This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/OQ2Ehq2LNnkoW69ybvSmF7Wii1o.roa File: OQ2Ehq2LNnkoW69ybvSmF7Wii1o.roa (raw, json) Hash identifier: R70NXYY+s+0zLQXH0/qTZ8MSPj794apmQlMiNuT9CX0= Subject key identifier: 39:0D:84:86:AD:8B:36:79:28:5B:AF:72:6E:F4:A6:17:B5:A2:8B:5A Certificate issuer: /CN=283deba3b1305c9a48d374ba47369bf1f827ee08 Certificate serial: 019B77C6C8E50D54FA3FC3C9FBCF35B65810 Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/OQ2Ehq2LNnkoW69ybvSmF7Wii1o.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 87.236.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c8:e5:0d:54:fa:3f:c3:c9:fb:cf:35:b6:58:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08 Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=390d8486ad8b3679285baf726ef4a617b5a28b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:06:6f:86:a0:5e:47:c2:df:35:46:c2:5b:dd: 1a:0e:0a:9c:60:5b:5f:25:66:87:93:76:e0:2c:ae: 1f:b1:f7:cd:b5:bf:23:28:7b:b1:0c:2a:92:49:92: b1:c8:b4:cb:6b:65:e6:de:e4:f5:ee:6f:bc:c3:bc: f9:e7:09:be:f9:2a:b0:62:ff:91:57:d5:be:21:41: e7:cd:35:52:e5:c3:16:e1:b1:ff:60:92:ac:01:a1: 66:e0:55:38:58:73:e7:2c:98:df:ae:ee:42:1b:f8: 03:f0:25:a0:12:23:cd:87:1c:a0:30:2c:15:1e:f6: 7b:4e:87:8f:83:20:e2:6e:b8:7e:79:6f:a2:da:1e: 4e:f7:6b:e0:8d:a3:a4:c7:75:19:18:e4:e4:ec:a0: 3a:95:9e:b5:f6:60:9a:08:17:1a:dc:1b:da:22:c2: df:40:4a:32:44:38:fb:41:32:3e:07:d7:b4:7d:23: 6b:51:39:ce:9b:a0:7a:89:0a:7d:d2:95:27:e7:ee: ee:be:30:47:0a:32:68:c2:50:79:90:05:fe:20:4d: 39:c4:4b:cb:63:5a:bd:31:37:ea:db:40:cf:f8:cb: 18:50:e7:cf:31:67:df:72:cd:c2:f6:46:e2:f1:df: f3:e6:d6:9e:8f:92:24:44:3f:0a:f6:91:5c:3c:bd: c5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0D:84:86:AD:8B:36:79:28:5B:AF:72:6E:F4:A6:17:B5:A2:8B:5A X509v3 Authority Key Identifier: keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/OQ2Ehq2LNnkoW69ybvSmF7Wii1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.200.0/21 Signature Algorithm: sha256WithRSAEncryption 91:86:0c:c8:a2:1a:6c:c3:c2:c5:ec:14:8a:47:6e:cd:ae:99: 7d:5e:71:c6:17:f9:92:0d:4b:7c:02:91:5d:9e:be:03:60:37: c1:2d:95:d0:04:7f:20:6f:43:b6:f8:f8:8a:6e:aa:b2:99:d8: a4:79:24:bc:1b:dc:40:bd:b6:48:8f:93:86:16:75:2d:94:8a: fe:2c:cf:a7:58:84:1f:a1:21:6b:66:b7:db:fd:1f:e0:26:ba: fa:03:c1:11:df:b1:0f:c5:a2:1c:b6:27:2b:87:56:6b:18:d4: bf:c7:1c:78:e0:19:99:6b:a5:52:b4:83:ae:c4:ed:94:d0:18: 8b:d8:5f:66:44:ec:d8:dc:d2:6d:07:ed:ab:37:02:fe:39:09: cd:53:70:0e:a5:23:1f:ee:9c:ad:c6:de:ce:1d:c9:b7:0a:c2: d6:1e:69:da:a6:e1:49:b0:e2:5d:c0:92:42:56:f1:46:31:2f: d5:f4:f3:22:bb:df:85:9a:4a:98:06:a3:01:0b:ed:73:55:cc: 11:05:d8:99:2d:d7:fb:7c:d8:69:37:16:ce:23:5b:1d:7b:bf: d7:4a:76:c4:fd:b3:52:7d:a1:dc:22:b7:34:67:c0:b6:29:eb: e7:08:32:66:0a:ce:b8:84:e6:7b:b0:ab:4a:d7:d3:13:68:5f: 0a:60:9f:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsjlDVT6P8PJ+881tlgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4M2RlYmEzYjEzMDVjOWE0OGQzNzRiYTQ3MzY5YmYxZjgy N2VlMDgwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTBkODQ4NmFkOGIzNjc5Mjg1YmFmNzI2ZWY0YTYxN2I1YTI4YjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwZvhqBeR8LfNUbCW90aDgqcYFtf JWaHk3bgLK4fsffNtb8jKHuxDCqSSZKxyLTLa2Xm3uT17m+8w7z55wm++SqwYv+R V9W+IUHnzTVS5cMW4bH/YJKsAaFm4FU4WHPnLJjfru5CG/gD8CWgEiPNhxygMCwV HvZ7ToePgyDibrh+eW+i2h5O92vgjaOkx3UZGOTk7KA6lZ619mCaCBca3BvaIsLf QEoyRDj7QTI+B9e0fSNrUTnOm6B6iQp90pUn5+7uvjBHCjJowlB5kAX+IE05xEvL Y1q9MTfq20DP+MsYUOfPMWffcs3C9kbi8d/z5taej5IkRD8K9pFcPL3FlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDkNhIatizZ5KFuvcm70phe1ootaMB8GA1UdIwQY MBaAFCg966OxMFyaSNN0ukc2m/H4J+4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0Qzcm83RXdYSnBJMDNTNlJ6YWI4ZmduN2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lNWRmYTktNTE5Ni00OGNkLTkxNzgt NWEzMWY2MjBiMDRhLzEvT1EyRWhxMkxObmtvVzY5eWJ2U21GN1dpaTFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lNWRmYTktNTE5Ni00OGNkLTkxNzgtNWEzMWY2MjBiMDRh LzEvS0Qzcm83RXdYSnBJMDNTNlJ6YWI4ZmduN2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDV+zIMA0G CSqGSIb3DQEBCwUAA4IBAQCRhgzIohpsw8LF7BSKR27Nrpl9XnHGF/mSDUt8ApFd nr4DYDfBLZXQBH8gb0O2+PiKbqqymdikeSS8G9xAvbZIj5OGFnUtlIr+LM+nWIQf oSFrZrfb/R/gJrr6A8ER37EPxaIcticrh1ZrGNS/xxx44BmZa6VStIOuxO2U0BiL 2F9mROzY3NJtB+2rNwL+OQnNU3AOpSMf7pytxt7OHcm3CsLWHmnapuFJsOJdwJJC VvFGMS/V9PMiu9+FmkqYBqMBC+1zVcwRBdiZLdf7fNhpNxbOI1sde7/XSnbE/bNS faHcIrc0Z8C2KevnCDJmCs64hOZ7sKtK19MTaF8KYJ9T -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:23 2026 by rpki-client