This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/bO7-qpV-WtzE91YggDzffNTHt-0.roa File: bO7-qpV-WtzE91YggDzffNTHt-0.roa (raw, json) Hash identifier: RgUy8YjJAntZaAh8jfrj8Pu9JkkSYLqS11DyKtEr8H8= Subject key identifier: 6C:EE:FE:AA:95:7E:5A:DC:C4:F7:56:20:80:3C:DF:7C:D4:C7:B7:ED Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93 Certificate serial: 019B7EA6F0E7078605342C0F861B443B673D Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/bO7-qpV-WtzE91YggDzffNTHt-0.roa Signing time: Fri 02 Jan 2026 12:20:28 +0000 ROA not before: Fri 02 Jan 2026 12:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62201 IP address blocks: 93.159.183.0/24 maxlen: 24 93.159.188.0/24 maxlen: 24 93.159.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f0:e7:07:86:05:34:2c:0f:86:1b:44:3b:67:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ceefeaa957e5adcc4f75620803cdf7cd4c7b7ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:57:8f:10:da:61:66:c8:2f:c7:92:18:57: 66:7c:1f:16:8f:98:a2:e6:f6:49:4c:ba:0b:72:02: 0d:f3:c2:9e:86:b2:a8:d7:56:f3:40:0c:e5:2a:88: 57:e0:19:05:d2:2c:73:ea:7b:a2:4a:ab:2c:d2:9b: 4c:57:7f:e0:5c:b8:85:dc:71:02:90:3c:95:c3:61: 1c:88:9a:3f:b9:b3:4d:2e:b2:3f:36:f5:45:50:7d: 34:ea:3b:b5:92:da:e1:a1:85:eb:a1:fd:6e:96:93: 16:3d:21:53:d5:d6:24:25:d0:8c:fa:4a:ee:6e:16: 57:0a:2a:2f:af:a8:83:6d:c8:58:ab:b8:a1:d5:12: 60:1a:40:4b:d5:d4:82:dd:0e:45:09:a3:38:99:b3: 5c:07:c8:39:6f:0d:3d:ac:57:4e:e5:bc:90:1c:9e: f0:f5:02:81:66:34:7e:f8:15:38:35:89:f7:65:70: 0b:08:9d:7c:fb:85:72:e5:1d:a7:4a:67:03:85:4a: 5a:cf:75:37:41:34:14:ff:2c:da:ed:ba:cf:34:88: 53:a2:b0:95:ea:85:f1:55:f4:9c:0a:94:9c:9e:c4: 42:ad:df:b2:1b:eb:6b:09:aa:08:1f:3a:a6:b5:16: d0:e1:25:b1:82:dc:9f:bd:c0:f6:19:ea:fd:4e:d3: a4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EE:FE:AA:95:7E:5A:DC:C4:F7:56:20:80:3C:DF:7C:D4:C7:B7:ED X509v3 Authority Key Identifier: keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/bO7-qpV-WtzE91YggDzffNTHt-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.159.183.0/24 93.159.188.0/23 Signature Algorithm: sha256WithRSAEncryption b9:8a:a9:00:32:bd:8f:b7:19:aa:1a:62:f6:10:0a:6c:40:29: 61:52:c5:d3:27:e5:95:ae:cc:9b:0a:f4:e7:ab:e5:63:75:bd: 97:8d:3b:ab:18:f1:1f:fa:80:fd:19:b5:21:86:52:81:1f:21: 62:64:69:d8:e8:ad:b5:7d:7f:16:33:39:79:65:6b:ad:2f:ea: cf:79:f4:f6:09:a4:f8:ee:f6:b1:18:37:5f:78:dc:17:a1:77: a1:6d:77:76:53:cc:d2:5e:e7:6d:dc:d5:05:37:46:f7:75:95: 16:d1:85:f7:23:12:6e:75:3e:4b:30:3b:67:f1:e4:19:14:a6: 38:4a:9a:e4:ee:56:ab:3d:a6:33:71:0a:e7:6f:df:14:f3:b5: 1e:75:7a:de:5b:00:c4:72:fa:32:b1:5e:d3:19:2e:05:6d:d2: c4:e7:27:aa:11:0e:27:3f:c2:74:df:3e:a2:86:56:b5:9e:07: f2:69:fd:c9:d4:45:a0:33:38:93:a5:ae:f3:5d:22:31:5b:d5: de:30:f0:45:5f:0d:41:83:0f:27:31:5b:31:89:b0:0a:45:25: 43:af:bf:e2:7a:12:95:76:a2:ec:5d:da:0f:99:ca:85:67:58: 1e:2d:b5:ab:6e:aa:68:20:a2:fa:59:db:af:39:95:a2:7f:2f: ce:a7:75:8c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pvDnB4YFNCwPhhtEO2c9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMmE2NDZiZWQ0YzQxN2E2YjQ4MDVmOTNkNzdhN2E0NjVl MzRiOTMwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2VlZmVhYTk1N2U1YWRjYzRmNzU2MjA4MDNjZGY3Y2Q0YzdiN2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlZXjxDaYWbIL8eSGFdmfB8Wj5ii 5vZJTLoLcgIN88KehrKo11bzQAzlKohX4BkF0ixz6nuiSqss0ptMV3/gXLiF3HEC kDyVw2EciJo/ubNNLrI/NvVFUH006ju1ktrhoYXrof1ulpMWPSFT1dYkJdCM+kru bhZXCiovr6iDbchYq7ih1RJgGkBL1dSC3Q5FCaM4mbNcB8g5bw09rFdO5byQHJ7w 9QKBZjR++BU4NYn3ZXALCJ18+4Vy5R2nSmcDhUpaz3U3QTQU/yza7brPNIhTorCV 6oXxVfScCpScnsRCrd+yG+trCaoIHzqmtRbQ4SWxgtyfvcD2Ger9TtOkbQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGzu/qqVflrcxPdWIIA833zUx7ftMB8GA1UdIwQY MBaAFBIqZGvtTEF6a0gF+T13p6Rl40uTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWIt NWNiZDFmM2ZmMzlhLzEvYk83LXFwVi1XdHpFOTFZZ2dEemZmTlRIdC0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWItNWNiZDFmM2ZmMzlh LzEvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXZ+3AwQB XZ+8MA0GCSqGSIb3DQEBCwUAA4IBAQC5iqkAMr2PtxmqGmL2EApsQClhUsXTJ+WV rsybCvTnq+Vjdb2XjTurGPEf+oD9GbUhhlKBHyFiZGnY6K21fX8WMzl5ZWutL+rP efT2CaT47vaxGDdfeNwXoXehbXd2U8zSXudt3NUFN0b3dZUW0YX3IxJudT5LMDtn 8eQZFKY4Sprk7larPaYzcQrnb98U87UedXreWwDEcvoysV7TGS4FbdLE5yeqEQ4n P8J03z6ihla1ngfyaf3J1EWgMziTpa7zXSIxW9XeMPBFXw1Bgw8nMVsxibAKRSVD r7/iehKVdqLsXdoPmcqFZ1geLbWrbqpoIKL6WduvOZWify/Op3WM -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:07 2026 by rpki-client