This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/OuWJs9Uzxdf-ZKAcWIAL89IuopI.roa File: OuWJs9Uzxdf-ZKAcWIAL89IuopI.roa (raw, json) Hash identifier: 16WKJl9nAt0F5mIivt4fYmu6w5/8Iqob4RhznilyhtM= Subject key identifier: 3A:E5:89:B3:D5:33:C5:D7:FE:64:A0:1C:58:80:0B:F3:D2:2E:A2:92 Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9 Certificate serial: 019B7A5AB8D93AE57A064EAB9D49ADBDD721 Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/OuWJs9Uzxdf-ZKAcWIAL89IuopI.roa Signing time: Thu 01 Jan 2026 16:18:44 +0000 ROA not before: Thu 01 Jan 2026 16:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29259 IP address blocks: 83.170.0.0/18 maxlen: 18 84.11.0.0/16 maxlen: 16 84.11.255.0/24 maxlen: 24 195.158.212.0/22 maxlen: 24 2001:1b10::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b8:d9:3a:e5:7a:06:4e:ab:9d:49:ad:bd:d7:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9 Validity Not Before: Jan 1 16:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ae589b3d533c5d7fe64a01c58800bf3d22ea292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0d:14:49:c2:7e:07:40:32:ca:ae:5e:4e:36: 26:39:0d:42:8d:ad:76:a3:bc:33:6f:52:06:bc:18: 1d:d7:1a:cd:b3:98:72:db:99:0b:cb:b4:22:ee:c9: 7d:e9:24:ff:c3:f0:f9:45:da:2d:88:ff:f4:b5:b4: 3f:cd:45:53:81:ef:fc:22:ed:bd:f7:d2:aa:bf:fc: 34:14:48:33:9b:c9:ce:86:86:7a:f7:7e:ed:36:24: 8d:81:33:82:89:4b:3b:28:b7:fc:fe:dd:2e:df:1d: 70:a1:62:a3:25:f2:69:72:89:d6:38:26:5e:63:c5: e3:e7:fc:15:6d:b3:53:b6:71:63:4d:6e:84:52:e5: 83:74:a4:c9:97:3d:29:7a:d9:93:a4:d2:95:ed:d3: 05:c1:92:f7:53:de:d6:8e:a4:62:09:93:5b:f4:97: bb:eb:37:39:c6:ce:38:8f:4a:05:72:86:0f:7a:40: 6d:f5:56:46:b8:8b:8b:f5:f5:17:80:c8:79:a4:40: 2f:cb:1b:b2:27:8d:c0:67:bd:a1:d1:16:90:0f:9d: 1d:81:f0:87:13:05:42:74:5c:5c:5e:da:f4:81:10: 2d:2f:2b:8f:13:d5:e1:cc:b3:6c:ee:6f:ee:99:fb: 4f:82:22:55:7b:e0:ef:7f:9f:64:58:de:cf:75:4b: 67:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E5:89:B3:D5:33:C5:D7:FE:64:A0:1C:58:80:0B:F3:D2:2E:A2:92 X509v3 Authority Key Identifier: keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/OuWJs9Uzxdf-ZKAcWIAL89IuopI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.170.0.0/18 84.11.0.0/16 195.158.212.0/22 IPv6: 2001:1b10::/32 Signature Algorithm: sha256WithRSAEncryption 6a:be:54:b0:97:d5:b3:ba:ab:d9:68:e3:52:50:2c:73:b5:91: e7:1c:c9:11:61:19:44:06:0a:8b:94:48:25:55:3a:96:e7:6b: 96:ab:0c:02:54:e6:44:d3:c7:30:85:37:51:bd:b5:d7:09:e7: 5d:62:87:1d:ef:39:8c:7e:7a:f1:cb:7d:aa:3e:9e:cd:05:7a: bc:d9:9d:6e:ad:86:5c:d3:04:a7:db:29:7a:d7:f0:9f:11:0d: 7b:22:ee:5f:82:d0:a9:c4:72:7c:5c:52:5d:43:70:d1:66:55: bd:3d:ca:32:c2:9a:52:91:38:9e:b2:52:84:25:77:58:04:0f: f6:e7:27:b8:58:ff:7f:6f:56:d0:d2:cf:50:0b:0e:74:ef:25: cc:89:e8:f0:28:c9:2d:ee:e7:73:09:ea:38:76:64:37:a8:e5: 5e:30:af:1f:e5:22:75:c2:92:f9:36:bd:c1:bf:f7:fd:9d:ff: 8c:c7:83:8b:98:ee:6f:0a:47:10:de:0f:18:54:ee:93:7f:0f: 4b:3d:df:ec:24:b0:39:d7:f7:7a:97:c4:d1:b3:2c:e4:44:87: de:22:18:09:90:5b:11:11:d9:f1:a5:8a:e1:5f:75:37:25:0a: 98:6b:ed:a1:a6:e3:f2:b9:31:94:cd:46:45:11:12:c1:a8:50: 29:e3:60:f9 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6WrjZOuV6Bk6rnUmtvdchMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYTI0OWVhZGViMmE5MjhmZTBjMmU3NWM5MTgyNDhiNWEx YTI4YjkwHhcNMjYwMTAxMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWU1ODliM2Q1MzNjNWQ3ZmU2NGEwMWM1ODgwMGJmM2QyMmVhMjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA0UScJ+B0Ayyq5eTjYmOQ1Cja12 o7wzb1IGvBgd1xrNs5hy25kLy7Qi7sl96ST/w/D5RdotiP/0tbQ/zUVTge/8Iu29 99Kqv/w0FEgzm8nOhoZ6937tNiSNgTOCiUs7KLf8/t0u3x1woWKjJfJpconWOCZe Y8Xj5/wVbbNTtnFjTW6EUuWDdKTJlz0petmTpNKV7dMFwZL3U97WjqRiCZNb9Je7 6zc5xs44j0oFcoYPekBt9VZGuIuL9fUXgMh5pEAvyxuyJ43AZ72h0RaQD50dgfCH EwVCdFxcXtr0gRAtLyuPE9XhzLNs7m/umftPgiJVe+Dvf59kWN7PdUtnCQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFDrlibPVM8XX/mSgHFiAC/PSLqKSMB8GA1UdIwQY MBaAFECiSeresqko/gwudckYJItaGii5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAt ODMzMGU3ZTMyZTE5LzEvT3VXSnM5VXp4ZGYtWktBY1dJQUw4OUl1b3BJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAtODMzMGU3ZTMyZTE5 LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwQGU6oAAwMA VAsDBALDntQwDQQCAAIwBwMFACABGxAwDQYJKoZIhvcNAQELBQADggEBAGq+VLCX 1bO6q9lo41JQLHO1keccyRFhGUQGCouUSCVVOpbna5arDAJU5kTTxzCFN1G9tdcJ 511ihx3vOYx+evHLfao+ns0FerzZnW6thlzTBKfbKXrX8J8RDXsi7l+C0KnEcnxc Ul1DcNFmVb09yjLCmlKROJ6yUoQld1gED/bnJ7hY/39vVtDSz1ALDnTvJcyJ6PAo yS3u53MJ6jh2ZDeo5V4wrx/lInXCkvk2vcG/9/2d/4zHg4uY7m8KRxDeDxhU7pN/ D0s93+wksDnX93qXxNGzLOREh94iGAmQWxER2fGliuFfdTclCphr7aGm4/K5MZTN RkUREsGoUCnjYPk= -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:29 2026 by rpki-client