This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/Oqt--JM-bQkAEwluYF_VbCJNXBk.roa File: Oqt--JM-bQkAEwluYF_VbCJNXBk.roa (raw, json) Hash identifier: qgtHHT2LrCzQJdNXo2JdjcQzzNmHNGHV0c6PUoEL78k= Subject key identifier: 3A:AB:7E:F8:93:3E:6D:09:00:13:09:6E:60:5F:D5:6C:22:4D:5C:19 Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Certificate serial: 019B7F1601AD9440704218DED180B81CCEAE Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/Oqt--JM-bQkAEwluYF_VbCJNXBk.roa Signing time: Fri 02 Jan 2026 14:21:47 +0000 ROA not before: Fri 02 Jan 2026 14:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8258 IP address blocks: 195.64.224.0/22 maxlen: 22 195.64.227.0/24 maxlen: 24 195.64.228.0/24 maxlen: 24 195.64.254.0/23 maxlen: 23 2a02:2540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:01:ad:94:40:70:42:18:de:d1:80:b8:1c:ce:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Validity Not Before: Jan 2 14:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3aab7ef8933e6d090013096e605fd56c224d5c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d3:65:ec:f4:d2:80:ca:11:b2:b6:12:56:58: d7:1e:8c:bc:cf:6f:8b:91:1e:09:2d:78:8b:2f:50: 34:0d:2c:45:7b:4c:5c:c3:1d:67:f9:5f:f2:b9:e3: e3:2a:e1:83:00:e6:8c:4f:d6:c1:b0:7e:d5:ae:ce: 2d:d4:80:1b:a0:10:77:ae:1b:29:b2:2c:0d:95:46: ef:dd:08:38:95:d9:4e:7a:bb:f7:30:30:17:c5:62: 76:e4:60:e8:22:1b:d1:3b:0d:eb:cf:70:85:97:57: 21:dd:28:b8:18:0b:c6:97:a6:c1:cd:f1:d8:5d:13: 96:09:15:c7:7e:f1:33:54:73:25:b9:e6:10:40:e2: 77:43:58:74:ce:ea:0b:99:07:9d:1e:3e:38:1c:b0: 12:7f:be:be:c2:b5:1a:9b:0e:83:93:f3:d0:c8:35: da:f3:ee:d0:dc:af:c7:cd:6c:ee:60:65:65:f1:41: 05:38:e0:f0:9f:db:d9:01:0c:a1:38:b4:3b:45:e5: 19:ff:f1:fa:05:2c:e8:cc:bb:01:f9:3b:02:be:26: 19:a3:fd:ce:03:70:55:45:50:8a:1a:bd:26:20:12: 2f:76:95:12:ba:6b:4d:22:b6:1a:9e:86:de:c9:d0: 01:b5:6e:e7:77:7c:32:2e:0d:60:2b:f7:c9:40:94: 69:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AB:7E:F8:93:3E:6D:09:00:13:09:6E:60:5F:D5:6C:22:4D:5C:19 X509v3 Authority Key Identifier: keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/Oqt--JM-bQkAEwluYF_VbCJNXBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.64.224.0-195.64.228.255 195.64.254.0/23 IPv6: 2a02:2540::/32 Signature Algorithm: sha256WithRSAEncryption 2d:53:47:ba:e6:e6:77:5f:77:5b:74:3e:6d:80:6c:2e:20:c1: a5:32:c8:d9:09:88:da:eb:3a:e1:a5:51:82:46:2d:e9:24:44: 7e:15:ac:db:42:ae:1e:51:19:81:b5:72:b0:16:e1:f3:33:5e: e0:d6:0f:91:dc:3c:3c:f1:66:54:c1:e0:66:fe:0d:28:45:ed: 0e:4a:26:b3:66:22:44:af:17:c1:5d:80:b7:a9:6e:9c:5a:ad: 1a:69:16:d6:9e:cb:01:e5:c8:ed:a5:4f:e5:87:f5:28:ea:ab: f0:a0:1a:83:b3:60:1e:ad:9c:c9:31:95:61:42:47:7b:eb:d3: db:e9:cc:7c:17:69:4f:20:68:0b:2c:98:a6:da:84:2c:37:50: c7:2e:d3:66:be:9b:76:26:ea:75:9f:98:a5:c4:e8:6d:bc:af: c7:9c:1c:c9:f6:e4:61:2f:a6:32:1e:dd:5e:fe:0a:4d:58:7b: be:dc:2f:ed:45:e3:e8:29:c2:32:70:82:c0:32:06:ae:dd:4a: 66:aa:aa:ba:3a:c6:36:19:96:fc:b5:13:42:e4:1d:45:b8:77: 24:ad:11:a8:38:7e:54:86:00:d4:d8:95:64:6c:fa:a9:1d:da: b8:93:c0:08:22:81:1b:95:6a:3a:71:6d:14:f5:5d:c1:4a:0f: b5:c5:e8:30 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt/FgGtlEBwQhje0YC4HM6uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx ODRmNGQwHhcNMjYwMTAyMTQyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWFiN2VmODkzM2U2ZDA5MDAxMzA5NmU2MDVmZDU2YzIyNGQ1YzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9Nl7PTSgMoRsrYSVljXHoy8z2+L kR4JLXiLL1A0DSxFe0xcwx1n+V/yuePjKuGDAOaMT9bBsH7Vrs4t1IAboBB3rhsp siwNlUbv3Qg4ldlOerv3MDAXxWJ25GDoIhvROw3rz3CFl1ch3Si4GAvGl6bBzfHY XROWCRXHfvEzVHMlueYQQOJ3Q1h0zuoLmQedHj44HLASf76+wrUamw6Dk/PQyDXa 8+7Q3K/HzWzuYGVl8UEFOODwn9vZAQyhOLQ7ReUZ//H6BSzozLsB+TsCviYZo/3O A3BVRVCKGr0mIBIvdpUSumtNIrYanobeydABtW7nd3wyLg1gK/fJQJRpKwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFDqrfviTPm0JABMJbmBf1WwiTVwZMB8GA1UdIwQY MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt OGU5M2NiNWM1MzU1LzEvT3F0LS1KTS1iUWtBRXdsdVlGX1ZiQ0pOWEJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1 LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAXDQOAD BADDQOQDBAHDQP4wDQQCAAIwBwMFACoCJUAwDQYJKoZIhvcNAQELBQADggEBAC1T R7rm5ndfd1t0Pm2AbC4gwaUyyNkJiNrrOuGlUYJGLekkRH4VrNtCrh5RGYG1crAW 4fMzXuDWD5HcPDzxZlTB4Gb+DShF7Q5KJrNmIkSvF8FdgLepbpxarRppFtaeywHl yO2lT+WH9Sjqq/CgGoOzYB6tnMkxlWFCR3vr09vpzHwXaU8gaAssmKbahCw3UMcu 02a+m3Ym6nWfmKXE6G28r8ecHMn25GEvpjIe3V7+Ck1Ye77cL+1F4+gpwjJwgsAy Bq7dSmaqqro6xjYZlvy1E0LkHUW4dyStEag4flSGANTYlWRs+qkd2riTwAgigRuV ajpxbRT1XcFKD7XF6DA= -----END CERTIFICATE-----Generated at Tue Feb 10 04:28:13 2026 by rpki-client