This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/o0EjjepROkDVSRtBcfkis5atct4.roa File: o0EjjepROkDVSRtBcfkis5atct4.roa (raw, json) Hash identifier: lT/qynfR5CRTDbQpd0uosdF+Ke0zBPEQUldc09LmKq8= Subject key identifier: A3:41:23:8D:EA:51:3A:40:D5:49:1B:41:71:F9:22:B3:96:AD:72:DE Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435 Certificate serial: 019B98800DC846878B12DD1DB4191BAA14E6 Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/o0EjjepROkDVSRtBcfkis5atct4.roa Signing time: Wed 07 Jan 2026 12:48:07 +0000 ROA not before: Wed 07 Jan 2026 12:48:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 86.106.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:80:0d:c8:46:87:8b:12:dd:1d:b4:19:1b:aa:14:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435 Validity Not Before: Jan 7 12:48:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a341238dea513a40d5491b4171f922b396ad72de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f3:64:0b:15:07:e5:33:d4:a9:9c:2d:85:45: 2d:21:9a:f1:7a:34:bb:e5:9e:ef:be:4c:97:35:38: eb:6a:7d:32:86:86:5f:54:3f:c2:c0:2d:f5:8f:b0: 38:e2:e1:4b:a3:e9:29:da:d9:d7:51:0d:6b:9c:4f: c8:59:d8:b3:b8:e3:2d:18:ce:49:54:8f:ed:3e:1f: ee:a3:53:79:00:a6:c9:58:f0:20:fa:ac:43:6b:df: b2:11:e8:ae:c9:f3:d7:4b:e7:c6:f5:b4:ae:8f:73: 29:c9:bd:fe:2a:e3:f5:11:42:8d:bd:d2:76:30:93: 06:20:8c:c3:5c:8d:a0:e3:06:b9:39:ab:2e:dc:7d: fa:7d:e5:02:8e:d7:53:78:86:0a:83:34:19:ed:1d: 63:eb:83:a9:7c:0b:db:9d:4f:96:11:79:38:0a:1c: 8e:1d:00:e5:70:65:e5:f4:3f:df:31:ac:19:18:d1: 78:3b:85:e3:fc:73:46:07:ab:78:c0:56:db:5c:fa: 88:01:19:46:6c:72:e1:cc:38:35:58:dc:b6:47:9d: ad:e4:7d:8f:51:b0:c6:96:ed:b7:20:f3:ac:54:c9: 9e:65:e9:86:f8:97:c9:16:52:79:ba:e1:1e:22:61: 75:d1:9a:f1:a7:18:42:e1:32:1a:cd:2f:64:82:dd: 93:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:41:23:8D:EA:51:3A:40:D5:49:1B:41:71:F9:22:B3:96:AD:72:DE X509v3 Authority Key Identifier: keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/o0EjjepROkDVSRtBcfkis5atct4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.77.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:eb:81:15:41:8e:6d:5c:d4:10:ce:77:ab:bb:57:f3:dc:2e: bd:43:89:b9:fa:07:dd:47:5b:ec:f4:01:9e:a8:a1:37:03:e4: ef:5b:c3:5c:07:96:1e:fa:2b:90:35:65:a5:0e:5e:46:b7:73: ab:a2:33:3a:51:5d:e4:99:6d:17:ae:7b:56:2b:5c:cf:ae:6d: c6:a8:bf:78:76:3b:f6:34:f9:1c:f9:05:a2:78:6e:da:86:1a: 63:ba:cb:cf:b3:89:a4:05:5d:e5:e7:2f:9b:b1:3f:b3:36:9b: 7d:6d:67:d9:ee:d2:de:5e:fc:21:87:48:7a:d8:2f:9b:74:3b: 8a:27:ce:7e:6a:96:13:49:8a:e7:df:ad:d3:b5:2d:8f:3a:1d: df:7c:d5:0a:35:f2:9b:e5:e1:ba:05:a1:11:ba:fe:f5:f3:9f: 5e:5d:15:85:34:69:64:a5:9a:8c:b1:b4:ec:83:f8:0b:95:80: f0:a8:a9:b0:cd:ff:9b:47:de:6b:18:be:79:76:44:e8:6c:8a: 69:eb:7b:58:90:fa:68:08:15:af:b5:b5:de:52:80:be:d1:7e: 65:2d:66:f4:aa:d5:aa:e9:49:dc:e3:35:ff:0b:ba:f8:8a:47: 88:ad:c6:8e:ec:56:e7:2a:90:17:f8:bd:b5:b6:ae:08:6a:a5: 59:07:10:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuYgA3IRoeLEt0dtBkbqhTmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZDBjNGZmNGE5MDA3MzI4OGI5NzY3NDY5NDE0MjcyMWY1 Yjg0MzUwHhcNMjYwMTA3MTI0ODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzQxMjM4ZGVhNTEzYTQwZDU0OTFiNDE3MWY5MjJiMzk2YWQ3MmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/NkCxUH5TPUqZwthUUtIZrxejS7 5Z7vvkyXNTjran0yhoZfVD/CwC31j7A44uFLo+kp2tnXUQ1rnE/IWdizuOMtGM5J VI/tPh/uo1N5AKbJWPAg+qxDa9+yEeiuyfPXS+fG9bSuj3Mpyb3+KuP1EUKNvdJ2 MJMGIIzDXI2g4wa5Oasu3H36feUCjtdTeIYKgzQZ7R1j64OpfAvbnU+WEXk4ChyO HQDlcGXl9D/fMawZGNF4O4Xj/HNGB6t4wFbbXPqIARlGbHLhzDg1WNy2R52t5H2P UbDGlu23IPOsVMmeZemG+JfJFlJ5uuEeImF10ZrxpxhC4TIazS9kgt2TpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKNBI43qUTpA1UkbQXH5IrOWrXLeMB8GA1UdIwQY MBaAFJ7QxP9KkAcyiLl2dGlBQnIfW4Q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YTUwZjEtMjk0Yi00OGU0LWJlYWYt MWRjYWQ4ZTY4ZWQ5LzEvbzBFamplcFJPa0RWU1J0QmNma2lzNWF0Y3Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85YTUwZjEtMjk0Yi00OGU0LWJlYWYtMWRjYWQ4ZTY4ZWQ5 LzEvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmpNMA0G CSqGSIb3DQEBCwUAA4IBAQA764EVQY5tXNQQzneru1fz3C69Q4m5+gfdR1vs9AGe qKE3A+TvW8NcB5Ye+iuQNWWlDl5Gt3OrojM6UV3kmW0XrntWK1zPrm3GqL94djv2 NPkc+QWieG7ahhpjusvPs4mkBV3l5y+bsT+zNpt9bWfZ7tLeXvwhh0h62C+bdDuK J85+apYTSYrn363TtS2POh3ffNUKNfKb5eG6BaERuv71859eXRWFNGlkpZqMsbTs g/gLlYDwqKmwzf+bR95rGL55dkTobIpp63tYkPpoCBWvtbXeUoC+0X5lLWb0qtWq 6Unc4zX/C7r4ikeIrcaO7FbnKpAX+L21tq4IaqVZBxDL -----END CERTIFICATE-----Generated at Mon Jan 19 05:21:59 2026 by rpki-client