This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/oUHh0fasEsq5w1CCMpfcHZtBRD4.roa File: oUHh0fasEsq5w1CCMpfcHZtBRD4.roa (raw, json) Hash identifier: UjTvz3EvpJQa3UXT8srfAji/9iKr5LpXON0y3SlaisY= Subject key identifier: A1:41:E1:D1:F6:AC:12:CA:B9:C3:50:82:32:97:DC:1D:9B:41:44:3E Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed Certificate serial: 019B7834AFD46702F37BF1CF2244059314F8 Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/oUHh0fasEsq5w1CCMpfcHZtBRD4.roa Signing time: Thu 01 Jan 2026 06:17:57 +0000 ROA not before: Thu 01 Jan 2026 06:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39142 IP address blocks: 195.191.240.0/23 maxlen: 23 195.191.240.0/24 maxlen: 24 195.191.241.0/24 maxlen: 24 2a0a:dc07::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:af:d4:67:02:f3:7b:f1:cf:22:44:05:93:14:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed Validity Not Before: Jan 1 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a141e1d1f6ac12cab9c350823297dc1d9b41443e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e5:d9:ec:82:c2:16:88:4c:d4:1c:48:25:21: 51:af:15:50:f4:bb:4d:b8:ed:26:bc:3c:9d:0d:a0: 59:f0:14:63:e1:a6:45:35:cf:c7:18:53:f7:88:96: e8:2a:23:27:81:8b:51:9f:d8:e1:b6:40:f1:f9:02: b9:c9:39:7a:ad:c0:1c:ad:3c:54:ef:a9:1e:4e:c1: 29:4e:e8:b2:c1:1d:4f:cd:87:1c:39:d8:c3:11:d7: 42:1e:bd:54:6a:4b:2f:9f:0b:81:c4:ef:c2:d1:76: 79:71:ec:73:c6:fc:75:07:2e:eb:d5:fd:0b:b6:bd: 97:30:f5:de:d4:47:7d:ae:2e:7e:d5:50:9c:be:27: f9:fe:e7:27:31:f4:65:8c:b0:7e:07:3f:ed:27:fd: d7:c8:98:64:b2:5a:47:6c:ab:38:64:e3:29:50:37: 65:05:8d:17:dd:7b:83:a0:52:af:2e:4f:4e:a9:40: 53:ce:d0:e3:50:e9:8c:39:d3:f1:5e:8e:0a:e8:9e: 27:9e:38:3c:92:71:a5:8d:18:a0:a4:7b:04:35:db: 51:36:0d:cb:cc:1f:cd:ba:6c:2f:04:0c:07:ed:5a: 37:11:a6:73:b3:76:67:45:55:a3:7f:1f:46:0f:c3: b8:fa:89:24:3d:6b:11:4a:14:09:d3:3e:3b:92:8b: 24:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:41:E1:D1:F6:AC:12:CA:B9:C3:50:82:32:97:DC:1D:9B:41:44:3E X509v3 Authority Key Identifier: keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/oUHh0fasEsq5w1CCMpfcHZtBRD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.240.0/23 IPv6: 2a0a:dc07::/32 Signature Algorithm: sha256WithRSAEncryption 41:82:e6:bd:b4:5b:9c:46:8f:58:79:0c:00:d3:8a:1e:9b:5a: 04:93:05:7b:98:a2:97:82:68:9b:dc:84:91:a8:ac:b7:da:06: 51:bf:b3:51:00:60:f7:00:a9:db:9d:eb:51:16:be:a3:37:15: 8c:fc:58:56:80:bd:7f:5a:c6:f1:95:7b:2c:33:d2:65:1a:7c: 42:6e:39:49:43:0d:5f:dd:54:b6:73:0f:cd:fb:99:03:c9:40: 2f:3f:37:15:82:1d:33:81:46:c8:5c:7f:c7:f7:07:40:44:af: 16:47:09:6e:6a:7b:32:8b:8b:53:3f:2c:fb:48:d8:ad:f6:ab: 43:11:78:8e:55:d2:24:67:54:89:56:c4:03:81:85:64:2e:23: cc:9b:b9:cd:6e:0e:24:f2:24:5e:18:d0:b4:d4:bf:e0:3b:c6: 22:90:b2:a1:58:42:d4:37:16:a4:0f:30:3b:ff:09:f4:51:aa: 88:19:6b:ce:1d:d4:c6:4f:4e:6a:fb:94:25:fa:32:06:8a:6e: d9:27:3e:ce:a0:41:59:e6:8d:94:ba:b7:70:d9:bc:ea:8b:f7: 6b:f4:1f:b5:73:4f:d4:dc:03:a0:07:15:00:1e:0d:fb:ad:62: 00:e1:26:f1:9e:58:2a:10:1e:83:f9:72:a1:34:86:bf:a7:7a: 4c:f5:b0:1b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NK/UZwLze/HPIkQFkxT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZTY5MTQyN2M2ZTQxODA2ZjZjZWIxZTIxOGE3ZGM2MzIw ZmRlZWQwHhcNMjYwMTAxMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTQxZTFkMWY2YWMxMmNhYjljMzUwODIzMjk3ZGMxZDliNDE0NDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+XZ7ILCFohM1BxIJSFRrxVQ9LtN uO0mvDydDaBZ8BRj4aZFNc/HGFP3iJboKiMngYtRn9jhtkDx+QK5yTl6rcAcrTxU 76keTsEpTuiywR1PzYccOdjDEddCHr1UaksvnwuBxO/C0XZ5cexzxvx1By7r1f0L tr2XMPXe1Ed9ri5+1VCcvif5/ucnMfRljLB+Bz/tJ/3XyJhkslpHbKs4ZOMpUDdl BY0X3XuDoFKvLk9OqUBTztDjUOmMOdPxXo4K6J4nnjg8knGljRigpHsENdtRNg3L zB/NumwvBAwH7Vo3EaZzs3ZnRVWjfx9GD8O4+okkPWsRShQJ0z47koskMQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKFB4dH2rBLKucNQgjKX3B2bQUQ+MB8GA1UdIwQY MBaAFO/mkUJ8bkGAb2zrHiGKfcYyD97tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMt MzgxNGM1N2ZlOWJiLzEvb1VIaDBmYXNFc3E1dzFDQ01wZmNIWnRCUkQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMtMzgxNGM1N2ZlOWJi LzEvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBw7/wMA0E AgACMAcDBQAqCtwHMA0GCSqGSIb3DQEBCwUAA4IBAQBBgua9tFucRo9YeQwA04oe m1oEkwV7mKKXgmib3ISRqKy32gZRv7NRAGD3AKnbnetRFr6jNxWM/FhWgL1/Wsbx lXssM9JlGnxCbjlJQw1f3VS2cw/N+5kDyUAvPzcVgh0zgUbIXH/H9wdARK8WRwlu ansyi4tTPyz7SNit9qtDEXiOVdIkZ1SJVsQDgYVkLiPMm7nNbg4k8iReGNC01L/g O8YikLKhWELUNxakDzA7/wn0UaqIGWvOHdTGT05q+5Ql+jIGim7ZJz7OoEFZ5o2U urdw2bzqi/dr9B+1c0/U3AOgBxUAHg37rWIA4SbxnlgqEB6D+XKhNIa/p3pM9bAb -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:16 2026 by rpki-client