This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/o5SCMNYhdkv7jm1bgqmzrSmljcA.roa File: o5SCMNYhdkv7jm1bgqmzrSmljcA.roa (raw, json) Hash identifier: ZHMCPsYy82t1LzUAMo46/neqha3S0r9zGdqBqSiF7jM= Subject key identifier: A3:94:82:30:D6:21:76:4B:FB:8E:6D:5B:82:A9:B3:AD:29:A5:8D:C0 Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3 Certificate serial: 019B76EB6D8039679484E7F5B519E2DC8592 Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/o5SCMNYhdkv7jm1bgqmzrSmljcA.roa Signing time: Thu 01 Jan 2026 00:18:19 +0000 ROA not before: Thu 01 Jan 2026 00:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20771 IP address blocks: 185.163.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6d:80:39:67:94:84:e7:f5:b5:19:e2:dc:85:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3 Validity Not Before: Jan 1 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3948230d621764bfb8e6d5b82a9b3ad29a58dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:43:d9:e4:98:da:a5:f5:2b:6a:15:31:aa: 76:e6:23:e6:47:1d:d3:a5:3b:58:7e:44:f9:36:df: 33:2a:e6:d4:fc:7d:43:ee:54:7a:92:e7:87:8f:6c: 6c:f1:f8:00:ec:ab:fb:00:53:05:ae:89:70:58:e5: d9:94:b7:dc:c2:9f:d3:5d:0e:e7:ff:67:14:99:9e: 09:6c:d9:96:6d:46:90:f6:73:29:ce:79:e6:9d:72: cd:c5:d6:b9:8f:75:20:e0:73:f4:cb:6a:db:78:5e: 8b:a3:ca:ce:0d:35:8c:3a:32:cd:4c:72:70:7c:82: aa:4c:92:e5:94:22:ea:56:80:16:6f:76:97:12:97: 44:3c:1f:d4:ff:4b:0b:c8:c6:55:63:f2:3f:88:cd: 7c:cc:7b:72:d1:4c:44:81:a4:f2:6f:61:f2:d0:6d: 08:12:52:5b:d6:38:94:4d:71:de:42:6a:bd:99:5e: 3a:45:be:cb:35:7b:3c:82:b0:7c:fc:d7:a3:32:2f: a5:6c:89:a0:34:23:c7:fd:13:90:da:56:20:75:0e: a5:99:46:fb:18:50:37:20:4e:72:07:6a:e2:2b:bc: da:35:31:e3:25:d0:83:15:d2:52:3c:14:50:e9:21: e2:f8:ed:19:4b:5b:29:34:3b:c3:ee:4a:4d:c6:9e: 39:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:94:82:30:D6:21:76:4B:FB:8E:6D:5B:82:A9:B3:AD:29:A5:8D:C0 X509v3 Authority Key Identifier: keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/o5SCMNYhdkv7jm1bgqmzrSmljcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.163.200.0/24 Signature Algorithm: sha256WithRSAEncryption 93:ab:05:ab:f8:3f:02:4a:1c:63:2c:6b:94:65:b2:f3:56:7e: df:0a:1a:f2:3b:eb:3b:59:1e:07:1c:7b:9e:0c:ad:2a:ba:cb: 04:d6:9e:d6:d6:e2:7a:59:30:28:91:a2:2c:ff:9e:8d:3f:59: d8:3f:bd:77:27:a9:b2:2c:4c:00:95:96:82:0d:9d:91:7a:52: d6:08:30:60:7f:5e:90:46:0d:db:ca:c2:d0:72:b0:48:de:5a: 4f:38:ba:f2:4e:a2:7b:0a:7d:7e:cc:1e:aa:67:e4:17:b2:26: fd:bc:26:1d:31:c7:10:27:32:26:3e:46:ea:a0:e6:ba:aa:30: 84:67:c9:6f:65:e5:c1:da:8c:2f:0e:8d:a3:ef:25:1a:84:30: c7:45:6c:12:d1:b4:83:e2:7e:cc:55:5e:a5:33:52:29:ec:72: 8e:b0:35:21:4b:24:95:13:64:01:9e:86:31:93:89:c6:4f:32: 22:49:ca:b3:6b:72:cd:c6:4e:97:10:ec:86:61:6e:2f:c1:e7: 4d:78:d9:24:29:bf:06:60:dd:5c:82:33:e5:30:11:0f:c2:14: 07:f2:7c:e8:5c:5a:4a:7c:4e:08:fc:23:b8:55:f1:0a:1c:20: 82:53:f8:d2:f6:d4:96:aa:54:6b:5c:bf:f2:6e:d5:eb:d8:fa: ad:a1:ee:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2622AOWeUhOf1tRni3IWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjc5NTg5YzFjNDg4OTdkMDliMmQ0ZmVkN2E2NjA0NGE4 NzZlYTMwHhcNMjYwMTAxMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzk0ODIzMGQ2MjE3NjRiZmI4ZTZkNWI4MmE5YjNhZDI5YTU4ZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXND2eSY2qX1K2oVMap25iPmRx3T pTtYfkT5Nt8zKubU/H1D7lR6kueHj2xs8fgA7Kv7AFMFrolwWOXZlLfcwp/TXQ7n /2cUmZ4JbNmWbUaQ9nMpznnmnXLNxda5j3Ug4HP0y2rbeF6Lo8rODTWMOjLNTHJw fIKqTJLllCLqVoAWb3aXEpdEPB/U/0sLyMZVY/I/iM18zHty0UxEgaTyb2Hy0G0I ElJb1jiUTXHeQmq9mV46Rb7LNXs8grB8/NejMi+lbImgNCPH/ROQ2lYgdQ6lmUb7 GFA3IE5yB2riK7zaNTHjJdCDFdJSPBRQ6SHi+O0ZS1spNDvD7kpNxp455wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKOUgjDWIXZL+45tW4Kps60ppY3AMB8GA1UdIwQY MBaAFKpnlYnBxIiX0JstT+16ZgRKh26jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMt MTRiNzZiNzZmMmJiLzEvbzVTQ01OWWhka3Y3am0xYmdxbXpyU21samNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMtMTRiNzZiNzZmMmJi LzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaPIMA0G CSqGSIb3DQEBCwUAA4IBAQCTqwWr+D8CShxjLGuUZbLzVn7fChryO+s7WR4HHHue DK0qussE1p7W1uJ6WTAokaIs/56NP1nYP713J6myLEwAlZaCDZ2RelLWCDBgf16Q Rg3bysLQcrBI3lpPOLryTqJ7Cn1+zB6qZ+QXsib9vCYdMccQJzImPkbqoOa6qjCE Z8lvZeXB2owvDo2j7yUahDDHRWwS0bSD4n7MVV6lM1Ip7HKOsDUhSySVE2QBnoYx k4nGTzIiScqza3LNxk6XEOyGYW4vwedNeNkkKb8GYN1cgjPlMBEPwhQH8nzoXFpK fE4I/CO4VfEKHCCCU/jS9tSWqlRrXL/ybtXr2Pqtoe7K -----END CERTIFICATE-----Generated at Thu Jan 15 18:44:40 2026 by rpki-client