This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa File: oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa (raw, json) Hash identifier: V8zyoEs8PVkTEGnh+pD54bvpuIuIO+mSB/TZNau2dBA= Subject key identifier: A1:73:8A:87:78:84:AA:D3:2D:38:0B:C8:0D:D0:33:AA:A9:2E:01:5A Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019B79ED36D3944231733CFC23B6447A7D52 Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6667 IP address blocks: 192.136.73.0/24 maxlen: 24 192.136.74.0/24 maxlen: 24 213.192.184.0/21 maxlen: 21 2001:670::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:36:d3:94:42:31:73:3c:fc:23:b6:44:7a:7d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1738a877884aad32d380bc80dd033aaa92e015a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:92:a4:2d:9f:17:c7:cb:43:22:d0:e2:4c:af: 0b:55:79:29:b7:9e:e9:98:fe:15:5f:9d:16:39:ff: 6c:73:e0:d3:ce:36:f8:fd:e5:34:26:50:71:8a:d7: 1f:af:2e:a8:32:29:dd:bf:d0:c0:a0:2e:f2:6e:34: 7e:a0:2e:e0:19:10:66:bd:9e:56:87:20:07:f1:a0: 9e:b0:11:61:26:27:71:ab:ad:55:76:af:ce:1f:fd: d7:6b:04:a8:d7:58:f8:a2:d3:de:5f:95:e0:48:1c: 5b:64:6e:9d:cd:40:d9:96:99:f2:f4:fe:75:9e:37: ad:fb:23:8e:14:f8:5e:20:b3:d8:82:5f:e3:bb:4e: b7:31:a6:99:24:61:9c:83:3e:ac:01:4e:03:79:e3: cb:8e:07:87:98:bc:cb:4e:45:34:c1:b7:39:c4:6c: 97:e8:20:a7:b9:bd:74:2b:df:61:14:4c:fc:82:08: cb:8b:6e:ef:c1:9c:22:8e:66:73:45:15:86:e6:e4: 29:8a:19:18:1d:f1:37:1d:59:cc:66:9e:ee:8d:fe: 1f:65:0e:0b:eb:7e:a7:e7:6f:03:90:49:57:4a:40: 69:ba:e9:36:4f:fe:d4:f6:8e:09:04:fa:1a:70:68: a3:d5:87:c1:a8:aa:44:d4:c5:b0:a3:92:36:33:ad: 17:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:73:8A:87:78:84:AA:D3:2D:38:0B:C8:0D:D0:33:AA:A9:2E:01:5A X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/oXOKh3iEqtMtOAvIDdAzqqkuAVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.136.73.0-192.136.74.255 213.192.184.0/21 IPv6: 2001:670::/32 Signature Algorithm: sha256WithRSAEncryption 92:20:6b:2d:12:b8:9e:62:17:d3:84:e0:96:83:28:9d:4f:06: 76:d8:f2:ce:2d:ba:22:cc:0b:41:dd:25:bc:9d:5b:34:59:be: 71:58:6e:12:cd:3a:db:84:bd:c4:8d:20:8b:7f:a5:b6:40:65: c9:70:42:24:6e:a4:7d:1f:38:40:bc:e5:66:f0:93:bd:c9:15: c4:74:79:51:97:71:e3:45:9e:84:41:2c:23:db:22:bb:95:e1: 6f:08:ec:ae:62:30:78:cd:07:47:9a:77:e9:bc:69:f0:6c:da: 83:d7:08:53:e4:16:f1:9c:27:47:b7:ce:22:fc:12:3b:13:ab: e5:ac:ea:4a:12:8a:69:94:e9:d2:65:23:ab:4c:f5:13:60:3f: 07:6f:42:ba:d6:3c:40:cb:12:50:d3:fa:cf:00:9d:6d:48:10: c5:c6:01:45:aa:f6:04:4f:62:26:1f:6d:c0:b7:5f:4f:d5:98: f9:a6:59:8c:32:7e:b1:f1:0e:20:2e:8c:75:cb:f4:88:b2:a8: cc:30:75:03:c8:6f:de:9d:fe:4c:2e:a6:f5:f2:ca:ad:6a:19: 9c:99:9e:ec:71:30:d6:d2:dc:77:1a:46:02:7d:c4:75:2d:f7: 7e:a3:d3:85:6a:8b:83:1f:50:51:e6:61:73:98:d2:06:b3:50: d2:60:92:f9 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt57TbTlEIxczz8I7ZEen1SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTczOGE4Nzc4ODRhYWQzMmQzODBiYzgwZGQwMzNhYWE5MmUwMTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5KkLZ8Xx8tDItDiTK8LVXkpt57p mP4VX50WOf9sc+DTzjb4/eU0JlBxitcfry6oMindv9DAoC7ybjR+oC7gGRBmvZ5W hyAH8aCesBFhJidxq61Vdq/OH/3XawSo11j4otPeX5XgSBxbZG6dzUDZlpny9P51 njet+yOOFPheILPYgl/ju063MaaZJGGcgz6sAU4DeePLjgeHmLzLTkU0wbc5xGyX 6CCnub10K99hFEz8ggjLi27vwZwijmZzRRWG5uQpihkYHfE3HVnMZp7ujf4fZQ4L 636n528DkElXSkBpuuk2T/7U9o4JBPoacGij1YfBqKpE1MWwo5I2M60XvQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFKFziod4hKrTLTgLyA3QM6qpLgFaMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvb1hPS2gzaUVxdE10T0F2SURkQXpxcWt1QVZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBADAiEkD BADAiEoDBAPVwLgwDQQCAAIwBwMFACABBnAwDQYJKoZIhvcNAQELBQADggEBAJIg ay0SuJ5iF9OE4JaDKJ1PBnbY8s4tuiLMC0HdJbydWzRZvnFYbhLNOtuEvcSNIIt/ pbZAZclwQiRupH0fOEC85Wbwk73JFcR0eVGXceNFnoRBLCPbIruV4W8I7K5iMHjN B0ead+m8afBs2oPXCFPkFvGcJ0e3ziL8EjsTq+Ws6koSimmU6dJlI6tM9RNgPwdv QrrWPEDLElDT+s8AnW1IEMXGAUWq9gRPYiYfbcC3X0/VmPmmWYwyfrHxDiAujHXL 9IiyqMwwdQPIb96d/kwupvXyyq1qGZyZnuxxMNbS3HcaRgJ9xHUt936j04Vqi4Mf UFHmYXOY0gazUNJgkvk= -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:08 2026 by rpki-client