This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/o5WYWXJ2IkwoaadQzbiBkbuAmT4.roa File: o5WYWXJ2IkwoaadQzbiBkbuAmT4.roa (raw, json) Hash identifier: mfr4t7NqJd75xZUt/Qrchf7YDZUSPEjhW2eDYQXX8w8= Subject key identifier: A3:95:98:59:72:76:22:4C:28:69:A7:50:CD:B8:81:91:BB:80:99:3E Certificate issuer: /CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7 Certificate serial: 019B77C7400C12C7F42C0D098DF975207EBD Authority key identifier: 1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/o5WYWXJ2IkwoaadQzbiBkbuAmT4.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207655 IP address blocks: 194.36.0.0/24 maxlen: 24 2a12:3840::/29 maxlen: 29 2a12:3840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:40:0c:12:c7:f4:2c:0d:09:8d:f9:75:20:7e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7 Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a39598597276224c2869a750cdb88191bb80993e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fe:1a:94:91:1d:83:29:65:70:fb:ce:de:25: fe:6e:59:c7:ab:34:a8:f3:e2:06:6f:5e:81:8c:8c: d9:ce:e9:8f:51:ef:9d:39:69:42:81:98:88:c9:b6: 1a:1a:e9:12:05:32:fd:32:b5:a5:c9:e0:8e:6c:48: 25:a4:0a:20:2f:67:30:31:b8:68:48:c6:a4:e1:86: 3b:ac:8d:90:42:c1:99:d0:e1:39:f9:03:1e:b6:57: 66:07:27:e0:2a:aa:fa:df:f5:4b:30:c3:63:34:4e: 1a:41:23:97:b8:94:a8:fb:aa:90:99:bd:9f:37:34: 04:b9:40:8a:64:f9:48:9e:e0:7e:3d:2e:b8:37:10: 1d:80:1c:0c:69:ae:b2:8f:27:c1:48:b7:88:95:48: 11:d8:a5:be:7f:d9:47:63:cf:8f:40:ac:03:12:8b: a8:a1:e9:57:1c:09:90:2e:6c:c2:fc:c3:82:f6:cb: 0e:b9:d2:d5:33:6d:d7:12:bd:55:f0:d8:9f:98:5c: 7c:b7:0a:90:70:14:70:3b:98:07:9b:28:a8:70:2b: 0f:27:ef:20:25:76:4f:c7:1f:6e:5d:fa:03:3b:31: 94:c5:de:0c:54:b2:34:ff:c5:5b:18:4b:10:de:7c: ec:cb:bb:cf:45:dc:f5:fb:73:0e:f4:b7:26:7a:d5: e3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:95:98:59:72:76:22:4C:28:69:A7:50:CD:B8:81:91:BB:80:99:3E X509v3 Authority Key Identifier: keyid:1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/o5WYWXJ2IkwoaadQzbiBkbuAmT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.0.0/24 IPv6: 2a12:3840::/29 Signature Algorithm: sha256WithRSAEncryption 25:e6:2f:3f:07:d0:cd:b1:ef:c2:94:47:30:3a:d5:fd:d1:87: b3:84:9c:18:25:c2:34:58:68:48:95:a3:6c:5c:e0:0e:ed:64: a0:67:3e:31:b8:db:fd:ea:f3:3c:e5:03:b3:e3:0e:bf:94:42: 5c:0f:1a:cf:d5:c4:1e:de:6c:a8:03:11:f2:6b:f2:f0:c0:93: ef:b8:a7:2e:d3:16:59:3a:bd:2d:b3:42:d8:9c:8d:c7:fc:a3: 69:19:64:a1:5e:7e:80:87:4c:49:c7:a1:e9:03:c4:5f:f1:ca: d7:38:1f:74:aa:b5:d8:ae:4f:e5:79:a6:e4:81:2d:a2:a9:f3: d1:e4:41:6f:45:7d:44:25:73:99:9f:c3:e5:f7:18:e5:be:65: 2a:43:d8:72:ac:6b:14:14:10:a6:1f:04:2c:cb:9a:41:71:35: 94:80:dd:82:11:a5:b4:5b:43:48:75:42:e3:e8:fe:02:11:80: 50:48:38:db:41:4d:68:5a:7f:6d:6d:2d:6e:09:ca:57:38:5f: fb:c5:6b:7d:f2:72:fa:27:19:3c:d1:6e:33:17:ef:18:e9:ea: 01:ad:be:74:b6:ba:80:47:05:49:26:60:87:01:34:0d:a4:be: 74:37:05:00:2b:4b:1e:ca:eb:4f:28:ea:3e:94:bd:70:1a:19: 4f:d6:0f:63 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x0AMEsf0LA0Jjfl1IH69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMWI5YmM4YzdlMGZjNDdiZjhiMGE1NzJkMWE1NzJkNmE2 OTZiYjcwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzk1OTg1OTcyNzYyMjRjMjg2OWE3NTBjZGI4ODE5MWJiODA5OTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/4alJEdgyllcPvO3iX+blnHqzSo 8+IGb16BjIzZzumPUe+dOWlCgZiIybYaGukSBTL9MrWlyeCObEglpAogL2cwMbho SMak4YY7rI2QQsGZ0OE5+QMetldmByfgKqr63/VLMMNjNE4aQSOXuJSo+6qQmb2f NzQEuUCKZPlInuB+PS64NxAdgBwMaa6yjyfBSLeIlUgR2KW+f9lHY8+PQKwDEouo oelXHAmQLmzC/MOC9ssOudLVM23XEr1V8NifmFx8twqQcBRwO5gHmyiocCsPJ+8g JXZPxx9uXfoDOzGUxd4MVLI0/8VbGEsQ3nzsy7vPRdz1+3MO9LcmetXjlwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKOVmFlydiJMKGmnUM24gZG7gJk+MB8GA1UdIwQY MBaAFBsbm8jH4PxHv4sKVy0aVy1qaWu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3h1YnlNZmdfRWVfaXdwWExScFhMV3BwYTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80ZDJhOWYtNmY3OC00Y2M2LTlhZDYt MGY2Yjg0NjhjNzlkLzEvbzVXWVdYSjJJa3dvYWFkUXpiaUJrYnVBbVQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80ZDJhOWYtNmY3OC00Y2M2LTlhZDYtMGY2Yjg0NjhjNzlk LzEvR3h1YnlNZmdfRWVfaXdwWExScFhMV3BwYTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwiQAMA0E AgACMAcDBQMqEjhAMA0GCSqGSIb3DQEBCwUAA4IBAQAl5i8/B9DNse/ClEcwOtX9 0YezhJwYJcI0WGhIlaNsXOAO7WSgZz4xuNv96vM85QOz4w6/lEJcDxrP1cQe3myo AxHya/LwwJPvuKcu0xZZOr0ts0LYnI3H/KNpGWShXn6Ah0xJx6HpA8Rf8crXOB90 qrXYrk/leabkgS2iqfPR5EFvRX1EJXOZn8Pl9xjlvmUqQ9hyrGsUFBCmHwQsy5pB cTWUgN2CEaW0W0NIdULj6P4CEYBQSDjbQU1oWn9tbS1uCcpXOF/7xWt98nL6Jxk8 0W4zF+8Y6eoBrb50trqARwVJJmCHATQNpL50NwUAK0seyutPKOo+lL1wGhlP1g9j -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:06 2026 by rpki-client