This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/O1x05-HbZz9z_RAG_UsW8fq9KnQ.roa File: O1x05-HbZz9z_RAG_UsW8fq9KnQ.roa (raw, json) Hash identifier: RqXyqzQCK+VpxYKPTIZPxW8p4AdlK8gMbx5a8aqVV1Q= Subject key identifier: 3B:5C:74:E7:E1:DB:67:3F:73:FD:10:06:FD:4B:16:F1:FA:BD:2A:74 Certificate issuer: /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f Certificate serial: 019B7E387FA230971A9F55CDC04043656FDC Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/O1x05-HbZz9z_RAG_UsW8fq9KnQ.roa Signing time: Fri 02 Jan 2026 10:19:50 +0000 ROA not before: Fri 02 Jan 2026 10:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 194.76.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7f:a2:30:97:1a:9f:55:cd:c0:40:43:65:6f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f Validity Not Before: Jan 2 10:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b5c74e7e1db673f73fd1006fd4b16f1fabd2a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:5e:de:ad:a8:b4:4b:5f:83:f8:59:5f:73: 7a:1b:b9:01:5a:32:f9:ef:99:81:0c:2e:69:a4:6d: 21:f1:17:09:e6:ec:a2:02:01:6f:d9:4b:b9:1c:90: 60:5a:70:c7:52:e5:22:a5:f0:b3:f2:78:71:2a:8d: f3:92:07:7f:ae:e5:6a:2a:1f:14:4c:a3:6d:70:0d: 8f:de:9a:86:31:37:89:bd:f6:32:19:1d:90:e2:df: 34:6f:92:6b:0a:2a:80:2d:ed:ae:aa:87:55:c0:c0: ea:1d:2e:e0:5a:1f:ed:10:d1:f8:64:a7:71:81:8e: ed:8f:86:2b:3f:69:02:f0:08:30:eb:b9:72:a8:5d: 4f:3d:2a:b8:9f:9f:12:f3:15:68:1e:37:f8:1d:a3: cb:30:bf:6f:de:a7:70:16:0b:d5:bf:75:9b:7a:c0: ee:65:fa:af:e4:9b:c8:7b:64:9b:73:48:1c:84:7f: 2d:6c:c2:34:c3:6b:4f:3c:bb:96:da:b4:64:ce:ca: 5f:e1:d6:48:f4:83:18:70:da:47:b4:5e:2a:00:19: 91:6c:d2:7e:96:3b:a5:ae:3b:fd:92:b5:68:73:2c: 09:08:7d:e3:82:6e:4c:05:e0:0d:89:ed:57:42:02: 6e:e5:a7:a0:bf:72:7d:33:99:df:da:03:a2:af:d5: 58:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5C:74:E7:E1:DB:67:3F:73:FD:10:06:FD:4B:16:F1:FA:BD:2A:74 X509v3 Authority Key Identifier: keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/O1x05-HbZz9z_RAG_UsW8fq9KnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.43.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:53:fe:cc:1b:91:23:fa:5f:59:d1:20:a1:fe:6f:dc:7f:41: 8c:15:df:cc:d7:6b:99:13:b0:49:6d:3e:fc:03:95:0e:ee:e8: c1:63:ac:5f:62:e3:a0:f6:1d:78:07:7f:7a:0d:8c:5b:09:78: 3a:9a:e7:b0:78:be:b6:30:1e:db:b7:1c:e1:50:c7:7a:4d:31: 18:39:17:aa:36:db:41:c9:63:a6:ea:c6:0c:a2:8a:3c:5d:cb: 39:d8:c9:61:60:8c:65:17:af:a4:5c:a8:f9:48:5e:4a:23:33: 16:1f:81:8c:26:e0:75:a4:ba:f7:70:99:ce:28:04:05:85:e4: e7:34:b6:dd:89:8b:5f:2d:ea:fe:d8:ce:91:8e:e0:41:e8:21: 74:8c:95:a8:87:7d:34:2a:96:0c:7f:db:e7:d3:c4:8c:71:8b: 32:7b:fd:1d:8a:0f:83:78:38:36:78:16:39:88:13:05:7d:a6: 45:f5:f7:7d:b9:cc:d0:1f:2f:85:26:f4:3d:1d:05:12:3f:dc: ca:f4:54:79:8e:8c:92:ca:56:58:ec:c3:fb:a5:55:21:96:60: 27:cd:29:7b:15:b3:a3:56:9f:98:cb:50:ef:c8:5c:8a:12:0d: 20:19:66:14:71:f7:c6:41:7c:26:f5:3b:9d:45:bc:20:f6:b2: f9:8c:c9:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OH+iMJcan1XNwEBDZW/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNzlhMGFjMzMxMmMxNjUzZjMwMGIwNDUxMGQ5YmYyYzlj MmE1NWYwHhcNMjYwMTAyMTAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjVjNzRlN2UxZGI2NzNmNzNmZDEwMDZmZDRiMTZmMWZhYmQyYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBRe3q2otEtfg/hZX3N6G7kBWjL5 75mBDC5ppG0h8RcJ5uyiAgFv2Uu5HJBgWnDHUuUipfCz8nhxKo3zkgd/ruVqKh8U TKNtcA2P3pqGMTeJvfYyGR2Q4t80b5JrCiqALe2uqodVwMDqHS7gWh/tENH4ZKdx gY7tj4YrP2kC8Agw67lyqF1PPSq4n58S8xVoHjf4HaPLML9v3qdwFgvVv3WbesDu Zfqv5JvIe2Sbc0gchH8tbMI0w2tPPLuW2rRkzspf4dZI9IMYcNpHtF4qABmRbNJ+ ljulrjv9krVocywJCH3jgm5MBeANie1XQgJu5aegv3J9M5nf2gOir9VYrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDtcdOfh22c/c/0QBv1LFvH6vSp0MB8GA1UdIwQY MBaAFBp5oKwzEsFlPzALBFENm/LJwqVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zMjk5NjgtMjQ3Yy00ZGVhLTk5ZDIt NjAxMDdiNGVhNGViLzEvTzF4MDUtSGJaejl6X1JBR19Vc1c4ZnE5S25RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zMjk5NjgtMjQ3Yy00ZGVhLTk5ZDItNjAxMDdiNGVhNGVi LzEvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkwrMA0G CSqGSIb3DQEBCwUAA4IBAQCcU/7MG5Ej+l9Z0SCh/m/cf0GMFd/M12uZE7BJbT78 A5UO7ujBY6xfYuOg9h14B396DYxbCXg6mueweL62MB7btxzhUMd6TTEYOReqNttB yWOm6sYMooo8Xcs52MlhYIxlF6+kXKj5SF5KIzMWH4GMJuB1pLr3cJnOKAQFheTn NLbdiYtfLer+2M6RjuBB6CF0jJWoh300KpYMf9vn08SMcYsye/0dig+DeDg2eBY5 iBMFfaZF9fd9uczQHy+FJvQ9HQUSP9zK9FR5joySylZY7MP7pVUhlmAnzSl7FbOj Vp+Yy1DvyFyKEg0gGWYUcffGQXwm9TudRbwg9rL5jMlJ -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:55 2026 by rpki-client