:26:8e:98:75:71:5d:bc:88: 3d:1e:f6:c8:ad:67:ee:8d:9e:0e:78:5f:90:b4:75:5e:d5:eb: 9c:47:be:da:24:5e:d7:75:e5:4a:87:88:54:0a:b8:9a:1a:cc: 19:1b:3d:22:71:bd:eb:a3:ef:88:4d:da:e8:7d:65:f5:44:60: f6:c6:85:a7:16:65:4b:c6:ba:f2:d9:48:81:fc:d9:3d:a0:e3: af:f5:2f:87:1b:b5:ff:3c:61:0e:da:98:f9:4d:b8:0d:2c:d7: 1c:33:cd:ad:16:b6:2a:b1:c4:fd:1a:23:e9:5c:f1:06:4e:3f: d0:14:a1:d3:28:ed:62:2b:9d:46:89:22:e3:7f:26:98:33:24: 0a:ca:9f:3c:e0:d2:d8:90:c3:6d:d8:ae:40:88:bd:ee:6b:b9: 2c:69:b4:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OKnSuro/zqwFpIVo1caQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYzE2NTk1OTY2YWZiMGJhY2YxZDc5MzdmMjQ1ZDZhMDUy MjIxYTMwHhcNMjYwMTAyMTAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYThkZGFhNzcxNTYzMWY2NDViOGE0ZmZlNTdlMWMzZTA2ZWY1ODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLFRsDiUXu58XR7ounPrMkvIlKH0 +T3Y8H7U2Tc0fabbDkv2/HWLpCqejZWbPwhTlOrKtmD1NQSdH2K3BQAFuwdTmBN0 3p07V/7DH77oRW6cWWmz6LEdQfug31TvQsCFJPXkSep2ty0hMZKu3sA5bZPW2IfE 8vdKTikUTJzNCcjftr6YDOjLEjvMAP2RyCKBp9drFzQ3S7l082PQTswIAxCK8xIy CFClY0mEeduIe8zdM/x4/5nFaj6PqIXQpsn+Kg+fEhi8IPb/J+TrMA45QFRh7AUk 2fBJyiS68fX8wL3uHSeRpNjWUkU1V9ely35q4W9UY2/tR9pc/nUzRy+pkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDqN2qdxVjH2Rbik/+V+HD4G71gWMB8GA1UdIwQY MBaAFEPBZZWWavsLrPHXk38kXWoFIiGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kOTI5MTktOTYyYi00NDhkLTk4ZGIt NTk5MGVhNThlMDMwLzEvT28zYXAzRldNZlpGdUtUXzVYNGNQZ2J2V0JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kOTI5MTktOTYyYi00NDhkLTk4ZGItNTk5MGVhNThlMDMw LzEvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjLGMA0G CSqGSIb3DQEBCwUAA4IBAQBylwwB84OUmEWaD/Q9tGn/jJwZFBJDOglRF00doPMP KqBUc3nZNrHHPe/jVkXnrpDVRHvR0gPd9gnpBwFm3EZYtuhxf9pUNb451v2/NcI/ RyhI9M6Qkpink4by6puWGlxL9lI3Jo6YdXFdvIg9HvbIrWfujZ4OeF+QtHVe1euc R77aJF7XdeVKh4hUCriaGswZGz0icb3ro++ITdrofWX1RGD2xoWnFmVLxrry2UiB /Nk9oOOv9S+HG7X/PGEO2pj5TbgNLNccM82tFrYqscT9GiPpXPEGTj/QFKHTKO1i K51GiSLjfyaYMyQKyp884NLYkMNt2K5AiL3ua7ksabQV -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:12 2026 by rpki-client