This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/oJ7mg0Skc1TPbaAf8JVEuf2GmxY.roa File: oJ7mg0Skc1TPbaAf8JVEuf2GmxY.roa (raw, json) Hash identifier: Kcp7e66VbgmjHJFlZwdRCM4aHhG4oTWDRzXk2Vy002s= Subject key identifier: A0:9E:E6:83:44:A4:73:54:CF:6D:A0:1F:F0:95:44:B9:FD:86:9B:16 Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd Certificate serial: 019B7EA62A216A133BCBA3E724AF13B27D23 Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/oJ7mg0Skc1TPbaAf8JVEuf2GmxY.roa Signing time: Fri 02 Jan 2026 12:19:37 +0000 ROA not before: Fri 02 Jan 2026 12:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201550 IP address blocks: 178.253.96.0/23 maxlen: 23 194.135.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:2a:21:6a:13:3b:cb:a3:e7:24:af:13:b2:7d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd Validity Not Before: Jan 2 12:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a09ee68344a47354cf6da01ff09544b9fd869b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7e:5a:6a:8d:37:82:43:47:ef:b0:d6:42:fd: ea:74:70:d9:5e:3a:c4:41:dc:f6:b0:0f:31:21:1d: 6b:4d:87:81:12:2d:21:aa:28:9b:ad:b7:14:73:d5: 2b:f5:28:98:c0:ab:d5:2c:cf:68:7b:c6:fc:1c:ba: 0b:8c:24:12:d8:ce:99:f4:b9:73:84:14:7c:e7:58: 40:ff:8e:1d:03:c2:8e:30:01:7a:21:d4:ce:00:92: 9c:c4:a4:21:0b:e3:8e:52:6f:78:ea:82:c3:d2:b0: 0f:03:0f:1b:48:a3:cd:36:9d:6c:92:29:af:f6:2d: d1:a3:be:c7:74:f2:9c:b1:d6:37:2e:33:bd:48:f5: 53:27:38:a8:0c:f1:a6:6d:3e:77:fc:0d:e5:c9:4e: c9:d5:18:00:f9:c1:5c:a3:1e:f5:4a:d8:2d:16:3c: 9f:9c:8e:82:4c:cc:1c:a9:e6:55:4d:4d:37:e0:14: 29:d7:20:bf:5d:02:bc:ac:62:dc:cc:81:14:eb:74: 8b:a0:f5:f4:70:5c:c3:e7:7f:83:5e:89:81:ce:6d: 90:d9:dd:38:52:45:52:f5:36:f0:3a:ff:b2:97:70: ad:ea:af:f1:dc:37:d5:ba:f1:f2:29:1e:76:56:29: 54:0e:1f:86:f5:59:f9:5c:3b:e3:93:0f:cc:7e:4a: 81:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9E:E6:83:44:A4:73:54:CF:6D:A0:1F:F0:95:44:B9:FD:86:9B:16 X509v3 Authority Key Identifier: keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/oJ7mg0Skc1TPbaAf8JVEuf2GmxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.253.96.0/23 194.135.106.0/23 Signature Algorithm: sha256WithRSAEncryption 49:10:ea:cd:c0:c5:5f:20:c7:28:b9:fd:db:8e:98:1a:c6:62: d3:84:84:5f:a6:aa:f8:be:cf:58:7a:e6:96:7c:11:72:a7:d9: b7:55:d2:b2:e2:76:82:e6:01:d7:60:84:1a:26:59:0e:c7:82: 17:3f:d4:28:d1:26:bb:fa:a1:63:4c:3c:da:8b:ae:d2:56:ff: 3d:fb:0d:d8:00:3c:50:19:6f:9e:2b:86:af:a5:d3:52:0a:a6: 4f:d6:67:4a:1a:da:eb:23:18:cb:42:b6:c9:84:64:d1:25:3c: 5b:c3:b9:c7:e9:4d:44:c3:87:0a:d9:a6:7b:24:04:4d:fa:3b: 67:59:f9:a8:db:d0:08:e0:f4:9a:4e:94:b6:dc:32:ed:f5:78: 37:95:8f:b4:48:3d:92:87:43:9e:5b:d9:c9:ca:9a:97:c7:01: ff:1b:22:d9:dd:92:bc:ef:ce:ce:d4:91:b3:37:cd:3e:75:5f: d2:9f:ac:93:2b:b8:51:0f:5f:63:0c:b4:f2:fd:02:51:df:2a: 00:81:94:2d:6c:29:0f:d8:4b:ed:bf:7a:db:af:ac:e2:0a:f9: ad:de:2f:ba:1a:1f:29:16:4e:cb:f6:80:b3:90:d8:c7:56:60: 20:2f:70:d7:92:1c:35:90:06:5a:41:30:74:82:39:45:d4:88: f2:1e:ec:20 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+piohahM7y6PnJK8Tsn0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyODM2OTY3MTZkYmNjMzYwYjlhNjJlZjdkODRiNGQyOGY5 NThiZGQwHhcNMjYwMTAyMTIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDllZTY4MzQ0YTQ3MzU0Y2Y2ZGEwMWZmMDk1NDRiOWZkODY5YjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun5aao03gkNH77DWQv3qdHDZXjrE Qdz2sA8xIR1rTYeBEi0hqiibrbcUc9Ur9SiYwKvVLM9oe8b8HLoLjCQS2M6Z9Llz hBR851hA/44dA8KOMAF6IdTOAJKcxKQhC+OOUm946oLD0rAPAw8bSKPNNp1skimv 9i3Ro77HdPKcsdY3LjO9SPVTJzioDPGmbT53/A3lyU7J1RgA+cFcox71StgtFjyf nI6CTMwcqeZVTU034BQp1yC/XQK8rGLczIEU63SLoPX0cFzD53+DXomBzm2Q2d04 UkVS9TbwOv+yl3Ct6q/x3DfVuvHyKR52VilUDh+G9Vn5XDvjkw/MfkqBgwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKCe5oNEpHNUz22gH/CVRLn9hpsWMB8GA1UdIwQY MBaAFEKDaWcW28w2C5pi732EtNKPlYvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW9OcFp4YmJ6RFlMbW1MdmZZUzAwby1WaTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81NDQyY2UtNDhiYy00MTY0LTkzNTAt OTI0MGQ5Zjc1YWU2LzEvb0o3bWcwU2tjMVRQYmFBZjhKVkV1ZjJHbXhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS81NDQyY2UtNDhiYy00MTY0LTkzNTAtOTI0MGQ5Zjc1YWU2 LzEvUW9OcFp4YmJ6RFlMbW1MdmZZUzAwby1WaTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBsv1gAwQB wodqMA0GCSqGSIb3DQEBCwUAA4IBAQBJEOrNwMVfIMcouf3bjpgaxmLThIRfpqr4 vs9YeuaWfBFyp9m3VdKy4naC5gHXYIQaJlkOx4IXP9Qo0Sa7+qFjTDzai67SVv89 +w3YADxQGW+eK4avpdNSCqZP1mdKGtrrIxjLQrbJhGTRJTxbw7nH6U1Ew4cK2aZ7 JARN+jtnWfmo29AI4PSaTpS23DLt9Xg3lY+0SD2Sh0OeW9nJypqXxwH/GyLZ3ZK8 787O1JGzN80+dV/Sn6yTK7hRD19jDLTy/QJR3yoAgZQtbCkP2Evtv3rbr6ziCvmt 3i+6Gh8pFk7L9oCzkNjHVmAgL3DXkhw1kAZaQTB0gjlF1IjyHuwg -----END CERTIFICATE-----Generated at Mon Jan 26 05:54:24 2026 by rpki-client