This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/o-65htjELQbO15KPE0mZk7leVUc.roa File: o-65htjELQbO15KPE0mZk7leVUc.roa (raw, json) Hash identifier: u+Ffq8OVe3MPIaRaofAyKEnseKKYLjmcLmK+TvrDD54= Subject key identifier: A3:EE:B9:86:D8:C4:2D:06:CE:D7:92:8F:13:49:99:93:B9:5E:55:47 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B360467ECDF496948A7C154CDECF71F Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/o-65htjELQbO15KPE0mZk7leVUc.roa Signing time: Thu 01 Jan 2026 20:18:16 +0000 ROA not before: Thu 01 Jan 2026 20:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50430 IP address blocks: 93.157.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:04:67:ec:df:49:69:48:a7:c1:54:cd:ec:f7:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3eeb986d8c42d06ced7928f13499993b95e5547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e9:a8:dc:12:bb:cc:42:60:aa:b0:a7:ae:40: 82:08:5d:e2:5f:42:f2:d8:97:bd:d6:ae:e4:75:a1: c2:47:62:58:c4:94:9f:fd:85:1c:ca:25:9e:fd:bf: ba:c5:a3:2e:5c:5e:e2:54:08:09:43:cd:15:5f:f0: 2f:97:9e:fc:86:b1:32:91:58:6f:ea:30:5c:47:9d: b7:5a:f6:b1:b2:52:15:18:67:3b:27:c6:52:af:8a: 21:b9:9b:66:82:64:21:f1:5d:ea:b3:62:dd:18:b5: 92:41:ce:3c:87:7d:09:31:d3:d7:f2:bf:d5:24:29: 2a:cb:34:02:d2:60:83:78:3f:dd:f3:67:2e:82:a4: 3a:f2:4c:58:00:4d:d6:62:2e:27:3c:0c:a6:c2:2b: 77:4a:1e:ab:d2:e5:a8:42:c3:7c:76:ef:fc:66:6f: c1:6c:b5:6e:6c:28:9d:e1:ea:df:62:74:9f:b6:f2: 3a:de:80:20:4a:db:ff:82:15:2c:b8:92:7a:49:6b: 45:d9:e1:45:c1:30:60:f9:f9:9c:f8:ea:4d:a4:35: c0:88:30:3d:4e:90:0f:2b:39:24:82:05:94:1d:45: 9c:b6:95:ae:09:47:74:7d:a7:76:cc:26:6a:89:59: c6:46:03:24:5e:87:10:5c:ba:c5:ea:1f:d5:fd:12: 06:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EE:B9:86:D8:C4:2D:06:CE:D7:92:8F:13:49:99:93:B9:5E:55:47 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/o-65htjELQbO15KPE0mZk7leVUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.157.110.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:5b:f9:c6:53:e7:ec:94:d4:05:46:30:65:76:2e:19:6f:15: f7:12:5e:a5:61:0c:a0:98:57:3f:d3:ae:4a:0c:12:bc:d2:59: 98:52:f8:29:34:f4:ea:0f:7b:59:7b:c2:a0:31:43:92:c5:f3: a2:e9:1f:e8:69:87:b6:66:c7:d8:3f:b2:a7:65:26:aa:b9:e2: c0:3b:95:0c:af:36:77:af:e0:ae:6f:e4:18:0d:ea:b9:4a:ee: 9d:5a:fd:f7:e2:ca:29:fb:68:50:95:33:35:44:56:4b:07:29: d4:8e:0c:6f:74:7e:51:fc:42:81:37:3d:d9:fb:a2:32:f0:40: ad:8e:cd:95:eb:b5:01:89:32:ce:a6:a9:47:56:ae:de:b5:71: 44:8f:c5:f9:9d:2a:50:44:f8:ba:3f:89:12:85:84:b8:a2:1e: c2:37:17:d3:3d:be:a6:9a:44:a9:d4:86:19:51:4f:f6:c2:74: 9c:bc:14:49:39:ea:c0:55:b3:bd:f8:c5:10:c2:62:af:3f:97: 07:8e:53:cb:5e:8e:51:dd:24:22:6b:7e:42:e5:89:ab:03:7b: 91:24:3c:6e:86:62:47:6b:37:7b:dc:ed:28:3b:b9:82:6d:df: 69:92:44:cf:d9:41:4a:a7:1a:ad:c4:03:b6:d6:1b:90:27:8d: b9:10:d0:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgRn7N9JaUinwVTN7PcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2VlYjk4NmQ4YzQyZDA2Y2VkNzkyOGYxMzQ5OTk5M2I5NWU1NTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Omo3BK7zEJgqrCnrkCCCF3iX0Ly 2Je91q7kdaHCR2JYxJSf/YUcyiWe/b+6xaMuXF7iVAgJQ80VX/Avl578hrEykVhv 6jBcR523WvaxslIVGGc7J8ZSr4ohuZtmgmQh8V3qs2LdGLWSQc48h30JMdPX8r/V JCkqyzQC0mCDeD/d82cugqQ68kxYAE3WYi4nPAymwit3Sh6r0uWoQsN8du/8Zm/B bLVubCid4erfYnSftvI63oAgStv/ghUsuJJ6SWtF2eFFwTBg+fmc+OpNpDXAiDA9 TpAPKzkkggWUHUWctpWuCUd0fad2zCZqiVnGRgMkXocQXLrF6h/V/RIG/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKPuuYbYxC0GzteSjxNJmZO5XlVHMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvby02NWh0akVMUWJPMTVLUEUwbVprN2xlVlVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZ1uMA0G CSqGSIb3DQEBCwUAA4IBAQCeW/nGU+fslNQFRjBldi4ZbxX3El6lYQygmFc/065K DBK80lmYUvgpNPTqD3tZe8KgMUOSxfOi6R/oaYe2ZsfYP7KnZSaqueLAO5UMrzZ3 r+Cub+QYDeq5Su6dWv334sop+2hQlTM1RFZLBynUjgxvdH5R/EKBNz3Z+6Iy8ECt js2V67UBiTLOpqlHVq7etXFEj8X5nSpQRPi6P4kShYS4oh7CNxfTPb6mmkSp1IYZ UU/2wnScvBRJOerAVbO9+MUQwmKvP5cHjlPLXo5R3SQia35C5YmrA3uRJDxuhmJH azd73O0oO7mCbd9pkkTP2UFKpxqtxAO21huQJ425ENDm -----END CERTIFICATE-----Generated at Thu Jan 15 13:17:56 2026 by rpki-client