This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/m-OAweDj7IYWvNC6YulzJlZP2oY.roa File: m-OAweDj7IYWvNC6YulzJlZP2oY.roa (raw, json) Hash identifier: SiV8TM2QfFlhSK0UqbnB7bWFP5VUqLMFVQELQm9ocug= Subject key identifier: 9B:E3:80:C1:E0:E3:EC:86:16:BC:D0:BA:62:E9:73:26:56:4F:DA:86 Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce Certificate serial: 019B7DCA13C8CBE777827447A13EF7732794 Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/m-OAweDj7IYWvNC6YulzJlZP2oY.roa Signing time: Fri 02 Jan 2026 08:19:13 +0000 ROA not before: Fri 02 Jan 2026 08:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203735 IP address blocks: 91.192.5.0/24 maxlen: 24 91.192.7.0/24 maxlen: 24 2a0c:64c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:13:c8:cb:e7:77:82:74:47:a1:3e:f7:73:27:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce Validity Not Before: Jan 2 08:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9be380c1e0e3ec8616bcd0ba62e97326564fda86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:63:6e:ce:9f:e7:0f:28:92:06:e9:3b:14: e6:10:0f:26:91:3a:9e:01:a9:99:85:fa:67:f9:c8: f2:8c:06:e3:98:da:e8:4f:2e:f7:fe:c8:7a:d2:22: 8b:c0:87:3d:d1:70:2a:bf:86:f7:38:1d:b1:4e:42: ca:83:29:68:c2:90:78:df:79:e2:59:5a:a6:f8:80: de:6f:7f:8f:19:bc:b5:25:db:62:63:b8:7a:a7:f6: c5:d6:f8:38:6e:6b:f9:72:a8:2c:fc:98:84:fb:7a: 86:2b:d7:04:db:6d:fd:8e:5f:c8:86:c4:73:cd:9f: 39:c1:2d:b6:c5:de:8b:b1:6a:b8:a8:0b:f1:6a:d8: 58:36:9f:85:88:87:91:42:24:cf:d4:f0:3b:9d:86: 19:d6:1d:c4:40:e1:c6:3f:11:82:dc:09:04:d5:ed: 4e:20:80:c8:0c:9f:4f:c7:d1:cb:e0:f7:ce:05:c8: d4:ad:5f:9d:92:51:77:8d:9e:51:38:28:b2:10:d4: d7:da:0d:30:12:68:55:6d:a4:3d:6d:e1:c5:17:b6: 49:1b:4e:a7:06:f2:80:13:d4:40:59:d1:10:6e:fa: c2:e5:63:91:bd:f1:77:4a:29:bb:9c:31:4a:d1:c0: 22:59:ec:49:16:48:52:f4:6c:fe:65:24:de:0c:09: 4a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E3:80:C1:E0:E3:EC:86:16:BC:D0:BA:62:E9:73:26:56:4F:DA:86 X509v3 Authority Key Identifier: keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/m-OAweDj7IYWvNC6YulzJlZP2oY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.5.0/24 91.192.7.0/24 IPv6: 2a0c:64c0::/29 Signature Algorithm: sha256WithRSAEncryption 22:5c:fc:44:c3:96:ac:01:1b:c7:92:53:08:0e:91:be:55:b1: 89:b4:31:cc:c4:74:f7:06:0f:f7:5b:c6:d4:45:79:08:a8:62: 7d:36:c1:94:87:23:65:79:13:34:18:a2:fe:ff:8a:ba:1f:73: 19:85:7e:72:cf:9b:f9:f9:98:33:b2:72:d3:ae:d1:18:fb:3a: bd:7c:66:48:05:29:7c:f6:d7:33:79:96:3c:55:51:6d:7a:a3: 56:06:d3:3f:42:8c:9b:8f:ec:99:1f:a9:7d:65:6c:0f:d8:f5: 68:1d:26:82:bf:62:1c:3f:99:47:ef:73:fd:8f:e7:7f:9c:86: 0e:fc:7f:77:a5:59:46:d7:cd:51:9f:a3:7c:e8:39:8e:ae:55: 74:d7:25:17:e1:c6:6e:cb:5f:65:b1:4e:04:13:99:66:fe:ad: c0:d6:35:c4:97:3b:6b:e2:59:be:2d:3d:e8:f8:9f:a3:fa:b3: 89:dd:6d:3a:7b:84:24:d5:78:c0:7d:ad:4a:12:8d:84:5d:3f: ee:68:f0:ab:7a:28:f2:8b:31:97:bd:79:a1:8d:b4:ff:f5:40: 08:4a:dd:0a:15:d4:6c:85:fa:30:38:2e:18:db:1b:1e:e2:64: 30:6c:95:74:7a:1b:94:f2:3a:c1:79:9c:eb:27:58:64:85:25: 98:ef:0a:f8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9yhPIy+d3gnRHoT73cyeUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ2NDc2Nzc3M2YxMjM5YjY0NmJiNjZiZGNmNGY3ZmIx MjA2Y2UwHhcNMjYwMTAyMDgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmUzODBjMWUwZTNlYzg2MTZiY2QwYmE2MmU5NzMyNjU2NGZkYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNhjbs6f5w8okgbpOxTmEA8mkTqe AamZhfpn+cjyjAbjmNroTy73/sh60iKLwIc90XAqv4b3OB2xTkLKgylowpB433ni WVqm+IDeb3+PGby1JdtiY7h6p/bF1vg4bmv5cqgs/JiE+3qGK9cE2239jl/IhsRz zZ85wS22xd6LsWq4qAvxathYNp+FiIeRQiTP1PA7nYYZ1h3EQOHGPxGC3AkE1e1O IIDIDJ9Px9HL4PfOBcjUrV+dklF3jZ5ROCiyENTX2g0wEmhVbaQ9beHFF7ZJG06n BvKAE9RAWdEQbvrC5WORvfF3Sim7nDFK0cAiWexJFkhS9Gz+ZSTeDAlKwQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJvjgMHg4+yGFrzQumLpcyZWT9qGMB8GA1UdIwQY MBaAFLkUZHZ3c/Ejm2Rrtmvc9Pf7EgbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMt NDc1ZGJiYjBjMDhjLzEvbS1PQXdlRGo3SVlXdk5DNll1bHpKbFpQMm9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMtNDc1ZGJiYjBjMDhj LzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW8AFAwQA W8AHMA0EAgACMAcDBQMqDGTAMA0GCSqGSIb3DQEBCwUAA4IBAQAiXPxEw5asARvH klMIDpG+VbGJtDHMxHT3Bg/3W8bURXkIqGJ9NsGUhyNleRM0GKL+/4q6H3MZhX5y z5v5+ZgzsnLTrtEY+zq9fGZIBSl89tczeZY8VVFteqNWBtM/Qoybj+yZH6l9ZWwP 2PVoHSaCv2IcP5lH73P9j+d/nIYO/H93pVlG181Rn6N86DmOrlV01yUX4cZuy19l sU4EE5lm/q3A1jXElztr4lm+LT3o+J+j+rOJ3W06e4Qk1XjAfa1KEo2EXT/uaPCr eijyizGXvXmhjbT/9UAISt0KFdRshfowOC4Y2xse4mQwbJV0ehuU8jrBeZzrJ1hk hSWY7wr4 -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:26 2026 by rpki-client