This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/oZ-NShlT_PL7bWC8iU9jChVS2Vk.roa File: oZ-NShlT_PL7bWC8iU9jChVS2Vk.roa (raw, json) Hash identifier: FGb9nSTivNu/mVtaJHoZo1Y7HN3bgy2TP4MFuiqpk7g= Subject key identifier: A1:9F:8D:4A:19:53:FC:F2:FB:6D:60:BC:89:4F:63:0A:15:52:D9:59 Certificate issuer: /CN=e847e88749704294552fef54886111ed0586ec24 Certificate serial: 019BE5C1F466AE6CFAFE11E651766CDE1722 Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/oZ-NShlT_PL7bWC8iU9jChVS2Vk.roa Signing time: Thu 22 Jan 2026 12:50:52 +0000 ROA not before: Thu 22 Jan 2026 12:50:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214379 IP address blocks: 46.183.21.0/24 maxlen: 24 91.231.182.0/24 maxlen: 24 195.137.244.0/23 maxlen: 24 2a01:f500::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:c1:f4:66:ae:6c:fa:fe:11:e6:51:76:6c:de:17:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e847e88749704294552fef54886111ed0586ec24 Validity Not Before: Jan 22 12:50:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a19f8d4a1953fcf2fb6d60bc894f630a1552d959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:94:6e:77:4d:ac:70:17:6d:2b:39:09:e7: d4:95:f3:70:88:98:a5:84:df:98:93:ee:49:28:8b: 27:a6:4c:bd:33:35:6f:c7:44:8a:88:0d:cc:6d:aa: d6:94:ec:80:3e:f8:b5:8b:d4:20:88:13:d0:a0:0d: fe:0e:50:e6:00:58:88:10:db:c3:4f:7a:32:41:9c: 9d:f5:77:d0:42:d2:d3:c8:9e:8d:1a:85:af:6f:5c: 71:df:a0:55:45:21:1d:40:72:e2:da:5e:9e:bf:67: 0b:be:af:bd:80:bc:78:17:70:7a:05:0c:1e:2c:99: b6:8f:df:f0:90:e9:a9:af:8f:03:2e:63:86:83:fb: d2:9a:78:ee:89:43:b8:77:9d:da:0d:08:35:ca:0f: c8:d3:00:cf:ba:77:8e:82:60:17:1c:54:3e:2d:db: 9b:2c:06:57:45:a1:98:19:c2:47:13:09:7e:52:4c: be:b1:40:1f:19:99:0b:b5:8f:02:81:50:07:f3:ef: 90:c1:02:63:1f:20:6f:48:3b:79:37:23:82:b8:95: bb:b8:70:b8:99:29:e9:2e:f5:31:03:30:56:08:98: a3:e9:98:8c:8a:61:41:39:bf:2e:c2:90:bf:cf:97: ab:fb:25:3d:e7:9a:29:f6:fa:d9:db:bb:67:3b:44: 44:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9F:8D:4A:19:53:FC:F2:FB:6D:60:BC:89:4F:63:0A:15:52:D9:59 X509v3 Authority Key Identifier: keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/oZ-NShlT_PL7bWC8iU9jChVS2Vk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.21.0/24 91.231.182.0/24 195.137.244.0/23 IPv6: 2a01:f500::/29 Signature Algorithm: sha256WithRSAEncryption 8a:e8:16:08:7f:50:95:cc:ab:21:0e:33:22:f4:d7:e8:57:0a: 34:ad:43:66:f3:9c:a3:54:a1:ea:a6:86:5a:e4:20:fa:29:fc: 1c:3b:4a:54:36:39:99:fa:22:ee:2f:5e:85:e9:fe:25:f9:a7: 9a:3e:04:7d:c9:7c:6b:3f:ca:a6:b0:26:e0:b8:01:40:7c:07: a1:a8:a9:8c:9f:6d:85:2d:41:64:1d:e8:85:48:af:60:9f:87: 5c:b8:0b:91:94:22:3e:9b:1d:71:0e:cc:54:f9:ab:b2:94:bd: 03:41:3f:17:24:c4:fb:56:0a:d9:ce:d4:5e:2e:d8:7c:98:35: 99:7d:08:01:8a:06:60:94:5e:70:bc:ad:20:8b:4c:9b:54:46: 95:6b:0a:4e:00:e2:48:b9:db:5e:4f:4d:a2:a3:18:95:4c:6d: a2:35:c1:cf:c5:2c:e2:d9:b4:1a:c7:8f:05:7c:09:21:32:ce: d9:53:03:52:5a:e9:ab:b9:48:0b:37:53:5e:1b:57:32:00:11: 1e:a9:33:9d:ee:de:01:ea:ad:e2:81:ff:94:22:cd:64:2e:84: c2:32:a3:b0:cb:91:4e:3c:2d:ac:92:49:7f:3f:7e:45:0e:0c: 91:0d:1b:9c:85:ff:df:7c:de:9d:02:18:24:66:ca:60:ca:f3: f7:7e:60:81 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZvlwfRmrmz6/hHmUXZs3hciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDdlODg3NDk3MDQyOTQ1NTJmZWY1NDg4NjExMWVkMDU4 NmVjMjQwHhcNMjYwMTIyMTI1MDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTlmOGQ0YTE5NTNmY2YyZmI2ZDYwYmM4OTRmNjMwYTE1NTJkOTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHqUbndNrHAXbSs5CefUlfNwiJil hN+Yk+5JKIsnpky9MzVvx0SKiA3MbarWlOyAPvi1i9QgiBPQoA3+DlDmAFiIENvD T3oyQZyd9XfQQtLTyJ6NGoWvb1xx36BVRSEdQHLi2l6ev2cLvq+9gLx4F3B6BQwe LJm2j9/wkOmpr48DLmOGg/vSmnjuiUO4d53aDQg1yg/I0wDPuneOgmAXHFQ+Ldub LAZXRaGYGcJHEwl+Uky+sUAfGZkLtY8CgVAH8++QwQJjHyBvSDt5NyOCuJW7uHC4 mSnpLvUxAzBWCJij6ZiMimFBOb8uwpC/z5er+yU955op9vrZ27tnO0RENQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKGfjUoZU/zy+21gvIlPYwoVUtlZMB8GA1UdIwQY MBaAFOhH6IdJcEKUVS/vVIhhEe0FhuwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVmb2gwbHdRcFJWTC05VWlHRVI3UVdHN0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83N2Y1MzItMzk4Zi00YWQ4LWIzNDgt YmRhZDdlZjc3NmM0LzEvb1otTlNobFRfUEw3YldDOGlVOWpDaFZTMlZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS83N2Y1MzItMzk4Zi00YWQ4LWIzNDgtYmRhZDdlZjc3NmM0 LzEvNkVmb2gwbHdRcFJWTC05VWlHRVI3UVdHN0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQALrcVAwQA W+e2AwQBw4n0MA0EAgACMAcDBQMqAfUAMA0GCSqGSIb3DQEBCwUAA4IBAQCK6BYI f1CVzKshDjMi9NfoVwo0rUNm85yjVKHqpoZa5CD6KfwcO0pUNjmZ+iLuL16F6f4l +aeaPgR9yXxrP8qmsCbguAFAfAehqKmMn22FLUFkHeiFSK9gn4dcuAuRlCI+mx1x DsxU+auylL0DQT8XJMT7VgrZztReLth8mDWZfQgBigZglF5wvK0gi0ybVEaVawpO AOJIudteT02ioxiVTG2iNcHPxSzi2bQax48FfAkhMs7ZUwNSWumruUgLN1NeG1cy ABEeqTOd7t4B6q3igf+UIs1kLoTCMqOwy5FOPC2skkl/P35FDgyRDRuchf/ffN6d AhgkZspgyvP3fmCB -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:08 2026 by rpki-client