This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/0oG7Wuq3ZAAXzg6P-qV_HWGeUWE.roa File: 0oG7Wuq3ZAAXzg6P-qV_HWGeUWE.roa (raw, json) Hash identifier: tl6rHSJSg3BOoepWWn4g5EPuRgVKzjqvlpZ/rZDE8k0= Subject key identifier: D2:81:BB:5A:EA:B7:64:00:17:CE:0E:8F:FA:A5:7F:1D:61:9E:51:61 Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29 Certificate serial: 019B7B3657F1CB17A1A11CE8397E95CC025E Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/0oG7Wuq3ZAAXzg6P-qV_HWGeUWE.roa Signing time: Thu 01 Jan 2026 20:18:37 +0000 ROA not before: Thu 01 Jan 2026 20:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212041 IP address blocks: 193.228.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:57:f1:cb:17:a1:a1:1c:e8:39:7e:95:cc:02:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29 Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d281bb5aeab7640017ce0e8ffaa57f1d619e5161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:07:39:5c:29:cd:23:5a:ad:ca:50:fa:f7:eb: ac:d0:d6:8d:5d:82:b1:71:21:e4:05:3c:e0:d8:d5: 34:4e:ac:fb:fb:03:ec:45:7b:7c:05:3a:3e:5b:9d: 62:9d:76:0d:30:56:87:90:3d:2c:7c:af:b9:66:96: ed:2c:cd:e8:cc:49:c8:50:6f:d1:5b:99:58:0c:32: 29:a7:ed:5e:d5:1d:f9:21:67:e6:b1:88:24:51:dc: d3:7d:2f:a9:c1:e6:7b:ac:cd:dd:93:37:2a:e9:8c: fd:bf:68:39:43:0b:c7:02:21:93:54:f0:40:a8:20: d7:70:61:ea:78:0d:87:b6:c0:83:18:fa:4c:6a:3e: bd:94:82:15:4a:15:10:27:0f:a9:49:71:53:47:1c: 49:47:62:d4:9e:fe:f1:cd:4a:76:c5:00:13:c0:d8: f0:9c:e5:c1:94:af:4c:97:e4:11:c3:ab:c5:c0:a1: 65:10:22:18:6c:77:ff:42:30:26:af:f4:b7:6b:19: fd:34:d8:0a:a1:0a:59:2f:28:12:a7:05:04:8f:d0: 93:a4:0c:88:87:cd:f4:29:22:f7:75:94:f8:72:e5: 91:12:03:ae:f1:25:41:21:32:ad:fb:dd:60:8c:9b: d0:1d:ee:19:f3:fa:e8:e0:be:c2:62:fd:e8:53:0f: 33:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:81:BB:5A:EA:B7:64:00:17:CE:0E:8F:FA:A5:7F:1D:61:9E:51:61 X509v3 Authority Key Identifier: keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/0oG7Wuq3ZAAXzg6P-qV_HWGeUWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.228.138.0/24 Signature Algorithm: sha256WithRSAEncryption 45:6b:12:15:41:48:01:1b:e1:06:df:34:05:1f:92:42:d8:f0: 80:50:8c:93:ad:52:67:e2:6e:3c:9d:31:92:f8:96:fb:e6:c2: 48:e7:64:80:6b:2d:4b:2d:22:90:49:53:ab:25:55:59:91:67: 1e:9d:97:c6:89:60:38:1f:df:4c:fc:63:32:26:1b:e6:66:73: 5c:a6:ec:4b:e9:ad:fa:51:44:5a:bd:d3:ee:a6:aa:29:97:51: a2:89:f3:7f:8f:06:fb:8d:30:c8:de:0c:a0:52:16:b0:7a:8b: af:8d:d9:ea:a8:b8:36:9c:01:8f:32:aa:6b:69:c9:50:ce:d4: 6a:d9:cb:c4:b7:42:ce:d7:c1:59:b3:0f:d3:83:c7:57:27:23: 83:31:34:24:f0:c5:eb:9a:3c:ed:bb:2d:61:70:11:85:61:93: 46:7c:c2:68:91:b6:8d:13:79:76:1d:30:01:74:8c:a3:0a:6d: 9d:9c:82:a9:60:ef:13:6f:9d:02:f3:c1:37:5f:b2:0f:5f:ce: ed:19:e6:c7:07:ac:1f:76:ac:4a:0f:5c:68:06:d0:2f:bb:95: 93:4e:d4:59:79:49:ed:d6:24:f5:9e:81:69:63:c0:10:1f:b5: e5:7b:e8:06:56:0e:43:eb:2e:2a:0d:7d:5f:be:cf:85:89:cb: 31:99:a7:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NlfxyxehoRzoOX6VzAJeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NjE0YmFlOTZjMTMzN2Q3OTdiZDk2NmU3ZDZhODJhODhk ZjlkMjkwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjgxYmI1YWVhYjc2NDAwMTdjZTBlOGZmYWE1N2YxZDYxOWU1MTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwc5XCnNI1qtylD69+us0NaNXYKx cSHkBTzg2NU0Tqz7+wPsRXt8BTo+W51inXYNMFaHkD0sfK+5ZpbtLM3ozEnIUG/R W5lYDDIpp+1e1R35IWfmsYgkUdzTfS+pweZ7rM3dkzcq6Yz9v2g5QwvHAiGTVPBA qCDXcGHqeA2HtsCDGPpMaj69lIIVShUQJw+pSXFTRxxJR2LUnv7xzUp2xQATwNjw nOXBlK9Ml+QRw6vFwKFlECIYbHf/QjAmr/S3axn9NNgKoQpZLygSpwUEj9CTpAyI h830KSL3dZT4cuWREgOu8SVBITKt+91gjJvQHe4Z8/ro4L7CYv3oUw8zbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNKBu1rqt2QAF84Oj/qlfx1hnlFhMB8GA1UdIwQY MBaAFDZhS66WwTN9eXvZZufWqCqI350pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUt YWYwMTRmYWJmNGJlLzEvMG9HN1d1cTNaQUFYemc2UC1xVl9IV0dlVVdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUtYWYwMTRmYWJmNGJl LzEvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweSKMA0G CSqGSIb3DQEBCwUAA4IBAQBFaxIVQUgBG+EG3zQFH5JC2PCAUIyTrVJn4m48nTGS +Jb75sJI52SAay1LLSKQSVOrJVVZkWcenZfGiWA4H99M/GMyJhvmZnNcpuxL6a36 UURavdPupqopl1GiifN/jwb7jTDI3gygUhaweouvjdnqqLg2nAGPMqpraclQztRq 2cvEt0LO18FZsw/Tg8dXJyODMTQk8MXrmjztuy1hcBGFYZNGfMJokbaNE3l2HTAB dIyjCm2dnIKpYO8Tb50C88E3X7IPX87tGebHB6wfdqxKD1xoBtAvu5WTTtRZeUnt 1iT1noFpY8AQH7Xle+gGVg5D6y4qDX1fvs+FicsxmaeW -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:23 2026 by rpki-client