This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oQ5WeiKRQc-_1C5q0YHnpoFGm84.roa File: oQ5WeiKRQc-_1C5q0YHnpoFGm84.roa (raw, json) Hash identifier: 3QCmb5I1QLY5XT1b/tNgqugoelnsQ8AZXf0P9MrZ5qE= Subject key identifier: A1:0E:56:7A:22:91:41:CF:BF:D4:2E:6A:D1:81:E7:A6:81:46:9B:CE Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A302329B64FF6512439CA10B96241C Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oQ5WeiKRQc-_1C5q0YHnpoFGm84.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48090 IP address blocks: 93.123.109.0/24 maxlen: 24 195.178.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:02:32:9b:64:ff:65:12:43:9c:a1:0b:96:24:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a10e567a229141cfbfd42e6ad181e7a681469bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a2:95:b6:a6:61:4b:a8:65:db:ae:af:20:2a: 26:f0:3f:50:c5:7a:ed:4c:9e:20:68:eb:b4:37:28: ef:56:96:64:09:a4:3b:ec:8b:02:c7:28:3f:02:05: 21:a1:f0:a1:35:ae:3f:80:3f:e2:e5:d8:0d:dd:f9: de:f4:34:d1:fa:2f:55:ee:7c:f8:87:20:34:46:29: a6:4d:ef:21:17:1c:17:02:5f:49:0c:34:76:fc:3a: 93:0a:f9:84:08:f3:a2:34:c9:66:d5:3b:e7:a2:48: 05:73:11:6a:3f:2e:eb:26:f5:b4:11:52:6a:bc:92: a5:da:5e:69:96:fe:a6:4b:6b:83:70:11:27:5e:ad: e9:b3:e7:39:97:ad:fd:3d:87:95:46:db:e8:bd:d3: 5d:1a:3f:51:33:80:4e:2e:ce:e8:15:8f:71:47:19: e3:59:11:51:e4:fe:c3:a0:35:fb:f7:74:a9:f0:57: b3:05:bd:bd:d9:87:9d:79:fa:20:be:13:63:01:97: eb:0b:ec:aa:aa:cf:54:6e:79:65:12:5f:2e:8e:b1: 29:cb:f7:91:1d:d9:dc:93:6c:6e:ab:37:0c:9d:b9: a7:4a:61:72:11:90:9a:4d:f5:26:84:9b:02:1e:c1: 96:8d:68:fd:95:95:c9:5d:0c:ae:d6:ad:34:e4:87: d8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0E:56:7A:22:91:41:CF:BF:D4:2E:6A:D1:81:E7:A6:81:46:9B:CE X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oQ5WeiKRQc-_1C5q0YHnpoFGm84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.123.109.0/24 195.178.110.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:0b:09:0d:d5:e8:26:af:12:94:f3:12:dd:cc:b5:19:16:3a: ca:6c:4a:ff:47:79:4e:6b:12:d3:c8:24:c6:a2:8f:a9:56:a9: 4d:25:bd:b1:72:3f:73:4b:b6:b9:03:eb:48:a8:bc:b5:42:ef: e6:38:42:e6:bd:00:83:60:79:d0:42:66:fa:fb:ae:48:9b:d9: 98:50:4f:5b:2f:76:92:aa:d5:02:e8:15:03:78:f6:d0:7a:3b: 06:a8:29:1b:aa:94:8a:2a:24:1a:8f:ab:f1:1c:ad:51:cb:9d: ed:bd:20:d2:31:95:fe:f0:d7:bb:17:4b:47:98:37:f2:3d:7d: 08:1f:16:5b:b1:00:13:2b:ae:25:e9:12:58:74:12:53:7b:12: 59:ed:8a:97:86:bc:69:56:39:49:90:ae:c3:11:88:03:1f:a6: 22:e5:82:d4:56:2a:f2:4a:57:8e:17:af:de:39:74:b1:56:9d: 2b:72:02:22:9c:b9:7d:56:e6:06:61:b6:9a:b4:34:4d:2c:8b: 9b:6c:6e:38:4f:f0:8c:f1:3c:a7:8c:bb:9f:56:8f:08:44:58: 9d:b5:ab:e0:89:50:a8:dd:fa:5b:25:78:b3:8f:1a:4c:af:4d: 86:9f:92:ba:18:cc:ed:1f:37:0d:8f:e7:a2:61:28:02:56:05: e6:04:80:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4owIym2T/ZRJDnKELliQcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTBlNTY3YTIyOTE0MWNmYmZkNDJlNmFkMTgxZTdhNjgxNDY5YmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKKVtqZhS6hl266vICom8D9QxXrt TJ4gaOu0NyjvVpZkCaQ77IsCxyg/AgUhofChNa4/gD/i5dgN3fne9DTR+i9V7nz4 hyA0RimmTe8hFxwXAl9JDDR2/DqTCvmECPOiNMlm1TvnokgFcxFqPy7rJvW0EVJq vJKl2l5plv6mS2uDcBEnXq3ps+c5l639PYeVRtvovdNdGj9RM4BOLs7oFY9xRxnj WRFR5P7DoDX793Sp8FezBb292YedefogvhNjAZfrC+yqqs9UbnllEl8ujrEpy/eR Hdnck2xuqzcMnbmnSmFyEZCaTfUmhJsCHsGWjWj9lZXJXQyu1q005IfYMQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKEOVnoikUHPv9QuatGB56aBRpvOMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvb1E1V2VpS1JRYy1fMUM1cTBZSG5wb0ZHbTg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXttAwQA w7JuMA0GCSqGSIb3DQEBCwUAA4IBAQAdCwkN1egmrxKU8xLdzLUZFjrKbEr/R3lO axLTyCTGoo+pVqlNJb2xcj9zS7a5A+tIqLy1Qu/mOELmvQCDYHnQQmb6+65Im9mY UE9bL3aSqtUC6BUDePbQejsGqCkbqpSKKiQaj6vxHK1Ry53tvSDSMZX+8Ne7F0tH mDfyPX0IHxZbsQATK64l6RJYdBJTexJZ7YqXhrxpVjlJkK7DEYgDH6Yi5YLUViry SleOF6/eOXSxVp0rcgIinLl9VuYGYbaatDRNLIubbG44T/CM8TynjLufVo8IRFid tavgiVCo3fpbJXizjxpMr02Gn5K6GMztHzcNj+eiYSgCVgXmBIAu -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:02 2026 by rpki-client