This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/pO0qGsq_BKRgOQ_8WYJpqKXk4C0.roa File: pO0qGsq_BKRgOQ_8WYJpqKXk4C0.roa (raw, json) Hash identifier: P0kO1Oni6LjDeROb0o6wKxl0oRXYlJoyDIs7yU4qHZQ= Subject key identifier: A4:ED:2A:1A:CA:BF:04:A4:60:39:0F:FC:59:82:69:A8:A5:E4:E0:2D Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019B7A5B771E051ADC8C8DCE8197783FA974 Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/pO0qGsq_BKRgOQ_8WYJpqKXk4C0.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 185.243.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:77:1e:05:1a:dc:8c:8d:ce:81:97:78:3f:a9:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4ed2a1acabf04a460390ffc598269a8a5e4e02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a3:9c:e2:6e:00:39:5b:9d:38:0e:5e:b0:55: cc:b9:b1:8a:3f:39:1e:da:47:5b:e7:63:73:42:2a: f6:66:88:5c:f2:b6:31:06:12:c8:3d:83:1a:bf:ae: 75:cb:52:7c:32:7b:65:ae:44:67:4b:a0:57:b2:0e: 2e:fd:a8:96:c6:80:d4:e9:1d:67:89:06:d7:39:a8: 60:91:f6:32:b1:6f:9c:3a:82:4e:23:e5:da:a2:17: b1:bc:40:e2:f4:9f:6d:64:e1:ca:55:d0:c3:ff:9f: 76:ad:23:fa:fe:5f:0b:b6:08:b9:48:0b:0d:a8:2c: 4f:66:4a:0d:a6:64:e4:78:40:df:42:04:ab:b2:7e: 60:f3:aa:a8:e5:98:4e:2d:f0:6a:8d:5c:d6:a6:47: 8c:21:55:ee:fc:7e:48:09:21:34:26:89:86:f5:ee: af:e6:bc:c2:ec:81:4d:98:4d:a0:8c:63:df:50:34: 25:ee:8f:e9:40:4f:a3:25:20:45:31:e3:ca:04:fc: a3:a7:43:61:b6:ed:a2:8e:f0:82:e7:48:3b:25:09: 2f:51:76:87:e0:ca:a6:67:e6:42:0e:d9:78:8a:6a: fa:13:6f:50:ea:f5:bb:9c:7e:a1:55:ba:70:c2:49: e6:5e:07:10:9e:b7:da:04:07:66:e3:e2:78:73:24: 47:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:ED:2A:1A:CA:BF:04:A4:60:39:0F:FC:59:82:69:A8:A5:E4:E0:2D X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/pO0qGsq_BKRgOQ_8WYJpqKXk4C0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.155.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:a5:2e:22:a0:e6:4b:35:7d:77:2e:13:eb:c4:d4:d6:e6:da: 65:de:c2:62:af:5a:93:5f:9d:a8:dd:32:9a:41:87:2f:25:80: 9a:a3:97:c0:44:8c:d7:a1:39:39:4d:e6:40:d2:e8:20:c6:da: 92:ca:b8:f4:9b:03:4c:a5:c8:89:7b:5f:a6:2e:71:ae:b1:25: ed:01:f1:31:3c:50:ad:16:97:44:12:53:8a:2b:8b:19:63:ee: ed:0b:2a:e3:8a:53:d5:78:3f:89:53:b0:04:fa:71:f4:3e:09: 71:0b:64:4c:f3:c9:e1:00:27:0d:a9:0d:d1:a8:9a:0f:5a:f0: 8e:67:25:40:cb:0d:af:ca:32:98:2c:6f:72:7e:65:d0:20:f0: d8:f4:65:0a:6b:da:e6:25:45:26:f1:6f:e2:26:86:1a:ed:4c: 93:73:ff:bb:0d:46:26:59:9b:93:5c:98:c5:d7:e0:07:62:ae: 93:ba:8e:4c:02:91:d0:9c:7e:39:37:73:44:75:e7:d0:c7:23: 15:86:d2:98:5a:c2:58:f2:8c:25:fd:f2:49:b1:17:a9:65:bf: 44:f5:e3:97:94:c4:65:e1:e3:d1:4d:56:93:7a:28:28:bd:5a: 0a:ab:7a:27:21:29:05:0e:27:e9:1a:be:5b:76:37:df:b2:04: 94:46:c3:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3ceBRrcjI3OgZd4P6l0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGVkMmExYWNhYmYwNGE0NjAzOTBmZmM1OTgyNjlhOGE1ZTRlMDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aOc4m4AOVudOA5esFXMubGKPzke 2kdb52NzQir2Zohc8rYxBhLIPYMav651y1J8MntlrkRnS6BXsg4u/aiWxoDU6R1n iQbXOahgkfYysW+cOoJOI+XaohexvEDi9J9tZOHKVdDD/592rSP6/l8Ltgi5SAsN qCxPZkoNpmTkeEDfQgSrsn5g86qo5ZhOLfBqjVzWpkeMIVXu/H5ICSE0JomG9e6v 5rzC7IFNmE2gjGPfUDQl7o/pQE+jJSBFMePKBPyjp0Nhtu2ijvCC50g7JQkvUXaH 4MqmZ+ZCDtl4imr6E29Q6vW7nH6hVbpwwknmXgcQnrfaBAdm4+J4cyRHJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKTtKhrKvwSkYDkP/FmCaail5OAtMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvcE8wcUdzcV9CS1JnT1FfOFdZSnBxS1hrNEMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufObMA0G CSqGSIb3DQEBCwUAA4IBAQAPpS4ioOZLNX13LhPrxNTW5tpl3sJir1qTX52o3TKa QYcvJYCao5fARIzXoTk5TeZA0uggxtqSyrj0mwNMpciJe1+mLnGusSXtAfExPFCt FpdEElOKK4sZY+7tCyrjilPVeD+JU7AE+nH0PglxC2RM88nhACcNqQ3RqJoPWvCO ZyVAyw2vyjKYLG9yfmXQIPDY9GUKa9rmJUUm8W/iJoYa7UyTc/+7DUYmWZuTXJjF 1+AHYq6Tuo5MApHQnH45N3NEdefQxyMVhtKYWsJY8owl/fJJsRepZb9E9eOXlMRl 4ePRTVaTeigovVoKq3onISkFDifpGr5bdjffsgSURsOs -----END CERTIFICATE-----Generated at Tue Jan 20 00:57:35 2026 by rpki-client