This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/oDrrwj_J2YbGDvH96R1q32wibOg.roa File: oDrrwj_J2YbGDvH96R1q32wibOg.roa (raw, json) Hash identifier: enzCHScTPelD74ea898lsenkjGHLvXoRBcBQQihmhlo= Subject key identifier: A0:3A:EB:C2:3F:C9:D9:86:C6:0E:F1:FD:E9:1D:6A:DF:6C:22:6C:E8 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019B76EB54F21248BAD9BFF368EAF022954D Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/oDrrwj_J2YbGDvH96R1q32wibOg.roa Signing time: Thu 01 Jan 2026 00:18:12 +0000 ROA not before: Thu 01 Jan 2026 00:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202251 IP address blocks: 2.188.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:54:f2:12:48:ba:d9:bf:f3:68:ea:f0:22:95:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jan 1 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a03aebc23fc9d986c60ef1fde91d6adf6c226ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:77:07:27:02:3f:e2:73:bf:f2:09:d0:24:b0: 02:ff:38:fb:08:a5:fd:9f:b4:d1:c4:24:4b:c6:b3: f0:1e:54:be:ae:9e:c5:a3:44:69:01:ce:37:1a:6f: 6b:24:8f:cc:59:f1:0c:d4:a7:54:27:e7:1d:51:41: 58:2e:a3:72:93:28:3f:b3:d4:0f:85:f7:eb:4f:68: 51:5a:c8:86:71:68:13:fe:85:2b:8c:38:4f:4b:30: c0:5d:06:58:39:06:48:fe:52:6a:b8:10:02:a6:27: 45:80:52:2f:7e:4e:0b:e4:e2:67:12:2b:4c:eb:00: 3e:bd:2e:c9:ad:6b:ad:b7:4f:57:f9:cf:4a:33:55: bc:fb:79:c5:d8:e1:50:44:aa:bb:b5:6a:79:bb:12: 43:b4:ef:63:a9:7c:a9:87:97:3e:b5:a5:36:d9:60: f0:1f:fd:19:26:87:ef:1d:d4:5a:f6:44:e2:de:12: 00:4a:0f:2c:4a:56:0f:1c:47:fc:b7:04:4f:1a:5e: 44:01:38:dd:55:45:e3:bf:f6:7a:27:0c:1a:be:53: 79:29:53:9c:86:4d:17:88:f2:fe:e7:48:56:9a:64: 21:1d:e7:d1:92:85:39:c9:f7:5f:36:fe:c6:09:ae: f5:b0:1d:ce:d3:b5:c7:c8:33:c4:7f:17:64:93:74: f7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3A:EB:C2:3F:C9:D9:86:C6:0E:F1:FD:E9:1D:6A:DF:6C:22:6C:E8 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/oDrrwj_J2YbGDvH96R1q32wibOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.188.224.0/20 Signature Algorithm: sha256WithRSAEncryption 24:b0:84:5e:89:12:c3:fc:39:c4:59:25:e1:5a:11:c3:d4:cb: 37:be:11:ba:df:4e:00:31:95:8d:a0:ab:13:97:cb:74:b8:33: 94:e0:bb:ea:1c:91:ee:70:ed:8d:e0:7d:db:d7:c7:ed:f9:b9: 23:0b:47:b5:0a:a8:63:a3:52:50:1e:00:70:53:8f:d6:ed:08: d3:61:88:de:83:85:28:88:1d:52:fc:66:0c:bc:ff:fe:f6:b8: 4f:cc:44:c2:74:d1:57:7b:3f:0d:56:75:2b:0b:d3:8c:39:cd: b1:3b:27:aa:17:03:d1:50:08:0c:08:55:24:c8:37:97:d5:80: e5:22:e3:31:59:94:99:6a:23:ec:1f:9f:12:f8:63:4b:c2:a4: ab:48:1f:4d:19:36:32:7b:e9:a7:50:78:87:dc:60:57:54:d2: 8f:6e:00:a8:96:35:4c:dc:01:96:19:4a:df:17:0e:61:c7:06: a8:d3:8f:34:b6:13:c6:20:45:aa:9d:f3:2a:c1:73:98:04:59: c4:15:d3:2e:6a:64:43:0a:46:3f:04:83:29:31:9f:7c:b2:05: a4:4c:d1:5a:dc:de:58:ab:44:dd:03:47:33:e7:1e:40:5e:43: 28:f3:2f:e0:20:64:4b:b6:74:da:ca:74:88:d9:75:e7:7e:00: 75:dc:c9:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt261TyEki62b/zaOrwIpVNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwMTAxMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDNhZWJjMjNmYzlkOTg2YzYwZWYxZmRlOTFkNmFkZjZjMjI2Y2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ncHJwI/4nO/8gnQJLAC/zj7CKX9 n7TRxCRLxrPwHlS+rp7Fo0RpAc43Gm9rJI/MWfEM1KdUJ+cdUUFYLqNykyg/s9QP hffrT2hRWsiGcWgT/oUrjDhPSzDAXQZYOQZI/lJquBACpidFgFIvfk4L5OJnEitM 6wA+vS7JrWutt09X+c9KM1W8+3nF2OFQRKq7tWp5uxJDtO9jqXyph5c+taU22WDw H/0ZJofvHdRa9kTi3hIASg8sSlYPHEf8twRPGl5EATjdVUXjv/Z6JwwavlN5KVOc hk0XiPL+50hWmmQhHefRkoU5yfdfNv7GCa71sB3O07XHyDPEfxdkk3T3AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKA668I/ydmGxg7x/ekdat9sImzoMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvb0RycndqX0oyWWJHRHZIOTZSMXEzMndpYk9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEArzgMA0G CSqGSIb3DQEBCwUAA4IBAQAksIReiRLD/DnEWSXhWhHD1Ms3vhG6304AMZWNoKsT l8t0uDOU4LvqHJHucO2N4H3b18ft+bkjC0e1Cqhjo1JQHgBwU4/W7QjTYYjeg4Uo iB1S/GYMvP/+9rhPzETCdNFXez8NVnUrC9OMOc2xOyeqFwPRUAgMCFUkyDeX1YDl IuMxWZSZaiPsH58S+GNLwqSrSB9NGTYye+mnUHiH3GBXVNKPbgColjVM3AGWGUrf Fw5hxwao0480thPGIEWqnfMqwXOYBFnEFdMuamRDCkY/BIMpMZ98sgWkTNFa3N5Y q0TdA0cz5x5AXkMo8y/gIGRLtnTaynSI2XXnfgB13Ml9 -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:36 2026 by rpki-client