This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/oeeUNH_u8HxoB6Gbedq862_OYJg.roa File: oeeUNH_u8HxoB6Gbedq862_OYJg.roa (raw, json) Hash identifier: Xrem3WCbpam6OLjoGPhqcP2mKEQjM9Q29NunWFcGIDs= Subject key identifier: A1:E7:94:34:7F:EE:F0:7C:68:07:A1:9B:79:DA:BC:EB:6F:CE:60:98 Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663 Certificate serial: 019B77C6EB2A69CFC58FC604D36732CB3564 Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/oeeUNH_u8HxoB6Gbedq862_OYJg.roa Signing time: Thu 01 Jan 2026 04:18:03 +0000 ROA not before: Thu 01 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 192.54.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:eb:2a:69:cf:c5:8f:c6:04:d3:67:32:cb:35:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663 Validity Not Before: Jan 1 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1e794347feef07c6807a19b79dabceb6fce6098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:75:54:8a:7e:8e:d3:80:8b:9c:1f:9c:d3: 65:a5:48:c4:d5:a6:ab:d1:2b:1c:18:ff:93:4e:c7: d2:e4:9d:55:b9:06:d6:64:cc:3f:bb:0f:59:8b:c4: c9:eb:70:4d:56:0a:f9:b1:1f:3c:87:c0:9a:64:f3: dc:61:8a:d0:db:92:d8:34:97:62:22:c5:6d:22:1e: 4e:af:07:5c:e3:8c:57:da:fd:26:ed:f1:1f:7e:26: 16:16:f3:54:50:4b:1b:a9:17:35:fa:c0:3e:9f:6a: 80:d5:9d:11:c9:e3:38:25:13:cb:c3:ff:4e:ca:1a: 7e:6c:91:ef:88:e6:c0:a9:67:2e:bd:f2:ab:f3:4c: c3:0c:5c:05:b6:0e:cb:12:81:2d:1e:2e:a6:25:ac: bb:47:39:41:9d:1c:d9:0b:2e:fc:5d:c7:66:46:c9: 9c:0e:20:1a:5e:2f:96:67:03:1c:1e:52:2e:0f:56: 24:9c:95:dc:19:41:f9:a6:63:b7:1e:cc:f3:d1:ed: 7d:58:86:40:3a:66:84:23:7f:d3:a4:4d:6f:88:0e: 8c:51:8c:d9:67:d1:88:33:8b:af:1c:4e:ab:31:d1: 36:49:31:a9:92:43:19:61:02:a3:0e:a3:e7:5f:0e: a8:57:25:28:68:a1:42:39:9b:82:25:8d:1f:8f:7b: 69:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E7:94:34:7F:EE:F0:7C:68:07:A1:9B:79:DA:BC:EB:6F:CE:60:98 X509v3 Authority Key Identifier: keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/oeeUNH_u8HxoB6Gbedq862_OYJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.54.122.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:e4:a8:fd:9e:99:e0:34:2e:d5:ed:1a:67:63:6e:ba:65:34: d3:3e:f6:78:3f:ba:b7:2e:b5:da:4b:a1:b5:95:80:61:61:31: 43:f2:e8:16:7a:ed:4f:6b:60:51:6b:55:45:6c:f4:21:3c:31: 39:09:fd:be:35:ab:e8:49:ac:5a:05:3f:91:8e:1b:3d:13:47: e1:78:c0:5c:3a:c1:41:96:eb:69:1f:14:eb:93:d4:7e:ec:64: bb:a2:3d:3a:dd:44:69:f7:0d:5e:07:7a:18:64:de:62:76:89: 68:ab:96:be:20:d4:ed:cc:c2:20:38:83:eb:b5:f4:7a:fe:4e: e6:31:41:bd:0d:4b:0a:84:2e:25:35:09:3a:f1:09:c1:56:ba: 5e:4f:cd:9f:48:d0:93:d3:be:ea:3d:3c:f9:de:b6:35:82:03: e9:13:ce:d1:13:8a:43:e7:b2:f6:d4:1d:16:01:94:d4:52:9d: 1d:16:83:62:a2:cb:8e:ec:70:54:67:25:23:03:29:7c:8f:e9: 91:92:e4:26:63:f6:99:06:65:9d:ea:37:85:46:d3:46:98:50: b1:a7:c8:6b:e2:17:df:c8:33:91:c7:39:47:b2:c0:12:48:5d: 96:c9:6f:b4:1a:27:d4:91:e7:da:5d:d5:25:2c:0d:28:b5:55: 26:cd:58:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xusqac/Fj8YE02cyyzVkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjIyMWY1ZjA0Y2Y5ZDk2ZGRlYTQ0MjUxYjJiODIzZjcx MTQ2NjMwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWU3OTQzNDdmZWVmMDdjNjgwN2ExOWI3OWRhYmNlYjZmY2U2MDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp791VIp+jtOAi5wfnNNlpUjE1aar 0SscGP+TTsfS5J1VuQbWZMw/uw9Zi8TJ63BNVgr5sR88h8CaZPPcYYrQ25LYNJdi IsVtIh5Orwdc44xX2v0m7fEffiYWFvNUUEsbqRc1+sA+n2qA1Z0RyeM4JRPLw/9O yhp+bJHviObAqWcuvfKr80zDDFwFtg7LEoEtHi6mJay7RzlBnRzZCy78XcdmRsmc DiAaXi+WZwMcHlIuD1YknJXcGUH5pmO3Hszz0e19WIZAOmaEI3/TpE1viA6MUYzZ Z9GIM4uvHE6rMdE2STGpkkMZYQKjDqPnXw6oVyUoaKFCOZuCJY0fj3tpswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKHnlDR/7vB8aAehm3navOtvzmCYMB8GA1UdIwQY MBaAFAXyIfXwTPnZbd6kQlGyuCP3EUZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZJaDlmQk0tZGx0M3FSQ1ViSzRJX2NSUm1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iN2QxYjUtN2NiOC00NmFhLWFkNTgt Y2JmMmEzYjZhMjg0LzEvb2VlVU5IX3U4SHhvQjZHYmVkcTg2Ml9PWUpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9iN2QxYjUtN2NiOC00NmFhLWFkNTgtY2JmMmEzYjZhMjg0 LzEvQmZJaDlmQk0tZGx0M3FSQ1ViSzRJX2NSUm1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZ6MA0G CSqGSIb3DQEBCwUAA4IBAQAb5Kj9npngNC7V7RpnY266ZTTTPvZ4P7q3LrXaS6G1 lYBhYTFD8ugWeu1Pa2BRa1VFbPQhPDE5Cf2+NavoSaxaBT+Rjhs9E0fheMBcOsFB lutpHxTrk9R+7GS7oj063URp9w1eB3oYZN5idoloq5a+INTtzMIgOIPrtfR6/k7m MUG9DUsKhC4lNQk68QnBVrpeT82fSNCT077qPTz53rY1ggPpE87RE4pD57L21B0W AZTUUp0dFoNiosuO7HBUZyUjAyl8j+mRkuQmY/aZBmWd6jeFRtNGmFCxp8hr4hff yDORxzlHssASSF2WyW+0GifUkefaXdUlLA0otVUmzVhb -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:53 2026 by rpki-client