This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/OpTwdj69eMigXueWV1BOB2dxLbA.roa File: OpTwdj69eMigXueWV1BOB2dxLbA.roa (raw, json) Hash identifier: 2kgLJoiz6VCqwiPbikEb5+NrvRferle8wU/FOd3hfZM= Subject key identifier: 3A:94:F0:76:3E:BD:78:C8:A0:5E:E7:96:57:50:4E:07:67:71:2D:B0 Certificate issuer: /CN=1534838bb317b8186699f0a4485db6d9da1908d2 Certificate serial: 019B7E385097161F99DED897F25C8C67C3FB Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/OpTwdj69eMigXueWV1BOB2dxLbA.roa Signing time: Fri 02 Jan 2026 10:19:38 +0000 ROA not before: Fri 02 Jan 2026 10:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51966 IP address blocks: 194.0.23.0/24 maxlen: 24 2001:678:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:50:97:16:1f:99:de:d8:97:f2:5c:8c:67:c3:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2 Validity Not Before: Jan 2 10:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a94f0763ebd78c8a05ee79657504e0767712db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:49:53:a6:3e:37:b3:bc:a3:bf:5e:cf:5e: 16:f3:b0:da:93:28:5d:76:41:f4:bd:91:13:29:e5: fa:d9:08:16:c7:01:f0:1a:07:ab:b8:f5:fc:20:f0: 9b:cc:10:69:3e:f8:cf:bc:b3:fa:a2:d4:95:bf:50: 3d:43:c6:35:d1:ad:89:32:fe:3f:2c:a8:d7:bc:8f: 8b:a8:42:9c:77:95:60:b3:0f:a8:1c:f6:30:ed:7d: da:4f:fe:fc:1e:5c:32:bc:8d:e1:95:db:0d:1c:77: 22:75:43:ff:70:0e:e1:2d:b7:27:aa:d4:6e:01:46: 16:b0:86:5d:b7:56:ee:83:93:37:73:d4:e8:78:83: 2f:4a:b5:72:7f:5d:69:1a:b5:b3:13:4b:98:41:e0: e8:74:3c:84:49:e6:26:c9:a1:c8:88:74:bf:49:69: 55:1b:d8:54:7a:f1:65:60:ab:c2:8e:dc:a5:70:19: bf:b3:5b:e5:28:42:04:b6:a2:6a:f2:3d:3c:26:04: 19:c2:68:21:dd:df:b5:df:71:ba:f1:8d:32:b6:7c: c7:2c:f3:61:c8:46:18:0e:2b:ba:15:1d:70:a6:84: 21:25:9a:b9:7b:cb:38:95:cf:f4:d0:3c:29:1b:63: 03:01:84:5a:64:6f:29:9b:fb:e7:7d:e3:69:73:8b: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:94:F0:76:3E:BD:78:C8:A0:5E:E7:96:57:50:4E:07:67:71:2D:B0 X509v3 Authority Key Identifier: keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/OpTwdj69eMigXueWV1BOB2dxLbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.23.0/24 IPv6: 2001:678:1b::/48 Signature Algorithm: sha256WithRSAEncryption 36:64:e3:21:74:b3:b7:04:29:e3:70:2b:95:e0:a4:20:09:cc: 3e:13:e8:5a:69:8e:23:68:0f:8d:d5:ec:fb:39:ad:c1:cd:98: af:c4:67:68:8a:1e:86:7d:9f:16:e9:5b:7a:fb:c2:c0:43:7b: 53:4b:1a:50:99:cf:62:1a:78:2a:14:64:7c:d4:66:8d:62:31: eb:54:3f:f5:c0:c3:05:39:17:f5:f3:6c:6c:22:e3:cc:fd:28: 1d:21:72:10:19:d7:6f:48:42:2b:7d:04:3a:71:0c:a3:03:c6: 2c:e6:dc:ca:28:91:e0:79:28:43:b5:09:bd:ef:a2:1d:32:1e: 46:c7:d3:c6:6b:10:e7:ed:4a:5c:44:4c:b9:9d:73:0a:e2:94: ec:a2:5b:09:38:5b:da:1c:49:5f:2c:3b:a5:89:7f:f5:74:34: 1d:ed:c7:87:b8:42:74:a6:bb:00:21:17:0d:89:5f:0f:f8:5a: 9f:40:b6:c1:01:d3:b0:e5:7d:ee:b1:57:79:11:50:39:08:81: f2:06:ca:cc:dd:d8:6f:5a:24:12:87:fb:4d:46:d5:42:a2:53: 59:cb:6a:0b:f8:68:55:bd:49:fe:72:bb:63:09:f3:02:dc:81: bc:b2:36:22:11:1a:e6:cf:d6:b0:ae:d9:68:14:27:5a:e9:1a: 89:83:52:a8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OFCXFh+Z3tiX8lyMZ8P7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MzQ4MzhiYjMxN2I4MTg2Njk5ZjBhNDQ4NWRiNmQ5ZGEx OTA4ZDIwHhcNMjYwMTAyMTAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTk0ZjA3NjNlYmQ3OGM4YTA1ZWU3OTY1NzUwNGUwNzY3NzEyZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnJJU6Y+N7O8o79ez14W87Dakyhd dkH0vZETKeX62QgWxwHwGgeruPX8IPCbzBBpPvjPvLP6otSVv1A9Q8Y10a2JMv4/ LKjXvI+LqEKcd5Vgsw+oHPYw7X3aT/78HlwyvI3hldsNHHcidUP/cA7hLbcnqtRu AUYWsIZdt1bug5M3c9ToeIMvSrVyf11pGrWzE0uYQeDodDyESeYmyaHIiHS/SWlV G9hUevFlYKvCjtylcBm/s1vlKEIEtqJq8j08JgQZwmgh3d+133G68Y0ytnzHLPNh yEYYDiu6FR1wpoQhJZq5e8s4lc/00DwpG2MDAYRaZG8pm/vnfeNpc4sG9QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDqU8HY+vXjIoF7nlldQTgdncS2wMB8GA1UdIwQY MBaAFBU0g4uzF7gYZpnwpEhdttnaGQjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlRTRGk3TVh1QmhtbWZDa1NGMjIyZG9aQ05JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNGMxY2EtMTg3NC00N2FjLWExOGUt M2ExNDRjNzBlMGIwLzEvT3BUd2RqNjllTWlnWHVlV1YxQk9CMmR4TGJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xNGMxY2EtMTg3NC00N2FjLWExOGUtM2ExNDRjNzBlMGIw LzEvRlRTRGk3TVh1QmhtbWZDa1NGMjIyZG9aQ05JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgAXMA8E AgACMAkDBwAgAQZ4ABswDQYJKoZIhvcNAQELBQADggEBADZk4yF0s7cEKeNwK5Xg pCAJzD4T6FppjiNoD43V7Ps5rcHNmK/EZ2iKHoZ9nxbpW3r7wsBDe1NLGlCZz2Ia eCoUZHzUZo1iMetUP/XAwwU5F/XzbGwi48z9KB0hchAZ129IQit9BDpxDKMDxizm 3MookeB5KEO1Cb3voh0yHkbH08ZrEOftSlxETLmdcwrilOyiWwk4W9ocSV8sO6WJ f/V0NB3tx4e4QnSmuwAhFw2JXw/4Wp9AtsEB07Dlfe6xV3kRUDkIgfIGyszd2G9a JBKH+01G1UKiU1nLagv4aFW9Sf5yu2MJ8wLcgbyyNiIRGubP1rCu2WgUJ1rpGomD Uqg= -----END CERTIFICATE-----Generated at Sun Jan 25 18:41:58 2026 by rpki-client