This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/OAIvzsBtuFZey51F26GoFlgIcXk.roa File: OAIvzsBtuFZey51F26GoFlgIcXk.roa (raw, json) Hash identifier: RrRzXT/cIeb31Wmixj2eJEHKu80nNaBp4OOEc3gjdd4= Subject key identifier: 38:02:2F:CE:C0:6D:B8:56:5E:CB:9D:45:DB:A1:A8:16:58:08:71:79 Certificate issuer: /CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d Certificate serial: 019B7B366A2A8E4A09C4D34E6C35ACBB5845 Authority key identifier: 64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/OAIvzsBtuFZey51F26GoFlgIcXk.roa Signing time: Thu 01 Jan 2026 20:18:42 +0000 ROA not before: Thu 01 Jan 2026 20:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207294 IP address blocks: 188.190.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6a:2a:8e:4a:09:c4:d3:4e:6c:35:ac:bb:58:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38022fcec06db8565ecb9d45dba1a81658087179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:18:74:55:ba:59:f4:4c:cf:c7:a3:f7:2b: 5a:2e:98:be:af:89:cd:5e:6d:ba:af:20:7b:f5:a2: d6:cc:59:fa:e4:6a:c3:b8:40:f3:90:f9:9c:1d:9f: 25:0e:6b:81:e4:57:d4:d4:2a:41:e1:9c:ff:68:a8: 33:47:df:32:0e:81:98:4d:3d:8d:8e:d4:03:75:5f: 7e:c8:e6:fd:52:2f:29:5e:18:12:9d:a6:49:10:8d: bd:7a:6a:69:b0:16:f5:6d:2e:b3:a5:23:84:7a:ec: 66:e3:69:0a:35:0d:b0:d3:7f:e6:4d:9b:9c:d1:f4: 9c:03:5f:d6:10:4e:84:64:ff:60:ac:f1:9a:72:4c: c4:5e:56:90:c6:4c:3f:30:16:c5:cb:89:5a:62:42: cb:3f:7e:e7:bc:b0:7e:9b:4d:1e:55:00:f3:f0:88: 6f:2c:33:0c:f8:5a:74:fc:06:e5:8e:02:e7:d2:99: 6a:36:0e:ba:3c:70:27:a7:a5:6a:f9:5a:ea:0f:7d: 33:1d:2c:59:65:26:b6:3f:b6:40:64:40:bd:5d:25: 63:21:82:a4:59:07:1d:df:85:45:f6:eb:0c:2e:96: 9e:51:e9:c2:61:22:a3:5d:37:30:43:b9:b8:c7:dc: 6e:05:6c:fc:8f:d8:3b:9c:d1:b6:6b:52:ae:b4:7c: d5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:02:2F:CE:C0:6D:B8:56:5E:CB:9D:45:DB:A1:A8:16:58:08:71:79 X509v3 Authority Key Identifier: keyid:64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/OAIvzsBtuFZey51F26GoFlgIcXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.190.124.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:77:bb:25:cb:f4:78:21:4f:5f:64:12:8e:b5:8f:17:85:dc: 27:48:70:f5:e3:4e:77:d6:57:ff:91:55:80:79:1d:7c:06:66: c7:95:57:16:e6:7c:53:c7:1e:43:0d:93:45:cd:a1:a9:72:9f: 1f:a9:ce:49:f0:7b:97:76:03:7c:54:00:34:a1:0a:ca:20:81: 74:a1:73:b9:ad:9e:a3:9c:a1:98:7c:16:ee:db:54:59:eb:7e: 7a:07:45:bc:79:28:b0:98:a3:d8:14:24:fd:50:8b:9e:22:3a: fd:ad:3c:01:c0:86:0f:04:ef:d0:0f:34:7f:39:74:c2:13:32: 10:d7:f8:5b:c3:0d:a5:72:f5:13:d5:1c:a5:14:da:92:1f:41: 07:61:cd:76:f8:c8:7b:41:24:52:d0:b1:f5:41:6c:ce:cd:e5: 80:b9:55:46:21:8a:f3:c3:3e:da:ac:46:37:82:f9:76:59:ca: e1:43:c5:c6:a3:07:2d:d5:fc:2a:66:ff:a8:ca:c9:4c:7f:90: 53:d9:1f:2a:3e:8d:74:24:4d:3f:fe:82:fe:e4:71:d9:50:2c: ff:7e:78:f7:dc:14:95:9e:13:94:cd:7c:8d:0a:64:d4:81:50: 75:5a:bf:52:df:35:b9:de:73:b9:91:ce:18:08:8a:f8:d9:3f: ea:b5:ca:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NmoqjkoJxNNObDWsu1hFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NzUzMGI0ZmE4ODk5YTMwYmIyZTY1YjkzZjAxMTlmZGE5 YmMwNWQwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODAyMmZjZWMwNmRiODU2NWVjYjlkNDVkYmExYTgxNjU4MDg3MTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt60YdFW6WfRMz8ej9ytaLpi+r4nN Xm26ryB79aLWzFn65GrDuEDzkPmcHZ8lDmuB5FfU1CpB4Zz/aKgzR98yDoGYTT2N jtQDdV9+yOb9Ui8pXhgSnaZJEI29emppsBb1bS6zpSOEeuxm42kKNQ2w03/mTZuc 0fScA1/WEE6EZP9grPGackzEXlaQxkw/MBbFy4laYkLLP37nvLB+m00eVQDz8Ihv LDMM+Fp0/AbljgLn0plqNg66PHAnp6Vq+VrqD30zHSxZZSa2P7ZAZEC9XSVjIYKk WQcd34VF9usMLpaeUenCYSKjXTcwQ7m4x9xuBWz8j9g7nNG2a1KutHzVyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDgCL87AbbhWXsudRduhqBZYCHF5MB8GA1UdIwQY MBaAFGR1MLT6iJmjC7LmW5PwEZ/am8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81N2Y1MTItYTI5Zi00NGVkLWE3YTEt MGU3Y2JiY2M2MmQwLzEvT0FJdnpzQnR1RlpleTUxRjI2R29GbGdJY1hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81N2Y1MTItYTI5Zi00NGVkLWE3YTEtMGU3Y2JiY2M2MmQw LzEvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvL58MA0G CSqGSIb3DQEBCwUAA4IBAQAed7sly/R4IU9fZBKOtY8XhdwnSHD140531lf/kVWA eR18BmbHlVcW5nxTxx5DDZNFzaGpcp8fqc5J8HuXdgN8VAA0oQrKIIF0oXO5rZ6j nKGYfBbu21RZ6356B0W8eSiwmKPYFCT9UIueIjr9rTwBwIYPBO/QDzR/OXTCEzIQ 1/hbww2lcvUT1RylFNqSH0EHYc12+Mh7QSRS0LH1QWzOzeWAuVVGIYrzwz7arEY3 gvl2WcrhQ8XGowct1fwqZv+oyslMf5BT2R8qPo10JE0//oL+5HHZUCz/fnj33BSV nhOUzXyNCmTUgVB1Wr9S3zW53nO5kc4YCIr42T/qtcqF -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:56 2026 by rpki-client