This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/o10KDQLCNX_eEti6B07ro4cJyK8.roa File: o10KDQLCNX_eEti6B07ro4cJyK8.roa (raw, json) Hash identifier: hy+4KJvTq+cRULOZkT8/acKHvswCR6Ar2bCCrvuaUxk= Subject key identifier: A3:5D:0A:0D:02:C2:35:7F:DE:12:D8:BA:07:4E:EB:A3:87:09:C8:AF Certificate issuer: /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377 Certificate serial: 019B7BA34B8895EA8D6C3C485FE01F73C96C Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/o10KDQLCNX_eEti6B07ro4cJyK8.roa Signing time: Thu 01 Jan 2026 22:17:37 +0000 ROA not before: Thu 01 Jan 2026 22:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12965 IP address blocks: 193.178.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:4b:88:95:ea:8d:6c:3c:48:5f:e0:1f:73:c9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377 Validity Not Before: Jan 1 22:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a35d0a0d02c2357fde12d8ba074eeba38709c8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6c:89:8b:1e:4f:de:c9:6a:3d:05:04:cb:aa: a5:b6:bc:91:d5:d0:ce:61:81:bb:9d:62:f5:91:20: e7:d6:5a:ed:ea:2f:c9:31:0a:45:3b:ae:96:ec:cd: 0b:34:13:9d:53:99:e2:fe:d3:c1:1d:0b:1c:5a:29: 63:96:b2:25:64:47:12:b3:a6:32:69:bf:0e:dc:a2: 15:e1:c2:d3:74:74:3f:37:36:46:75:52:88:7e:e3: 48:6d:94:99:c3:4e:db:1d:32:d2:e0:3c:38:73:4c: ac:e4:b4:27:d0:7c:28:5a:8a:f2:9b:24:7f:aa:77: 73:fc:df:d3:96:47:3f:04:dd:22:53:45:9f:a6:e6: a0:4d:08:7f:a3:38:f5:38:11:27:81:05:09:73:0e: 48:0e:da:01:51:0d:3a:61:7d:e4:a8:1f:bd:64:4d: a1:4d:b5:c0:00:1d:62:a6:b0:fb:c0:94:71:55:ca: 39:d3:de:d6:9a:80:74:43:67:08:35:c6:33:39:32: 90:26:a4:01:b1:a0:33:f1:1d:8f:a7:33:5c:25:0f: 2b:8d:e4:ef:e5:89:b1:9d:76:77:1e:bb:2f:81:2a: 86:02:27:1d:e3:3c:16:e1:e6:1d:4e:b4:b7:12:78: e4:8c:7c:84:fa:e5:78:33:02:b8:24:5a:83:fe:2d: 37:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5D:0A:0D:02:C2:35:7F:DE:12:D8:BA:07:4E:EB:A3:87:09:C8:AF X509v3 Authority Key Identifier: keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/o10KDQLCNX_eEti6B07ro4cJyK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.178.150.0/23 Signature Algorithm: sha256WithRSAEncryption c9:f8:ba:42:aa:af:b4:85:5d:1d:bf:b5:bf:5e:9f:b3:aa:1d: 56:0c:bb:14:69:72:ea:11:01:29:7e:c8:c7:0a:93:fa:af:da: 16:a8:61:1b:34:32:6f:b8:8a:02:7c:45:0f:96:8a:ce:c4:bc: 78:34:ed:9e:30:df:96:79:c7:08:9b:dc:50:99:42:34:26:4f: d4:3f:dc:7f:a1:21:4e:f2:9f:da:41:8f:7e:7b:ec:9f:1d:5d: 19:8d:23:6c:ce:b0:fc:7a:48:89:06:89:99:9b:03:83:fb:66: f3:b7:6a:c5:c9:1b:2b:d6:53:7a:8a:82:bc:12:d4:0b:6c:88: 2a:d6:68:79:50:b7:de:bc:94:42:40:a7:15:6b:3b:fe:af:e6: 33:41:1f:29:8d:3b:86:04:30:6e:d1:ae:3a:49:b0:d9:90:0a: 71:f2:08:6e:31:05:32:18:54:ee:1c:f3:c0:2a:5f:7d:ba:d2: df:74:04:17:ca:bd:67:35:46:14:81:9a:12:9a:cd:24:84:de: 77:12:b3:19:e3:12:f1:76:d7:e7:33:a9:6e:a1:e6:56:4f:1b: b9:14:cd:35:f8:b1:60:53:c0:8a:63:ab:4b:f9:5d:2c:11:62: 4d:1d:17:1d:3d:33:99:0e:f8:b1:11:a7:15:56:2b:0e:92:9c: b9:e2:fd:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o0uIleqNbDxIX+Afc8lsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmODZhNzE0MWY2ZmI3YjRjMjhiY2UzMTQ0NjdiNjE1NGUw ZjkzNzcwHhcNMjYwMTAxMjIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzVkMGEwZDAyYzIzNTdmZGUxMmQ4YmEwNzRlZWJhMzg3MDljOGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2yJix5P3slqPQUEy6qltryR1dDO YYG7nWL1kSDn1lrt6i/JMQpFO66W7M0LNBOdU5ni/tPBHQscWiljlrIlZEcSs6Yy ab8O3KIV4cLTdHQ/NzZGdVKIfuNIbZSZw07bHTLS4Dw4c0ys5LQn0HwoWorymyR/ qndz/N/Tlkc/BN0iU0WfpuagTQh/ozj1OBEngQUJcw5IDtoBUQ06YX3kqB+9ZE2h TbXAAB1iprD7wJRxVco5097WmoB0Q2cINcYzOTKQJqQBsaAz8R2PpzNcJQ8rjeTv 5YmxnXZ3HrsvgSqGAicd4zwW4eYdTrS3EnjkjHyE+uV4MwK4JFqD/i03DwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKNdCg0CwjV/3hLYugdO66OHCcivMB8GA1UdIwQY MBaAFF+GpxQfb7e0wovOMURnthVOD5N3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDRhbkZCOXZ0N1RDaTg0eFJHZTJGVTRQazNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wOWI2YzctNTJlZi00ODk3LWJmYTYt NWUwZTI4MWQ3ZGEzLzEvbzEwS0RRTENOWF9lRXRpNkIwN3JvNGNKeUs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8wOWI2YzctNTJlZi00ODk3LWJmYTYtNWUwZTI4MWQ3ZGEz LzEvWDRhbkZCOXZ0N1RDaTg0eFJHZTJGVTRQazNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwbKWMA0G CSqGSIb3DQEBCwUAA4IBAQDJ+LpCqq+0hV0dv7W/Xp+zqh1WDLsUaXLqEQEpfsjH CpP6r9oWqGEbNDJvuIoCfEUPlorOxLx4NO2eMN+WeccIm9xQmUI0Jk/UP9x/oSFO 8p/aQY9+e+yfHV0ZjSNszrD8ekiJBomZmwOD+2bzt2rFyRsr1lN6ioK8EtQLbIgq 1mh5ULfevJRCQKcVazv+r+YzQR8pjTuGBDBu0a46SbDZkApx8ghuMQUyGFTuHPPA Kl99utLfdAQXyr1nNUYUgZoSms0khN53ErMZ4xLxdtfnM6luoeZWTxu5FM01+LFg U8CKY6tL+V0sEWJNHRcdPTOZDvixEacVVisOkpy54v37 -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:47 2026 by rpki-client