This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/Opq729qHLi-8dYaQgIIxGa15kXA.roa File: Opq729qHLi-8dYaQgIIxGa15kXA.roa (raw, json) Hash identifier: 29AgcIdF39QZ4KXfXzVq7WdeMpA7ZOSG9zMnRXMOq8o= Subject key identifier: 3A:9A:BB:DB:DA:87:2E:2F:BC:75:86:90:80:82:31:19:AD:79:91:70 Certificate issuer: /CN=2a19939f218bb61315e9b3b37b3db85960975d14 Certificate serial: 019B7AC88C63CFED596442D14537625A12AD Authority key identifier: 2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/Opq729qHLi-8dYaQgIIxGa15kXA.roa Signing time: Thu 01 Jan 2026 18:18:42 +0000 ROA not before: Thu 01 Jan 2026 18:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34488 IP address blocks: 194.126.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8c:63:cf:ed:59:64:42:d1:45:37:62:5a:12:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a19939f218bb61315e9b3b37b3db85960975d14 Validity Not Before: Jan 1 18:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a9abbdbda872e2fbc75869080823119ad799170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fc:0b:5c:fe:68:9c:f4:fd:b2:bd:4d:aa:c5: c3:6d:5e:ff:88:36:6b:e6:78:f8:ea:10:a9:40:59: 77:b0:6d:7d:de:95:98:3a:b2:61:9e:7f:fb:79:23: 4f:c4:6b:35:b0:7c:a6:61:12:c5:9d:c4:83:0c:12: 2a:8a:7f:6d:27:b3:5a:d8:ee:29:ac:5a:5c:1b:5c: 32:25:17:c4:f8:d0:6b:6d:a6:84:b7:43:ff:7b:11: d4:f3:2d:75:05:8e:f9:c2:ab:79:53:eb:10:23:2f: 25:71:65:59:5b:bc:87:b8:d3:ea:2b:95:31:cd:1a: 34:2f:dc:31:d6:f6:06:f6:50:5f:7c:bf:3c:22:65: 89:1c:43:6d:d2:a0:33:51:ea:e3:24:9f:02:b3:e1: 3a:45:53:fd:73:40:98:85:18:e6:5d:37:4f:75:9d: 0e:17:68:b8:e1:3f:f1:bb:a4:41:59:47:94:69:76: e2:f7:c4:6a:41:a9:c9:aa:10:8e:d1:76:f1:78:cf: 65:db:f7:02:06:8a:ed:8d:31:78:cc:d1:34:11:4e: 23:db:99:f5:75:eb:a4:c7:28:93:60:d4:28:28:58: e8:df:e5:e5:ab:b5:92:bb:73:40:75:96:24:a4:1e: aa:31:00:ee:dd:c8:4e:2d:60:e1:29:b6:8c:0a:d1: a7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9A:BB:DB:DA:87:2E:2F:BC:75:86:90:80:82:31:19:AD:79:91:70 X509v3 Authority Key Identifier: keyid:2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/Opq729qHLi-8dYaQgIIxGa15kXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.197.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:99:3c:39:ba:39:75:08:76:7b:b0:c3:87:f0:8b:b8:b8:d7: 8d:75:16:1a:ac:d0:17:53:a9:6e:25:b1:03:7e:d9:83:11:c2: bf:c8:f5:cd:66:3c:20:19:45:85:28:a9:cd:3a:05:1b:f8:c5: 57:e6:a8:44:82:de:f6:1f:c5:fd:58:99:06:63:3c:e7:54:08: d4:3d:7d:5c:3d:44:b0:4e:05:56:04:06:7a:e3:8f:26:67:9a: 54:07:96:d0:9a:49:3c:f4:12:2b:1c:26:a3:42:55:5e:55:d7: 99:e2:f1:e6:b2:ec:e4:db:c8:a6:73:ed:17:74:3b:66:20:98: dd:d1:30:f2:71:ab:98:6c:fd:a6:11:e4:6e:00:39:d7:15:ad: 50:d1:02:d4:8d:9d:cf:6f:2c:1b:ab:3c:54:4c:a0:f6:bd:89: 31:75:7f:8c:64:7c:0b:be:46:58:ee:b6:68:44:9a:fc:71:5c: 00:4b:d4:f6:21:40:1c:2d:cf:ef:07:87:44:ba:04:32:a3:d5: af:5d:27:67:02:22:8e:a2:07:78:04:4b:d4:a4:59:08:ac:24: 04:0b:98:9d:d7:f5:0f:54:22:a8:7b:96:6c:47:8c:f7:48:dc: d7:ee:57:ea:ff:b7:47:52:2f:b6:3c:70:68:28:f1:4b:54:12: 30:62:2a:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yIxjz+1ZZELRRTdiWhKtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMTk5MzlmMjE4YmI2MTMxNWU5YjNiMzdiM2RiODU5NjA5 NzVkMTQwHhcNMjYwMTAxMTgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTlhYmJkYmRhODcyZTJmYmM3NTg2OTA4MDgyMzExOWFkNzk5MTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/wLXP5onPT9sr1NqsXDbV7/iDZr 5nj46hCpQFl3sG193pWYOrJhnn/7eSNPxGs1sHymYRLFncSDDBIqin9tJ7Na2O4p rFpcG1wyJRfE+NBrbaaEt0P/exHU8y11BY75wqt5U+sQIy8lcWVZW7yHuNPqK5Ux zRo0L9wx1vYG9lBffL88ImWJHENt0qAzUerjJJ8Cs+E6RVP9c0CYhRjmXTdPdZ0O F2i44T/xu6RBWUeUaXbi98RqQanJqhCO0XbxeM9l2/cCBortjTF4zNE0EU4j25n1 deukxyiTYNQoKFjo3+Xlq7WSu3NAdZYkpB6qMQDu3chOLWDhKbaMCtGnJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDqau9vahy4vvHWGkICCMRmteZFwMB8GA1UdIwQY MBaAFCoZk58hi7YTFemzs3s9uFlgl10UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2htVG55R0x0aE1WNmJPemV6MjRXV0NYWFJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81NGU0OTgtZTYyOS00MWU4LThhYmMt ZGY1ZjIwZGQ3NmFkLzEvT3BxNzI5cUhMaS04ZFlhUWdJSXhHYTE1a1hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81NGU0OTgtZTYyOS00MWU4LThhYmMtZGY1ZjIwZGQ3NmFk LzEvS2htVG55R0x0aE1WNmJPemV6MjRXV0NYWFJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn7FMA0G CSqGSIb3DQEBCwUAA4IBAQCLmTw5ujl1CHZ7sMOH8Iu4uNeNdRYarNAXU6luJbED ftmDEcK/yPXNZjwgGUWFKKnNOgUb+MVX5qhEgt72H8X9WJkGYzznVAjUPX1cPUSw TgVWBAZ6448mZ5pUB5bQmkk89BIrHCajQlVeVdeZ4vHmsuzk28imc+0XdDtmIJjd 0TDycauYbP2mEeRuADnXFa1Q0QLUjZ3PbywbqzxUTKD2vYkxdX+MZHwLvkZY7rZo RJr8cVwAS9T2IUAcLc/vB4dEugQyo9WvXSdnAiKOogd4BEvUpFkIrCQEC5id1/UP VCKoe5ZsR4z3SNzX7lfq/7dHUi+2PHBoKPFLVBIwYirV -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:58 2026 by rpki-client