This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oh0OpHtuiq8tRndmmlmhLGnRyrI.roa File: oh0OpHtuiq8tRndmmlmhLGnRyrI.roa (raw, json) Hash identifier: wmVSr2KjWCZIXJCv2tUyalsc1suIWV19klaEEzkPTCQ= Subject key identifier: A2:1D:0E:A4:7B:6E:8A:AF:2D:46:77:66:9A:59:A1:2C:69:D1:CA:B2 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84B9BEE6947B44281C4FEAEC48DB47 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oh0OpHtuiq8tRndmmlmhLGnRyrI.roa Signing time: Fri 02 Jan 2026 16:22:43 +0000 ROA not before: Fri 02 Jan 2026 16:22:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49551 IP address blocks: 31.148.8.0/22 maxlen: 24 93.171.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b9:be:e6:94:7b:44:28:1c:4f:ea:ec:48:db:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a21d0ea47b6e8aaf2d4677669a59a12c69d1cab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:c9:13:6e:4b:85:4f:e6:dd:85:f7:0a:43: 93:ec:11:34:2a:dd:3f:d5:78:b6:54:2f:31:be:5a: 83:f5:cb:66:7c:77:5b:c6:7e:b4:2a:9f:f8:c8:29: 2a:22:96:a2:e0:8d:4e:69:6a:a3:14:c8:e0:45:a9: b4:bb:20:e4:64:94:82:a0:35:83:1c:96:c0:9a:ec: 7a:20:34:27:7e:4a:2e:e1:86:09:dc:5b:2f:0d:71: cb:d8:c7:80:8d:51:65:c5:91:89:67:25:65:65:2c: 3d:1e:12:43:fc:07:e1:64:3c:96:bf:96:b9:12:1e: eb:63:53:54:80:13:ec:67:cd:9a:ed:4a:7d:f6:95: 48:e3:ee:78:74:4a:07:5f:ad:89:13:27:83:30:ce: a3:b1:da:c2:7d:22:c9:74:67:31:26:6a:4e:6f:dd: 1d:9f:60:74:65:3b:0d:d6:b8:a0:fb:ad:38:65:56: c2:e1:88:44:84:78:88:c2:a6:a9:df:f0:52:8c:9d: 22:80:b8:88:08:d8:04:07:f1:17:50:05:0d:12:fd: 57:92:ca:e6:71:cf:f7:37:35:ee:95:e2:e5:6d:3c: eb:51:5b:44:21:49:9b:ce:93:09:3c:a1:7b:8e:10: af:45:a7:dc:a8:f9:90:83:f6:cb:8d:f3:62:0b:8a: bf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1D:0E:A4:7B:6E:8A:AF:2D:46:77:66:9A:59:A1:2C:69:D1:CA:B2 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oh0OpHtuiq8tRndmmlmhLGnRyrI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.8.0/22 93.171.44.0/22 Signature Algorithm: sha256WithRSAEncryption 03:e4:74:98:92:cb:ed:a7:22:5b:96:2e:24:79:7d:61:cc:e0: 3a:3b:c1:26:a5:07:30:f9:51:2b:4b:df:e3:68:88:1e:dc:56: 89:94:d4:4f:25:58:4f:c7:83:80:ab:a3:82:ee:18:3b:99:84: da:b9:9e:55:89:e4:37:a3:53:1b:32:30:f0:91:df:dd:5c:72: 33:8b:b1:69:25:c9:f4:a5:14:39:0c:a2:b2:c5:f4:59:b0:48: 06:98:16:1e:87:b4:63:f3:a7:53:06:13:39:03:f7:f0:b8:0c: 70:1c:3a:1e:ea:22:55:10:a6:96:f9:f0:3c:f9:b2:a8:f2:d4: 56:58:aa:7a:2f:6f:9f:22:71:a5:2b:7f:5d:8e:83:69:2f:e3: df:51:8c:84:49:3d:da:0f:76:ca:e5:9e:a7:46:65:bc:39:be: 14:49:33:b2:76:65:87:64:ef:02:9c:48:2d:16:0d:ab:a3:27: 9d:d1:6a:15:c6:27:88:bf:a2:7f:85:fb:18:65:8d:3c:63:90: 6e:95:d4:ed:5b:2b:54:85:57:16:28:9e:2d:c4:98:e2:33:9f: ea:24:93:c7:a3:53:6b:dc:4f:75:52:97:7b:ad:51:73:a4:3c: 24:4f:16:13:21:03:6e:d8:79:81:5e:c7:05:db:53:a3:f8:1e: 4e:16:2a:ef -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hLm+5pR7RCgcT+rsSNtHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjFkMGVhNDdiNmU4YWFmMmQ0Njc3NjY5YTU5YTEyYzY5ZDFjYWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtarJE25LhU/m3YX3CkOT7BE0Kt0/ 1Xi2VC8xvlqD9ctmfHdbxn60Kp/4yCkqIpai4I1OaWqjFMjgRam0uyDkZJSCoDWD HJbAmux6IDQnfkou4YYJ3FsvDXHL2MeAjVFlxZGJZyVlZSw9HhJD/AfhZDyWv5a5 Eh7rY1NUgBPsZ82a7Up99pVI4+54dEoHX62JEyeDMM6jsdrCfSLJdGcxJmpOb90d n2B0ZTsN1rig+604ZVbC4YhEhHiIwqap3/BSjJ0igLiICNgEB/EXUAUNEv1Xksrm cc/3NzXuleLlbTzrUVtEIUmbzpMJPKF7jhCvRafcqPmQg/bLjfNiC4q/jwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKIdDqR7boqvLUZ3ZppZoSxp0cqyMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvb2gwT3BIdHVpcTh0Um5kbW1sbWhMR25SeXJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCH5QIAwQC XassMA0GCSqGSIb3DQEBCwUAA4IBAQAD5HSYksvtpyJbli4keX1hzOA6O8EmpQcw +VErS9/jaIge3FaJlNRPJVhPx4OAq6OC7hg7mYTauZ5VieQ3o1MbMjDwkd/dXHIz i7FpJcn0pRQ5DKKyxfRZsEgGmBYeh7Rj86dTBhM5A/fwuAxwHDoe6iJVEKaW+fA8 +bKo8tRWWKp6L2+fInGlK39djoNpL+PfUYyEST3aD3bK5Z6nRmW8Ob4USTOydmWH ZO8CnEgtFg2royed0WoVxieIv6J/hfsYZY08Y5BuldTtWytUhVcWKJ4txJjiM5/q JJPHo1Nr3E91Upd7rVFzpDwkTxYTIQNu2HmBXscF21Oj+B5OFirv -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:38 2026 by rpki-client