This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/oIyDHrSU63T5_QeNiiA2CtszmCg.roa File: oIyDHrSU63T5_QeNiiA2CtszmCg.roa (raw, json) Hash identifier: /AFuLZ9BJOgLw6Pd+8NkPnlgM3YxVhJzcU5H4pM6yvk= Subject key identifier: A0:8C:83:1E:B4:94:EB:74:F9:FD:07:8D:8A:20:36:0A:DB:33:98:28 Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019B77C6CEE2CC58FA20224132C49180AC78 Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/oIyDHrSU63T5_QeNiiA2CtszmCg.roa Signing time: Thu 01 Jan 2026 04:17:56 +0000 ROA not before: Thu 01 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209181 IP address blocks: 185.89.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ce:e2:cc:58:fa:20:22:41:32:c4:91:80:ac:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a08c831eb494eb74f9fd078d8a20360adb339828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fa:0d:7e:04:3d:ff:77:9b:7b:17:97:16:c8: 9c:9e:80:86:a2:76:ad:69:b4:91:cc:3b:d9:b7:96: 3b:c9:d4:2a:46:bf:c2:53:70:f9:13:21:83:0e:f4: b7:f4:1c:2d:64:d7:0e:8e:d8:b3:3d:69:45:43:3f: af:df:b1:72:8c:3c:b1:d5:ae:3b:61:53:92:fb:f6: 36:9e:3c:73:15:10:c9:9c:f4:60:16:cc:31:b4:28: 4b:ec:ab:27:c3:69:84:13:0c:07:de:08:0e:76:b9: ac:aa:4b:fc:84:be:87:9a:af:61:cf:4b:bc:c3:46: 25:a2:97:03:e1:05:a7:06:99:5d:1a:9e:bc:fe:e8: 49:46:28:b4:82:5b:50:55:c6:f7:26:01:df:0c:e7: 4e:15:87:d7:d9:f6:f9:92:31:2b:c0:25:21:eb:8f: b7:52:5d:95:23:ba:99:f6:d8:13:22:60:66:bc:6d: fb:53:45:42:29:25:d1:87:ba:85:8a:8c:5e:f5:27: d1:1c:79:df:1c:2b:90:03:5f:9a:28:bd:5d:b2:1d: bb:d8:05:66:23:31:a3:24:cb:47:00:07:7c:d2:92: fa:a5:d1:bd:29:e6:ff:1a:2e:23:98:a1:4d:ee:dc: 39:1e:2b:e8:50:f5:f0:49:f0:cb:dc:52:01:5b:49: cc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8C:83:1E:B4:94:EB:74:F9:FD:07:8D:8A:20:36:0A:DB:33:98:28 X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/oIyDHrSU63T5_QeNiiA2CtszmCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.89.248.0/24 Signature Algorithm: sha256WithRSAEncryption 33:26:35:ca:4d:eb:80:e5:44:ab:87:c5:53:4a:8f:0b:e9:40: 24:0c:e6:de:7d:31:0d:e9:dd:c5:eb:29:dd:9d:73:af:85:01: 56:5b:d6:6a:16:cb:b4:d4:eb:37:31:8a:ff:11:6f:3c:87:10: 4c:13:42:45:a6:4b:b0:d4:15:85:50:77:78:c2:99:43:6e:7f: 3f:0b:40:08:50:4e:58:d0:76:91:51:c1:51:ff:cb:73:35:59: 80:e7:c5:70:7e:bb:13:3b:7c:cc:3d:1c:71:0b:37:ce:f8:e6: 97:7f:69:c3:7e:ce:95:d7:9d:25:39:e7:a6:25:21:40:f3:50: 6b:77:34:60:43:ae:3b:02:c8:cc:af:39:49:37:90:82:fb:99: d4:e9:d1:0c:a5:92:ab:42:02:85:c7:e2:6e:b3:a4:96:87:7d: 4f:91:9e:f4:94:5e:f3:e2:c9:64:fc:e0:22:d1:33:a5:cc:20: 9a:94:8b:d2:b2:d5:e1:53:b6:67:3d:05:db:d2:7a:c2:ff:b0: 7a:0c:b4:55:d4:51:55:49:6d:30:d7:db:b2:a6:da:00:95:30: 0a:4d:d6:20:92:47:39:6a:1b:18:63:45:21:ba:07:7b:e2:16: e3:09:dc:e4:bc:2b:98:0e:df:06:fe:00:6a:83:c8:80:19:7c: a7:8f:52:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xs7izFj6ICJBMsSRgKx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDhjODMxZWI0OTRlYjc0ZjlmZDA3OGQ4YTIwMzYwYWRiMzM5ODI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfoNfgQ9/3ebexeXFsicnoCGonat abSRzDvZt5Y7ydQqRr/CU3D5EyGDDvS39BwtZNcOjtizPWlFQz+v37FyjDyx1a47 YVOS+/Y2njxzFRDJnPRgFswxtChL7Ksnw2mEEwwH3ggOdrmsqkv8hL6Hmq9hz0u8 w0YlopcD4QWnBpldGp68/uhJRii0gltQVcb3JgHfDOdOFYfX2fb5kjErwCUh64+3 Ul2VI7qZ9tgTImBmvG37U0VCKSXRh7qFioxe9SfRHHnfHCuQA1+aKL1dsh272AVm IzGjJMtHAAd80pL6pdG9Keb/Gi4jmKFN7tw5HivoUPXwSfDL3FIBW0nM4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKCMgx60lOt0+f0HjYogNgrbM5goMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvb0l5REhyU1U2M1Q1X1FlTmlpQTJDdHN6bUNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVn4MA0G CSqGSIb3DQEBCwUAA4IBAQAzJjXKTeuA5USrh8VTSo8L6UAkDObefTEN6d3F6ynd nXOvhQFWW9ZqFsu01Os3MYr/EW88hxBME0JFpkuw1BWFUHd4wplDbn8/C0AIUE5Y 0HaRUcFR/8tzNVmA58VwfrsTO3zMPRxxCzfO+OaXf2nDfs6V150lOeemJSFA81Br dzRgQ647AsjMrzlJN5CC+5nU6dEMpZKrQgKFx+Jus6SWh31PkZ70lF7z4slk/OAi 0TOlzCCalIvSstXhU7ZnPQXb0nrC/7B6DLRV1FFVSW0w19uyptoAlTAKTdYgkkc5 ahsYY0Uhugd74hbjCdzkvCuYDt8G/gBqg8iAGXynj1JN -----END CERTIFICATE-----Generated at Mon Jan 26 03:08:19 2026 by rpki-client