This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/op0eEgdGXmNS-P-Hwl4ObyQ3ZSY.roa File: op0eEgdGXmNS-P-Hwl4ObyQ3ZSY.roa (raw, json) Hash identifier: mp432jFuxTshjpfCMrprAjvtqJ7CW44OdVeEPtHFMHI= Subject key identifier: A2:9D:1E:12:07:46:5E:63:52:F8:FF:87:C2:5E:0E:6F:24:37:65:26 Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af Certificate serial: 019B7F14FEFD297909DC73487079B5F2083F Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/op0eEgdGXmNS-P-Hwl4ObyQ3ZSY.roa Signing time: Fri 02 Jan 2026 14:20:40 +0000 ROA not before: Fri 02 Jan 2026 14:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.105.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:fe:fd:29:79:09:dc:73:48:70:79:b5:f2:08:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af Validity Not Before: Jan 2 14:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a29d1e1207465e6352f8ff87c25e0e6f24376526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:5b:c2:a5:7e:2c:72:6c:25:34:50:44:8c: 8c:82:a5:a9:9b:18:be:47:a2:35:bd:7f:b6:76:eb: 62:e3:b7:5e:d7:a8:7c:08:62:5c:ea:0e:b3:d0:f9: 6c:7a:c7:cc:21:3a:4f:e7:4f:95:94:58:e3:58:ac: eb:a5:2e:95:e2:44:5e:a5:c0:1a:a0:9e:35:c7:cb: b7:0d:d5:84:ef:37:81:3a:e2:01:68:01:1e:15:d5: 29:be:39:08:57:92:77:3e:77:28:90:db:e4:44:ee: 8c:4f:7d:11:74:4e:90:01:25:1d:a4:f1:6b:29:5c: 44:07:75:c1:27:12:8a:c9:2e:36:fe:ad:f2:0b:78: f1:98:44:fc:aa:c1:d6:73:0e:31:0d:f8:ba:be:20: 9a:5c:91:76:2e:60:1f:38:1c:17:ff:d8:20:f1:72: be:00:96:f9:17:d9:e1:e5:f5:b8:cd:23:95:33:76: 9c:f5:2d:68:5c:2c:95:14:7f:a7:0c:70:c5:db:0f: 19:86:9b:fc:d6:e2:72:90:28:d6:41:19:e3:fa:2d: 08:8e:91:1b:6b:74:1c:0b:8b:e7:80:cd:9c:96:9c: 1a:9d:e6:be:94:d4:1c:2f:49:4b:86:f4:b0:3a:a8: 07:bc:c1:f0:69:fd:29:8e:c1:c6:3f:3d:97:d5:56: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9D:1E:12:07:46:5E:63:52:F8:FF:87:C2:5E:0E:6F:24:37:65:26 X509v3 Authority Key Identifier: keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/op0eEgdGXmNS-P-Hwl4ObyQ3ZSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.212.0/24 Signature Algorithm: sha256WithRSAEncryption 07:bc:cf:f5:db:bc:75:f6:42:ff:be:5c:75:e1:09:8e:24:fb: fb:1c:54:86:35:fa:ed:6e:95:6f:55:e6:f5:ba:6d:44:94:96: 71:aa:7e:79:c4:f7:ac:bd:54:0c:cf:23:41:0a:69:83:f3:36: 4b:51:2d:d2:2c:d9:60:78:83:1a:bc:a7:b9:f7:d9:f0:1f:a7: f0:0a:42:1f:72:83:ff:f3:a6:0f:e4:3a:56:c1:53:f4:6d:7a: 25:e7:ec:b9:64:23:82:ee:fc:6e:cc:e6:c1:73:8f:94:31:ff: 0c:f4:87:8d:f1:61:50:1a:29:06:6f:0b:41:2e:8c:f4:40:76: 93:3a:ea:ed:c6:08:6f:6a:31:96:d9:33:d5:75:25:6b:70:6d: 64:6f:83:7f:d2:b6:6d:43:4b:75:33:6a:bc:83:d8:13:f4:75: 3c:5e:ea:1a:08:e1:05:c2:a3:95:f4:13:3f:e9:6a:a1:f9:a7: 73:d8:6b:dc:77:9c:8b:bb:dd:36:09:87:48:40:db:99:a7:c4: ad:a7:9d:38:8d:2e:4d:10:c9:46:6e:83:59:8f:6e:e0:6e:ed: 11:ae:24:ca:01:28:21:65:c0:b5:cd:84:d5:f4:81:20:cb:46: 94:3c:f1:e4:73:bb:e3:77:67:1d:ef:a7:a6:0d:00:1d:d5:09: 57:c4:01:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FP79KXkJ3HNIcHm18gg/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMGFlNjUxZGVmYjA2NjZjMjJiMmU1ZDdhZGQ1NjUzNDg3 MDc2YWYwHhcNMjYwMTAyMTQyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjlkMWUxMjA3NDY1ZTYzNTJmOGZmODdjMjVlMGU2ZjI0Mzc2NTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE9bwqV+LHJsJTRQRIyMgqWpmxi+ R6I1vX+2duti47de16h8CGJc6g6z0PlsesfMITpP50+VlFjjWKzrpS6V4kRepcAa oJ41x8u3DdWE7zeBOuIBaAEeFdUpvjkIV5J3PncokNvkRO6MT30RdE6QASUdpPFr KVxEB3XBJxKKyS42/q3yC3jxmET8qsHWcw4xDfi6viCaXJF2LmAfOBwX/9gg8XK+ AJb5F9nh5fW4zSOVM3ac9S1oXCyVFH+nDHDF2w8Zhpv81uJykCjWQRnj+i0IjpEb a3QcC4vngM2clpwanea+lNQcL0lLhvSwOqgHvMHwaf0pjsHGPz2X1VZKfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKKdHhIHRl5jUvj/h8JeDm8kN2UmMB8GA1UdIwQY MBaAFNsK5lHe+wZmwisuXXrdVlNIcHavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWIt ZTBhYTg2ZDI1MGUzLzEvb3AwZUVnZEdYbU5TLVAtSHdsNE9ieVEzWlNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWItZTBhYTg2ZDI1MGUz LzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWnUMA0G CSqGSIb3DQEBCwUAA4IBAQAHvM/127x19kL/vlx14QmOJPv7HFSGNfrtbpVvVeb1 um1ElJZxqn55xPesvVQMzyNBCmmD8zZLUS3SLNlgeIMavKe599nwH6fwCkIfcoP/ 86YP5DpWwVP0bXol5+y5ZCOC7vxuzObBc4+UMf8M9IeN8WFQGikGbwtBLoz0QHaT OurtxghvajGW2TPVdSVrcG1kb4N/0rZtQ0t1M2q8g9gT9HU8XuoaCOEFwqOV9BM/ 6Wqh+adz2Gvcd5yLu902CYdIQNuZp8Stp504jS5NEMlGboNZj27gbu0RriTKASgh ZcC1zYTV9IEgy0aUPPHkc7vjd2cd76emDQAd1QlXxAHG -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:45 2026 by rpki-client