This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/hdOOC1IEysAq-Z-Tmv9_lJQDID4.roa File: hdOOC1IEysAq-Z-Tmv9_lJQDID4.roa (raw, json) Hash identifier: yt1gpylTF5DwEVRgiWOOxqt2J7YwsxusRFsZDCgtRfE= Subject key identifier: 85:D3:8E:0B:52:04:CA:C0:2A:F9:9F:93:9A:FF:7F:94:94:03:20:3E Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8 Certificate serial: 019C046F04195BFD9F508C4E79D1350B6FFC Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/hdOOC1IEysAq-Z-Tmv9_lJQDID4.roa Signing time: Wed 28 Jan 2026 11:48:30 +0000 ROA not before: Wed 28 Jan 2026 11:48:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202316 IP address blocks: 195.69.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:6f:04:19:5b:fd:9f:50:8c:4e:79:d1:35:0b:6f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8 Validity Not Before: Jan 28 11:48:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85d38e0b5204cac02af99f939aff7f949403203e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6e:5e:a4:af:ad:20:ba:9b:99:55:34:0f:97: b3:18:1e:95:2b:10:a0:06:0e:fd:45:21:c2:43:66: f9:33:ce:ba:01:dd:09:a1:ac:03:28:de:b6:84:43: 26:12:98:48:46:6e:74:0d:a8:3c:3c:80:a9:c7:9a: 40:93:61:94:3c:67:0e:f1:b8:07:5c:86:a1:9f:0c: be:a4:7d:43:ee:3f:69:c2:fe:88:19:cf:0e:9f:c5: 26:55:12:cd:a5:64:3a:dc:de:27:8e:07:8a:ae:5e: f7:93:8b:26:7e:94:51:75:23:2b:59:06:87:2d:d2: fd:92:8f:df:c5:49:f9:af:92:5e:e8:f6:c5:af:19: 2f:53:73:e8:40:67:02:61:0f:98:f9:59:ca:23:1f: dc:eb:b6:87:53:76:7b:05:28:d6:f6:16:41:15:ec: 99:64:82:fd:f0:86:bd:d0:e4:82:29:fa:80:40:08: 2b:8f:2e:a4:37:b6:7c:23:a8:a7:bf:ac:01:8c:39: 4c:20:23:0c:94:7b:83:48:16:e8:d1:0a:71:08:01: 71:af:0f:6b:d6:3b:0c:1e:62:bc:4d:08:24:ed:c3: 5b:cd:e2:f2:8a:48:3d:39:87:b9:c1:be:6a:e6:7f: eb:ca:97:78:75:63:3c:f6:8f:ae:c2:e5:a5:d3:b6: a0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D3:8E:0B:52:04:CA:C0:2A:F9:9F:93:9A:FF:7F:94:94:03:20:3E X509v3 Authority Key Identifier: keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/hdOOC1IEysAq-Z-Tmv9_lJQDID4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.69.230.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:69:5a:54:a9:6e:e8:01:ea:f3:db:c0:d8:42:0e:61:88:75: 59:17:35:95:b4:bd:f0:f3:30:57:17:bb:bf:d5:ec:fc:11:0c: 3e:d8:e0:57:ab:06:fd:97:8b:51:c1:be:4a:8a:43:02:9f:f3: 32:07:72:55:9e:8d:d5:35:75:db:fa:16:79:ca:05:92:bc:26: a4:c1:82:25:35:d9:ab:e1:57:4f:81:af:c2:b5:72:f7:82:e4: 78:10:d3:4b:71:79:9b:f2:70:80:4d:2d:0e:4b:a5:76:54:a9: 12:7a:23:cc:67:32:0b:4f:36:e3:b1:cf:f4:e0:7d:9b:65:f3: 66:10:be:95:32:e4:71:e5:5e:0c:87:19:34:62:1a:d3:e8:58: b5:77:89:35:0b:42:df:ff:e4:08:10:fb:05:75:26:a2:08:03: 17:6f:21:77:26:f2:d9:35:58:83:ac:3f:07:6d:7c:64:40:94: 80:b0:f6:1b:b0:dc:b9:6d:a0:ff:95:a6:5d:de:64:97:63:7c: 70:a5:bc:fa:7e:b6:63:ea:92:8f:67:00:61:7d:e5:33:4a:de: 17:bf:6d:4a:74:37:fb:1b:63:53:be:60:9f:b6:fe:ae:72:9f: dc:d0:69:15:35:dd:f4:43:10:6b:98:3f:6b:24:0e:89:ba:67: 28:54:12:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwEbwQZW/2fUIxOedE1C2/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjZjMDZmZjQ5ZTA1MzQ4MDllMjM0MDA1YmFhNWNjYTdl MTQ2YTgwHhcNMjYwMTI4MTE0ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWQzOGUwYjUyMDRjYWMwMmFmOTlmOTM5YWZmN2Y5NDk0MDMyMDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3W5epK+tILqbmVU0D5ezGB6VKxCg Bg79RSHCQ2b5M866Ad0JoawDKN62hEMmEphIRm50Dag8PICpx5pAk2GUPGcO8bgH XIahnwy+pH1D7j9pwv6IGc8On8UmVRLNpWQ63N4njgeKrl73k4smfpRRdSMrWQaH LdL9ko/fxUn5r5Je6PbFrxkvU3PoQGcCYQ+Y+VnKIx/c67aHU3Z7BSjW9hZBFeyZ ZIL98Ia90OSCKfqAQAgrjy6kN7Z8I6inv6wBjDlMICMMlHuDSBbo0QpxCAFxrw9r 1jsMHmK8TQgk7cNbzeLyikg9OYe5wb5q5n/rypd4dWM89o+uwuWl07agXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIXTjgtSBMrAKvmfk5r/f5SUAyA+MB8GA1UdIwQY MBaAFEFmwG/0ngU0gJ4jQAW6pcyn4UaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUt ODgyNmU4NzdkMTQzLzEvaGRPT0MxSUV5c0FxLVotVG12OV9sSlFESUQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUtODgyNmU4NzdkMTQz LzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0XmMA0G CSqGSIb3DQEBCwUAA4IBAQCcaVpUqW7oAerz28DYQg5hiHVZFzWVtL3w8zBXF7u/ 1ez8EQw+2OBXqwb9l4tRwb5KikMCn/MyB3JVno3VNXXb+hZ5ygWSvCakwYIlNdmr 4VdPga/CtXL3guR4ENNLcXmb8nCATS0OS6V2VKkSeiPMZzILTzbjsc/04H2bZfNm EL6VMuRx5V4Mhxk0YhrT6Fi1d4k1C0Lf/+QIEPsFdSaiCAMXbyF3JvLZNViDrD8H bXxkQJSAsPYbsNy5baD/laZd3mSXY3xwpbz6frZj6pKPZwBhfeUzSt4Xv21KdDf7 G2NTvmCftv6ucp/c0GkVNd30QxBrmD9rJA6JumcoVBLD -----END CERTIFICATE-----Generated at Mon Feb 2 09:40:03 2026 by rpki-client