This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/OYlH95cJwavdZvWPD2OKDHAiTLc.roa File: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (raw, json) Hash identifier: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg= Subject key identifier: 39:89:47:F7:97:09:C1:AB:DD:66:F5:8F:0F:63:8A:0C:70:22:4C:B7 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B7E39226ABB9AEC6B05247FD5DA4AA9BD Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/OYlH95cJwavdZvWPD2OKDHAiTLc.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7203 IP address blocks: 152.163.8.0/22 maxlen: 22 152.163.28.0/22 maxlen: 22 152.163.52.0/22 maxlen: 22 152.163.128.0/22 maxlen: 22 152.163.156.0/22 maxlen: 22 152.163.180.0/22 maxlen: 22 152.163.204.0/22 maxlen: 22 152.163.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:22:6a:bb:9a:ec:6b:05:24:7f:d5:da:4a:a9:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=398947f79709c1abdd66f58f0f638a0c70224cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fc:cc:1b:d7:3f:f3:4f:0c:e2:69:68:cf:22: e2:93:da:7e:93:16:af:da:6a:1c:75:6d:41:c7:0a: f3:9a:d6:ad:3f:d7:7b:87:6b:68:32:09:61:ed:57: cf:a6:58:c9:27:87:2a:0c:93:5b:49:8d:67:88:1e: 3d:0b:3c:ed:e8:86:33:41:e0:13:2e:87:41:f9:cb: 58:73:87:8f:70:89:8c:05:98:37:f4:80:88:92:9c: bb:8e:c9:79:f7:64:51:41:8e:ec:c1:fd:85:d5:39: a1:e3:95:b9:2a:be:54:87:67:75:67:74:42:af:a2: d9:3c:10:d6:2f:bf:df:bd:84:d6:8a:f9:5f:41:e0: 68:0d:19:af:a6:82:b2:e8:db:8c:dd:e3:08:4c:5d: 29:90:fc:ab:71:5a:63:cb:ae:0c:18:c4:af:1d:0b: 53:8d:ab:52:57:a8:52:de:c6:b7:da:bf:32:f3:07: 2e:6f:f3:29:09:97:07:19:1b:5d:9c:67:39:2c:43: 4f:bd:57:ec:1c:68:e8:ac:88:dd:8c:29:34:64:c3: 15:37:c8:f5:67:e1:af:f7:6e:ba:69:4e:00:2e:85: 3f:3f:e4:f7:54:ed:bf:4b:a1:e2:fa:97:2d:19:96: 9d:1d:a7:d6:a5:9a:f1:9b:ae:67:81:05:79:7a:ab: a6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:89:47:F7:97:09:C1:AB:DD:66:F5:8F:0F:63:8A:0C:70:22:4C:B7 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/OYlH95cJwavdZvWPD2OKDHAiTLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.163.8.0/22 152.163.28.0/22 152.163.52.0/22 152.163.128.0/22 152.163.156.0/22 152.163.180.0/22 152.163.204.0/22 152.163.232.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:93:04:a4:96:5b:80:99:f3:11:2f:6b:ef:12:79:61:ac:4e: 3e:d0:c6:45:56:7a:ad:71:d3:58:af:32:75:5e:ff:c6:72:32: 85:db:00:41:bc:57:c8:cb:ef:ef:84:31:24:b9:a4:a7:d0:15: 41:ab:c8:9a:5e:c4:76:06:5a:db:79:b9:c9:e4:23:bd:6c:17: e2:21:59:11:14:90:ba:38:5d:37:02:34:0a:35:7e:35:b6:0d: a1:86:e6:22:82:4d:37:f7:d6:0f:13:2b:d6:3e:35:99:81:32: 28:84:86:86:d8:64:bc:ba:52:53:c5:60:90:9c:09:05:8f:02: cc:cf:d7:8a:47:54:07:15:4e:a7:7a:51:fb:35:19:36:94:61: 23:c6:21:75:c9:80:10:da:0f:b9:94:9f:6b:25:0b:97:6d:a0: 8f:ef:2e:f0:96:06:4d:a4:62:41:10:c5:05:23:d1:b9:1f:5a: de:f6:4e:4e:7c:f3:cd:ab:46:e6:20:6e:61:56:1a:4f:89:ae: 91:45:9c:8d:99:ce:fe:d1:e5:7b:a0:21:5c:82:69:87:fa:59: 56:ad:a9:b4:10:0b:68:55:69:b5:11:88:93:eb:8f:f0:78:5f: 18:59:c2:4d:05:f4:76:24:8d:e1:ba:14:cf:cf:b2:1e:f4:12: 03:52:7c:71 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt+OSJqu5rsawUkf9XaSqm9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTg5NDdmNzk3MDljMWFiZGQ2NmY1OGYwZjYzOGEwYzcwMjI0Y2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/zMG9c/808M4mlozyLik9p+kxav 2mocdW1BxwrzmtatP9d7h2toMglh7VfPpljJJ4cqDJNbSY1niB49Czzt6IYzQeAT LodB+ctYc4ePcImMBZg39ICIkpy7jsl592RRQY7swf2F1Tmh45W5Kr5Uh2d1Z3RC r6LZPBDWL7/fvYTWivlfQeBoDRmvpoKy6NuM3eMITF0pkPyrcVpjy64MGMSvHQtT jatSV6hS3sa32r8y8wcub/MpCZcHGRtdnGc5LENPvVfsHGjorIjdjCk0ZMMVN8j1 Z+Gv9266aU4ALoU/P+T3VO2/S6Hi+pctGZadHafWpZrxm65ngQV5equmNwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFDmJR/eXCcGr3Wb1jw9jigxwIky3MB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvT1lsSDk1Y0p3YXZkWnZXUEQyT0tESEFpVExjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCmKMIAwQC mKMcAwQCmKM0AwQCmKOAAwQCmKOcAwQCmKO0AwQCmKPMAwQCmKPoMA0GCSqGSIb3 DQEBCwUAA4IBAQB/kwSklluAmfMRL2vvEnlhrE4+0MZFVnqtcdNYrzJ1Xv/GcjKF 2wBBvFfIy+/vhDEkuaSn0BVBq8iaXsR2BlrbebnJ5CO9bBfiIVkRFJC6OF03AjQK NX41tg2hhuYigk0399YPEyvWPjWZgTIohIaG2GS8ulJTxWCQnAkFjwLMz9eKR1QH FU6nelH7NRk2lGEjxiF1yYAQ2g+5lJ9rJQuXbaCP7y7wlgZNpGJBEMUFI9G5H1re 9k5OfPPNq0bmIG5hVhpPia6RRZyNmc7+0eV7oCFcgmmH+llWram0EAtoVWm1EYiT 64/weF8YWcJNBfR2JI3huhTPz7Ie9BIDUnxx -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:32 2026 by rpki-client