This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/OExalT86I2jE92WcpxOz8v2EM5M.roa File: OExalT86I2jE92WcpxOz8v2EM5M.roa (raw, json) Hash identifier: 4ql4+dXrno2rRd9rLsGdlFCa1N0RlG63lEsTRJIQb8w= Subject key identifier: 38:4C:5A:95:3F:3A:23:68:C4:F7:65:9C:A7:13:B3:F2:FD:84:33:93 Certificate issuer: /CN=d8ee90d342d865ea67f2b0d2fb74c039f83e4a48 Certificate serial: 019B7E3880C7B0F6682F3AA9E99295172C1B Authority key identifier: D8:EE:90:D3:42:D8:65:EA:67:F2:B0:D2:FB:74:C0:39:F8:3E:4A:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6Q00LYZepn8rDS-3TAOfg-Skg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/OExalT86I2jE92WcpxOz8v2EM5M.roa Signing time: Fri 02 Jan 2026 10:19:50 +0000 ROA not before: Fri 02 Jan 2026 10:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 195.43.44.0/24 maxlen: 24 195.43.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.crl rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.mft rsync://rpki.ripe.net/repository/DEFAULT/2O6Q00LYZepn8rDS-3TAOfg-Skg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:80:c7:b0:f6:68:2f:3a:a9:e9:92:95:17:2c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8ee90d342d865ea67f2b0d2fb74c039f83e4a48 Validity Not Before: Jan 2 10:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=384c5a953f3a2368c4f7659ca713b3f2fd843393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:05:c2:05:cc:aa:b6:72:52:ec:d8:e2:95: 1f:af:27:5c:af:6a:2d:3f:30:dc:6c:a0:77:36:36: 77:b5:25:fd:04:87:b2:bb:dc:06:ad:d4:5a:1b:fb: f8:bc:b1:9c:50:69:86:f8:b9:ea:78:b2:5c:16:e4: 66:58:9f:16:91:3e:c4:38:b2:0f:e0:2d:e1:01:8d: 12:68:24:8e:ce:44:11:07:2c:32:dd:d9:e4:c3:6b: 1e:9b:29:1b:8e:98:d9:ac:10:4c:a8:bc:c9:4f:bb: 43:f3:c8:1d:0a:e7:e2:34:43:73:27:38:09:ef:66: b5:ab:f1:1b:fe:09:5a:9c:9a:82:8b:5e:5b:70:3e: 71:55:6a:3a:b0:20:7d:1d:43:ee:37:18:d0:f1:78: 28:27:72:89:8b:db:ac:29:4f:72:ba:71:f8:b0:52: ee:4d:2f:89:f1:f1:dc:3c:53:1b:28:9d:9c:7a:7e: f7:84:c7:90:97:e6:ad:4f:52:4a:e7:64:7f:bf:cf: c1:39:6e:f7:e6:ab:27:1a:25:79:38:5c:cc:3a:76: 5f:4c:08:6d:a0:4d:c6:44:2e:19:16:50:f2:b3:7e: 52:25:54:ef:17:80:aa:96:ea:cd:2b:af:58:73:0e: 26:21:b9:c0:0b:67:ec:6b:da:81:69:e8:75:d4:6b: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4C:5A:95:3F:3A:23:68:C4:F7:65:9C:A7:13:B3:F2:FD:84:33:93 X509v3 Authority Key Identifier: keyid:D8:EE:90:D3:42:D8:65:EA:67:F2:B0:D2:FB:74:C0:39:F8:3E:4A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6Q00LYZepn8rDS-3TAOfg-Skg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/OExalT86I2jE92WcpxOz8v2EM5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.43.44.0/24 195.43.46.0/24 Signature Algorithm: sha256WithRSAEncryption 91:99:da:e4:2b:54:3d:1f:bc:17:dd:76:19:d5:3c:18:8d:42: e3:46:97:5a:c2:f3:46:65:e1:df:7f:b7:a9:be:34:5e:a4:56: 0f:0f:13:d5:e4:c4:0d:1c:59:e2:df:06:e1:f0:0d:c3:b9:0c: 73:ff:eb:48:3b:44:be:a9:c8:b6:e6:02:46:11:e7:45:9b:1e: f5:90:74:44:a3:85:54:44:90:3b:4e:48:85:46:4e:bd:45:ac: 01:13:9b:e6:d5:4c:2a:27:01:22:f8:0b:94:1c:f4:bd:a9:d6: 3f:0a:03:20:92:8b:a7:68:f6:53:48:14:89:41:84:ff:2b:23: cc:b8:03:b5:e4:f6:12:99:e4:74:63:92:03:5f:22:97:96:db: 32:37:e9:c1:05:7b:01:4e:5d:19:c7:9e:36:38:5d:57:3a:46: 81:72:51:04:80:b4:63:f6:6e:40:12:1b:33:5a:f4:90:0e:67: 0f:1e:7e:45:fa:b5:db:06:85:64:a1:6c:b0:76:65:78:fc:2a: b8:9b:ae:eb:05:e5:02:be:b3:cc:9b:b3:f1:28:5c:42:7a:b3: 6f:68:e0:75:da:f4:8c:9c:86:c5:70:43:d2:9d:59:5b:54:30: 25:1f:a4:11:f5:c6:dd:f0:a2:df:9c:90:92:47:73:95:32:b9: b2:a7:1f:d9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OIDHsPZoLzqp6ZKVFywbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZWU5MGQzNDJkODY1ZWE2N2YyYjBkMmZiNzRjMDM5Zjgz ZTRhNDgwHhcNMjYwMTAyMTAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODRjNWE5NTNmM2EyMzY4YzRmNzY1OWNhNzEzYjNmMmZkODQzMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus8FwgXMqrZyUuzY4pUfrydcr2ot PzDcbKB3NjZ3tSX9BIeyu9wGrdRaG/v4vLGcUGmG+LnqeLJcFuRmWJ8WkT7EOLIP 4C3hAY0SaCSOzkQRBywy3dnkw2semykbjpjZrBBMqLzJT7tD88gdCufiNENzJzgJ 72a1q/Eb/glanJqCi15bcD5xVWo6sCB9HUPuNxjQ8XgoJ3KJi9usKU9yunH4sFLu TS+J8fHcPFMbKJ2cen73hMeQl+atT1JK52R/v8/BOW735qsnGiV5OFzMOnZfTAht oE3GRC4ZFlDys35SJVTvF4CqlurNK69Ycw4mIbnAC2fsa9qBaeh11GszmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDhMWpU/OiNoxPdlnKcTs/L9hDOTMB8GA1UdIwQY MBaAFNjukNNC2GXqZ/Kw0vt0wDn4PkpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk82UTAwTFlaZXBuOHJEUy0zVEFPZmctU2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jZjVjMTAtMjEzMS00MTE2LWI2Zjkt NTEwNTI1YzQ3NDRjLzEvT0V4YWxUODZJMmpFOTJXY3B4T3o4djJFTTVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9jZjVjMTAtMjEzMS00MTE2LWI2ZjktNTEwNTI1YzQ3NDRj LzEvMk82UTAwTFlaZXBuOHJEUy0zVEFPZmctU2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwyssAwQA wysuMA0GCSqGSIb3DQEBCwUAA4IBAQCRmdrkK1Q9H7wX3XYZ1TwYjULjRpdawvNG ZeHff7epvjRepFYPDxPV5MQNHFni3wbh8A3DuQxz/+tIO0S+qci25gJGEedFmx71 kHREo4VURJA7TkiFRk69RawBE5vm1UwqJwEi+AuUHPS9qdY/CgMgkounaPZTSBSJ QYT/KyPMuAO15PYSmeR0Y5IDXyKXltsyN+nBBXsBTl0Zx542OF1XOkaBclEEgLRj 9m5AEhszWvSQDmcPHn5F+rXbBoVkoWywdmV4/Cq4m67rBeUCvrPMm7PxKFxCerNv aOB12vSMnIbFcEPSnVlbVDAlH6QR9cbd8KLfnJCSR3OVMrmypx/Z -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:28 2026 by rpki-client