This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/oEI10F1yOzZXTlBBBvzIeX5OXog.roa File: oEI10F1yOzZXTlBBBvzIeX5OXog.roa (raw, json) Hash identifier: QNwI0l8coi9XbWot/ryVzcBU4wEtxZkGadr7asLldw8= Subject key identifier: A0:42:35:D0:5D:72:3B:36:57:4E:50:41:06:FC:C8:79:7E:4E:5E:88 Certificate issuer: /CN=9303622b3c54e45f4166f301798f86dbba47180c Certificate serial: 019B7BA3794F778086D4058E5E445B0A5981 Authority key identifier: 93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/oEI10F1yOzZXTlBBBvzIeX5OXog.roa Signing time: Thu 01 Jan 2026 22:17:49 +0000 ROA not before: Thu 01 Jan 2026 22:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47377 IP address blocks: 194.107.123.0/24 maxlen: 24 195.66.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:79:4f:77:80:86:d4:05:8e:5e:44:5b:0a:59:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9303622b3c54e45f4166f301798f86dbba47180c Validity Not Before: Jan 1 22:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a04235d05d723b36574e504106fcc8797e4e5e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:6c:0f:0b:9d:56:91:1c:d8:bd:a9:c8:23: 99:61:a9:3d:6c:d2:ff:c1:b8:eb:5d:b3:fa:37:7d: 32:6c:40:4a:43:07:a3:e5:fe:d8:b4:83:3e:38:d5: e4:78:80:e8:51:d9:4f:d5:4d:58:b2:33:8c:a6:62: 64:b5:fe:5c:09:a8:d1:1a:05:08:98:7c:f7:72:ed: da:64:7b:0d:13:22:76:50:0e:36:b7:85:1e:9a:68: 70:57:e1:24:21:57:49:33:ae:8c:a7:5c:35:bd:27: 54:9f:84:51:2f:50:eb:d6:23:04:8d:52:15:a1:48: 78:67:22:2e:97:c5:f6:53:ad:f7:2b:8e:32:88:72: 26:84:d6:4d:55:47:a0:20:3d:34:e4:4c:6a:19:c1: a6:92:4f:d9:4d:6e:b4:74:78:75:cc:4a:0a:48:9d: 96:f9:3d:12:c9:b6:cb:e9:6c:5e:96:cd:a2:12:39: b1:9d:1c:5d:33:c8:a4:90:75:ad:45:88:b7:5b:0d: c4:d1:56:fe:eb:ca:cf:5f:66:57:82:2b:47:dc:e5: 89:7f:04:72:14:f7:2f:80:de:b4:87:34:5d:c5:cd: e4:ee:3c:d6:1a:6c:12:e1:97:eb:d6:e7:f8:ab:45: 9e:9a:0e:cb:4d:98:3c:92:18:9d:e0:38:43:be:96: d0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:42:35:D0:5D:72:3B:36:57:4E:50:41:06:FC:C8:79:7E:4E:5E:88 X509v3 Authority Key Identifier: keyid:93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/oEI10F1yOzZXTlBBBvzIeX5OXog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.107.123.0/24 195.66.115.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:cd:33:bc:4d:f4:99:76:1a:9b:28:e5:05:36:bd:9a:64:56: 62:e1:92:b9:46:e4:30:b2:ae:5d:ee:5a:60:f5:d0:65:71:92: 1e:18:e8:35:78:f5:33:51:e5:d5:6a:c8:0a:3a:2a:1b:f0:48: b1:24:04:e5:c4:09:cb:1a:ca:a5:37:94:77:74:ae:e5:16:0c: 72:bf:09:52:fb:b2:49:43:cd:b7:a3:c7:56:d8:62:33:9e:3d: 26:c2:1a:56:db:88:d8:6a:4e:37:a5:21:78:97:f6:df:20:ae: 3e:94:f3:7e:27:72:30:f6:73:be:41:11:7a:3b:15:fa:55:31: 03:82:2f:9b:78:6d:47:25:b4:24:45:66:fd:9e:04:62:81:c7: 35:db:ab:a6:a2:55:f3:64:ff:65:88:c7:c0:03:09:9d:36:54: 8d:25:de:88:1d:d1:f7:84:a5:a4:ad:96:9c:15:2c:02:5e:fd: f0:40:c1:65:92:df:2e:59:f7:34:08:ae:7c:31:dd:09:92:d2: 90:ad:58:d7:85:7f:24:31:fb:ef:df:f1:ad:82:27:af:29:8d: a7:bb:1f:5c:a3:c3:e5:93:56:ef:af:e1:42:9d:ab:ed:bc:7b: 5a:fa:9f:78:b4:78:35:bc:f8:79:d6:7c:d9:42:7d:f1:1b:b9: 93:9d:6e:22 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o3lPd4CG1AWOXkRbClmBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMDM2MjJiM2M1NGU0NWY0MTY2ZjMwMTc5OGY4NmRiYmE0 NzE4MGMwHhcNMjYwMTAxMjIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDQyMzVkMDVkNzIzYjM2NTc0ZTUwNDEwNmZjYzg3OTdlNGU1ZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVlsDwudVpEc2L2pyCOZYak9bNL/ wbjrXbP6N30ybEBKQwej5f7YtIM+ONXkeIDoUdlP1U1YsjOMpmJktf5cCajRGgUI mHz3cu3aZHsNEyJ2UA42t4UemmhwV+EkIVdJM66Mp1w1vSdUn4RRL1Dr1iMEjVIV oUh4ZyIul8X2U633K44yiHImhNZNVUegID005ExqGcGmkk/ZTW60dHh1zEoKSJ2W +T0SybbL6Wxels2iEjmxnRxdM8ikkHWtRYi3Ww3E0Vb+68rPX2ZXgitH3OWJfwRy FPcvgN60hzRdxc3k7jzWGmwS4Zfr1uf4q0Wemg7LTZg8khid4DhDvpbQEwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKBCNdBdcjs2V05QQQb8yHl+Tl6IMB8GA1UdIwQY MBaAFJMDYis8VORfQWbzAXmPhtu6RxgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dOaUt6eFU1RjlCWnZNQmVZLUcyN3BIR0F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wNzdhNTAtNDViNi00YTM4LTlkYjkt OTUwYzdlNzMyNDVjLzEvb0VJMTBGMXlPelpYVGxCQkJ2ekllWDVPWG9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wNzdhNTAtNDViNi00YTM4LTlkYjktOTUwYzdlNzMyNDVj LzEva3dOaUt6eFU1RjlCWnZNQmVZLUcyN3BIR0F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwmt7AwQA w0JzMA0GCSqGSIb3DQEBCwUAA4IBAQBvzTO8TfSZdhqbKOUFNr2aZFZi4ZK5RuQw sq5d7lpg9dBlcZIeGOg1ePUzUeXVasgKOiob8EixJATlxAnLGsqlN5R3dK7lFgxy vwlS+7JJQ823o8dW2GIznj0mwhpW24jYak43pSF4l/bfIK4+lPN+J3Iw9nO+QRF6 OxX6VTEDgi+beG1HJbQkRWb9ngRigcc126umolXzZP9liMfAAwmdNlSNJd6IHdH3 hKWkrZacFSwCXv3wQMFlkt8uWfc0CK58Md0JktKQrVjXhX8kMfvv3/GtgievKY2n ux9co8Plk1bvr+FCnavtvHta+p94tHg1vPh51nzZQn3xG7mTnW4i -----END CERTIFICATE-----Generated at Sun Jan 11 18:14:11 2026 by rpki-client