This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/O_VDSTEuqOGqu70pCxRmCW-6TUA.roa File: O_VDSTEuqOGqu70pCxRmCW-6TUA.roa (raw, json) Hash identifier: 9GMoYD3Uj1noF4pEvupjpvPMeufwxuuOufErPrD7SRI= Subject key identifier: 3B:F5:43:49:31:2E:A8:E1:AA:BB:BD:29:0B:14:66:09:6F:BA:4D:40 Certificate issuer: /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50 Certificate serial: 019B7AC8E281B1DA59683731D45FD158E388 Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/O_VDSTEuqOGqu70pCxRmCW-6TUA.roa Signing time: Thu 01 Jan 2026 18:19:04 +0000 ROA not before: Thu 01 Jan 2026 18:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31645 IP address blocks: 194.32.84.0/23 maxlen: 23 194.32.84.0/24 maxlen: 24 194.32.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e2:81:b1:da:59:68:37:31:d4:5f:d1:58:e3:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50 Validity Not Before: Jan 1 18:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bf54349312ea8e1aabbbd290b1466096fba4d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:23:6f:b4:49:e2:09:f7:1b:78:14:35:11:19: c6:02:26:e4:06:02:11:a6:7b:48:f8:74:e3:24:1f: c1:39:7d:eb:4b:4c:8a:77:b3:22:d4:22:4f:89:7b: dc:1e:11:ce:09:03:ea:7a:ba:90:36:99:c4:f6:a4: 10:cb:31:90:41:23:6f:b5:8e:e9:82:ed:6e:61:cb: 3f:01:fc:79:84:17:fa:e1:0b:32:d8:36:b2:c5:33: 59:78:cd:91:47:0c:8f:bd:8b:77:d3:7b:86:0b:af: ce:1c:eb:9f:2f:cf:61:00:fe:7a:a8:2f:88:b2:7f: d3:d6:bf:4e:1c:cb:a2:4f:bd:69:17:3c:86:9c:cc: 01:3d:31:f7:82:22:5c:99:6b:5f:18:54:63:19:f9: d4:55:e2:17:07:5c:42:19:43:8e:5b:15:f1:91:30: 92:e1:2b:1e:ee:e8:5c:db:16:50:10:63:71:71:c9: 2f:a9:9c:5b:16:c2:ca:53:d1:0d:10:16:a3:02:0f: c7:d1:e3:9c:15:06:c3:87:30:60:d9:aa:0d:76:fa: 0b:7c:70:a8:d2:81:1c:1f:cc:42:56:ab:27:b3:d3: bd:49:73:d0:cf:d4:32:24:ce:d4:5a:b6:62:2f:94: 61:66:8d:1d:88:1d:2d:d5:d9:a4:ed:6c:fe:f5:d6: 39:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F5:43:49:31:2E:A8:E1:AA:BB:BD:29:0B:14:66:09:6F:BA:4D:40 X509v3 Authority Key Identifier: keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/O_VDSTEuqOGqu70pCxRmCW-6TUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.84.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:4b:b9:c8:cc:a5:9c:c3:02:0a:ab:44:ce:ea:93:07:70:e8: 79:af:db:04:4e:76:5f:8c:73:dd:1f:64:f0:6b:a8:54:14:3b: ae:5c:fb:96:74:48:1f:48:50:b1:85:56:f1:f5:65:47:6f:6f: 74:6a:fd:29:1d:91:7b:88:8f:42:a2:33:ad:33:02:ec:8f:92: af:06:ed:b6:ca:12:00:6b:fc:e1:cd:7d:ed:da:16:7e:e3:61: d7:cc:35:7d:4a:26:c2:65:4f:34:46:37:d2:9e:30:49:2c:af: 9e:23:19:3c:56:78:f8:38:88:c8:a7:49:cc:85:8e:6d:e4:d4: 24:e1:1d:78:ae:6a:e2:c1:2d:17:40:f0:7f:f2:3d:41:2a:66: f4:4f:07:e4:18:5f:dc:07:ae:8c:de:15:25:19:a2:e6:78:74: 58:e3:fc:8d:d9:52:ec:95:ba:00:6a:17:3f:b4:00:60:eb:0c: fb:e2:cf:e0:f3:5f:bd:a1:ed:67:b7:24:23:7a:cd:7a:da:6a: 8c:aa:07:73:02:01:ff:71:ea:88:45:f3:65:d3:c1:02:f0:77: 1b:69:6e:56:04:26:ff:0d:d7:c7:cd:cf:fd:94:72:b9:69:cb: ba:77:0d:37:79:3c:55:ce:a4:84:97:a1:70:95:0c:40:3b:df: 5c:ee:18:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yOKBsdpZaDcx1F/RWOOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYWY1ZGM2MjljZDQ5Mzc1OTdmM2ZjZDg1OGNhNWM4MGVk OTdjNTAwHhcNMjYwMTAxMTgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmY1NDM0OTMxMmVhOGUxYWFiYmJkMjkwYjE0NjYwOTZmYmE0ZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SNvtEniCfcbeBQ1ERnGAibkBgIR pntI+HTjJB/BOX3rS0yKd7Mi1CJPiXvcHhHOCQPqerqQNpnE9qQQyzGQQSNvtY7p gu1uYcs/Afx5hBf64Qsy2DayxTNZeM2RRwyPvYt303uGC6/OHOufL89hAP56qC+I sn/T1r9OHMuiT71pFzyGnMwBPTH3giJcmWtfGFRjGfnUVeIXB1xCGUOOWxXxkTCS 4Sse7uhc2xZQEGNxcckvqZxbFsLKU9ENEBajAg/H0eOcFQbDhzBg2aoNdvoLfHCo 0oEcH8xCVqsns9O9SXPQz9QyJM7UWrZiL5RhZo0diB0t1dmk7Wz+9dY5sQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDv1Q0kxLqjhqru9KQsUZglvuk1AMB8GA1UdIwQY MBaAFDOvXcYpzUk3WX8/zYWMpcgO2XxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNTUyYWUtYzU1ZS00YTBiLWI4ZmUt ZTI2ZTlmNTFkZGIyLzEvT19WRFNURXVxT0dxdTcwcEN4Um1DVy02VFVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zNTUyYWUtYzU1ZS00YTBiLWI4ZmUtZTI2ZTlmNTFkZGIy LzEvTTY5ZHhpbk5TVGRaZnpfTmhZeWx5QTdaZkZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwiBUMA0G CSqGSIb3DQEBCwUAA4IBAQAeS7nIzKWcwwIKq0TO6pMHcOh5r9sETnZfjHPdH2Tw a6hUFDuuXPuWdEgfSFCxhVbx9WVHb290av0pHZF7iI9CojOtMwLsj5KvBu22yhIA a/zhzX3t2hZ+42HXzDV9SibCZU80RjfSnjBJLK+eIxk8Vnj4OIjIp0nMhY5t5NQk 4R14rmriwS0XQPB/8j1BKmb0TwfkGF/cB66M3hUlGaLmeHRY4/yN2VLslboAahc/ tABg6wz74s/g81+9oe1ntyQjes162mqMqgdzAgH/ceqIRfNl08EC8HcbaW5WBCb/ DdfHzc/9lHK5acu6dw03eTxVzqSEl6FwlQxAO99c7hiL -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:08 2026 by rpki-client