This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/OgKWmkWF4K3OEoL5eK39WnFlErI.roa File: OgKWmkWF4K3OEoL5eK39WnFlErI.roa (raw, json) Hash identifier: ycD/7uIeDhwi8J+JJgge9PpibBTthTTx4r743YX5Hwg= Subject key identifier: 3A:02:96:9A:45:85:E0:AD:CE:12:82:F9:78:AD:FD:5A:71:65:12:B2 Certificate issuer: /CN=374dcfcf67b82b7ca7622fcc709209ecce37570e Certificate serial: 019B76EAC15FFA1E1E16CF40E077479BE6A1 Authority key identifier: 37:4D:CF:CF:67:B8:2B:7C:A7:62:2F:CC:70:92:09:EC:CE:37:57:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/OgKWmkWF4K3OEoL5eK39WnFlErI.roa Signing time: Thu 01 Jan 2026 00:17:34 +0000 ROA not before: Thu 01 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39232 IP address blocks: 178.237.64.0/20 maxlen: 20 178.237.64.0/21 maxlen: 21 178.237.72.0/21 maxlen: 21 185.81.84.0/22 maxlen: 22 185.81.84.0/23 maxlen: 23 185.81.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.crl rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c1:5f:fa:1e:1e:16:cf:40:e0:77:47:9b:e6:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374dcfcf67b82b7ca7622fcc709209ecce37570e Validity Not Before: Jan 1 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a02969a4585e0adce1282f978adfd5a716512b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:47:d6:f1:b5:8b:8e:19:89:a0:a3:3c:c4:fa: 58:59:5c:85:85:1c:28:52:98:a6:d0:98:12:92:07: ce:26:8d:d9:1d:79:4d:b8:21:2a:03:ba:ec:80:27: 6b:46:0d:86:eb:ad:a4:ba:14:36:72:95:29:53:4b: 41:d6:59:90:5f:32:8b:09:f7:ec:b3:21:12:5b:01: 45:2b:4d:bc:fc:ac:9f:63:f1:75:d6:a4:a0:c3:0b: 69:2b:59:21:b6:72:ed:21:58:5e:3c:f7:5f:38:b9: 6e:45:09:25:e4:1d:65:11:43:aa:bd:70:72:e1:1a: a8:aa:7a:d4:5c:1e:dd:1c:6a:18:0e:b1:97:89:99: 4e:bb:5f:41:cf:28:db:15:5b:0e:6b:55:c4:6f:5b: d3:4b:a5:4d:be:c6:e1:0c:aa:66:37:4d:4b:1f:94: 5b:f8:15:77:cb:84:89:c9:71:94:6a:b4:1c:c3:ab: f4:83:07:05:f5:25:80:bf:bf:9d:cb:87:ca:28:77: 3a:25:34:15:ca:26:23:9a:65:6c:84:28:bb:f8:ad: aa:ef:24:ff:64:82:60:b9:f2:b5:7c:b9:2d:9c:45: 56:60:7d:95:bb:06:9a:56:d8:12:19:6a:30:9d:3c: 0a:5a:01:a9:26:f3:d1:22:f7:d4:11:90:31:b6:10: 5c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:02:96:9A:45:85:E0:AD:CE:12:82:F9:78:AD:FD:5A:71:65:12:B2 X509v3 Authority Key Identifier: keyid:37:4D:CF:CF:67:B8:2B:7C:A7:62:2F:CC:70:92:09:EC:CE:37:57:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/OgKWmkWF4K3OEoL5eK39WnFlErI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.237.64.0/20 185.81.84.0/22 Signature Algorithm: sha256WithRSAEncryption 22:9b:ab:d2:c7:3d:ce:c4:87:13:ab:3e:07:e2:1a:4e:7f:dd: 48:3b:b8:34:5e:63:ae:38:8a:ce:63:9c:ca:95:ff:c0:08:58: 9a:08:77:91:2e:b1:1b:4b:96:ad:5e:b2:ea:d4:47:ec:65:d7: 3a:32:f1:7c:95:3d:80:0e:a2:ab:e0:b5:e3:4e:73:3c:3e:1a: ef:15:95:ef:32:d6:d8:5c:a5:4d:4b:fb:48:ed:80:62:cf:c5: 6b:40:13:db:9b:ed:eb:6a:06:a6:8e:e1:90:7c:13:e4:79:83: 26:a8:0d:14:ef:0a:1d:a7:68:f0:ae:44:32:67:5e:c0:fc:ff: 52:1f:ab:bd:36:77:57:d7:f8:50:68:29:18:5f:82:c7:f4:1c: 69:bc:99:8f:01:23:e0:18:c9:f1:4f:b4:34:e9:13:81:f1:05: a2:b1:71:41:7c:ac:24:21:88:97:cf:e1:fb:fd:e1:bc:f9:67: 5a:bc:e6:86:2e:d3:82:c8:c5:2b:3d:bc:2b:b5:81:d0:01:5b: 92:35:f3:dc:d8:3b:aa:d8:a1:1b:51:33:68:f9:63:25:a3:69: 41:7a:dd:d0:2f:96:b1:83:d5:85:68:3e:26:49:86:6d:1d:9d: e1:be:85:40:ec:a1:67:15:57:48:c2:b2:7d:cb:fc:b6:9d:ff: f5:ce:88:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26sFf+h4eFs9A4HdHm+ahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGRjZmNmNjdiODJiN2NhNzYyMmZjYzcwOTIwOWVjY2Uz NzU3MGUwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTAyOTY5YTQ1ODVlMGFkY2UxMjgyZjk3OGFkZmQ1YTcxNjUxMmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kfW8bWLjhmJoKM8xPpYWVyFhRwo Upim0JgSkgfOJo3ZHXlNuCEqA7rsgCdrRg2G662kuhQ2cpUpU0tB1lmQXzKLCffs syESWwFFK028/KyfY/F11qSgwwtpK1khtnLtIVhePPdfOLluRQkl5B1lEUOqvXBy 4RqoqnrUXB7dHGoYDrGXiZlOu19BzyjbFVsOa1XEb1vTS6VNvsbhDKpmN01LH5Rb +BV3y4SJyXGUarQcw6v0gwcF9SWAv7+dy4fKKHc6JTQVyiYjmmVshCi7+K2q7yT/ ZIJgufK1fLktnEVWYH2VuwaaVtgSGWownTwKWgGpJvPRIvfUEZAxthBcaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDoClppFheCtzhKC+Xit/VpxZRKyMB8GA1UdIwQY MBaAFDdNz89nuCt8p2IvzHCSCezON1cOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjAzUHoyZTRLM3luWWlfTWNKSUo3TTQzVnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZWQxMmItNTNiZC00ZGY2LWFhNmUt YTJjYzk2ODk5NzAyLzEvT2dLV21rV0Y0SzNPRW9MNWVLMzlXbkZsRXJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni83ZWQxMmItNTNiZC00ZGY2LWFhNmUtYTJjYzk2ODk5NzAy LzEvTjAzUHoyZTRLM3luWWlfTWNKSUo3TTQzVnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEsu1AAwQC uVFUMA0GCSqGSIb3DQEBCwUAA4IBAQAim6vSxz3OxIcTqz4H4hpOf91IO7g0XmOu OIrOY5zKlf/ACFiaCHeRLrEbS5atXrLq1EfsZdc6MvF8lT2ADqKr4LXjTnM8Phrv FZXvMtbYXKVNS/tI7YBiz8VrQBPbm+3ragamjuGQfBPkeYMmqA0U7wodp2jwrkQy Z17A/P9SH6u9NndX1/hQaCkYX4LH9BxpvJmPASPgGMnxT7Q06ROB8QWisXFBfKwk IYiXz+H7/eG8+WdavOaGLtOCyMUrPbwrtYHQAVuSNfPc2Duq2KEbUTNo+WMlo2lB et3QL5axg9WFaD4mSYZtHZ3hvoVA7KFnFVdIwrJ9y/y2nf/1zoj2 -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:27 2026 by rpki-client