This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/oadKqKnJHXC_wPIoXXpwIrz6qho.roa File: oadKqKnJHXC_wPIoXXpwIrz6qho.roa (raw, json) Hash identifier: /b3KtlUnGUBwENMNCn0DeNHIAAHuvWxhKHFEPBk7Tos= Subject key identifier: A1:A7:4A:A8:A9:C9:1D:70:BF:C0:F2:28:5D:7A:70:22:BC:FA:AA:1A Certificate issuer: /CN=64c2493e4c2eea930b1ec2c8363d2d1ffae6e17e Certificate serial: 019B79ED6568BF5DB56B5E06778E081486F1 Authority key identifier: 64:C2:49:3E:4C:2E:EA:93:0B:1E:C2:C8:36:3D:2D:1F:FA:E6:E1:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMJJPkwu6pMLHsLINj0tH_rm4X4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/oadKqKnJHXC_wPIoXXpwIrz6qho.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52043 IP address blocks: 46.151.240.0/21 maxlen: 24 176.106.8.0/21 maxlen: 24 176.106.16.0/20 maxlen: 24 176.124.116.0/22 maxlen: 24 176.124.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.mft rsync://rpki.ripe.net/repository/DEFAULT/ZMJJPkwu6pMLHsLINj0tH_rm4X4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:65:68:bf:5d:b5:6b:5e:06:77:8e:08:14:86:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64c2493e4c2eea930b1ec2c8363d2d1ffae6e17e Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1a74aa8a9c91d70bfc0f2285d7a7022bcfaaa1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:a0:f9:af:ae:f5:45:cf:5c:f5:e1:aa:a8: 60:d5:e9:a4:4e:35:2d:7c:f6:f8:94:b9:5f:7e:76: b8:65:21:b2:02:5a:98:4b:e1:ae:7f:8f:b2:5b:32: 09:ae:22:2b:10:66:50:79:b6:d6:b3:39:6f:cd:b6: 74:5c:5b:aa:0d:42:d4:c9:eb:b4:10:64:32:ce:5f: a1:64:fc:41:13:c5:57:e7:7f:06:80:8d:29:f2:5e: 6c:e8:9e:72:c0:66:4a:be:3d:f9:81:4b:fa:99:eb: 8d:52:c7:55:1a:a8:98:07:de:a1:3c:69:a7:00:92: 50:c4:60:d1:ff:05:83:5e:14:45:b4:05:49:08:12: 8e:03:dc:b7:62:10:5b:26:bd:c1:c6:e5:8f:0f:e6: 84:83:8c:8c:c1:cc:46:93:bb:95:8a:a3:db:1c:60: 92:6b:b2:58:ab:1f:de:80:11:92:0a:20:48:25:19: b3:94:df:8d:1e:e7:59:b8:c9:58:d0:9d:6e:4f:1c: 6e:3f:ce:68:36:84:e9:ae:03:9c:b1:4c:2c:4d:4e: 7c:eb:4d:87:be:08:46:36:2e:ec:7a:99:68:06:39: 40:af:94:96:6d:64:e8:11:98:26:62:ed:6a:2c:3d: 35:1f:e4:c4:9d:9f:b6:e1:2a:1e:59:97:9e:2f:a2: 4d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A7:4A:A8:A9:C9:1D:70:BF:C0:F2:28:5D:7A:70:22:BC:FA:AA:1A X509v3 Authority Key Identifier: keyid:64:C2:49:3E:4C:2E:EA:93:0B:1E:C2:C8:36:3D:2D:1F:FA:E6:E1:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMJJPkwu6pMLHsLINj0tH_rm4X4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/oadKqKnJHXC_wPIoXXpwIrz6qho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/43caf7-8fc6-4123-8a93-652e0f5e5be8/1/ZMJJPkwu6pMLHsLINj0tH_rm4X4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.240.0/21 176.106.8.0-176.106.31.255 176.124.116.0-176.124.127.255 Signature Algorithm: sha256WithRSAEncryption 2b:86:66:13:5a:95:39:7a:9a:3b:b1:4a:7c:e9:6c:e7:90:e6: 8d:60:fe:44:11:e2:88:67:d6:3b:86:1f:58:00:ae:78:50:12: bf:ad:94:0f:ea:72:17:19:3a:34:e1:94:73:0f:9b:22:a2:be: 24:93:ae:e7:da:f8:ff:40:7f:a5:e7:63:9e:3e:a9:07:0f:26: 49:ad:1b:d8:b1:70:68:1f:a8:50:6b:67:4b:50:85:ae:12:a9: a6:ad:f0:b5:2f:63:1c:57:19:66:f5:c6:d3:52:f2:48:d8:88: 73:fa:4e:c8:0d:e3:9d:2b:78:f4:ca:2f:2e:bd:f7:a9:34:92: 50:e8:35:6a:36:fe:5f:91:00:67:d8:ee:18:a8:7d:9b:3d:63: e4:66:a7:21:7f:3e:22:6e:a5:d5:62:bb:f7:fc:76:4d:91:70: e0:03:41:05:b6:7a:b2:84:74:da:b4:5a:1b:ed:e8:b6:64:21: 53:c9:d1:33:c7:11:89:57:53:86:26:8c:af:66:98:ae:01:31: ca:0d:71:96:15:36:c4:23:e2:17:0b:73:44:d2:90:27:44:5c: 89:0a:76:35:c4:4c:a8:83:10:fd:8b:b4:bf:c4:93:18:04:a0: 80:5b:80:6f:68:69:78:c3:bf:fd:1a:d5:b8:f7:44:fc:ed:22: e2:5e:d1:90 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt57WVov121a14Gd44IFIbxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YzI0OTNlNGMyZWVhOTMwYjFlYzJjODM2M2QyZDFmZmFl NmUxN2UwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWE3NGFhOGE5YzkxZDcwYmZjMGYyMjg1ZDdhNzAyMmJjZmFhYTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqueg+a+u9UXPXPXhqqhg1emkTjUt fPb4lLlffna4ZSGyAlqYS+Guf4+yWzIJriIrEGZQebbWszlvzbZ0XFuqDULUyeu0 EGQyzl+hZPxBE8VX538GgI0p8l5s6J5ywGZKvj35gUv6meuNUsdVGqiYB96hPGmn AJJQxGDR/wWDXhRFtAVJCBKOA9y3YhBbJr3BxuWPD+aEg4yMwcxGk7uViqPbHGCS a7JYqx/egBGSCiBIJRmzlN+NHudZuMlY0J1uTxxuP85oNoTprgOcsUwsTU58602H vghGNi7seploBjlAr5SWbWToEZgmYu1qLD01H+TEnZ+24SoeWZeeL6JNqQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKGnSqipyR1wv8DyKF16cCK8+qoaMB8GA1UdIwQY MBaAFGTCST5MLuqTCx7CyDY9LR/65uF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk1KSlBrd3U2cE1MSHNMSU5qMHRIX3JtNFg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80M2NhZjctOGZjNi00MTIzLThhOTMt NjUyZTBmNWU1YmU4LzEvb2FkS3FLbkpIWENfd1BJb1hYcHdJcno2cWhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80M2NhZjctOGZjNi00MTIzLThhOTMtNjUyZTBmNWU1YmU4 LzEvWk1KSlBrd3U2cE1MSHNMSU5qMHRIX3JtNFg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQDLpfwMAwD BAOwaggDBAWwagAwDAMEArB8dAMEB7B8ADANBgkqhkiG9w0BAQsFAAOCAQEAK4Zm E1qVOXqaO7FKfOls55DmjWD+RBHiiGfWO4YfWACueFASv62UD+pyFxk6NOGUcw+b IqK+JJOu59r4/0B/pedjnj6pBw8mSa0b2LFwaB+oUGtnS1CFrhKppq3wtS9jHFcZ ZvXG01LySNiIc/pOyA3jnSt49MovLr33qTSSUOg1ajb+X5EAZ9juGKh9mz1j5Gan IX8+Im6l1WK79/x2TZFw4ANBBbZ6soR02rRaG+3otmQhU8nRM8cRiVdThiaMr2aY rgExyg1xlhU2xCPiFwtzRNKQJ0RciQp2NcRMqIMQ/Yu0v8STGASggFuAb2hpeMO/ /RrVuPdE/O0i4l7RkA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:26 2026 by rpki-client