This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/oYqDDbbkXekFyCE0DxGhSHM8f2Q.roa File: oYqDDbbkXekFyCE0DxGhSHM8f2Q.roa (raw, json) Hash identifier: aLQIye3yBZMSA1dRVQDw4FdrQwJByqCiLDplDGmgXSM= Subject key identifier: A1:8A:83:0D:B6:E4:5D:E9:05:C8:21:34:0F:11:A1:48:73:3C:7F:64 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7DCB8F5B928BFF9AFC91852C9397D Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/oYqDDbbkXekFyCE0DxGhSHM8f2Q.roa Signing time: Thu 01 Jan 2026 18:17:57 +0000 ROA not before: Thu 01 Jan 2026 18:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205472 IP address blocks: 85.254.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:dc:b8:f5:b9:28:bf:f9:af:c9:18:52:c9:39:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a18a830db6e45de905c821340f11a148733c7f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:af:04:09:4a:3d:fa:be:6d:a6:12:dd:a0:4a: 45:fe:67:7d:f9:0b:47:24:4e:5b:06:cd:52:51:17: a3:31:66:83:b3:17:94:37:7e:8f:e3:47:48:2a:7f: aa:30:7f:25:2a:28:49:33:4e:b7:61:1a:20:7e:ab: 9c:af:33:ef:03:ce:ac:3f:bc:d5:f9:33:81:b8:42: ba:b2:60:77:f2:48:8a:48:ae:8d:80:98:e0:9a:87: 1a:a8:9f:79:94:88:44:28:47:8e:d6:35:bf:ef:c7: 62:13:60:e2:97:18:f0:b0:02:0f:01:f8:ef:bc:3b: af:64:a7:d3:c3:76:4e:92:a2:9a:ec:38:98:96:05: 5f:88:a0:99:0a:88:5c:3f:03:cb:03:03:10:47:17: 20:0d:54:b0:ff:44:80:c2:90:fb:da:f9:e5:c0:21: a3:f7:92:d4:ad:da:6b:78:a4:6e:ec:75:f0:29:cd: b3:60:84:54:98:21:28:e4:48:6d:3c:42:08:22:96: 8b:40:d8:ce:20:de:6e:d7:e1:de:bb:40:ad:70:f6: 3e:e8:70:5f:11:82:fc:49:92:a7:cf:1d:6a:c4:4c: 91:c0:0a:96:bd:f7:4a:49:49:b2:15:d5:ee:fd:9f: 26:34:42:b6:c7:c2:85:4c:bc:b9:03:46:60:5b:12: 82:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8A:83:0D:B6:E4:5D:E9:05:C8:21:34:0F:11:A1:48:73:3C:7F:64 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/oYqDDbbkXekFyCE0DxGhSHM8f2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.31.0/24 Signature Algorithm: sha256WithRSAEncryption b9:f5:f2:0c:b5:a0:4c:e2:7d:7c:00:87:a0:0c:a3:0d:b7:1f: 04:1c:3f:a6:b4:1b:02:73:fc:41:b2:8b:ea:a2:94:11:99:18: e5:a7:da:d6:65:8e:41:c4:c0:38:17:b2:81:75:be:6e:b8:31: 84:d1:0f:78:5a:f7:eb:99:2c:41:dd:e7:5c:f0:d5:c9:c6:c3: 5c:8a:73:94:fc:24:75:c0:35:6b:b7:42:5e:f0:81:ef:82:50: 14:c9:15:2c:ae:3c:06:59:ce:fb:5f:0e:fb:84:53:77:ff:d3: 20:5f:d1:cf:81:10:f3:42:c4:24:21:45:10:43:33:e4:48:9e: da:87:a1:20:7d:45:aa:58:17:99:dc:85:22:43:65:cb:ab:5a: 72:35:e3:db:54:cf:df:d2:1f:57:22:f5:c2:db:06:7c:a4:38: 15:ce:80:68:8f:23:87:d3:a4:f0:08:9a:4e:e6:1d:45:5f:22: 0b:3c:32:5d:f1:b7:14:68:64:db:c5:d6:90:34:34:a3:10:57: d0:a5:61:1a:0a:39:d7:f1:11:83:db:a7:5c:90:90:32:5a:a3: 47:b4:19:a7:1b:69:cc:00:f9:b9:74:4c:09:98:32:1f:6b:6e: 88:94:91:95:cc:35:8c:1a:f2:62:b9:11:0a:94:a4:c7:72:d3: 98:f6:7f:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9y49bkov/mvyRhSyTl9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMThhODMwZGI2ZTQ1ZGU5MDVjODIxMzQwZjExYTE0ODczM2M3ZjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6a8ECUo9+r5tphLdoEpF/md9+QtH JE5bBs1SURejMWaDsxeUN36P40dIKn+qMH8lKihJM063YRogfqucrzPvA86sP7zV +TOBuEK6smB38kiKSK6NgJjgmocaqJ95lIhEKEeO1jW/78diE2DilxjwsAIPAfjv vDuvZKfTw3ZOkqKa7DiYlgVfiKCZCohcPwPLAwMQRxcgDVSw/0SAwpD72vnlwCGj 95LUrdpreKRu7HXwKc2zYIRUmCEo5EhtPEIIIpaLQNjOIN5u1+Heu0CtcPY+6HBf EYL8SZKnzx1qxEyRwAqWvfdKSUmyFdXu/Z8mNEK2x8KFTLy5A0ZgWxKCiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKGKgw225F3pBcghNA8RoUhzPH9kMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvb1lxRERiYmtYZWtGeUNFMER4R2hTSE04ZjJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVf4fMA0G CSqGSIb3DQEBCwUAA4IBAQC59fIMtaBM4n18AIegDKMNtx8EHD+mtBsCc/xBsovq opQRmRjlp9rWZY5BxMA4F7KBdb5uuDGE0Q94WvfrmSxB3edc8NXJxsNcinOU/CR1 wDVrt0Je8IHvglAUyRUsrjwGWc77Xw77hFN3/9MgX9HPgRDzQsQkIUUQQzPkSJ7a h6EgfUWqWBeZ3IUiQ2XLq1pyNePbVM/f0h9XIvXC2wZ8pDgVzoBojyOH06TwCJpO 5h1FXyILPDJd8bcUaGTbxdaQNDSjEFfQpWEaCjnX8RGD26dckJAyWqNHtBmnG2nM APm5dEwJmDIfa26IlJGVzDWMGvJiuREKlKTHctOY9n+M -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:03 2026 by rpki-client