This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/o7uX2sWUxD5f-QHIO7URESLWvKE.roa File: o7uX2sWUxD5f-QHIO7URESLWvKE.roa (raw, json) Hash identifier: BBcxbvhwEbzfWJqG4lgqgeDWLcjr+9yx0XzssJhMKcc= Subject key identifier: A3:BB:97:DA:C5:94:C4:3E:5F:F9:01:C8:3B:B5:11:11:22:D6:BC:A1 Certificate issuer: /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e Certificate serial: 019B7DCB2CE72578355059FCCDA3A1C3BAE3 Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/o7uX2sWUxD5f-QHIO7URESLWvKE.roa Signing time: Fri 02 Jan 2026 08:20:25 +0000 ROA not before: Fri 02 Jan 2026 08:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52200 IP address blocks: 46.226.168.0/21 maxlen: 24 194.35.80.0/23 maxlen: 24 194.35.180.0/23 maxlen: 24 2a00:b600::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2c:e7:25:78:35:50:59:fc:cd:a3:a1:c3:ba:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e Validity Not Before: Jan 2 08:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3bb97dac594c43e5ff901c83bb5111122d6bca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:91:8f:39:15:fd:49:f9:56:f7:73:ed:e1:82: 82:34:2c:75:af:6f:9c:ee:17:a3:6e:15:ea:c9:23: 4b:ef:46:da:09:bf:ea:d7:70:6d:ef:81:61:ca:aa: 65:d6:5b:51:20:f1:9f:1b:1e:a5:fa:71:3e:c1:e3: b3:46:b4:1f:2e:24:31:38:63:b1:a3:e3:9a:77:48: cd:1f:0c:d6:bb:30:5d:64:44:ac:9b:f4:19:3f:13: 81:41:7e:2d:bf:a4:51:8c:07:14:14:91:5a:f8:dc: 3d:5a:0c:86:c8:eb:2b:0a:9f:32:e9:2a:3b:11:b7: a0:4c:82:56:ce:10:0b:6b:b8:9b:35:5d:63:47:86: 2d:06:09:c7:94:f8:21:07:a9:7b:67:b5:22:f0:95: 27:16:da:30:a4:37:69:fc:1c:f7:85:b8:c1:0d:40: c6:93:e1:89:04:0e:f0:68:0b:c6:3f:38:d2:dc:30: a3:0f:8b:f0:cf:2c:b6:7e:a4:22:11:2d:2d:e6:44: c2:8e:12:44:04:4f:b0:20:87:f7:f3:9d:f8:e2:18: e6:99:45:a0:19:7f:4b:11:a2:38:79:3e:1b:20:38: 71:23:ec:5c:7c:23:b1:2e:fc:10:a2:0a:6d:51:c2: 0d:0b:85:2d:e5:ce:75:90:08:39:77:ee:f5:bb:09: 73:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BB:97:DA:C5:94:C4:3E:5F:F9:01:C8:3B:B5:11:11:22:D6:BC:A1 X509v3 Authority Key Identifier: keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/o7uX2sWUxD5f-QHIO7URESLWvKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.168.0/21 194.35.80.0/23 194.35.180.0/23 IPv6: 2a00:b600::/29 Signature Algorithm: sha256WithRSAEncryption 62:88:87:38:6e:63:77:f9:77:8e:ef:76:59:3c:54:1d:c7:63: 33:2e:71:f2:49:0e:67:c6:56:f2:7d:5f:67:b1:a5:96:b4:ba: 4d:fe:87:48:6e:b0:5e:da:68:2d:16:73:30:52:1e:a9:31:ee: 3e:4e:32:65:b3:f9:b2:9c:b6:4b:97:c9:de:86:80:98:59:a5: 1e:01:14:9b:a1:de:57:70:e5:bc:40:62:53:48:90:67:97:65: 5a:9c:66:c8:4a:a1:68:12:16:19:6b:80:40:3f:9c:81:6a:87: 35:3c:72:db:73:69:9c:69:be:4f:61:a0:1e:2e:b0:24:eb:f9: 57:c6:94:f5:b9:6e:aa:db:27:7c:94:50:0c:2a:c0:4e:4d:f6: 54:ae:77:c3:ce:10:ef:ef:fa:c8:1f:61:78:d4:40:0b:de:2a: 7e:10:5f:76:d9:72:7f:be:f3:a0:fa:05:fa:7f:da:3c:64:2b: b8:69:32:cd:4c:7e:cc:d5:64:15:f8:a7:12:13:7c:f7:f5:ac: 48:b8:b5:8e:18:c5:8e:67:83:0d:63:d7:07:08:39:67:e4:94: cb:97:ea:39:e5:a0:36:67:27:86:f5:29:b4:d6:79:71:a3:aa: 8f:1d:b9:e9:d4:8d:c9:45:b5:7a:6c:b2:07:28:60:c9:28:76: 31:55:2e:99 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9yyznJXg1UFn8zaOhw7rjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMjY5NDgyYmEyNjFiODgwMDU2MDhlYzUwYjdiOTA5ZDNm M2ZkNGUwHhcNMjYwMTAyMDgyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2JiOTdkYWM1OTRjNDNlNWZmOTAxYzgzYmI1MTExMTIyZDZiY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZGPORX9SflW93Pt4YKCNCx1r2+c 7hejbhXqySNL70baCb/q13Bt74Fhyqpl1ltRIPGfGx6l+nE+weOzRrQfLiQxOGOx o+Oad0jNHwzWuzBdZESsm/QZPxOBQX4tv6RRjAcUFJFa+Nw9WgyGyOsrCp8y6So7 EbegTIJWzhALa7ibNV1jR4YtBgnHlPghB6l7Z7Ui8JUnFtowpDdp/Bz3hbjBDUDG k+GJBA7waAvGPzjS3DCjD4vwzyy2fqQiES0t5kTCjhJEBE+wIIf385344hjmmUWg GX9LEaI4eT4bIDhxI+xcfCOxLvwQogptUcINC4Ut5c51kAg5d+71uwlzYQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKO7l9rFlMQ+X/kByDu1EREi1ryhMB8GA1UdIwQY MBaAFM0mlIK6JhuIAFYI7FC3uQnT8/1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelNhVWdyb21HNGdBVmdqc1VMZTVDZFB6X1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xZDE5YWQtNzNmNi00NTBiLWI5N2Mt MmJlMjVmOWQ1ZWQyLzEvbzd1WDJzV1V4RDVmLVFISU83VVJFU0xXdktFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8xZDE5YWQtNzNmNi00NTBiLWI5N2MtMmJlMjVmOWQ1ZWQy LzEvelNhVWdyb21HNGdBVmdqc1VMZTVDZFB6X1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDLuKoAwQB wiNQAwQBwiO0MA0EAgACMAcDBQMqALYAMA0GCSqGSIb3DQEBCwUAA4IBAQBiiIc4 bmN3+XeO73ZZPFQdx2MzLnHySQ5nxlbyfV9nsaWWtLpN/odIbrBe2mgtFnMwUh6p Me4+TjJls/mynLZLl8nehoCYWaUeARSbod5XcOW8QGJTSJBnl2VanGbISqFoEhYZ a4BAP5yBaoc1PHLbc2mcab5PYaAeLrAk6/lXxpT1uW6q2yd8lFAMKsBOTfZUrnfD zhDv7/rIH2F41EAL3ip+EF922XJ/vvOg+gX6f9o8ZCu4aTLNTH7M1WQV+KcSE3z3 9axIuLWOGMWOZ4MNY9cHCDln5JTLl+o55aA2ZyeG9Sm01nlxo6qPHbnp1I3JRbV6 bLIHKGDJKHYxVS6Z -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:39 2026 by rpki-client