This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/OpdDMo8Cp988IQdFH-astgl9hzE.roa File: OpdDMo8Cp988IQdFH-astgl9hzE.roa (raw, json) Hash identifier: Nf3Kn5VC0A0Dtv20MogIVytEl5Z6pgrh2zjqqaobSxw= Subject key identifier: 3A:97:43:32:8F:02:A7:DF:3C:21:07:45:1F:E6:AC:B6:09:7D:87:31 Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed Certificate serial: 019B7BA543E6BB6F0619A20B984BA4472813 Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/OpdDMo8Cp988IQdFH-astgl9hzE.roa Signing time: Thu 01 Jan 2026 22:19:47 +0000 ROA not before: Thu 01 Jan 2026 22:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29533 IP address blocks: 194.146.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:43:e6:bb:6f:06:19:a2:0b:98:4b:a4:47:28:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a9743328f02a7df3c2107451fe6acb6097d8731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ac:79:a3:32:fe:c8:09:2d:90:79:25:7d:a9: af:4e:58:8e:4f:2b:64:ca:85:18:ea:69:21:8f:77: 23:12:96:f9:46:94:61:cb:ef:33:67:3a:4d:3e:20: 99:df:2c:fe:40:0a:8a:a4:82:13:f6:55:f8:db:39: 2a:43:9d:84:64:f1:c7:02:47:47:96:64:7a:54:da: 11:2e:ca:b1:ed:60:37:8a:65:46:09:b6:aa:65:4c: 1d:51:02:ee:16:34:9e:5d:a4:52:19:40:2e:f6:b7: 75:79:93:fe:43:75:dc:ee:9e:68:06:df:42:2a:d4: 21:c4:59:26:56:54:cc:ee:cc:8c:78:d3:b5:81:d4: b6:82:6b:bb:16:d8:a6:13:40:7a:ab:6a:bf:f0:99: 0e:d0:95:1d:6b:58:19:4e:fd:f4:8a:8c:3d:55:fd: b6:4c:73:50:6d:7a:c0:ec:03:e3:16:6a:ba:19:5a: 8e:cc:bb:16:cd:a6:4f:d6:82:f7:4a:ee:1e:79:4c: a5:2b:40:89:dc:aa:e0:49:9f:7b:50:eb:5b:68:b8: 1c:8a:59:9d:e2:9f:0b:11:d3:d3:4f:49:e5:8f:ea: ff:8a:00:52:dc:23:4e:13:69:95:9e:53:7d:44:35: e3:bb:e0:3f:92:e6:16:ad:f8:56:9e:e4:35:29:ae: b1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:97:43:32:8F:02:A7:DF:3C:21:07:45:1F:E6:AC:B6:09:7D:87:31 X509v3 Authority Key Identifier: keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/OpdDMo8Cp988IQdFH-astgl9hzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.146.121.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:99:0f:1a:eb:cb:e5:98:86:56:24:82:9d:0b:b7:6b:37:df: 15:22:db:49:d5:f9:9e:96:97:fe:b4:5e:76:40:bc:9e:26:ae: bb:25:e5:af:63:35:08:8a:fa:e4:0f:e6:a0:53:6f:43:14:28: 03:7a:10:a6:cc:c4:13:62:6d:31:2c:79:c9:98:ae:29:76:6e: 1b:53:af:a7:96:0a:d7:be:41:f2:3d:d0:21:c7:2b:1e:bb:09: 8d:c9:19:12:99:cf:71:00:5f:50:32:31:4d:46:f0:85:07:61: c9:c5:16:1f:69:07:6d:1b:e3:84:bc:59:19:e5:47:18:0f:ac: f7:5c:bc:04:29:4b:dd:eb:a0:b0:ec:de:4b:82:74:a3:14:d0: 1e:06:13:40:c0:f2:85:11:aa:44:ee:03:d5:59:fd:80:b5:3d: 13:3f:b4:ce:7f:32:86:aa:07:ec:8f:32:57:56:43:23:17:8d: 3e:d0:aa:d2:32:6e:e8:e0:a9:00:c3:9b:ca:81:2e:35:d6:de: e0:18:bb:3b:ef:2e:ae:df:21:3e:a1:21:67:0b:24:b9:ae:e1: 2e:d2:50:9e:cc:63:07:c8:18:d4:23:87:d7:3e:8b:dc:32:08: 55:f3:fd:40:67:1d:ea:85:7d:b4:72:bf:b5:4d:97:d0:c8:9e: 3f:59:68:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUPmu28GGaILmEukRygTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZWZiNDlkZjI0NzRhNjA0MmI5ZjIxMGJmZWE4NjFiMWIy ODg2ZWQwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTk3NDMzMjhmMDJhN2RmM2MyMTA3NDUxZmU2YWNiNjA5N2Q4NzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qx5ozL+yAktkHklfamvTliOTytk yoUY6mkhj3cjEpb5RpRhy+8zZzpNPiCZ3yz+QAqKpIIT9lX42zkqQ52EZPHHAkdH lmR6VNoRLsqx7WA3imVGCbaqZUwdUQLuFjSeXaRSGUAu9rd1eZP+Q3Xc7p5oBt9C KtQhxFkmVlTM7syMeNO1gdS2gmu7FtimE0B6q2q/8JkO0JUda1gZTv30iow9Vf22 THNQbXrA7APjFmq6GVqOzLsWzaZP1oL3Su4eeUylK0CJ3KrgSZ97UOtbaLgcilmd 4p8LEdPTT0nlj+r/igBS3CNOE2mVnlN9RDXju+A/kuYWrfhWnuQ1Ka6x+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDqXQzKPAqffPCEHRR/mrLYJfYcxMB8GA1UdIwQY MBaAFIbvtJ3yR0pgQrnyEL/qhhsbKIbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MzUxODQtNzc5MS00YjU0LWI5Yjgt OTViMjcxZjJlMjBiLzEvT3BkRE1vOENwOTg4SVFkRkgtYXN0Z2w5aHpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80MzUxODQtNzc5MS00YjU0LWI5YjgtOTViMjcxZjJlMjBi LzEvaHUtMG5mSkhTbUJDdWZJUXYtcUdHeHNvaHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpJ5MA0G CSqGSIb3DQEBCwUAA4IBAQAKmQ8a68vlmIZWJIKdC7drN98VIttJ1fmelpf+tF52 QLyeJq67JeWvYzUIivrkD+agU29DFCgDehCmzMQTYm0xLHnJmK4pdm4bU6+nlgrX vkHyPdAhxyseuwmNyRkSmc9xAF9QMjFNRvCFB2HJxRYfaQdtG+OEvFkZ5UcYD6z3 XLwEKUvd66Cw7N5LgnSjFNAeBhNAwPKFEapE7gPVWf2AtT0TP7TOfzKGqgfsjzJX VkMjF40+0KrSMm7o4KkAw5vKgS411t7gGLs77y6u3yE+oSFnCyS5ruEu0lCezGMH yBjUI4fXPovcMghV8/1AZx3qhX20cr+1TZfQyJ4/WWjt -----END CERTIFICATE-----Generated at Thu Jan 8 11:01:50 2026 by rpki-client