This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/h9uxXItcVMUhyEnd-qfo0NworEk.roa File: h9uxXItcVMUhyEnd-qfo0NworEk.roa (raw, json) Hash identifier: cN3aXRc8HLSRjs8+K7/jdo4PEzNiyVUr1h8Z9QW7HmQ= Subject key identifier: 87:DB:B1:5C:8B:5C:54:C5:21:C8:49:DD:FA:A7:E8:D0:DC:28:AC:49 Certificate issuer: /CN=3826423eb01955224e6c11d19c6d39381e8be21d Certificate serial: 019B7E38CC9F085B7E5BC3B17B477F025DCF Authority key identifier: 38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/h9uxXItcVMUhyEnd-qfo0NworEk.roa Signing time: Fri 02 Jan 2026 10:20:10 +0000 ROA not before: Fri 02 Jan 2026 10:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47650 IP address blocks: 195.34.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:cc:9f:08:5b:7e:5b:c3:b1:7b:47:7f:02:5d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3826423eb01955224e6c11d19c6d39381e8be21d Validity Not Before: Jan 2 10:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87dbb15c8b5c54c521c849ddfaa7e8d0dc28ac49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f0:c4:44:2a:11:83:70:51:5d:4e:20:09:72: 1d:11:98:21:4e:50:e9:60:32:77:06:5c:23:28:8d: a4:f4:ac:21:a4:1c:91:53:e8:3f:8a:a4:47:e6:b9: 34:c8:c5:df:7a:c3:bb:27:e3:fd:85:ac:69:56:61: e2:44:08:84:35:fc:5f:f0:83:55:35:cd:39:85:2d: ee:92:4d:c1:64:f0:a6:be:6c:03:5f:a8:c2:c7:a6: 9e:aa:eb:6e:52:52:89:2f:bf:2a:f3:5b:85:1e:5c: 4c:7f:4f:a4:86:b1:10:b0:0f:2e:16:bc:db:aa:39: bd:47:e4:de:22:4d:3b:89:04:60:6e:e5:34:80:99: a8:f2:1b:d7:8f:38:88:3e:b0:8c:ce:b6:df:41:b5: 22:83:d4:6d:e7:4a:e1:22:f3:05:47:d7:b3:46:7a: 21:0d:25:58:6d:a7:d8:fd:8f:da:fa:17:78:ee:f4: f6:dc:4f:48:f5:01:20:fb:bc:66:10:5e:11:7f:d4: c4:fd:d5:11:00:af:54:c8:31:d5:2b:27:9a:8a:42: f9:7d:7a:a8:ef:95:ff:da:35:d6:3d:aa:be:e5:7c: 33:8e:a3:d7:88:18:41:90:a6:ab:9f:5f:94:5e:9d: 41:7b:dc:63:6a:e2:7d:0d:d7:03:b9:8d:f5:c7:c4: a8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DB:B1:5C:8B:5C:54:C5:21:C8:49:DD:FA:A7:E8:D0:DC:28:AC:49 X509v3 Authority Key Identifier: keyid:38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/h9uxXItcVMUhyEnd-qfo0NworEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.34.220.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:c9:a3:a9:87:9b:57:03:72:bb:e9:2c:f6:1b:58:1f:df:a2: 11:e3:07:f1:e3:7a:02:b0:1e:63:18:76:f9:01:60:ce:2b:e0: a4:d4:d3:15:03:6c:ff:cc:f1:54:80:29:c4:f8:f3:64:5b:c5: b0:3f:64:ab:37:92:5f:92:ee:67:cc:4b:bb:21:04:71:5f:5e: e8:e3:a9:99:2c:1a:1d:4f:7f:98:a2:f3:b2:2e:ef:42:e0:37: 02:6d:77:03:cc:25:31:f2:ec:f1:31:d9:57:be:de:de:44:a8: 1a:4d:de:40:63:1c:95:55:56:59:03:38:b9:dc:27:8c:f4:dc: 2a:ec:e6:1e:fa:36:a8:d1:46:c1:f9:70:9b:79:8f:01:95:46: 2f:37:34:eb:22:49:d0:bf:d8:ac:47:0e:39:06:f0:52:eb:72: d8:6e:92:72:50:df:c1:d2:6c:d6:f8:a3:5f:42:fa:b1:43:89: eb:a8:ad:26:1d:fe:00:3e:c2:18:b3:70:b2:5c:9e:d6:73:a2: 4c:5c:74:60:c9:87:51:b8:e7:8d:14:82:66:e1:89:4d:c0:17: 33:6e:23:84:d9:8a:32:a6:83:99:76:a2:f5:1a:55:df:6f:1f: 4e:34:b7:ba:78:a1:d5:df:5b:58:94:99:e7:ae:2a:bf:bf:e1: c6:c6:bb:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OMyfCFt+W8Oxe0d/Al3PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjY0MjNlYjAxOTU1MjI0ZTZjMTFkMTljNmQzOTM4MWU4 YmUyMWQwHhcNMjYwMTAyMTAyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2RiYjE1YzhiNWM1NGM1MjFjODQ5ZGRmYWE3ZThkMGRjMjhhYzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvDERCoRg3BRXU4gCXIdEZghTlDp YDJ3BlwjKI2k9KwhpByRU+g/iqRH5rk0yMXfesO7J+P9haxpVmHiRAiENfxf8INV Nc05hS3ukk3BZPCmvmwDX6jCx6aequtuUlKJL78q81uFHlxMf0+khrEQsA8uFrzb qjm9R+TeIk07iQRgbuU0gJmo8hvXjziIPrCMzrbfQbUig9Rt50rhIvMFR9ezRnoh DSVYbafY/Y/a+hd47vT23E9I9QEg+7xmEF4Rf9TE/dURAK9UyDHVKyeaikL5fXqo 75X/2jXWPaq+5XwzjqPXiBhBkKarn1+UXp1Be9xjauJ9DdcDuY31x8SoPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIfbsVyLXFTFIchJ3fqn6NDcKKxJMB8GA1UdIwQY MBaAFDgmQj6wGVUiTmwR0ZxtOTgei+IdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NaQ1ByQVpWU0pPYkJIUm5HMDVPQjZMNGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xMWQxZTUtM2NjNy00OTcyLWEwN2Et Nzg1ZTNlODc2OGY5LzEvaDl1eFhJdGNWTVVoeUVuZC1xZm8wTndvckVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8xMWQxZTUtM2NjNy00OTcyLWEwN2EtNzg1ZTNlODc2OGY5 LzEvT0NaQ1ByQVpWU0pPYkJIUm5HMDVPQjZMNGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwyLcMA0G CSqGSIb3DQEBCwUAA4IBAQBtyaOph5tXA3K76Sz2G1gf36IR4wfx43oCsB5jGHb5 AWDOK+Ck1NMVA2z/zPFUgCnE+PNkW8WwP2SrN5Jfku5nzEu7IQRxX17o46mZLBod T3+YovOyLu9C4DcCbXcDzCUx8uzxMdlXvt7eRKgaTd5AYxyVVVZZAzi53CeM9Nwq 7OYe+jao0UbB+XCbeY8BlUYvNzTrIknQv9isRw45BvBS63LYbpJyUN/B0mzW+KNf QvqxQ4nrqK0mHf4APsIYs3CyXJ7Wc6JMXHRgyYdRuOeNFIJm4YlNwBczbiOE2Yoy poOZdqL1GlXfbx9ONLe6eKHV31tYlJnnriq/v+HGxrs4 -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:56 2026 by rpki-client