This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/OcGLgpdPjEji6rhRKA3ndoUPng8.roa File: OcGLgpdPjEji6rhRKA3ndoUPng8.roa (raw, json) Hash identifier: uMbYxwC7JX58tZin/DJJELLb9OvFN38e9zDdfuZgxac= Subject key identifier: 39:C1:8B:82:97:4F:8C:48:E2:EA:B8:51:28:0D:E7:76:85:0F:9E:0F Certificate issuer: /CN=24a9afff7e7feb06e18de92c273563b98033316b Certificate serial: 019B7EA5B5BA872D3CEE81115BFC5A897286 Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/OcGLgpdPjEji6rhRKA3ndoUPng8.roa Signing time: Fri 02 Jan 2026 12:19:07 +0000 ROA not before: Fri 02 Jan 2026 12:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 93.157.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:b5:ba:87:2d:3c:ee:81:11:5b:fc:5a:89:72:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b Validity Not Before: Jan 2 12:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39c18b82974f8c48e2eab851280de776850f9e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:ab:1e:93:fc:24:46:59:e4:b1:c0:0d:b6: 89:44:12:2c:a4:cf:cc:5f:f7:1b:d6:bd:cc:2e:c6: 28:e1:4d:3d:3c:6a:0b:6f:8c:2d:a9:e6:3f:fd:43: b6:ab:1d:a1:ed:92:d1:87:2e:08:12:06:1f:8f:f8: f2:29:f8:86:09:9f:31:cd:4c:d1:7e:99:7c:32:33: 20:b6:b9:45:78:0f:c7:88:b0:ae:57:90:6a:c9:42: ef:4c:ee:56:b4:7b:69:3c:e6:a7:03:f1:f1:85:1b: 10:6c:9b:1c:d5:3c:a6:77:63:cc:95:8a:80:ee:5f: 49:24:ba:73:51:8e:a5:6c:53:69:08:46:9e:1e:96: 6b:11:11:94:4b:d8:1a:2b:3b:0b:09:58:e5:02:79: e8:3b:b6:28:f4:0d:75:20:0d:e0:28:90:c6:e2:d0: 42:27:ba:ba:4c:b3:62:30:eb:04:28:78:e1:59:6e: d9:0e:47:1f:1f:18:f8:36:bc:14:b8:e4:1c:b9:2e: f6:08:28:ec:5d:44:39:ee:5a:4a:13:eb:81:bd:c6: 0c:02:12:32:5c:8c:ea:24:46:9b:1d:18:97:ca:43: 96:7d:49:94:91:38:10:0e:02:19:04:e4:a7:af:c1: 01:3b:b1:14:f1:aa:1a:43:a5:e2:63:87:88:6f:1f: 86:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C1:8B:82:97:4F:8C:48:E2:EA:B8:51:28:0D:E7:76:85:0F:9E:0F X509v3 Authority Key Identifier: keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/OcGLgpdPjEji6rhRKA3ndoUPng8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.157.136.0/23 Signature Algorithm: sha256WithRSAEncryption 45:2d:5f:73:32:46:42:6a:39:18:1a:54:64:e3:8d:ca:6c:3f: 2b:a1:af:9e:45:24:3d:d5:8e:12:ef:44:81:95:a9:7f:09:3a: c7:3a:2f:cd:86:d2:2c:05:93:2a:84:41:b7:62:16:25:cf:80: 95:23:14:90:1c:99:7c:39:a8:ae:20:7f:6a:7d:09:85:be:6b: 22:06:33:07:a6:1d:3c:80:8e:d9:49:cf:74:6b:fa:61:05:d9: cb:10:3b:1a:4c:58:e1:fa:60:22:2e:d8:2d:96:e6:e9:64:5a: 7c:1b:cd:b4:e8:c2:fa:e0:21:9b:b1:0c:09:3b:03:93:5d:4a: 0d:12:01:da:5d:ed:aa:ef:7a:8a:35:d0:ca:9f:fc:05:ca:78: 63:bb:e6:7e:3d:1d:9e:ea:29:91:db:b3:42:a0:3c:08:8a:3a: bb:a8:2c:73:a7:7d:44:81:8b:ca:2f:bb:b6:25:0c:2c:3a:a1: 2e:58:47:ae:1b:ec:73:2d:77:e9:3f:56:e7:a6:32:77:86:13: 85:da:83:20:d0:1e:66:14:7d:9f:55:85:2a:8b:ca:10:27:34: 8f:61:cf:12:f3:c1:c6:fc:31:4e:93:95:22:e0:ab:64:65:82: 0a:a2:90:02:45:14:d1:71:81:4a:91:2e:ac:e6:ba:a9:df:c0: 36:23:18:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pbW6hy087oERW/xaiXKGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YTlhZmZmN2U3ZmViMDZlMThkZTkyYzI3MzU2M2I5ODAz MzMxNmIwHhcNMjYwMTAyMTIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWMxOGI4Mjk3NGY4YzQ4ZTJlYWI4NTEyODBkZTc3Njg1MGY5ZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmarHpP8JEZZ5LHADbaJRBIspM/M X/cb1r3MLsYo4U09PGoLb4wtqeY//UO2qx2h7ZLRhy4IEgYfj/jyKfiGCZ8xzUzR fpl8MjMgtrlFeA/HiLCuV5BqyULvTO5WtHtpPOanA/HxhRsQbJsc1Tymd2PMlYqA 7l9JJLpzUY6lbFNpCEaeHpZrERGUS9gaKzsLCVjlAnnoO7Yo9A11IA3gKJDG4tBC J7q6TLNiMOsEKHjhWW7ZDkcfHxj4NrwUuOQcuS72CCjsXUQ57lpKE+uBvcYMAhIy XIzqJEabHRiXykOWfUmUkTgQDgIZBOSnr8EBO7EU8aoaQ6XiY4eIbx+GMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDnBi4KXT4xI4uq4USgN53aFD54PMB8GA1UdIwQY MBaAFCSpr/9+f+sG4Y3pLCc1Y7mAMzFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZWNkMTEtYmM4MC00NTNhLTgyMDEt NzE2MTIwYWIyZGIyLzEvT2NHTGdwZFBqRWppNnJoUktBM25kb1VQbmc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jZWNkMTEtYmM4MC00NTNhLTgyMDEtNzE2MTIwYWIyZGIy LzEvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXZ2IMA0G CSqGSIb3DQEBCwUAA4IBAQBFLV9zMkZCajkYGlRk443KbD8roa+eRSQ91Y4S70SB lal/CTrHOi/NhtIsBZMqhEG3YhYlz4CVIxSQHJl8OaiuIH9qfQmFvmsiBjMHph08 gI7ZSc90a/phBdnLEDsaTFjh+mAiLtgtlubpZFp8G8206ML64CGbsQwJOwOTXUoN EgHaXe2q73qKNdDKn/wFynhju+Z+PR2e6imR27NCoDwIijq7qCxzp31EgYvKL7u2 JQwsOqEuWEeuG+xzLXfpP1bnpjJ3hhOF2oMg0B5mFH2fVYUqi8oQJzSPYc8S88HG /DFOk5Ui4KtkZYIKopACRRTRcYFKkS6s5rqp38A2IxjU -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:28 2026 by rpki-client