This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/OJGqgIdJ01gO1owrgbmqcY2GptM.roa File: OJGqgIdJ01gO1owrgbmqcY2GptM.roa (raw, json) Hash identifier: /ZtVL1w4/auWCjNxmR/FovsgC3ZVYneYdjY7NZYxZZc= Subject key identifier: 38:91:AA:80:87:49:D3:58:0E:D6:8C:2B:81:B9:AA:71:8D:86:A6:D3 Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Certificate serial: 019B78A254FE24109C9143593182B9BCC369 Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/OJGqgIdJ01gO1owrgbmqcY2GptM.roa Signing time: Thu 01 Jan 2026 08:17:43 +0000 ROA not before: Thu 01 Jan 2026 08:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1267 IP address blocks: 194.20.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:54:fe:24:10:9c:91:43:59:31:82:b9:bc:c3:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Validity Not Before: Jan 1 08:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3891aa808749d3580ed68c2b81b9aa718d86a6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1a:06:a8:83:9b:fc:b9:c5:19:4e:7b:cc:cd: b8:57:8d:c9:51:29:c1:f6:15:3d:b8:57:11:63:f1: 5e:ee:65:59:26:0a:35:52:82:0e:45:28:62:c1:be: 05:27:72:e3:31:06:44:a6:00:26:fb:47:35:3f:1e: 20:96:e8:fa:bb:de:f2:52:90:20:c2:38:ab:16:3e: 1e:85:d1:04:5a:b1:72:84:3d:ff:77:69:61:a2:49: ee:d7:0b:5e:9b:74:6a:12:89:02:df:71:0d:a3:cb: 78:70:73:c3:3c:dc:ec:a4:8e:59:c4:99:b4:6a:79: 8a:67:46:5c:10:59:6b:92:0c:ed:ca:01:6f:58:16: 40:95:87:a1:6d:d0:47:d4:91:ef:7f:fa:ee:eb:c4: 4b:09:64:6b:c9:e6:5a:f4:61:d4:b4:11:f4:88:da: fb:1b:cb:6d:d4:b3:60:b4:de:ac:3d:6d:f1:6a:ad: 71:a4:7a:06:8c:a9:57:c5:0a:fe:90:37:28:c5:6e: 93:2a:5c:fb:b0:e6:13:20:94:10:9b:47:55:37:05: d0:13:ac:3a:37:f5:4a:79:6b:99:be:f3:f3:1d:e5: b3:10:3c:ee:d2:cc:94:35:b5:2e:66:5f:0e:71:5b: 71:89:ab:e5:f6:69:75:b1:23:39:96:7c:7b:39:06: e3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:91:AA:80:87:49:D3:58:0E:D6:8C:2B:81:B9:AA:71:8D:86:A6:D3 X509v3 Authority Key Identifier: keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/OJGqgIdJ01gO1owrgbmqcY2GptM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.20.24.0/24 Signature Algorithm: sha256WithRSAEncryption 42:65:0d:fb:54:69:1d:cc:d2:f0:83:24:b1:66:26:9d:7c:56: 7e:f2:23:49:a4:ca:16:ab:f3:c5:2b:c8:0d:c3:f1:fe:09:b2: 36:d0:79:26:dd:86:de:51:6d:af:03:dc:25:8b:f4:36:f4:42: cc:c1:f2:09:aa:7d:49:92:28:41:6b:51:91:db:71:52:6d:be: d6:f1:84:a0:39:3a:7c:4e:90:c3:db:5a:5a:f8:46:44:0f:07: b6:c1:f1:d2:ab:9c:d3:95:a5:07:05:98:54:bc:cb:cc:0f:37: 43:98:b5:e4:00:b1:77:6f:07:7b:1b:04:bb:67:b2:de:5a:47: dc:2c:a1:0f:64:1e:3e:55:89:53:b3:00:cd:9c:55:95:31:5b: 67:2a:10:68:c8:a3:b7:2a:5b:bd:a9:7d:92:dc:44:9b:b4:97: 8a:c8:1b:cd:40:59:ad:9e:86:dd:b1:4a:d6:64:3c:a4:0a:ee: c1:19:f7:fb:89:39:c6:71:a3:6f:0e:2e:4e:d6:9d:f7:fd:d7: bb:e2:2e:0a:69:9e:bf:a1:12:20:02:7f:5b:f3:90:9a:e1:c8: 01:e3:43:fb:b3:fe:40:40:c8:2f:09:65:56:db:26:ee:ad:42: 6e:31:81:2c:f2:92:db:b0:5e:f0:4c:0c:cd:fe:07:91:8d:7c: 02:b0:d0:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4olT+JBCckUNZMYK5vMNpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi MGNhMDkwHhcNMjYwMTAxMDgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODkxYWE4MDg3NDlkMzU4MGVkNjhjMmI4MWI5YWE3MThkODZhNmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hoGqIOb/LnFGU57zM24V43JUSnB 9hU9uFcRY/Fe7mVZJgo1UoIORShiwb4FJ3LjMQZEpgAm+0c1Px4gluj6u97yUpAg wjirFj4ehdEEWrFyhD3/d2lhoknu1wtem3RqEokC33ENo8t4cHPDPNzspI5ZxJm0 anmKZ0ZcEFlrkgztygFvWBZAlYehbdBH1JHvf/ru68RLCWRryeZa9GHUtBH0iNr7 G8tt1LNgtN6sPW3xaq1xpHoGjKlXxQr+kDcoxW6TKlz7sOYTIJQQm0dVNwXQE6w6 N/VKeWuZvvPzHeWzEDzu0syUNbUuZl8OcVtxiavl9ml1sSM5lnx7OQbjRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDiRqoCHSdNYDtaMK4G5qnGNhqbTMB8GA1UdIwQY MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct NWI1ZTMzY2U3MGFkLzEvT0pHcWdJZEowMWdPMW93cmdibXFjWTJHcHRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhQYMA0G CSqGSIb3DQEBCwUAA4IBAQBCZQ37VGkdzNLwgySxZiadfFZ+8iNJpMoWq/PFK8gN w/H+CbI20Hkm3YbeUW2vA9wli/Q29ELMwfIJqn1JkihBa1GR23FSbb7W8YSgOTp8 TpDD21pa+EZEDwe2wfHSq5zTlaUHBZhUvMvMDzdDmLXkALF3bwd7GwS7Z7LeWkfc LKEPZB4+VYlTswDNnFWVMVtnKhBoyKO3Klu9qX2S3ESbtJeKyBvNQFmtnobdsUrW ZDykCu7BGff7iTnGcaNvDi5O1p33/de74i4KaZ6/oRIgAn9b85Ca4cgB40P7s/5A QMgvCWVW2yburUJuMYEs8pLbsF7wTAzN/geRjXwCsND/ -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:37 2026 by rpki-client