This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/o0HqlxaDoWc3G-_HSVzsO-Lq4bU.roa File: o0HqlxaDoWc3G-_HSVzsO-Lq4bU.roa (raw, json) Hash identifier: HuIvoJlDnjzT1p9vthorLP3YOQAv0oGxz+pUKFAvCsk= Subject key identifier: A3:41:EA:97:16:83:A1:67:37:1B:EF:C7:49:5C:EC:3B:E2:EA:E1:B5 Certificate issuer: /CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e Certificate serial: 019B7CEE6C3BDA703CB30E9159E4A5DDCAD2 Authority key identifier: CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/o0HqlxaDoWc3G-_HSVzsO-Lq4bU.roa Signing time: Fri 02 Jan 2026 04:19:18 +0000 ROA not before: Fri 02 Jan 2026 04:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43631 IP address blocks: 193.46.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6c:3b:da:70:3c:b3:0e:91:59:e4:a5:dd:ca:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e Validity Not Before: Jan 2 04:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a341ea971683a167371befc7495cec3be2eae1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c4:6d:b8:f1:d2:65:c1:00:dd:be:5e:00:7d: 65:0c:65:56:16:68:d4:fa:61:9f:1b:9f:30:4c:79: cc:a9:ec:d9:3a:36:17:bf:35:0c:86:62:24:45:e5: f5:09:c4:41:2d:0e:22:3e:38:4a:59:04:82:22:4a: 47:82:5f:be:d8:09:c1:b9:91:05:37:fe:a1:f4:3a: 8c:10:43:f7:83:86:8e:38:0e:05:aa:35:6d:76:34: b5:45:1b:6e:ed:66:9a:1f:48:06:b1:99:04:99:d5: bd:66:6b:fd:a1:89:04:44:fb:f7:e8:6e:43:be:90: e9:9b:4e:ba:9e:e0:e6:7f:5a:09:eb:5e:8b:6c:f2: ca:d7:1b:87:52:a4:be:0d:8c:c4:6f:ec:61:59:8e: c3:7a:a2:1d:a2:af:b4:80:e0:ae:26:cf:cc:97:8f: ab:5d:74:cc:6e:af:ab:97:30:05:9c:50:db:d0:84: 09:20:81:6f:cd:f1:9b:d5:47:64:4f:2a:0a:af:bb: 5c:a1:e1:ab:c5:34:74:58:eb:f7:10:69:67:09:e1: 13:d7:8c:d7:dc:a1:e1:fd:1e:0f:22:40:e1:35:85: 8c:0d:60:8a:ac:9a:02:a3:d3:0d:bd:43:0b:6a:5b: de:b7:b3:06:cc:bc:48:6a:09:0c:7e:34:4f:0c:63: de:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:41:EA:97:16:83:A1:67:37:1B:EF:C7:49:5C:EC:3B:E2:EA:E1:B5 X509v3 Authority Key Identifier: keyid:CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/o0HqlxaDoWc3G-_HSVzsO-Lq4bU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.91.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:88:57:4c:75:15:3a:9f:5d:30:86:4e:87:3f:51:7a:13:28: 52:d6:80:03:72:c3:6d:5c:fe:eb:57:96:53:dc:d5:27:14:8f: 4e:6e:58:43:e4:23:cd:00:01:4f:95:49:08:98:71:ec:49:e3: 3e:98:8c:97:76:4b:48:41:32:09:af:29:83:8a:fa:b7:ac:78: df:4f:d8:85:fa:1a:7f:31:c4:d3:c6:bf:02:e6:5f:02:b7:7a: dd:cc:09:bc:b4:61:71:bf:26:46:df:ac:79:2f:84:00:c0:c9: d6:ac:18:a6:c2:23:25:0d:97:82:90:45:5a:8c:aa:84:3e:cd: 5b:2a:86:03:a7:25:4a:c5:d4:69:a8:39:e6:6a:f1:c7:e9:8e: c5:78:17:6b:d4:d0:ef:05:f3:a5:8a:3a:cf:ed:99:3e:ae:6c: 54:0d:52:bd:7a:ca:b3:83:78:5c:32:96:b4:df:3f:53:df:82: 8c:31:29:0a:95:67:0a:03:b4:77:e1:d1:db:9f:39:53:53:39: 8e:5a:ae:27:5a:ff:b6:24:74:0a:5e:ad:94:b8:bd:01:18:f5: e3:95:ba:66:c1:33:fb:70:e4:4b:62:92:c1:d2:33:c0:70:a0: 82:87:07:68:7f:58:b2:f3:2b:2a:dd:04:50:fc:07:8b:42:4c: ca:60:b6:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87mw72nA8sw6RWeSl3crSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiN2UwNTNjNzE5OTVhY2M5YmYxMzMzZmU3OWMzZDViZmQ2 ZTk2NGUwHhcNMjYwMTAyMDQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzQxZWE5NzE2ODNhMTY3MzcxYmVmYzc0OTVjZWMzYmUyZWFlMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sRtuPHSZcEA3b5eAH1lDGVWFmjU +mGfG58wTHnMqezZOjYXvzUMhmIkReX1CcRBLQ4iPjhKWQSCIkpHgl++2AnBuZEF N/6h9DqMEEP3g4aOOA4FqjVtdjS1RRtu7WaaH0gGsZkEmdW9Zmv9oYkERPv36G5D vpDpm066nuDmf1oJ616LbPLK1xuHUqS+DYzEb+xhWY7DeqIdoq+0gOCuJs/Ml4+r XXTMbq+rlzAFnFDb0IQJIIFvzfGb1UdkTyoKr7tcoeGrxTR0WOv3EGlnCeET14zX 3KHh/R4PIkDhNYWMDWCKrJoCo9MNvUMLalvet7MGzLxIagkMfjRPDGPeNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKNB6pcWg6FnNxvvx0lc7Dvi6uG1MB8GA1UdIwQY MBaAFMt+BTxxmVrMm/EzP+ecPVv9bpZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTM0RlBIR1pXc3liOFRNXzU1dzlXXzF1bGs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OGFhZDEtZDYxZi00MTZlLWFmNGMt OTM2MzdkNDE2OGJkLzEvbzBIcWx4YURvV2MzRy1fSFNWenNPLUxxNGJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS83OGFhZDEtZDYxZi00MTZlLWFmNGMtOTM2MzdkNDE2OGJk LzEveTM0RlBIR1pXc3liOFRNXzU1dzlXXzF1bGs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS5bMA0G CSqGSIb3DQEBCwUAA4IBAQAfiFdMdRU6n10whk6HP1F6EyhS1oADcsNtXP7rV5ZT 3NUnFI9OblhD5CPNAAFPlUkImHHsSeM+mIyXdktIQTIJrymDivq3rHjfT9iF+hp/ McTTxr8C5l8Ct3rdzAm8tGFxvyZG36x5L4QAwMnWrBimwiMlDZeCkEVajKqEPs1b KoYDpyVKxdRpqDnmavHH6Y7FeBdr1NDvBfOlijrP7Zk+rmxUDVK9esqzg3hcMpa0 3z9T34KMMSkKlWcKA7R34dHbnzlTUzmOWq4nWv+2JHQKXq2UuL0BGPXjlbpmwTP7 cORLYpLB0jPAcKCChwdof1iy8ysq3QRQ/AeLQkzKYLYL -----END CERTIFICATE-----Generated at Wed Jan 7 04:16:14 2026 by rpki-client