This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/OQ88iyxgykv-UuMoZwpp0BBgiSI.roa File: OQ88iyxgykv-UuMoZwpp0BBgiSI.roa (raw, json) Hash identifier: 8tW2X/On0vJs7AepnWjVBDXaTpJx0zYz1Hi+i0/YSxY= Subject key identifier: 39:0F:3C:8B:2C:60:CA:4B:FE:52:E3:28:67:0A:69:D0:10:60:89:22 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019B7C133E5CAF579FF5C9B38C7F14ACD5A2 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/OQ88iyxgykv-UuMoZwpp0BBgiSI.roa Signing time: Fri 02 Jan 2026 00:19:54 +0000 ROA not before: Fri 02 Jan 2026 00:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206874 IP address blocks: 109.74.82.0/23 maxlen: 23 109.74.82.0/24 maxlen: 24 109.74.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3e:5c:af:57:9f:f5:c9:b3:8c:7f:14:ac:d5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Jan 2 00:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=390f3c8b2c60ca4bfe52e328670a69d010608922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:74:11:f9:f5:af:ad:5c:e2:cb:ba:ce:a5: 47:4f:a3:2b:3f:16:6c:32:f3:d8:59:71:76:86:d1: b5:6b:55:53:c9:a8:32:fd:f8:af:cb:9c:09:40:4c: f5:ab:7e:b0:fa:eb:3d:27:0d:f0:15:66:80:08:fe: dc:83:81:83:c3:13:17:a7:e1:10:df:da:ee:1a:17: 66:46:60:37:b7:45:af:00:4f:a0:65:40:b9:47:04: 94:45:dc:d7:93:61:36:00:a0:64:c8:b8:95:e0:3b: c3:19:b8:3c:65:9d:b5:a3:31:c2:48:29:47:0f:87: dc:78:46:03:15:b4:cf:b8:f9:eb:ff:12:d9:ff:dd: c6:a8:dd:b2:77:aa:99:fc:6a:d6:de:65:3a:9b:6b: aa:b0:e7:03:31:1f:44:a4:27:a6:84:e3:0c:e9:92: 97:c0:e5:78:7f:25:c7:42:95:df:f2:33:05:60:fe: 97:ee:ff:51:bd:1d:4e:f8:93:34:f2:6b:3a:91:76: 9c:17:78:be:56:0c:4d:86:60:8b:e9:b8:a7:3a:4d: 33:0a:eb:9b:80:5f:12:aa:06:ab:a1:18:29:87:f0: a2:0f:0b:59:70:d1:14:f4:4d:31:67:6b:7f:7b:a7: ec:54:c7:48:62:b1:66:97:f8:24:f3:46:ee:e2:ba: c7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0F:3C:8B:2C:60:CA:4B:FE:52:E3:28:67:0A:69:D0:10:60:89:22 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/OQ88iyxgykv-UuMoZwpp0BBgiSI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.74.82.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:db:c0:ac:97:00:13:1a:c1:79:1c:1b:07:17:10:64:ea:bd: 9a:5f:77:91:7d:74:33:5b:eb:46:ff:ba:c0:26:e4:0b:6d:7c: 7e:46:30:a1:6a:ce:42:b4:da:89:a5:89:99:b2:f0:02:88:7f: 46:46:4d:4a:07:65:07:45:f1:5c:c9:b3:e5:b9:32:2d:de:8b: ad:68:d5:e6:9e:99:ae:2e:6a:eb:51:f2:9b:7b:b6:96:1d:11: f1:b4:87:4c:5b:72:1e:c2:17:70:c5:a8:3d:30:de:da:22:eb: 76:03:1c:11:5d:c5:75:b9:53:c4:7b:2c:6b:b3:97:ef:fd:2f: a2:f7:05:23:46:fe:bc:2f:33:d1:b2:f1:50:bb:61:9c:09:e2: 8e:6f:51:bb:d5:1d:6b:bb:aa:e1:69:bc:3b:4a:e5:c4:70:af: c8:7a:f2:d9:19:94:82:01:94:ee:c7:0c:df:da:c2:6c:d2:cf: 8c:b1:97:43:27:fa:28:6b:8f:05:62:6c:40:39:0f:8e:2f:ad: 21:5d:5e:65:54:64:09:30:39:10:40:ff:be:c4:fa:6a:6b:2b: 13:6c:cd:07:91:79:e4:0b:71:7d:be:01:d8:1b:f2:97:00:f7: 93:63:f6:b0:46:e5:14:98:8d:85:23:77:a4:6b:6f:da:31:85: 47:64:af:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ez5cr1ef9cmzjH8UrNWiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwMTAyMDAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTBmM2M4YjJjNjBjYTRiZmU1MmUzMjg2NzBhNjlkMDEwNjA4OTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg10Efn1r61c4su6zqVHT6MrPxZs MvPYWXF2htG1a1VTyagy/fivy5wJQEz1q36w+us9Jw3wFWaACP7cg4GDwxMXp+EQ 39ruGhdmRmA3t0WvAE+gZUC5RwSURdzXk2E2AKBkyLiV4DvDGbg8ZZ21ozHCSClH D4fceEYDFbTPuPnr/xLZ/93GqN2yd6qZ/GrW3mU6m2uqsOcDMR9EpCemhOMM6ZKX wOV4fyXHQpXf8jMFYP6X7v9RvR1O+JM08ms6kXacF3i+VgxNhmCL6binOk0zCuub gF8SqgaroRgph/CiDwtZcNEU9E0xZ2t/e6fsVMdIYrFml/gk80bu4rrH+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDkPPIssYMpL/lLjKGcKadAQYIkiMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvT1E4OGl5eGd5a3YtVXVNb1p3cHAwQkJnaVNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbUpSMA0G CSqGSIb3DQEBCwUAA4IBAQBq28CslwATGsF5HBsHFxBk6r2aX3eRfXQzW+tG/7rA JuQLbXx+RjChas5CtNqJpYmZsvACiH9GRk1KB2UHRfFcybPluTIt3outaNXmnpmu LmrrUfKbe7aWHRHxtIdMW3Iewhdwxag9MN7aIut2AxwRXcV1uVPEeyxrs5fv/S+i 9wUjRv68LzPRsvFQu2GcCeKOb1G71R1ru6rhabw7SuXEcK/IevLZGZSCAZTuxwzf 2sJs0s+MsZdDJ/ooa48FYmxAOQ+OL60hXV5lVGQJMDkQQP++xPpqaysTbM0HkXnk C3F9vgHYG/KXAPeTY/awRuUUmI2FI3eka2/aMYVHZK8a -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:23 2026 by rpki-client