This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/aOsBrfXxC2i50OhW4Wv0Z8ynANo.roa File: aOsBrfXxC2i50OhW4Wv0Z8ynANo.roa (raw, json) Hash identifier: 8KWuhZN2MwzTsWUN92o6fPQusuIkbhVe5Tp3v7UnNEw= Subject key identifier: 68:EB:01:AD:F5:F1:0B:68:B9:D0:E8:56:E1:6B:F4:67:CC:A7:00:DA Certificate issuer: /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb Certificate serial: 019B77C68D9108C6A50A222EB286B1DB6F86 Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/aOsBrfXxC2i50OhW4Wv0Z8ynANo.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51679 IP address blocks: 193.24.36.0/24 maxlen: 24 193.25.194.0/24 maxlen: 24 193.25.196.0/24 maxlen: 24 193.25.223.0/24 maxlen: 24 212.46.50.0/24 maxlen: 24 2a12:c40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8d:91:08:c6:a5:0a:22:2e:b2:86:b1:db:6f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68eb01adf5f10b68b9d0e856e16bf467cca700da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:73:66:73:d7:fa:06:98:10:cb:62:5f:6f: b4:90:f3:86:12:c0:b5:4b:95:98:07:4e:dc:06:fc: df:68:46:fe:36:ad:5e:fc:6b:35:a6:1e:6a:92:70: 1c:83:a4:7a:26:5b:ac:5b:07:9a:41:d3:1d:e6:be: 07:0a:36:1f:44:44:6c:c8:9f:e4:8e:40:d1:ee:25: 46:11:a5:48:ac:3b:e5:2c:1d:b2:df:7f:2d:ae:c4: b1:4c:8f:0c:44:b0:ba:55:0d:52:ce:96:bb:94:51: 76:89:b9:f7:31:bd:4e:55:b9:aa:2c:2a:aa:fd:e2: 0c:e8:22:d4:21:d9:99:ea:e6:c5:42:63:09:93:76: 9f:c2:a3:b5:e2:ef:b4:8d:f4:96:43:6e:2a:70:58: 44:76:70:01:92:c5:8e:eb:b7:dd:8f:46:8d:23:ca: d0:37:5f:97:57:42:20:4e:40:a5:f2:25:31:56:db: c2:2c:a9:9c:80:07:3c:11:9b:51:9a:a4:7d:e6:b0: c7:75:34:f5:76:e4:f7:8a:0d:10:7f:d7:7a:8d:48: 04:8a:af:6b:5c:c0:67:b6:b8:f0:16:59:64:c7:8f: 99:30:99:ed:23:8b:d5:3a:3b:2c:1f:4d:61:e9:dc: e1:6e:33:92:27:d8:f3:7d:b0:04:c6:cc:9c:51:f0: 28:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EB:01:AD:F5:F1:0B:68:B9:D0:E8:56:E1:6B:F4:67:CC:A7:00:DA X509v3 Authority Key Identifier: keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/aOsBrfXxC2i50OhW4Wv0Z8ynANo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.36.0/24 193.25.194.0/24 193.25.196.0/24 193.25.223.0/24 212.46.50.0/24 IPv6: 2a12:c40::/29 Signature Algorithm: sha256WithRSAEncryption 72:2f:5b:33:82:3f:5b:e6:2c:72:9d:f4:86:0c:e9:29:f1:16: 3b:f4:82:19:2c:28:77:ed:63:9e:5c:da:65:34:56:a3:a5:22: 4b:5f:1d:79:c2:83:11:17:ef:dd:d2:b1:5d:58:e6:1c:a7:91: f7:03:00:fa:3a:c6:58:ae:db:d3:9d:1e:71:36:d8:1d:97:04: e8:3f:12:0a:3c:45:62:18:62:cc:29:86:aa:20:25:a6:e5:60: 48:be:3c:67:b7:55:a9:57:fd:57:37:0e:a1:f3:3c:5b:46:8f: 9e:6d:b3:e8:fc:21:6b:06:bf:90:3c:7f:93:f7:d9:7a:33:f0: 9f:10:17:60:2b:e5:cf:28:cc:20:4d:78:a2:f6:54:6a:4f:79: b9:c2:0c:ad:3d:7d:cc:2c:b9:36:62:69:4a:75:d8:d7:9f:30: 67:61:fa:8c:d1:83:6e:88:d8:d9:92:e6:d5:34:b2:18:79:83: 86:ed:87:88:6a:0d:65:55:25:7a:35:58:9b:dc:3e:ca:24:c6: 9a:68:8b:d3:7b:5e:52:4d:ba:10:f9:1c:7b:cd:a2:a6:7b:29: 54:31:0e:56:1c:d3:9d:a7:67:01:98:60:b1:cf:38:eb:af:5b: 12:12:44:d6:2e:9f:6d:d4:68:39:ac:a7:b2:bb:71:12:09:1d: bb:58:8d:00 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt3xo2RCMalCiIusoax22+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhODNlMzBmMmQ2ZmNlNzVhNjY2YTJkMGI2MzZiNDZlYzk5 OGExY2IwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGViMDFhZGY1ZjEwYjY4YjlkMGU4NTZlMTZiZjQ2N2NjYTcwMGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGtzZnPX+gaYEMtiX2+0kPOGEsC1 S5WYB07cBvzfaEb+Nq1e/Gs1ph5qknAcg6R6JlusWweaQdMd5r4HCjYfRERsyJ/k jkDR7iVGEaVIrDvlLB2y338trsSxTI8MRLC6VQ1Szpa7lFF2ibn3Mb1OVbmqLCqq /eIM6CLUIdmZ6ubFQmMJk3afwqO14u+0jfSWQ24qcFhEdnABksWO67fdj0aNI8rQ N1+XV0IgTkCl8iUxVtvCLKmcgAc8EZtRmqR95rDHdTT1duT3ig0Qf9d6jUgEiq9r XMBntrjwFllkx4+ZMJntI4vVOjssH01h6dzhbjOSJ9jzfbAExsycUfAoVQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFGjrAa318QtoudDoVuFr9GfMpwDaMB8GA1UdIwQY MBaAFOqD4w8tb851pmai0LY2tG7JmKHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNjljNzUtODM5MS00ZDkzLWIzNzgt M2ZhMTVhMzNmNDI5LzEvYU9zQnJmWHhDMmk1ME9oVzRXdjBaOHluQU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jNjljNzUtODM5MS00ZDkzLWIzNzgtM2ZhMTVhMzNmNDI5 LzEvNm9QakR5MXZ6bldtWnFMUXRqYTBic21Zb2NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAwRgkAwQA wRnCAwQAwRnEAwQAwRnfAwQA1C4yMA0EAgACMAcDBQMqEgxAMA0GCSqGSIb3DQEB CwUAA4IBAQByL1szgj9b5ixynfSGDOkp8RY79IIZLCh37WOeXNplNFajpSJLXx15 woMRF+/d0rFdWOYcp5H3AwD6OsZYrtvTnR5xNtgdlwToPxIKPEViGGLMKYaqICWm 5WBIvjxnt1WpV/1XNw6h8zxbRo+ebbPo/CFrBr+QPH+T99l6M/CfEBdgK+XPKMwg TXii9lRqT3m5wgytPX3MLLk2YmlKddjXnzBnYfqM0YNuiNjZkubVNLIYeYOG7YeI ag1lVSV6NVib3D7KJMaaaIvTe15STboQ+Rx7zaKmeylUMQ5WHNOdp2cBmGCxzzjr r1sSEkTWLp9t1Gg5rKeyu3ESCR27WI0A -----END CERTIFICATE-----Generated at Tue Feb 10 03:07:15 2026 by rpki-client