This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/oFHCaQPKmNFnK-xjaGQZIHmGs-A.roa File: oFHCaQPKmNFnK-xjaGQZIHmGs-A.roa (raw, json) Hash identifier: J7JRkb0A+kfNdSsR+CoYK/2IStJi66/isOQA2F1ezCo= Subject key identifier: A0:51:C2:69:03:CA:98:D1:67:2B:EC:63:68:64:19:20:79:86:B3:E0 Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5 Certificate serial: 019B7E38F809C5B0934E2E12E62E0D75FAB4 Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/oFHCaQPKmNFnK-xjaGQZIHmGs-A.roa Signing time: Fri 02 Jan 2026 10:20:21 +0000 ROA not before: Fri 02 Jan 2026 10:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203574 IP address blocks: 193.34.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f8:09:c5:b0:93:4e:2e:12:e6:2e:0d:75:fa:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5 Validity Not Before: Jan 2 10:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a051c26903ca98d1672bec63686419207986b3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:88:36:e2:23:e5:9b:5a:78:76:31:5a:27: a0:9a:96:ae:41:2a:d3:9a:4a:26:81:b2:3c:9c:2f: 69:d3:f5:5e:eb:8b:a3:c9:0d:f0:f3:39:16:be:35: 98:4f:19:88:32:c2:2f:3a:1a:55:4e:85:7f:b1:3e: 97:6f:b4:8f:b1:b2:4f:4f:f7:bb:e9:21:04:1b:15: ee:1a:0d:4f:d2:3e:5a:bf:6e:c7:fe:fa:3a:da:f3: 23:9c:a1:e3:5b:9a:74:0e:a4:63:c7:c9:3a:1a:47: 91:01:e1:c7:48:88:6c:8c:d6:50:c8:86:77:83:c3: b3:58:67:3e:cf:e4:a2:d4:af:f8:b7:ce:1a:9a:6c: 1f:a3:ac:02:15:db:24:df:dc:aa:84:ff:e7:fa:83: 5d:0e:ad:ff:86:24:76:72:a7:10:27:70:ca:7d:e0: c8:ab:8a:36:27:b0:4a:12:8f:a1:2f:24:1d:eb:9e: fc:c3:c8:98:a3:24:73:26:d4:7c:ad:73:a5:7c:43: 7d:50:6e:2f:eb:52:66:68:f1:cc:60:ed:82:16:fa: 7c:c0:e1:9a:ca:e2:7c:b0:40:67:6f:03:d5:ee:2c: e1:d9:19:fb:9c:48:0b:5b:51:fa:a2:fe:69:a6:30: 02:bf:20:95:3a:31:ed:e6:d6:02:7d:09:d2:a6:7f: 67:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:51:C2:69:03:CA:98:D1:67:2B:EC:63:68:64:19:20:79:86:B3:E0 X509v3 Authority Key Identifier: keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/oFHCaQPKmNFnK-xjaGQZIHmGs-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.174.0/23 Signature Algorithm: sha256WithRSAEncryption 16:55:b0:77:7c:b6:24:08:80:67:16:5e:75:85:ee:78:d5:ad: 73:41:21:8c:8e:64:92:29:42:7b:71:b6:49:4b:86:3d:04:85: d3:b8:b0:1a:21:9c:98:75:99:4c:14:d8:9b:71:43:65:53:94: 7a:62:f6:b1:6e:47:5a:e5:dc:41:76:1e:c4:06:fd:e2:f2:d7: 55:5e:d6:4e:5d:a8:9c:3f:b2:db:ff:32:53:69:bd:90:32:9b: 3e:06:8c:69:da:d8:a2:cf:b8:66:a3:74:53:a1:fa:99:4a:96: ce:c4:48:9e:3a:a0:67:43:62:3d:52:4c:26:51:e2:6e:d3:a5: 58:53:d0:1d:7c:a9:33:a5:cf:af:46:7d:5c:42:93:3d:d3:26: 09:e4:d5:21:70:cd:23:68:ed:bc:50:69:e2:84:9c:55:f3:d6: 7a:78:3e:19:3d:a9:fe:df:8c:2f:db:66:b6:4b:8c:65:0b:24: c3:2e:ba:a6:7b:fd:7a:e3:15:df:df:06:21:9f:b5:9a:6a:c3: 2e:64:26:75:0e:50:fd:ba:ab:14:05:e3:e9:d9:de:39:eb:68: 15:74:df:2b:a5:fd:99:22:df:0d:b8:2d:8f:f9:8c:53:ff:96: 70:82:76:9c:f4:37:55:61:80:8e:23:7b:39:79:ce:fc:f7:85: 19:cd:48:a7 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OPgJxbCTTi4S5i4Ndfq0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNjkyZmRhMDE5Njg3ZDU4ZDcxYmYzMmMwOTA4ZDEyZTQ2 YjRjYTUwHhcNMjYwMTAyMTAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDUxYzI2OTAzY2E5OGQxNjcyYmVjNjM2ODY0MTkyMDc5ODZiM2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z2INuIj5ZtaeHYxWiegmpauQSrT mkomgbI8nC9p0/Ve64ujyQ3w8zkWvjWYTxmIMsIvOhpVToV/sT6Xb7SPsbJPT/e7 6SEEGxXuGg1P0j5av27H/vo62vMjnKHjW5p0DqRjx8k6GkeRAeHHSIhsjNZQyIZ3 g8OzWGc+z+Si1K/4t84ammwfo6wCFdsk39yqhP/n+oNdDq3/hiR2cqcQJ3DKfeDI q4o2J7BKEo+hLyQd6578w8iYoyRzJtR8rXOlfEN9UG4v61JmaPHMYO2CFvp8wOGa yuJ8sEBnbwPV7izh2Rn7nEgLW1H6ov5ppjACvyCVOjHt5tYCfQnSpn9newIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKBRwmkDypjRZyvsY2hkGSB5hrPgMB8GA1UdIwQY MBaAFPppL9oBlofVjXG/MsCQjRLka0ylMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ta3YyZ0dXaDlXTmNiOHl3SkNORXVSclRLVS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvOGJmZWM0LWJkNmYtNDY1MC1hNGQ4 LWFkMWMzMGMxMWU1YS8xL29GSENhUVBLbU5GbksteGphR1FaSUhtR3MtQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTEvOGJmZWM0LWJkNmYtNDY1MC1hNGQ4LWFkMWMzMGMxMWU1 YS8xLzEtbWt2MmdHV2g5V05jYjh5d0pDTkV1UnJUS1UuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHBIq4w DQYJKoZIhvcNAQELBQADggEBABZVsHd8tiQIgGcWXnWF7njVrXNBIYyOZJIpQntx tklLhj0EhdO4sBohnJh1mUwU2JtxQ2VTlHpi9rFuR1rl3EF2HsQG/eLy11Ve1k5d qJw/stv/MlNpvZAymz4GjGna2KLPuGajdFOh+plKls7ESJ46oGdDYj1STCZR4m7T pVhT0B18qTOlz69GfVxCkz3TJgnk1SFwzSNo7bxQaeKEnFXz1np4Phk9qf7fjC/b ZrZLjGULJMMuuqZ7/XrjFd/fBiGftZpqwy5kJnUOUP26qxQF4+nZ3jnraBV03yul /Zki3w24LY/5jFP/lnCCdpz0N1VhgI4jezl5zvz3hRnNSKc= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:57 2026 by rpki-client