This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/cOQzX0ZgdC95fwEhMGOJPgzc7pQ.roa File: cOQzX0ZgdC95fwEhMGOJPgzc7pQ.roa (raw, json) Hash identifier: eeOGfbWU7at9s1wv4++gVcvwFwwdlNK8hImsrJAnmsQ= Subject key identifier: 70:E4:33:5F:46:60:74:2F:79:7F:01:21:30:63:89:3E:0C:DC:EE:94 Certificate issuer: /CN=a5cde204a3669f9281ee1fc1d5f248542a805e00 Certificate serial: 019B76EAB3E1AEB36EF1B7AC06D6FC36F757 Authority key identifier: A5:CD:E2:04:A3:66:9F:92:81:EE:1F:C1:D5:F2:48:54:2A:80:5E:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/cOQzX0ZgdC95fwEhMGOJPgzc7pQ.roa Signing time: Thu 01 Jan 2026 00:17:31 +0000 ROA not before: Thu 01 Jan 2026 00:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49140 IP address blocks: 193.200.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft rsync://rpki.ripe.net/repository/DEFAULT/pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b3:e1:ae:b3:6e:f1:b7:ac:06:d6:fc:36:f7:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5cde204a3669f9281ee1fc1d5f248542a805e00 Validity Not Before: Jan 1 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70e4335f4660742f797f01213063893e0cdcee94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:ad:dc:4d:11:0e:ab:25:84:85:a9:3b:9a: 10:d2:f8:ca:9c:67:0e:ea:b4:7b:99:f8:da:d2:b8: 1d:85:2d:aa:a2:74:03:04:8b:21:04:37:d8:aa:99: 34:6e:7a:b0:9c:26:85:9a:59:8f:86:c3:2c:cd:d5: 52:44:0f:9f:c9:fd:cf:2c:38:17:f6:19:b5:51:4c: af:84:b8:0b:d5:cb:8e:bb:81:07:2b:52:7d:6d:af: 0c:9a:77:01:4c:3f:cb:e0:34:41:98:98:61:12:d1: 2b:68:05:cd:5a:5f:d4:c9:c9:c9:44:a3:5f:bc:8e: 2d:3d:0d:6f:6b:a8:f3:cf:16:59:be:b8:4b:89:cd: 5f:2f:4a:df:7f:56:b7:cd:e8:25:64:08:80:e9:b8: 65:05:e4:5f:15:57:2b:2b:da:d2:de:cd:77:ca:8e: b7:07:1c:e4:a7:79:0e:22:3e:ce:91:71:ac:9d:db: aa:fa:b6:ce:b5:dd:03:73:c8:26:3f:ff:87:72:a7: bc:12:11:70:8d:28:01:15:7f:3a:ad:74:d3:46:6d: 83:ea:af:1c:41:5b:e4:01:da:7a:49:2b:9e:26:eb: ea:85:11:90:5d:b6:c3:35:63:37:7f:73:ca:cc:12: ee:2b:83:17:34:e4:eb:f7:85:a9:6a:e7:e5:03:f1: 71:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E4:33:5F:46:60:74:2F:79:7F:01:21:30:63:89:3E:0C:DC:EE:94 X509v3 Authority Key Identifier: keyid:A5:CD:E2:04:A3:66:9F:92:81:EE:1F:C1:D5:F2:48:54:2A:80:5E:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/cOQzX0ZgdC95fwEhMGOJPgzc7pQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.161.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:e8:f2:3b:6b:67:de:21:f2:3c:45:88:e0:0d:41:ea:fc:7f: 2c:9c:41:ce:81:77:7e:c9:5d:c0:98:fe:24:4a:65:0b:02:7c: d3:42:31:4b:ab:c5:1d:eb:af:b2:b7:eb:07:3e:b4:4a:d4:1d: 83:92:29:92:f0:8f:4a:55:6a:f0:6f:fc:ff:e1:21:f8:75:d6: 51:5d:4a:33:fd:ee:5a:ff:e4:3c:c5:be:3b:d8:7d:af:09:bf: fc:43:a3:53:de:d2:e6:e6:77:eb:7b:3e:39:c8:84:8c:44:34: 1e:58:00:3b:06:31:0f:6a:6f:90:f3:9b:32:fb:83:c3:2e:42: bc:42:f7:2c:36:ad:b6:8b:8b:0d:98:18:e2:be:eb:34:aa:69: 97:da:6a:cf:be:a6:40:e6:74:b2:61:9b:89:35:94:2e:8c:02: 34:d8:5b:ab:c6:8d:52:7a:8b:c2:67:01:54:28:56:77:60:49: bb:78:02:e8:5f:c1:d0:47:69:89:6b:6b:5e:63:03:7c:2c:a6: cd:21:a8:7e:73:a5:99:a7:a9:91:13:fa:3d:2a:6b:3a:d9:b7: f7:b8:10:66:f4:01:d2:9d:c2:38:04:43:c9:7f:9c:6a:0d:1b: 57:51:55:25:34:46:f5:4a:3a:2c:37:a9:1f:4b:27:fb:6c:52: 14:12:a6:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26rPhrrNu8besBtb8NvdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1Y2RlMjA0YTM2NjlmOTI4MWVlMWZjMWQ1ZjI0ODU0MmE4 MDVlMDAwHhcNMjYwMTAxMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGU0MzM1ZjQ2NjA3NDJmNzk3ZjAxMjEzMDYzODkzZTBjZGNlZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLGt3E0RDqslhIWpO5oQ0vjKnGcO 6rR7mfja0rgdhS2qonQDBIshBDfYqpk0bnqwnCaFmlmPhsMszdVSRA+fyf3PLDgX 9hm1UUyvhLgL1cuOu4EHK1J9ba8MmncBTD/L4DRBmJhhEtEraAXNWl/UycnJRKNf vI4tPQ1va6jzzxZZvrhLic1fL0rff1a3zeglZAiA6bhlBeRfFVcrK9rS3s13yo63 Bxzkp3kOIj7OkXGsnduq+rbOtd0Dc8gmP/+Hcqe8EhFwjSgBFX86rXTTRm2D6q8c QVvkAdp6SSueJuvqhRGQXbbDNWM3f3PKzBLuK4MXNOTr94WpauflA/FxRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHDkM19GYHQveX8BITBjiT4M3O6UMB8GA1UdIwQY MBaAFKXN4gSjZp+Sge4fwdXySFQqgF4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGMzaUJLTm1uNUtCN2hfQjFmSklWQ3FBWGdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xYTNlMGEtOTAyZS00YzgwLTgzYzYt N2JjMmY5Y2MxODUxLzEvY09RelgwWmdkQzk1ZndFaE1HT0pQZ3pjN3BRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8xYTNlMGEtOTAyZS00YzgwLTgzYzYtN2JjMmY5Y2MxODUx LzEvcGMzaUJLTm1uNUtCN2hfQjFmSklWQ3FBWGdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcihMA0G CSqGSIb3DQEBCwUAA4IBAQCa6PI7a2feIfI8RYjgDUHq/H8snEHOgXd+yV3AmP4k SmULAnzTQjFLq8Ud66+yt+sHPrRK1B2DkimS8I9KVWrwb/z/4SH4ddZRXUoz/e5a /+Q8xb472H2vCb/8Q6NT3tLm5nfrez45yISMRDQeWAA7BjEPam+Q85sy+4PDLkK8 QvcsNq22i4sNmBjivus0qmmX2mrPvqZA5nSyYZuJNZQujAI02Furxo1SeovCZwFU KFZ3YEm7eALoX8HQR2mJa2teYwN8LKbNIah+c6WZp6mRE/o9Kms62bf3uBBm9AHS ncI4BEPJf5xqDRtXUVUlNEb1SjosN6kfSyf7bFIUEqYr -----END CERTIFICATE-----Generated at Tue Feb 10 01:04:36 2026 by rpki-client