This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/O103OuQ4IixndGyKa3UX3V5e3WQ.roa File: O103OuQ4IixndGyKa3UX3V5e3WQ.roa (raw, json) Hash identifier: TcKGNvz82Ie8m+YB2xFxcsRcNfeQxqqzYWZzRclot5E= Subject key identifier: 3B:5D:37:3A:E4:38:22:2C:67:74:6C:8A:6B:75:17:DD:5E:5E:DD:64 Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e Certificate serial: 019B7C11B91BE9385B929C81FF7E5DCEB7F3 Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/O103OuQ4IixndGyKa3UX3V5e3WQ.roa Signing time: Fri 02 Jan 2026 00:18:14 +0000 ROA not before: Fri 02 Jan 2026 00:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210289 IP address blocks: 195.177.230.0/24 maxlen: 24 195.177.231.0/24 maxlen: 24 195.178.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:b9:1b:e9:38:5b:92:9c:81:ff:7e:5d:ce:b7:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e Validity Not Before: Jan 2 00:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b5d373ae438222c67746c8a6b7517dd5e5edd64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:17:44:32:46:81:c9:53:59:31:20:58:5d:a3: 6a:bb:49:35:a8:00:58:51:86:23:4c:9d:35:e5:6e: fb:e8:c0:5a:27:eb:80:6b:88:d6:6b:e5:9a:de:d2: ef:72:c1:96:3b:7c:01:61:13:42:1d:82:9c:76:5c: 34:10:d1:60:32:2b:d7:03:30:9f:46:2d:da:04:21: bc:e0:81:f5:16:bc:bb:8c:44:8e:5e:0b:13:f1:c6: 50:cb:42:02:e9:43:c4:28:1f:cd:1b:26:9b:f1:6d: 34:56:0e:e2:a0:35:57:eb:d7:87:06:21:bb:b0:ab: 22:6b:c5:29:20:fe:f3:27:ce:ec:82:54:ed:a1:2d: 1e:c8:dd:13:80:44:1b:86:54:2d:50:70:4b:41:49: fb:ac:33:3c:a9:21:6a:fe:fa:d4:87:84:fb:a0:00: 7a:a1:0a:dc:2c:e3:d5:2c:f1:cf:4b:23:6e:b0:2d: f1:b6:0e:ad:fb:e3:a4:f3:06:76:58:c7:cd:52:3e: 66:1b:dd:2d:7e:be:d4:31:63:24:8b:8e:eb:ec:63: 28:a6:47:5b:34:00:fb:71:03:36:98:fa:66:ce:c8: f9:33:40:2c:3e:02:8d:fd:ca:5d:f2:de:72:ce:ef: 6b:de:58:61:3e:a0:bc:5f:13:16:dc:f7:5e:af:d6: 64:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5D:37:3A:E4:38:22:2C:67:74:6C:8A:6B:75:17:DD:5E:5E:DD:64 X509v3 Authority Key Identifier: keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/O103OuQ4IixndGyKa3UX3V5e3WQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.177.230.0/23 195.178.104.0/23 Signature Algorithm: sha256WithRSAEncryption 30:b6:ac:db:46:a0:2f:56:0f:99:08:fe:55:26:e5:af:0f:7d: c9:10:21:b7:01:6b:9f:d3:f8:a1:2f:ec:2e:01:ec:cd:bb:11: c6:a2:21:eb:91:e4:94:d8:90:9b:a1:3b:3c:16:e0:cf:98:e9: 2c:30:6d:47:eb:a2:30:b4:90:91:56:dd:70:97:7a:58:72:29: 74:e3:c2:6a:39:69:be:35:b0:b9:92:98:89:c3:6b:90:10:ed: 6c:74:e4:46:e7:86:c8:5f:35:b7:c0:fe:81:01:9f:6a:73:66: a5:04:0e:02:89:00:9e:33:13:29:bd:c8:dd:80:07:29:6d:15: 36:c0:bd:bd:29:1f:bc:df:2c:f6:55:fb:0a:72:91:63:a0:ea: c8:1f:e5:b2:7d:7a:40:82:b2:ef:77:38:60:f4:c8:0e:23:c3: de:af:3c:d0:19:d0:b4:e8:2d:58:75:03:c6:33:07:ac:32:36: f2:ff:70:34:cb:ee:1f:5b:c3:88:4c:30:d6:57:e3:f9:79:57: 03:da:1f:70:39:3f:1c:42:93:65:f9:9c:6c:10:19:bf:b2:a6: 76:6d:01:09:10:c3:07:84:1a:e4:33:49:5a:0d:d6:67:45:50: 6a:ef:7e:dd:9e:9a:28:d3:3b:11:fa:fe:f7:b3:19:70:51:44: fe:d9:08:6c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Ebkb6ThbkpyB/35dzrfzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWM3N2ExZGNkYjhlZWQ2MmNkM2NhODBhNTE0NGRjNGUy NDNmNGUwHhcNMjYwMTAyMDAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjVkMzczYWU0MzgyMjJjNjc3NDZjOGE2Yjc1MTdkZDVlNWVkZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxdEMkaByVNZMSBYXaNqu0k1qABY UYYjTJ015W776MBaJ+uAa4jWa+Wa3tLvcsGWO3wBYRNCHYKcdlw0ENFgMivXAzCf Ri3aBCG84IH1Fry7jESOXgsT8cZQy0IC6UPEKB/NGyab8W00Vg7ioDVX69eHBiG7 sKsia8UpIP7zJ87sglTtoS0eyN0TgEQbhlQtUHBLQUn7rDM8qSFq/vrUh4T7oAB6 oQrcLOPVLPHPSyNusC3xtg6t++Ok8wZ2WMfNUj5mG90tfr7UMWMki47r7GMopkdb NAD7cQM2mPpmzsj5M0AsPgKN/cpd8t5yzu9r3lhhPqC8XxMW3Pder9ZkawIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDtdNzrkOCIsZ3Rsimt1F91eXt1kMB8GA1UdIwQY MBaAFA+cd6Hc247tYs08qApRRNxOJD9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgt YWNjNTY5NzdiNmY0LzEvTzEwM091UTRJaXhuZEd5S2EzVVgzVjVlM1dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgtYWNjNTY5NzdiNmY0 LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw7HmAwQB w7JoMA0GCSqGSIb3DQEBCwUAA4IBAQAwtqzbRqAvVg+ZCP5VJuWvD33JECG3AWuf 0/ihL+wuAezNuxHGoiHrkeSU2JCboTs8FuDPmOksMG1H66IwtJCRVt1wl3pYcil0 48JqOWm+NbC5kpiJw2uQEO1sdORG54bIXzW3wP6BAZ9qc2alBA4CiQCeMxMpvcjd gAcpbRU2wL29KR+83yz2VfsKcpFjoOrIH+WyfXpAgrLvdzhg9MgOI8PerzzQGdC0 6C1YdQPGMwesMjby/3A0y+4fW8OITDDWV+P5eVcD2h9wOT8cQpNl+ZxsEBm/sqZ2 bQEJEMMHhBrkM0laDdZnRVBq737dnpoo0zsR+v73sxlwUUT+2Qhs -----END CERTIFICATE-----Generated at Mon Feb 2 20:37:21 2026 by rpki-client