This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/o_HyBkikAR9w1apxuJDVKF2p-3Y.roa File: o_HyBkikAR9w1apxuJDVKF2p-3Y.roa (raw, json) Hash identifier: elrFF3wLFffPqJSdmbrmGaLjv6ONKW+nsnV6avvP20k= Subject key identifier: A3:F1:F2:06:48:A4:01:1F:70:D5:AA:71:B8:90:D5:28:5D:A9:FB:76 Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca Certificate serial: 019B7EA59574B32FC394EEE941E61A9482CE Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/o_HyBkikAR9w1apxuJDVKF2p-3Y.roa Signing time: Fri 02 Jan 2026 12:18:59 +0000 ROA not before: Fri 02 Jan 2026 12:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 194.39.242.0/24 maxlen: 24 2a0c:dd00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:95:74:b3:2f:c3:94:ee:e9:41:e6:1a:94:82:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca Validity Not Before: Jan 2 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3f1f20648a4011f70d5aa71b890d5285da9fb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f8:20:0b:f4:a5:fa:c9:ab:db:32:f4:c7:5d: 12:18:e0:f8:e5:e0:8a:86:eb:85:d5:de:6f:04:2b: 79:9c:25:5c:9d:5f:8f:29:ed:c5:0e:5a:90:94:b1: 6b:12:3b:f2:b0:61:e8:7a:d6:23:39:b9:24:ea:37: 90:e1:1d:51:ee:7c:a8:3e:f7:27:20:35:c8:73:13: e0:00:b2:83:d2:e6:e4:70:bc:13:67:9e:f6:cb:2c: d5:8a:d5:24:c4:7f:70:50:2f:ff:af:6e:79:02:30: 0b:a3:8e:cd:82:15:69:b5:b5:a8:b9:c2:88:8c:34: 42:fc:35:e4:37:f9:7c:5c:ba:44:9d:10:4e:18:b1: b9:bc:d1:64:0c:53:ab:97:c7:b5:5d:bb:65:dd:7e: fa:78:1b:19:40:59:17:c5:2d:e9:92:41:7a:b2:fa: b2:e8:6d:ab:22:05:e4:39:91:cb:57:a9:e5:0a:68: f0:3b:94:c9:2b:60:f7:15:6c:30:0d:f9:99:d6:61: 3f:1b:48:2e:77:9e:62:4e:de:a5:fb:d6:4f:39:38: 2b:51:54:13:f1:5b:c0:dd:af:ba:99:bc:09:36:49: 36:11:73:60:54:ea:b7:9d:b6:67:e6:88:fe:b4:83: ce:24:a0:ae:6b:7c:fd:4a:19:6a:cb:b2:f2:d9:2b: d6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F1:F2:06:48:A4:01:1F:70:D5:AA:71:B8:90:D5:28:5D:A9:FB:76 X509v3 Authority Key Identifier: keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/o_HyBkikAR9w1apxuJDVKF2p-3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.242.0/24 IPv6: 2a0c:dd00::/29 Signature Algorithm: sha256WithRSAEncryption b4:2f:c2:4b:c0:82:bf:c4:08:53:f6:5d:b3:ef:14:1c:f5:37: 46:c4:ab:63:18:60:da:32:c0:16:65:8e:aa:69:84:fc:7f:10: d0:6d:85:6a:ad:8a:a2:59:f3:ce:f3:8d:e6:44:54:86:84:c2: 8a:92:fc:47:f9:59:36:2d:a6:ac:91:d4:d9:61:83:c7:d1:54: 09:b3:60:7c:b1:8c:d0:d1:ad:b3:19:76:ce:3e:7f:92:d5:86: 6d:41:db:38:ee:93:dd:69:99:b2:a0:8f:6a:f3:09:ac:a6:8f: 15:85:6e:dc:23:97:8f:ff:6b:33:3e:b9:6e:c0:23:e4:1e:bf: 15:4c:8f:54:10:a2:b7:ee:38:03:4a:ea:c1:b5:23:e2:b1:5e: e6:79:30:9f:f4:ef:9b:20:c7:df:82:d6:42:26:72:a0:f4:ec: f4:02:c8:5b:3f:40:be:e4:f0:7b:d8:a4:ed:d2:48:a6:84:a2: 5a:01:27:b7:7b:19:bf:ba:ee:ee:14:f2:9e:46:03:85:02:14: b9:9f:29:bd:f6:dd:a2:d2:d2:96:65:38:4f:77:03:3c:62:fb: ff:f0:0f:28:0d:32:1c:d2:3a:4b:ef:df:a7:cf:34:9c:b7:5e: b2:40:4d:79:20:69:ad:5e:69:99:db:a1:ac:a6:bc:f7:c3:f3: ae:6d:c6:0e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pZV0sy/DlO7pQeYalILOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NGUzNWVjMjE4MGRhZWJkMWJmM2RkNDQ0MDNhOWUwYmZj YjU2Y2EwHhcNMjYwMTAyMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2YxZjIwNjQ4YTQwMTFmNzBkNWFhNzFiODkwZDUyODVkYTlmYjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifggC/Sl+smr2zL0x10SGOD45eCK huuF1d5vBCt5nCVcnV+PKe3FDlqQlLFrEjvysGHoetYjObkk6jeQ4R1R7nyoPvcn IDXIcxPgALKD0ubkcLwTZ572yyzVitUkxH9wUC//r255AjALo47NghVptbWoucKI jDRC/DXkN/l8XLpEnRBOGLG5vNFkDFOrl8e1Xbtl3X76eBsZQFkXxS3pkkF6svqy 6G2rIgXkOZHLV6nlCmjwO5TJK2D3FWwwDfmZ1mE/G0gud55iTt6l+9ZPOTgrUVQT 8VvA3a+6mbwJNkk2EXNgVOq3nbZn5oj+tIPOJKCua3z9Shlqy7Ly2SvW4QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKPx8gZIpAEfcNWqcbiQ1Shdqft2MB8GA1UdIwQY MBaAFJdONewhgNrr0b891EQDqeC/y1bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUt Y2RmNGM2YjQyNGUxLzEvb19IeUJraWtBUjl3MWFweHVKRFZLRjJwLTNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUtY2RmNGM2YjQyNGUx LzEvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwifyMA0E AgACMAcDBQMqDN0AMA0GCSqGSIb3DQEBCwUAA4IBAQC0L8JLwIK/xAhT9l2z7xQc 9TdGxKtjGGDaMsAWZY6qaYT8fxDQbYVqrYqiWfPO843mRFSGhMKKkvxH+Vk2Laas kdTZYYPH0VQJs2B8sYzQ0a2zGXbOPn+S1YZtQds47pPdaZmyoI9q8wmspo8VhW7c I5eP/2szPrluwCPkHr8VTI9UEKK37jgDSurBtSPisV7meTCf9O+bIMffgtZCJnKg 9Oz0AshbP0C+5PB72KTt0kimhKJaASe3exm/uu7uFPKeRgOFAhS5nym99t2i0tKW ZThPdwM8Yvv/8A8oDTIc0jpL79+nzzSct16yQE15IGmtXmmZ26Gsprz3w/OubcYO -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:36 2026 by rpki-client