This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/ouslthZTAKifIxprW-deYjg0IV4.roa File: ouslthZTAKifIxprW-deYjg0IV4.roa (raw, json) Hash identifier: UcvHA4mOVxzyujtpXJcQefQpw5wOyvUPfvVySqUiIdM= Subject key identifier: A2:EB:25:B6:16:53:00:A8:9F:23:1A:6B:5B:E7:5E:62:38:34:21:5E Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78 Certificate serial: 019B7EA6935C624037F10590159569BDDD7F Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/ouslthZTAKifIxprW-deYjg0IV4.roa Signing time: Fri 02 Jan 2026 12:20:04 +0000 ROA not before: Fri 02 Jan 2026 12:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39583 IP address blocks: 185.7.4.0/22 maxlen: 22 195.244.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:93:5c:62:40:37:f1:05:90:15:95:69:bd:dd:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78 Validity Not Before: Jan 2 12:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2eb25b6165300a89f231a6b5be75e623834215e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:11:bd:5f:b0:08:e2:28:fb:b3:14:09:f9:d7: b1:cb:e7:2a:8f:cf:96:28:22:61:1a:4a:39:47:cf: e4:6d:c4:81:63:d7:d9:e3:2d:fe:b1:0b:e7:ab:09: aa:13:17:f0:9d:83:66:fa:e7:6d:a2:0d:a3:fb:01: 73:55:b2:59:3b:09:21:63:7c:15:1e:57:9e:46:df: 63:08:2f:47:87:08:6a:c1:dc:a2:67:f9:24:8a:a6: b7:40:47:32:6d:9f:33:f9:d9:7f:96:3d:bd:0d:b3: 47:28:cb:2d:b1:36:5c:a3:25:46:36:48:99:2b:b4: d3:67:da:4b:7a:91:3e:59:70:60:10:e0:ce:a9:06: 70:91:57:d8:d8:ed:f9:4c:f7:ae:73:e3:2d:66:54: 8b:48:cf:b9:13:0d:6c:76:74:bc:b3:ad:ce:a9:dc: 3e:0b:25:9c:91:e6:f5:bb:bc:40:fa:01:f0:36:42: 93:35:41:80:b4:7a:ce:73:f2:8b:98:09:be:33:1a: a8:03:46:ba:d5:02:bc:a5:0a:8d:b9:3f:41:92:5a: 92:d1:f9:c2:ff:7e:ab:b0:d7:0b:ab:f2:c4:53:83: 14:4d:de:50:0e:f1:da:89:d6:a6:ba:81:e5:db:3d: 58:7d:33:59:5b:a5:63:c6:8c:4a:3d:74:87:04:5c: eb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EB:25:B6:16:53:00:A8:9F:23:1A:6B:5B:E7:5E:62:38:34:21:5E X509v3 Authority Key Identifier: keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/ouslthZTAKifIxprW-deYjg0IV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.4.0/22 195.244.20.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:a6:fb:1a:cb:a2:b7:5f:53:df:33:59:ed:e3:3f:b1:d7:4e: 0f:ed:9c:4f:5f:8b:b7:91:d9:da:f7:f3:94:ce:1d:3b:c2:f4: 9a:47:5c:ac:70:6e:1f:a7:82:49:74:79:c0:bf:cc:b0:60:73: 28:0f:0d:e0:70:cc:28:98:26:78:87:01:e0:a8:cc:0a:17:97: 38:7a:4e:6d:83:bd:a7:c9:41:79:7b:61:ee:d6:27:00:79:21: 2a:c0:56:f9:c2:41:93:3e:d2:bc:26:66:6e:1b:19:6b:9b:6e: 96:07:02:4d:5d:bf:bc:96:f8:08:98:59:cb:b4:10:6d:12:73: d1:18:87:82:78:f7:2a:99:7d:f7:fc:cb:ab:38:f9:be:95:58: e7:bc:e4:7d:72:24:df:1a:c8:5e:0f:7d:d7:73:98:ef:50:e2: c1:f0:91:d3:2c:a4:55:fb:0c:65:ec:e1:47:c5:f1:ad:90:a7: e4:99:ad:15:47:89:82:77:02:90:d4:92:7e:f3:2f:48:9b:9c: 1d:f8:dd:80:7f:1a:14:fb:c1:aa:2d:b0:aa:54:2d:fa:94:fc: e2:17:58:e9:98:a8:2d:54:39:b9:a9:e9:d6:25:6d:82:a1:7b: 2e:58:e5:2a:11:ba:2c:93:39:66:3a:b2:20:76:55:e9:1e:b5: 3b:4b:26:ea -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+ppNcYkA38QWQFZVpvd1/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NGZhNTY3YzA3YTVhMmUxZjJjOGNiMjYxMWYxNzM2OTc4 NzFmNzgwHhcNMjYwMTAyMTIyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmViMjViNjE2NTMwMGE4OWYyMzFhNmI1YmU3NWU2MjM4MzQyMTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxG9X7AI4ij7sxQJ+dexy+cqj8+W KCJhGko5R8/kbcSBY9fZ4y3+sQvnqwmqExfwnYNm+udtog2j+wFzVbJZOwkhY3wV HleeRt9jCC9HhwhqwdyiZ/kkiqa3QEcybZ8z+dl/lj29DbNHKMstsTZcoyVGNkiZ K7TTZ9pLepE+WXBgEODOqQZwkVfY2O35TPeuc+MtZlSLSM+5Ew1sdnS8s63Oqdw+ CyWckeb1u7xA+gHwNkKTNUGAtHrOc/KLmAm+MxqoA0a61QK8pQqNuT9BklqS0fnC /36rsNcLq/LEU4MUTd5QDvHaidamuoHl2z1YfTNZW6VjxoxKPXSHBFzrZQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKLrJbYWUwConyMaa1vnXmI4NCFeMB8GA1UdIwQY MBaAFAlPpWfAelouHyyMsmEfFzaXhx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGIt YWVhMjUyZGM2M2IzLzEvb3VzbHRoWlRBS2lmSXhwclctZGVZamcwSVY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82ZGJhODMtYTRhNC00OTkxLWIyMGItYWVhMjUyZGM2M2Iz LzEvQ1UtbFo4QjZXaTRmTEl5eVlSOFhOcGVISDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuQcEAwQB w/QUMA0GCSqGSIb3DQEBCwUAA4IBAQArpvsay6K3X1PfM1nt4z+x104P7ZxPX4u3 kdna9/OUzh07wvSaR1yscG4fp4JJdHnAv8ywYHMoDw3gcMwomCZ4hwHgqMwKF5c4 ek5tg72nyUF5e2Hu1icAeSEqwFb5wkGTPtK8JmZuGxlrm26WBwJNXb+8lvgImFnL tBBtEnPRGIeCePcqmX33/MurOPm+lVjnvOR9ciTfGsheD33Xc5jvUOLB8JHTLKRV +wxl7OFHxfGtkKfkma0VR4mCdwKQ1JJ+8y9Im5wd+N2AfxoU+8GqLbCqVC36lPzi F1jpmKgtVDm5qenWJW2CoXsuWOUqEboskzlmOrIgdlXpHrU7Sybq -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:26 2026 by rpki-client