This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/v-ikOphb6e29hpwrNQIcQpcHAak.roa File: v-ikOphb6e29hpwrNQIcQpcHAak.roa (raw, json) Hash identifier: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE= Subject key identifier: BF:E8:A4:3A:98:5B:E9:ED:BD:86:9C:2B:35:02:1C:42:97:07:01:A9 Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E3890460AAA7B48213C52B8C50B533D Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/v-ikOphb6e29hpwrNQIcQpcHAak.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20756 IP address blocks: 62.93.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:90:46:0a:aa:7b:48:21:3c:52:b8:c5:0b:53:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfe8a43a985be9edbd869c2b35021c42970701a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e6:40:c0:d1:d1:77:5a:e6:22:59:8e:8e:a9: b5:06:a9:c0:c3:21:a7:c6:ce:a0:b8:c7:8d:7c:a6: ec:fa:e9:79:cb:54:85:97:27:dd:99:c1:db:cb:d5: 35:58:53:80:e0:27:59:11:47:a8:3f:d6:73:f3:d9: 7e:e0:7f:1e:85:e9:d8:aa:a3:a5:63:fa:2f:8c:be: b5:10:21:96:97:5a:8a:fa:73:26:d6:4b:2d:2c:4a: b7:3b:55:67:54:27:17:59:ab:27:46:93:58:3f:6e: 2a:b1:62:40:60:ca:b1:18:52:2f:0a:91:9f:21:3f: 68:53:eb:a7:c8:5c:64:25:5a:7a:a4:08:58:df:fa: ef:2a:8f:75:ee:b8:09:1b:b2:92:ac:86:2b:1d:68: c2:ca:b5:d2:34:ff:6a:95:c8:b4:c5:35:34:26:e2: 53:cc:81:08:83:46:84:db:34:a3:f5:06:6d:71:86: d2:c3:ba:4d:69:cd:a2:ed:b5:76:17:4c:43:08:c1: 81:3c:18:f8:b3:28:7a:f9:1c:c5:a9:3c:1c:89:dd: 8a:77:73:d3:2a:63:d5:00:12:1b:3d:51:0c:c4:0a: a2:8f:e0:a7:a2:2b:1c:5c:a5:fe:06:57:76:27:4d: b5:b1:a2:b6:c1:f6:93:20:81:e0:41:e9:27:7d:7f: 6a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E8:A4:3A:98:5B:E9:ED:BD:86:9C:2B:35:02:1C:42:97:07:01:A9 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/v-ikOphb6e29hpwrNQIcQpcHAak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.93.195.0/24 Signature Algorithm: sha256WithRSAEncryption 08:90:7b:45:cf:2b:47:70:3d:9c:21:85:39:49:2c:e0:cd:7a: cd:8e:92:4a:36:e1:d9:55:ad:a9:d7:23:a9:e5:48:79:0c:74: e9:cc:9a:93:ec:b2:d4:bb:ee:5b:2c:34:0d:26:db:07:5b:44: 2e:ce:8b:9e:ff:61:64:74:aa:1a:c4:4e:be:75:08:df:3f:05: 20:33:78:fc:db:ba:c5:9b:21:47:dc:3e:d3:f3:c3:ce:85:dd: 74:a7:f8:2f:6f:de:38:99:8f:32:7c:a9:f1:78:a6:09:ae:2c: 3d:3a:22:e3:cd:cc:0b:a7:e9:1d:59:06:6c:3d:06:2f:6f:6e: 53:47:60:f3:04:bc:f5:26:54:da:e8:7a:74:6b:6c:89:ea:92: 1a:56:d5:72:f1:f4:7a:69:03:dd:fa:16:68:fe:46:b5:b2:72: 05:21:4b:4b:ea:c3:af:ad:c0:cf:5c:8c:88:dd:d2:56:69:8f: d5:86:78:b6:a4:b9:a8:46:2d:42:b6:9f:e9:e0:68:14:29:80: 22:d4:14:a1:a2:4f:d6:a7:e0:77:95:2b:14:be:37:54:60:04: 07:23:eb:94:fb:63:df:25:be:4c:09:5c:04:2a:0e:7d:62:a4: b8:23:04:9c:e3:9d:b0:93:6f:3e:17:2b:67:97:76:5e:b5:b6: 6b:60:42:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJBGCqp7SCE8UrjFC1M9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmU4YTQzYTk4NWJlOWVkYmQ4NjljMmIzNTAyMWM0Mjk3MDcwMWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuZAwNHRd1rmIlmOjqm1BqnAwyGn xs6guMeNfKbs+ul5y1SFlyfdmcHby9U1WFOA4CdZEUeoP9Zz89l+4H8ehenYqqOl Y/ovjL61ECGWl1qK+nMm1kstLEq3O1VnVCcXWasnRpNYP24qsWJAYMqxGFIvCpGf IT9oU+unyFxkJVp6pAhY3/rvKo917rgJG7KSrIYrHWjCyrXSNP9qlci0xTU0JuJT zIEIg0aE2zSj9QZtcYbSw7pNac2i7bV2F0xDCMGBPBj4syh6+RzFqTwcid2Kd3PT KmPVABIbPVEMxAqij+CnoiscXKX+Bld2J021saK2wfaTIIHgQeknfX9q9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL/opDqYW+ntvYacKzUCHEKXBwGpMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvdi1pa09waGI2ZTI5aHB3ck5RSWNRcGNIQWFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPl3DMA0G CSqGSIb3DQEBCwUAA4IBAQAIkHtFzytHcD2cIYU5SSzgzXrNjpJKNuHZVa2p1yOp 5Uh5DHTpzJqT7LLUu+5bLDQNJtsHW0Quzoue/2FkdKoaxE6+dQjfPwUgM3j827rF myFH3D7T88POhd10p/gvb944mY8yfKnxeKYJriw9OiLjzcwLp+kdWQZsPQYvb25T R2DzBLz1JlTa6Hp0a2yJ6pIaVtVy8fR6aQPd+hZo/ka1snIFIUtL6sOvrcDPXIyI 3dJWaY/Vhni2pLmoRi1Ctp/p4GgUKYAi1BShok/Wp+B3lSsUvjdUYAQHI+uU+2Pf Jb5MCVwEKg59YqS4IwSc452wk28+Fytnl3ZetbZrYELz -----END CERTIFICATE-----Generated at Thu Feb 5 13:55:01 2026 by rpki-client