This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/rkOQVmNrUrdY7_BGJo06hjnXKUQ.roa File: rkOQVmNrUrdY7_BGJo06hjnXKUQ.roa (raw, json) Hash identifier: KQFoNA+jPIAj7lXy7/IWWZc0S9NISU/38W2iXUYI9HI= Subject key identifier: AE:43:90:56:63:6B:52:B7:58:EF:F0:46:26:8D:3A:86:39:D7:29:44 Certificate issuer: /CN=ee0882e79174142d4e54cd11f71c15ba6e397213 Certificate serial: 019B7AC7846C8E6425692F7CD5D38B46911C Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/rkOQVmNrUrdY7_BGJo06hjnXKUQ.roa Signing time: Thu 01 Jan 2026 18:17:34 +0000 ROA not before: Thu 01 Jan 2026 18:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44254 IP address blocks: 195.93.150.0/23 maxlen: 23 195.93.150.0/24 maxlen: 24 195.93.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:84:6c:8e:64:25:69:2f:7c:d5:d3:8b:46:91:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213 Validity Not Before: Jan 1 18:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae439056636b52b758eff046268d3a8639d72944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ce:00:71:e0:e4:4a:05:aa:7b:5f:3d:50:fb: 24:71:a3:e3:40:b0:f7:67:6f:ba:d3:fa:67:7c:3a: ff:b8:67:4d:08:e4:13:e1:29:ff:99:a2:a6:69:dc: 86:9f:2b:1f:6c:99:61:04:be:cc:b3:52:8b:ad:ff: f6:55:bc:4b:50:a9:12:f2:ce:fa:9d:1b:b4:77:e8: 19:fe:a7:96:95:a5:4a:42:82:3a:32:dc:43:b9:c2: b0:0e:7a:90:1b:dc:eb:1e:73:84:9a:8c:38:50:39: 89:27:d6:80:fc:c9:f6:2b:80:78:02:6a:19:45:97: fb:fa:22:8c:a7:f2:4d:68:4a:79:73:5a:b9:7c:07: f3:f2:71:67:ef:aa:d1:ea:97:7f:0d:e1:92:7a:75: d9:96:d1:b7:6f:96:d3:c5:63:df:15:47:de:7d:bb: 3c:2d:5b:56:a9:80:39:dc:b0:fc:48:53:e8:54:4a: d7:34:88:cd:ca:d4:df:fb:f2:c0:b2:00:5e:82:42: b8:bb:ce:e9:7d:4c:60:d1:f9:83:9f:ba:c6:a7:ea: b2:07:d2:19:cb:d2:70:b4:e8:57:ad:ea:40:0d:09: 98:b1:fc:89:cd:27:93:97:50:31:ad:b4:8a:3b:5f: 27:3c:90:01:19:82:24:84:c5:c8:b9:55:97:d8:11: 79:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:43:90:56:63:6B:52:B7:58:EF:F0:46:26:8D:3A:86:39:D7:29:44 X509v3 Authority Key Identifier: keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/rkOQVmNrUrdY7_BGJo06hjnXKUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.93.150.0/23 Signature Algorithm: sha256WithRSAEncryption a2:c7:16:ec:40:52:6a:28:a2:b3:a7:6d:4b:ba:a2:df:94:1d: 03:59:7d:0c:ee:e1:52:4d:18:56:b1:ad:8c:bf:24:84:f6:31: be:fe:c6:93:8c:29:36:e1:7d:22:0a:3c:5a:bd:88:38:b1:fe: e4:a2:c3:5f:ac:ee:3d:e8:b1:45:1e:08:98:ea:dd:c7:7f:dd: 48:50:a1:46:3d:78:99:1f:96:e8:1e:ad:ae:d5:61:83:26:ae: 99:3e:77:da:43:a2:21:17:e0:f7:76:71:2e:58:e2:f5:7d:47: 81:18:d9:6b:37:95:df:c0:01:35:d4:71:d9:55:2a:c4:e1:36: 50:b0:fa:8a:6d:5d:54:e0:b6:95:4b:70:6f:df:1d:2b:37:b7: 9e:7e:3a:51:03:39:97:80:b9:da:c7:90:13:5f:42:63:b3:9d: 94:65:6b:21:35:65:ef:fd:0e:1c:66:96:ae:ef:cc:30:6e:3f: 40:1b:af:32:55:34:c0:d9:89:93:99:fb:0f:e8:64:39:05:9b: 1b:d3:89:2a:be:9f:9f:fb:6a:86:cc:41:95:88:3f:e9:50:b3: 8d:39:cc:92:8b:de:bf:5f:d4:08:2e:8e:58:08:6b:17:b3:22: 00:56:04:3b:1b:45:0e:a2:08:41:72:38:2b:0f:64:fd:f1:07: cd:ba:e2:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4RsjmQlaS981dOLRpEcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMDg4MmU3OTE3NDE0MmQ0ZTU0Y2QxMWY3MWMxNWJhNmUz OTcyMTMwHhcNMjYwMTAxMTgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTQzOTA1NjYzNmI1MmI3NThlZmYwNDYyNjhkM2E4NjM5ZDcyOTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp84AceDkSgWqe189UPskcaPjQLD3 Z2+60/pnfDr/uGdNCOQT4Sn/maKmadyGnysfbJlhBL7Ms1KLrf/2VbxLUKkS8s76 nRu0d+gZ/qeWlaVKQoI6MtxDucKwDnqQG9zrHnOEmow4UDmJJ9aA/Mn2K4B4AmoZ RZf7+iKMp/JNaEp5c1q5fAfz8nFn76rR6pd/DeGSenXZltG3b5bTxWPfFUfefbs8 LVtWqYA53LD8SFPoVErXNIjNytTf+/LAsgBegkK4u87pfUxg0fmDn7rGp+qyB9IZ y9JwtOhXrepADQmYsfyJzSeTl1AxrbSKO18nPJABGYIkhMXIuVWX2BF5VwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK5DkFZja1K3WO/wRiaNOoY51ylEMB8GA1UdIwQY MBaAFO4IgueRdBQtTlTNEfccFbpuOXITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80NzYwMzQtNTI3ZC00OTM5LWFkNzUt NGYzYzMzYzA4ODg0LzEvcmtPUVZtTnJVcmRZN19CR0pvMDZoam5YS1VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS80NzYwMzQtNTI3ZC00OTM5LWFkNzUtNGYzYzMzYzA4ODg0 LzEvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw12WMA0G CSqGSIb3DQEBCwUAA4IBAQCixxbsQFJqKKKzp21LuqLflB0DWX0M7uFSTRhWsa2M vySE9jG+/saTjCk24X0iCjxavYg4sf7kosNfrO496LFFHgiY6t3Hf91IUKFGPXiZ H5boHq2u1WGDJq6ZPnfaQ6IhF+D3dnEuWOL1fUeBGNlrN5XfwAE11HHZVSrE4TZQ sPqKbV1U4LaVS3Bv3x0rN7eefjpRAzmXgLnax5ATX0Jjs52UZWshNWXv/Q4cZpau 78wwbj9AG68yVTTA2YmTmfsP6GQ5BZsb04kqvp+f+2qGzEGViD/pULONOcySi96/ X9QILo5YCGsXsyIAVgQ7G0UOoghBcjgrD2T98QfNuuIH -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:00 2026 by rpki-client