This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/Oawnl1sRK8bf7gAf5C5nWH9I1Jw.roa File: Oawnl1sRK8bf7gAf5C5nWH9I1Jw.roa (raw, json) Hash identifier: wkeGlAvS62MwRHYU8Z+cHP5CIoQV+KvyovxR/4O84h0= Subject key identifier: 39:AC:27:97:5B:11:2B:C6:DF:EE:00:1F:E4:2E:67:58:7F:48:D4:9C Certificate issuer: /CN=c6ff541cf364193a2a00ada14244acd34c14038a Certificate serial: 019B79ECCDDD799A1634C8534C4B34715527 Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/Oawnl1sRK8bf7gAf5C5nWH9I1Jw.roa Signing time: Thu 01 Jan 2026 14:18:40 +0000 ROA not before: Thu 01 Jan 2026 14:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39249 IP address blocks: 193.104.254.0/24 maxlen: 24 2001:67c:1874::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cd:dd:79:9a:16:34:c8:53:4c:4b:34:71:55:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a Validity Not Before: Jan 1 14:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39ac27975b112bc6dfee001fe42e67587f48d49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f1:6d:0d:cc:24:66:26:64:90:7e:31:b6:19: 3a:3c:27:10:4b:ef:c4:ba:ed:d6:6e:95:2a:e4:e6: 95:04:fb:04:02:9f:fd:12:b5:8e:c9:71:12:94:9b: 65:91:a1:89:74:90:d1:a7:74:b4:81:6c:69:40:47: b4:a4:cd:0d:98:13:05:d2:ac:62:fd:04:b6:ea:5a: 4e:89:ea:2d:21:3a:fb:44:0d:b3:7e:98:a9:c7:d4: e4:0d:02:37:eb:20:bd:5d:76:4f:22:2e:1f:99:cb: 3a:fb:48:a6:69:ce:85:4d:2d:52:77:bf:25:17:44: 9b:ef:6d:50:cf:5e:63:7d:f5:59:2e:ff:01:da:ae: 8b:de:67:67:a0:36:8e:53:03:44:5d:a2:76:60:83: b4:c7:2d:87:18:d5:47:e0:4d:29:b3:5a:ac:a8:7e: ec:2c:13:b5:ef:5c:8f:ef:c1:c0:7c:1c:ca:3f:f4: 8d:0f:7b:ca:dd:8a:99:eb:61:2a:07:f6:f0:30:b9: c1:ef:0b:55:6c:be:92:e4:a0:3b:8a:17:51:83:61: a4:e5:e0:f9:d0:3b:42:9e:75:82:6b:7d:d0:e8:c9: fe:fa:e8:13:7b:ca:90:7d:79:b6:2b:17:19:e8:df: 86:90:b3:01:7d:99:4b:26:83:40:00:39:fe:b6:dc: 7e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AC:27:97:5B:11:2B:C6:DF:EE:00:1F:E4:2E:67:58:7F:48:D4:9C X509v3 Authority Key Identifier: keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/Oawnl1sRK8bf7gAf5C5nWH9I1Jw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.254.0/24 IPv6: 2001:67c:1874::/48 Signature Algorithm: sha256WithRSAEncryption 71:2b:ae:39:43:80:82:ea:9c:09:43:04:06:5e:aa:11:2f:a8: bc:c8:00:56:20:a4:e0:f6:f1:b7:46:7e:02:6c:78:0b:72:e3: 40:36:73:55:c3:d8:01:6f:be:34:6e:45:73:3b:90:64:00:d3: 35:be:82:ef:ca:4c:2b:e7:a6:e7:b9:dc:81:71:e3:95:ed:16: 17:fe:24:dd:8f:7d:86:96:73:e0:e0:08:03:59:1c:20:8a:36: 14:4d:e2:27:6d:05:2f:6e:f6:7e:50:2e:90:20:33:bd:e0:65: 35:d9:67:03:1b:1e:7e:b3:48:e8:dc:96:87:69:b1:d5:52:09: 74:37:16:54:3d:0a:2f:06:ce:11:39:1c:22:97:03:b3:f2:3f: fe:48:60:cd:2e:5a:10:c2:85:68:45:cf:ad:e1:28:17:55:f8: 57:05:0b:e5:dd:35:9f:e3:b1:91:92:1a:f4:27:03:56:23:d7: 92:8d:3c:71:29:27:94:21:31:4b:e8:48:2f:fc:85:e9:1a:b8: de:2c:f0:ca:d3:7c:34:34:7c:60:8c:61:8c:67:d7:f0:e4:ef: 52:fc:d7:9e:c3:c3:ca:24:09:37:aa:96:69:b7:33:0e:25:68: 07:ed:22:79:3b:11:88:04:6d:bd:b6:a9:8f:f8:ae:37:53:4e: 97:71:f7:19 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57M3deZoWNMhTTEs0cVUnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZmY1NDFjZjM2NDE5M2EyYTAwYWRhMTQyNDRhY2QzNGMx NDAzOGEwHhcNMjYwMTAxMTQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWFjMjc5NzViMTEyYmM2ZGZlZTAwMWZlNDJlNjc1ODdmNDhkNDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vFtDcwkZiZkkH4xthk6PCcQS+/E uu3WbpUq5OaVBPsEAp/9ErWOyXESlJtlkaGJdJDRp3S0gWxpQEe0pM0NmBMF0qxi /QS26lpOieotITr7RA2zfpipx9TkDQI36yC9XXZPIi4fmcs6+0imac6FTS1Sd78l F0Sb721Qz15jffVZLv8B2q6L3mdnoDaOUwNEXaJ2YIO0xy2HGNVH4E0ps1qsqH7s LBO171yP78HAfBzKP/SND3vK3YqZ62EqB/bwMLnB7wtVbL6S5KA7ihdRg2Gk5eD5 0DtCnnWCa33Q6Mn++ugTe8qQfXm2KxcZ6N+GkLMBfZlLJoNAADn+ttx+sQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDmsJ5dbESvG3+4AH+QuZ1h/SNScMB8GA1UdIwQY MBaAFMb/VBzzZBk6KgCtoUJErNNMFAOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYt MmE1ZTk4YWJkMWYzLzEvT2F3bmwxc1JLOGJmN2dBZjVDNW5XSDlJMUp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYtMmE1ZTk4YWJkMWYz LzEveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwWj+MA8E AgACMAkDBwAgAQZ8GHQwDQYJKoZIhvcNAQELBQADggEBAHErrjlDgILqnAlDBAZe qhEvqLzIAFYgpOD28bdGfgJseAty40A2c1XD2AFvvjRuRXM7kGQA0zW+gu/KTCvn pue53IFx45XtFhf+JN2PfYaWc+DgCANZHCCKNhRN4idtBS9u9n5QLpAgM73gZTXZ ZwMbHn6zSOjclodpsdVSCXQ3FlQ9Ci8GzhE5HCKXA7PyP/5IYM0uWhDChWhFz63h KBdV+FcFC+XdNZ/jsZGSGvQnA1Yj15KNPHEpJ5QhMUvoSC/8hekauN4s8MrTfDQ0 fGCMYYxn1/Dk71L8157Dw8okCTeqlmm3Mw4laAftInk7EYgEbb22qY/4rjdTTpdx 9xk= -----END CERTIFICATE-----Generated at Sun Jan 25 23:04:24 2026 by rpki-client