This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/_oMS8vQNhi6R4XyJHn3Kgm85oW8.roa File: _oMS8vQNhi6R4XyJHn3Kgm85oW8.roa (raw, json) Hash identifier: G/zJxy7ZK39KBuYYRk7Yf3yrVTAyUCZvIxiOw4FGcYk= Subject key identifier: FE:83:12:F2:F4:0D:86:2E:91:E1:7C:89:1E:7D:CA:82:6F:39:A1:6F Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B7E389F4060C1B5E3EB55DAB11D210450 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/_oMS8vQNhi6R4XyJHn3Kgm85oW8.roa Signing time: Fri 02 Jan 2026 10:19:58 +0000 ROA not before: Fri 02 Jan 2026 10:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135391 IP address blocks: 195.114.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9f:40:60:c1:b5:e3:eb:55:da:b1:1d:21:04:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 2 10:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe8312f2f40d862e91e17c891e7dca826f39a16f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:ba:4f:5e:ce:e1:6a:50:c0:2c:da:60:ee: 2c:ad:1f:58:b6:bc:af:6d:07:8f:d9:46:1e:fb:1c: 67:86:d5:27:94:87:42:80:d0:a2:58:ee:c6:33:45: d4:f1:df:f0:21:86:37:79:6e:3c:af:72:12:65:cb: 0c:45:d6:9f:cd:23:9a:a5:f5:06:9f:da:8c:57:87: cf:47:38:ca:a5:ac:86:47:2d:af:d9:a7:69:9c:1a: cc:95:ec:14:5d:7b:c4:93:c0:0b:4c:18:8b:d2:c0: 2a:69:09:55:6a:05:89:bc:2d:cd:1a:ab:a0:dc:42: 46:fc:f0:33:9a:64:25:c0:90:6c:8c:7e:b6:61:41: 86:40:be:56:40:fa:47:65:66:86:38:35:ae:b0:8f: 1f:57:cf:c0:ba:4c:29:04:82:5b:21:4c:be:41:93: b8:a7:5c:30:5e:4e:59:b0:3c:dd:35:5e:d3:ec:f0: 61:bd:45:93:0c:57:74:4c:92:0b:bc:48:19:31:34: 40:73:f3:2d:d3:eb:4e:10:38:1f:96:08:84:25:5e: 6a:6c:0f:00:12:b9:2c:ab:d7:37:5d:e6:34:02:70: bc:78:b2:e8:da:ac:c4:0f:1e:69:30:54:74:7f:bd: 48:fc:e7:3b:9e:57:1b:c5:56:6a:1d:71:12:27:d1: a4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:83:12:F2:F4:0D:86:2E:91:E1:7C:89:1E:7D:CA:82:6F:39:A1:6F X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/_oMS8vQNhi6R4XyJHn3Kgm85oW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.200.0/24 Signature Algorithm: sha256WithRSAEncryption 08:55:23:bc:bc:df:f2:36:7d:e2:18:16:5e:4c:61:d1:32:12: 05:93:9b:eb:b3:c7:93:58:3a:7f:77:24:1d:70:1d:a4:0f:9c: dc:80:4f:a5:a4:94:27:af:16:07:f9:b5:38:0d:95:72:5c:96: 53:58:fa:bb:72:c0:7e:e8:81:a4:69:e4:52:db:90:5d:ad:32: 37:10:1a:a6:7a:e2:b4:d0:5c:11:da:be:0d:b5:25:9c:ca:37: ea:a6:f1:2d:1c:69:a5:b5:6d:99:d9:69:0c:a8:75:f8:43:d6: c4:a9:c2:3f:1c:57:31:20:2e:3c:8d:f8:d1:63:13:ea:aa:14: 39:f2:9e:a0:1e:01:c8:01:a7:2c:89:45:f1:ea:04:49:f8:74: f0:08:52:8a:3e:5a:76:b4:8c:e7:c1:aa:ec:3b:92:e7:fc:18: 0f:bc:b5:2d:78:4e:f3:db:65:f4:4c:19:02:69:46:9e:54:02: 99:84:62:38:cf:e0:d9:39:60:46:d9:98:26:a6:5a:34:af:f2: 8a:60:d2:52:7f:86:71:41:a6:28:4c:a6:56:d1:f4:87:b8:3a: eb:ba:59:ce:70:06:c2:bd:6f:e2:59:5b:6a:59:40:68:84:4f: d1:5a:b5:de:1b:5b:da:5d:2f:9d:c0:e9:a3:79:4a:6c:a8:b3: 9a:9a:a3:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJ9AYMG14+tV2rEdIQRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTAyMTAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTgzMTJmMmY0MGQ4NjJlOTFlMTdjODkxZTdkY2E4MjZmMzlhMTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdO6T17O4WpQwCzaYO4srR9Ytryv bQeP2UYe+xxnhtUnlIdCgNCiWO7GM0XU8d/wIYY3eW48r3ISZcsMRdafzSOapfUG n9qMV4fPRzjKpayGRy2v2adpnBrMlewUXXvEk8ALTBiL0sAqaQlVagWJvC3NGqug 3EJG/PAzmmQlwJBsjH62YUGGQL5WQPpHZWaGODWusI8fV8/AukwpBIJbIUy+QZO4 p1wwXk5ZsDzdNV7T7PBhvUWTDFd0TJILvEgZMTRAc/Mt0+tOEDgflgiEJV5qbA8A Erksq9c3XeY0AnC8eLLo2qzEDx5pMFR0f71I/Oc7nlcbxVZqHXESJ9GkbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP6DEvL0DYYukeF8iR59yoJvOaFvMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvX29NUzh2UU5oaTZSNFh5SkhuM0tnbTg1b1c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw3LIMA0G CSqGSIb3DQEBCwUAA4IBAQAIVSO8vN/yNn3iGBZeTGHRMhIFk5vrs8eTWDp/dyQd cB2kD5zcgE+lpJQnrxYH+bU4DZVyXJZTWPq7csB+6IGkaeRS25BdrTI3EBqmeuK0 0FwR2r4NtSWcyjfqpvEtHGmltW2Z2WkMqHX4Q9bEqcI/HFcxIC48jfjRYxPqqhQ5 8p6gHgHIAacsiUXx6gRJ+HTwCFKKPlp2tIznwarsO5Ln/BgPvLUteE7z22X0TBkC aUaeVAKZhGI4z+DZOWBG2Zgmplo0r/KKYNJSf4ZxQaYoTKZW0fSHuDrrulnOcAbC vW/iWVtqWUBohE/RWrXeG1vaXS+dwOmjeUpsqLOamqM9 -----END CERTIFICATE-----Generated at Wed Jan 7 14:41:03 2026 by rpki-client