This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/oIFu7Vss_FsSg6ba6OZTOOzWH40.roa File: oIFu7Vss_FsSg6ba6OZTOOzWH40.roa (raw, json) Hash identifier: Om63+Vuo/DpGh5dNs3H906zkOfMO055KyU7UPPEoe9M= Subject key identifier: A0:81:6E:ED:5B:2C:FC:5B:12:83:A6:DA:E8:E6:53:38:EC:D6:1F:8D Certificate issuer: /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a Certificate serial: 019B76EB3B50F62A4C0235B5566702A480E4 Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/oIFu7Vss_FsSg6ba6OZTOOzWH40.roa Signing time: Thu 01 Jan 2026 00:18:06 +0000 ROA not before: Thu 01 Jan 2026 00:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50949 IP address blocks: 84.23.46.0/24 maxlen: 24 84.23.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3b:50:f6:2a:4c:02:35:b5:56:67:02:a4:80:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0816eed5b2cfc5b1283a6dae8e65338ecd61f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d0:2d:2c:6b:66:a2:4c:a5:d8:6d:b2:3c:5b: bd:17:e1:0d:7b:02:61:a8:fb:9c:ca:53:a6:ac:0b: d3:38:6d:0e:53:41:9d:0a:ad:f1:2b:02:10:0e:0d: 95:ef:72:9e:e0:19:b8:f2:2a:98:62:d9:89:82:b4: aa:ce:d2:be:76:44:6c:cc:a2:de:de:82:99:c1:ce: f4:54:21:fb:13:35:56:45:c4:05:c4:68:03:35:4b: 56:05:da:dd:8d:9a:8e:01:2b:1f:fe:3b:b3:1f:c2: 6b:71:bf:03:ad:80:93:e9:55:a8:3e:29:95:21:1f: e2:bf:90:11:a7:46:51:ba:40:61:30:1d:22:eb:98: 0b:1b:2d:86:d9:d9:52:8f:af:55:7c:c5:0f:ba:74: d9:be:4e:79:a5:a7:52:8b:54:90:86:1a:54:97:eb: d8:a5:c0:f4:53:e4:c4:a5:12:e9:3b:13:e6:99:1f: 43:27:d1:41:73:e1:6b:89:1e:7c:3e:6b:ae:e6:65: 94:ac:23:ca:c9:c2:f4:cc:e8:ec:99:bd:3e:cc:2f: 21:9f:51:87:78:cd:6a:64:23:c6:c8:c8:68:b2:a7: d1:21:dc:66:dd:8d:50:7b:e1:30:86:9d:a0:4e:be: 89:c5:51:69:7c:73:b8:87:c2:14:1c:46:eb:be:c7: 0b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:81:6E:ED:5B:2C:FC:5B:12:83:A6:DA:E8:E6:53:38:EC:D6:1F:8D X509v3 Authority Key Identifier: keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/oIFu7Vss_FsSg6ba6OZTOOzWH40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.23.46.0/23 Signature Algorithm: sha256WithRSAEncryption a0:41:a8:b0:1f:e0:c2:15:74:17:d9:20:c5:3d:a4:08:32:1c: 7d:04:5a:99:c9:6b:85:36:e0:1a:4a:c6:72:ad:66:df:07:c1: c2:41:ba:35:d7:ea:f0:20:1c:c9:8c:23:c6:5f:d5:37:ea:c2: c5:77:b6:cb:bd:d9:12:fd:4f:a7:ea:be:c3:39:7d:2a:0e:87: e6:02:56:49:99:99:fe:5b:ab:ce:ed:be:2c:fa:4a:0a:14:cb: 26:1d:79:d4:1d:f5:c0:f7:2a:3f:08:35:19:9f:71:15:26:7c: 31:f9:f7:99:2f:b7:22:25:e1:5f:e2:f5:db:50:58:39:bf:62: 3f:e8:21:9d:0d:92:b4:d5:2f:f5:07:e2:76:e8:7e:19:a5:6b: c0:16:1d:a0:29:16:b4:e4:cf:9c:c2:80:83:fa:06:ff:ac:d5: 24:ce:82:2f:5b:38:4b:01:b7:15:05:fc:db:ff:cf:62:35:f4: fd:5e:f2:52:70:b7:d8:0f:bf:4b:19:73:06:f8:3c:3b:ce:a1: 51:64:a2:68:22:a9:ee:d7:28:50:0f:28:ae:b9:89:73:cb:24: a7:7a:90:7a:24:11:9e:fc:d3:1c:49:cb:8b:f9:36:83:a1:d9: 75:96:c2:7e:f8:82:37:fb:04:d6:5b:ba:3c:10:13:47:8f:e5: e6:b3:6e:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26ztQ9ipMAjW1VmcCpIDkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMGJjZGVlOGNlODM5YzRkMjA0MTNjODYyNDIzY2NhMDRm ZGM2MGEwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDgxNmVlZDViMmNmYzViMTI4M2E2ZGFlOGU2NTMzOGVjZDYxZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdAtLGtmokyl2G2yPFu9F+ENewJh qPucylOmrAvTOG0OU0GdCq3xKwIQDg2V73Ke4Bm48iqYYtmJgrSqztK+dkRszKLe 3oKZwc70VCH7EzVWRcQFxGgDNUtWBdrdjZqOASsf/juzH8Jrcb8DrYCT6VWoPimV IR/iv5ARp0ZRukBhMB0i65gLGy2G2dlSj69VfMUPunTZvk55padSi1SQhhpUl+vY pcD0U+TEpRLpOxPmmR9DJ9FBc+FriR58Pmuu5mWUrCPKycL0zOjsmb0+zC8hn1GH eM1qZCPGyMhosqfRIdxm3Y1Qe+Ewhp2gTr6JxVFpfHO4h8IUHEbrvscLAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKCBbu1bLPxbEoOm2ujmUzjs1h+NMB8GA1UdIwQY MBaAFHoLze6M6DnE0gQTyGJCPMoE/cYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NGU5MTItYjUwMy00NTRjLWE0MzMt NGRlZjU3MzY1MTY5LzEvb0lGdTdWc3NfRnNTZzZiYTZPWlRPT3pXSDQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81NGU5MTItYjUwMy00NTRjLWE0MzMtNGRlZjU3MzY1MTY5 LzEvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVBcuMA0G CSqGSIb3DQEBCwUAA4IBAQCgQaiwH+DCFXQX2SDFPaQIMhx9BFqZyWuFNuAaSsZy rWbfB8HCQbo11+rwIBzJjCPGX9U36sLFd7bLvdkS/U+n6r7DOX0qDofmAlZJmZn+ W6vO7b4s+koKFMsmHXnUHfXA9yo/CDUZn3EVJnwx+feZL7ciJeFf4vXbUFg5v2I/ 6CGdDZK01S/1B+J26H4ZpWvAFh2gKRa05M+cwoCD+gb/rNUkzoIvWzhLAbcVBfzb /89iNfT9XvJScLfYD79LGXMG+Dw7zqFRZKJoIqnu1yhQDyiuuYlzyySnepB6JBGe /NMcScuL+TaDodl1lsJ++II3+wTWW7o8EBNHj+Xms27X -----END CERTIFICATE-----Generated at Thu Jan 1 12:46:58 2026 by rpki-client