This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/AaBEOZ3ZZUPRMOYr0HR7shqRlxU.roa File: AaBEOZ3ZZUPRMOYr0HR7shqRlxU.roa (raw, json) Hash identifier: oniToucQYdIHu6lqhV89eqCsufsXROkFzPNah6lqOE4= Subject key identifier: 01:A0:44:39:9D:D9:65:43:D1:30:E6:2B:D0:74:7B:B2:1A:91:97:15 Certificate issuer: /CN=70f68cded39e3ec54cee2233252ef3937ba9828d Certificate serial: 019B7BA4E38A0839042DCFEDCAA905AD1EBF Authority key identifier: 70:F6:8C:DE:D3:9E:3E:C5:4C:EE:22:33:25:2E:F3:93:7B:A9:82:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPaM3tOePsVM7iIzJS7zk3upgo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/AaBEOZ3ZZUPRMOYr0HR7shqRlxU.roa Signing time: Thu 01 Jan 2026 22:19:22 +0000 ROA not before: Thu 01 Jan 2026 22:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212685 IP address blocks: 194.164.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.mft rsync://rpki.ripe.net/repository/DEFAULT/cPaM3tOePsVM7iIzJS7zk3upgo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e3:8a:08:39:04:2d:cf:ed:ca:a9:05:ad:1e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f68cded39e3ec54cee2233252ef3937ba9828d Validity Not Before: Jan 1 22:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01a044399dd96543d130e62bd0747bb21a919715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ac:4e:1f:be:51:1f:87:55:16:a6:57:7a:7e: 53:da:1a:fe:3b:b7:e0:e1:43:ef:98:8f:83:2d:10: ad:1f:f2:f8:07:b3:5c:d6:eb:e5:b9:9a:7e:3d:4c: 95:b2:f2:60:ff:e6:47:a7:3d:bd:02:80:11:2e:10: a1:3b:dc:f5:0c:62:af:65:8b:d0:69:2a:ba:d0:96: 15:3e:40:3e:ef:2e:1f:99:26:0f:4f:d4:34:13:28: 8d:6b:d4:b7:dd:9c:ea:bb:06:c2:aa:c3:20:ab:de: 46:2e:42:83:9e:8c:e4:33:67:54:7c:5b:6c:60:81: bc:ea:b8:7b:ac:f3:23:01:af:57:ac:72:b1:23:78: 5e:9d:14:aa:7e:d5:3f:b0:16:58:51:f9:10:89:50: d7:45:3d:39:3e:65:df:e6:6a:c4:a9:fd:48:f4:f7: 7b:f8:62:ac:ba:21:b5:25:2a:b2:67:b6:3a:cb:77: fc:d6:d3:1e:80:c2:10:7e:aa:c9:99:48:2c:fc:47: 03:9b:6c:e0:63:e2:1d:fe:c3:29:98:13:01:45:1e: f6:ff:98:c1:91:c0:ff:be:7d:bf:c2:cf:02:c6:66: 14:51:17:cb:b7:9a:fd:5b:8a:05:cc:2e:8b:2d:3d: 11:58:63:d1:3a:13:09:09:83:d1:dc:f8:41:ae:fe: 10:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A0:44:39:9D:D9:65:43:D1:30:E6:2B:D0:74:7B:B2:1A:91:97:15 X509v3 Authority Key Identifier: keyid:70:F6:8C:DE:D3:9E:3E:C5:4C:EE:22:33:25:2E:F3:93:7B:A9:82:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPaM3tOePsVM7iIzJS7zk3upgo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/AaBEOZ3ZZUPRMOYr0HR7shqRlxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.164.36.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:93:9a:05:d5:e6:5a:b7:dc:0f:ad:1f:eb:b3:bd:94:59:f4: 12:82:02:b8:b0:39:e9:41:f2:14:95:27:1e:a1:98:73:ef:66: d9:cc:e8:28:37:16:38:9e:de:9b:96:70:35:b3:58:f1:8b:3e: d6:c9:c7:aa:42:fa:65:63:4a:8c:52:82:1f:12:38:34:43:ea: 45:c3:de:46:28:75:3d:1e:78:25:9e:c8:a8:fb:32:21:6b:1b: 2c:5d:81:cd:17:a5:64:f9:4d:04:23:3d:76:74:68:09:df:ee: 2c:ca:07:27:f4:55:16:48:46:c4:55:bb:8d:c7:fa:05:ad:d5: 27:bc:95:82:d0:78:f0:4c:db:32:13:a2:db:63:df:5c:01:42: ea:70:84:82:81:ac:b9:42:89:43:99:cf:6f:33:d7:f0:19:73: 64:cc:05:00:2c:e8:92:49:47:41:47:f9:6e:45:33:26:c9:63: 12:ce:30:a2:d8:81:52:f9:e2:c3:91:ca:f0:66:a6:22:83:fb: ec:2e:1d:2d:5d:03:c9:cc:b1:6d:df:cd:96:4e:67:7d:db:fa: ac:25:ab:ea:67:58:87:ff:8c:f4:2e:03:9e:2a:a3:07:f4:72: 76:17:aa:19:7b:a4:fe:d0:79:8d:a3:f9:57:88:a2:34:73:c0: 4a:6f:55:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pOOKCDkELc/tyqkFrR6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjY4Y2RlZDM5ZTNlYzU0Y2VlMjIzMzI1MmVmMzkzN2Jh OTgyOGQwHhcNMjYwMTAxMjIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWEwNDQzOTlkZDk2NTQzZDEzMGU2MmJkMDc0N2JiMjFhOTE5NzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqxOH75RH4dVFqZXen5T2hr+O7fg 4UPvmI+DLRCtH/L4B7Nc1uvluZp+PUyVsvJg/+ZHpz29AoARLhChO9z1DGKvZYvQ aSq60JYVPkA+7y4fmSYPT9Q0EyiNa9S33ZzquwbCqsMgq95GLkKDnozkM2dUfFts YIG86rh7rPMjAa9XrHKxI3henRSqftU/sBZYUfkQiVDXRT05PmXf5mrEqf1I9Pd7 +GKsuiG1JSqyZ7Y6y3f81tMegMIQfqrJmUgs/EcDm2zgY+Id/sMpmBMBRR72/5jB kcD/vn2/ws8CxmYUURfLt5r9W4oFzC6LLT0RWGPROhMJCYPR3PhBrv4Q4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAGgRDmd2WVD0TDmK9B0e7IakZcVMB8GA1UdIwQY MBaAFHD2jN7Tnj7FTO4iMyUu85N7qYKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BhTTN0T2VQc1ZNN2lJekpTN3prM3VwZ28wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mMGNjNDEtYjNlNy00NmZmLWE5NzYt MjlkZjRlMjYxMWYxLzEvQWFCRU9aM1paVVBSTU9ZcjBIUjdzaHFSbHhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9mMGNjNDEtYjNlNy00NmZmLWE5NzYtMjlkZjRlMjYxMWYx LzEvY1BhTTN0T2VQc1ZNN2lJekpTN3prM3VwZ28wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwqQkMA0G CSqGSIb3DQEBCwUAA4IBAQAck5oF1eZat9wPrR/rs72UWfQSggK4sDnpQfIUlSce oZhz72bZzOgoNxY4nt6blnA1s1jxiz7WyceqQvplY0qMUoIfEjg0Q+pFw95GKHU9 Hnglnsio+zIhaxssXYHNF6Vk+U0EIz12dGgJ3+4sygcn9FUWSEbEVbuNx/oFrdUn vJWC0HjwTNsyE6LbY99cAULqcISCgay5QolDmc9vM9fwGXNkzAUALOiSSUdBR/lu RTMmyWMSzjCi2IFS+eLDkcrwZqYig/vsLh0tXQPJzLFt382WTmd92/qsJavqZ1iH /4z0LgOeKqMH9HJ2F6oZe6T+0HmNo/lXiKI0c8BKb1Wh -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:13 2026 by rpki-client