This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/OoQ3vWlMRa0oSq44gcYODVNBDhQ.roa File: OoQ3vWlMRa0oSq44gcYODVNBDhQ.roa (raw, json) Hash identifier: KTewUEu+DJnzrocxrIEzmJfFb6QlHfLa/imUV+p4DUU= Subject key identifier: 3A:84:37:BD:69:4C:45:AD:28:4A:AE:38:81:C6:0E:0D:53:41:0E:14 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA7542648E22218F396DCCB4E50069A Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/OoQ3vWlMRa0oSq44gcYODVNBDhQ.roa Signing time: Fri 02 Jan 2026 12:20:53 +0000 ROA not before: Fri 02 Jan 2026 12:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5573 IP address blocks: 195.112.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:54:26:48:e2:22:18:f3:96:dc:cb:4e:50:06:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a8437bd694c45ad284aae3881c60e0d53410e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:f6:14:ee:f3:8d:76:52:4b:31:3c:8b:f9: 12:62:7d:e0:f0:79:cd:b6:6c:a9:ee:7f:e4:dd:4f: 4d:09:9e:88:d1:70:ea:95:4b:5b:52:6c:6e:16:81: af:13:4b:fd:47:08:44:e7:ec:0a:df:ea:61:f5:d1: 33:94:b2:96:10:a2:7c:ab:2d:c8:7d:b4:dc:07:b6: 63:0b:8a:42:af:81:14:9f:91:20:b5:47:2f:c4:d5: 53:0c:80:bb:5e:a0:c6:06:4b:66:15:38:a2:d8:97: c5:4a:ea:51:28:a4:8a:b5:89:5d:fc:ef:cd:b2:2a: 95:ea:8c:d8:ea:89:cf:aa:cc:9a:ec:81:6d:e1:06: 30:8c:88:de:1e:69:75:64:df:8e:fa:e5:b8:b0:c6: ca:78:2a:5c:47:0d:ba:87:95:32:05:94:8e:c5:fb: 4f:3c:d2:b8:d1:ae:6d:17:69:51:fa:7e:54:06:0b: 3c:2a:85:a8:99:16:a4:32:d9:5c:9f:51:da:dd:68: 48:44:f5:eb:06:d0:24:0a:dd:9d:94:a3:ec:66:4c: 1c:dd:70:70:b6:38:24:02:e2:8f:70:b7:8d:a2:fb: 0e:31:ff:c8:42:4d:cd:d2:80:af:8b:ab:11:20:da: 9c:cc:39:1e:6d:3a:a8:ff:8b:d8:1a:44:63:37:66: 41:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:84:37:BD:69:4C:45:AD:28:4A:AE:38:81:C6:0E:0D:53:41:0E:14 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/OoQ3vWlMRa0oSq44gcYODVNBDhQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.112.224.0/19 Signature Algorithm: sha256WithRSAEncryption 47:af:17:d9:b9:a2:7d:c6:56:c7:1f:c4:9e:c9:f1:2c:22:63: 1c:2f:48:32:b0:7a:f6:0f:c7:03:a4:e0:7a:ac:be:9a:2d:cf: 31:50:97:c6:56:5f:dd:0d:34:91:de:17:f7:23:ea:31:4c:39: 0e:bd:92:db:f9:29:db:16:e8:0f:e0:d2:60:29:f3:a7:c4:1e: 01:64:bd:53:3b:f3:c1:43:58:f7:24:96:13:81:28:93:3b:b8: 96:92:9b:eb:75:a6:1a:73:f7:1d:5d:d2:5e:be:ce:d6:2c:14: 6b:c1:4c:5e:d5:90:f4:a1:5e:cc:02:ed:bb:5c:8a:62:75:01: 1f:2c:ce:fd:a8:39:46:f0:04:6b:ed:98:96:e3:fc:37:94:d8: 75:38:5c:ee:fe:8a:a4:e1:07:1b:6d:3c:43:9a:9e:91:11:1d: a5:48:84:92:bf:eb:2c:17:47:6d:b5:55:21:c0:c8:7e:86:2d: 44:fb:d7:4d:5e:cd:cc:ef:51:47:09:cb:cb:6d:a3:b0:d6:34: d1:a7:6a:e3:c0:ae:88:e4:53:95:ce:42:21:58:e2:35:7f:b7: 1a:82:32:87:4a:f3:c5:1e:bb:07:be:c2:0b:94:87:85:bc:72: b7:e6:7c:7d:b7:84:d3:8c:a5:8e:e6:d3:d2:ff:d0:a0:9f:51: 04:c6:54:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1QmSOIiGPOW3MtOUAaaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTg0MzdiZDY5NGM0NWFkMjg0YWFlMzg4MWM2MGUwZDUzNDEwZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrb2FO7zjXZSSzE8i/kSYn3g8HnN tmyp7n/k3U9NCZ6I0XDqlUtbUmxuFoGvE0v9RwhE5+wK3+ph9dEzlLKWEKJ8qy3I fbTcB7ZjC4pCr4EUn5EgtUcvxNVTDIC7XqDGBktmFTii2JfFSupRKKSKtYld/O/N siqV6ozY6onPqsya7IFt4QYwjIjeHml1ZN+O+uW4sMbKeCpcRw26h5UyBZSOxftP PNK40a5tF2lR+n5UBgs8KoWomRakMtlcn1Ha3WhIRPXrBtAkCt2dlKPsZkwc3XBw tjgkAuKPcLeNovsOMf/IQk3N0oCvi6sRINqczDkebTqo/4vYGkRjN2ZBdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDqEN71pTEWtKEquOIHGDg1TQQ4UMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvT29RM3ZXbE1SYTBvU3E0NGdjWU9EVk5CRGhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFw3DgMA0G CSqGSIb3DQEBCwUAA4IBAQBHrxfZuaJ9xlbHH8SeyfEsImMcL0gysHr2D8cDpOB6 rL6aLc8xUJfGVl/dDTSR3hf3I+oxTDkOvZLb+SnbFugP4NJgKfOnxB4BZL1TO/PB Q1j3JJYTgSiTO7iWkpvrdaYac/cdXdJevs7WLBRrwUxe1ZD0oV7MAu27XIpidQEf LM79qDlG8ARr7ZiW4/w3lNh1OFzu/oqk4QcbbTxDmp6RER2lSISSv+ssF0dttVUh wMh+hi1E+9dNXs3M71FHCcvLbaOw1jTRp2rjwK6I5FOVzkIhWOI1f7cagjKHSvPF HrsHvsILlIeFvHK35nx9t4TTjKWO5tPS/9Cgn1EExlTP -----END CERTIFICATE-----Generated at Mon Jan 26 10:15:01 2026 by rpki-client