This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/1ovuqMEKOUDFqdLbNMY8RT3kcPw.roa File: 1ovuqMEKOUDFqdLbNMY8RT3kcPw.roa (raw, json) Hash identifier: 0/QGsYA3mfkzz2c2pHN7gqXXkXjWV9Xlg3Nj4LJ+NnI= Subject key identifier: D6:8B:EE:A8:C1:0A:39:40:C5:A9:D2:DB:34:C6:3C:45:3D:E4:70:FC Certificate issuer: /CN=fe72124b6d321463e9f10be1fb422b892462e89f Certificate serial: 019B797F49C72FAD286AA1DB51828253A2F1 Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/1ovuqMEKOUDFqdLbNMY8RT3kcPw.roa Signing time: Thu 01 Jan 2026 12:19:03 +0000 ROA not before: Thu 01 Jan 2026 12:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20660 IP address blocks: 194.125.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:49:c7:2f:ad:28:6a:a1:db:51:82:82:53:a2:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f Validity Not Before: Jan 1 12:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d68beea8c10a3940c5a9d2db34c63c453de470fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b9:d7:b2:47:cf:24:73:0e:03:87:d8:68:3c: 54:5f:92:03:6f:14:c5:12:ef:55:a6:08:0d:17:e8: 4e:95:6f:5a:7e:ac:bc:71:6d:9a:23:68:23:19:e1: b3:5b:3c:96:55:f8:63:2c:c6:46:f4:2d:f8:f5:8e: 09:d7:a0:32:d8:61:a3:9c:dc:19:e3:60:24:91:a3: 77:38:e1:d6:11:22:9c:e0:b1:dd:45:fa:0a:ba:78: 17:4c:b5:c6:e1:57:5d:15:92:01:dc:22:f1:b1:2c: 32:b7:31:87:2f:da:eb:34:a0:52:44:b6:4c:54:fa: 1e:6d:e3:ff:56:ae:fd:7b:58:b7:2a:f7:71:29:42: 9d:2c:b2:09:15:41:72:97:bf:39:7f:26:c2:f7:58: 10:06:6f:27:fc:2c:8b:36:c4:5b:83:7e:6f:31:55: 51:80:d6:5e:a7:48:fe:e0:99:3e:63:8f:f1:67:da: 0b:94:fe:98:a6:fa:87:c4:b0:85:b1:e1:18:a0:a8: 81:87:ab:42:be:b7:9d:7f:c4:5b:55:24:cd:7a:41: 92:3c:c9:3b:49:48:8c:77:b1:66:d5:49:4f:ee:15: 56:70:8e:68:5f:21:e5:60:51:21:73:26:9c:74:24: 00:9f:a6:18:fc:77:2a:61:e3:00:b3:13:01:3f:f6: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8B:EE:A8:C1:0A:39:40:C5:A9:D2:DB:34:C6:3C:45:3D:E4:70:FC X509v3 Authority Key Identifier: keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/1ovuqMEKOUDFqdLbNMY8RT3kcPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.125.244.0/23 Signature Algorithm: sha256WithRSAEncryption 46:1e:db:df:b1:70:72:ef:0a:19:26:35:4f:02:57:c0:05:c8: 95:b6:a2:ac:6d:76:86:d8:06:74:ca:23:64:36:81:3f:e4:a7: 1a:a1:4f:a4:da:a3:da:98:c7:15:46:b9:88:2c:e9:09:9c:14: 42:fc:be:26:b6:96:4c:c5:be:da:08:bd:30:7b:56:63:95:1d: ef:76:00:d6:f8:03:28:a3:0c:4e:89:f4:98:05:32:95:85:41: c2:2e:e9:d0:4d:72:83:3a:77:bd:07:87:e8:45:3c:62:34:bc: 23:2e:5d:ee:90:a3:25:a5:b4:69:ca:85:31:73:90:45:ef:ff: 19:3b:1d:cb:59:b0:0f:90:81:5a:68:65:52:ff:9a:04:8c:8f: 8b:07:c0:16:41:43:76:8b:e2:04:d7:b0:0f:b5:9d:c2:27:20: 33:e1:85:b1:cd:f0:8f:e4:04:ac:bc:56:b3:1c:24:e2:9e:c1: 57:bc:85:fb:11:d8:11:ec:0b:d6:bc:fe:87:7a:17:39:36:8f: 3e:a5:65:2f:b6:fe:34:f1:6a:23:76:c2:a8:4d:95:a8:f4:1d: d1:b1:51:43:f3:59:0c:91:d8:71:03:cc:50:96:55:d4:fe:15: 71:28:ee:9d:26:78:96:73:aa:e3:a7:f2:7b:36:53:90:88:62: f0:76:e1:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f0nHL60oaqHbUYKCU6LxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNzIxMjRiNmQzMjE0NjNlOWYxMGJlMWZiNDIyYjg5MjQ2 MmU4OWYwHhcNMjYwMTAxMTIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjhiZWVhOGMxMGEzOTQwYzVhOWQyZGIzNGM2M2M0NTNkZTQ3MGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbnXskfPJHMOA4fYaDxUX5IDbxTF Eu9VpggNF+hOlW9afqy8cW2aI2gjGeGzWzyWVfhjLMZG9C349Y4J16Ay2GGjnNwZ 42AkkaN3OOHWESKc4LHdRfoKungXTLXG4VddFZIB3CLxsSwytzGHL9rrNKBSRLZM VPoebeP/Vq79e1i3KvdxKUKdLLIJFUFyl785fybC91gQBm8n/CyLNsRbg35vMVVR gNZep0j+4Jk+Y4/xZ9oLlP6YpvqHxLCFseEYoKiBh6tCvredf8RbVSTNekGSPMk7 SUiMd7Fm1UlP7hVWcI5oXyHlYFEhcyacdCQAn6YY/HcqYeMAsxMBP/ZxlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNaL7qjBCjlAxanS2zTGPEU95HD8MB8GA1UdIwQY MBaAFP5yEkttMhRj6fEL4ftCK4kkYuifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYt N2JiODIwNDBlNWVlLzEvMW92dXFNRUtPVURGcWRMYk5NWThSVDNrY1B3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYtN2JiODIwNDBlNWVl LzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwn30MA0G CSqGSIb3DQEBCwUAA4IBAQBGHtvfsXBy7woZJjVPAlfABciVtqKsbXaG2AZ0yiNk NoE/5KcaoU+k2qPamMcVRrmILOkJnBRC/L4mtpZMxb7aCL0we1ZjlR3vdgDW+AMo owxOifSYBTKVhUHCLunQTXKDOne9B4foRTxiNLwjLl3ukKMlpbRpyoUxc5BF7/8Z Ox3LWbAPkIFaaGVS/5oEjI+LB8AWQUN2i+IE17APtZ3CJyAz4YWxzfCP5ASsvFaz HCTinsFXvIX7EdgR7AvWvP6Hehc5No8+pWUvtv408WojdsKoTZWo9B3RsVFD81kM kdhxA8xQllXU/hVxKO6dJniWc6rjp/J7NlOQiGLwduEO -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:44 2026 by rpki-client