This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/O6c_sWPEuIkptHQ9GoqxdPNGma0.roa File: O6c_sWPEuIkptHQ9GoqxdPNGma0.roa (raw, json) Hash identifier: nQDbcQ+hZgM3fnmlCao10gC2Eu9sMXU4j7YHjTJV+9U= Subject key identifier: 3B:A7:3F:B1:63:C4:B8:89:29:B4:74:3D:1A:8A:B1:74:F3:46:99:AD Certificate issuer: /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428 Certificate serial: 019B7F83D6C7272D97F82569C529D4C9EA9D Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/O6c_sWPEuIkptHQ9GoqxdPNGma0.roa Signing time: Fri 02 Jan 2026 16:21:45 +0000 ROA not before: Fri 02 Jan 2026 16:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9063 IP address blocks: 193.141.183.0/24 maxlen: 24 193.141.188.0/24 maxlen: 24 2001:67c:d18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d6:c7:27:2d:97:f8:25:69:c5:29:d4:c9:ea:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428 Validity Not Before: Jan 2 16:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ba73fb163c4b88929b4743d1a8ab174f34699ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:73:f5:1a:6a:05:09:4b:72:12:0d:05:78: ce:eb:ad:f6:8a:12:88:4d:0a:21:2a:43:0b:a7:c4: 47:33:2a:00:46:e6:bb:29:e2:c2:75:0a:91:5d:94: 0d:75:d1:3a:f6:51:78:ad:ec:22:b0:36:c6:8e:bc: cb:ca:e5:d9:7d:2b:70:76:d0:1f:50:2b:7b:7d:60: ab:18:15:26:c6:f2:c2:04:27:7a:4e:1c:7d:c6:76: 4f:26:55:a1:17:57:2f:1b:e6:2c:18:96:c4:5f:01: df:a1:b8:ff:fb:1c:ac:ca:c1:c1:58:61:07:74:47: b2:8f:ea:03:d2:51:e6:28:f0:7a:94:ce:24:86:bf: e8:17:0b:f1:f3:7a:7a:13:13:b9:99:73:cb:fe:96: 30:4a:89:aa:15:44:dd:f5:ec:5f:dd:32:01:b1:a9: 55:eb:b8:18:95:11:16:7c:ba:40:58:5d:6a:a8:a5: 57:1b:36:07:ed:23:2d:04:ea:75:3f:b4:4d:a3:4c: 0e:39:64:3f:69:a1:52:be:c5:87:16:08:83:df:d9: ae:b2:63:93:29:24:eb:e0:cb:1a:a7:78:e5:e7:eb: a8:96:91:3b:3f:c2:09:72:8c:0a:29:a2:b4:20:b6: ac:1e:c9:df:47:d7:e3:1e:59:2d:e3:78:ec:16:6d: 07:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A7:3F:B1:63:C4:B8:89:29:B4:74:3D:1A:8A:B1:74:F3:46:99:AD X509v3 Authority Key Identifier: keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/O6c_sWPEuIkptHQ9GoqxdPNGma0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.141.183.0/24 193.141.188.0/24 IPv6: 2001:67c:d18::/48 Signature Algorithm: sha256WithRSAEncryption f3:84:4a:02:54:74:03:97:47:83:09:45:a7:2a:d7:08:7e:51: 96:34:0c:75:d0:77:0e:6a:10:de:22:48:cf:1f:22:f4:57:99: 7a:31:18:78:90:88:34:82:3c:13:64:2a:36:00:1e:45:d1:1c: fa:25:e9:4c:e2:6c:e1:b8:38:84:02:0d:d5:c4:b0:b0:1f:12: ee:dc:5c:e6:f1:7b:4f:d8:ee:9a:23:fe:e6:27:de:22:6b:46: ca:08:84:03:64:49:de:8e:1f:96:40:86:f0:d8:85:5d:c2:ea: 68:22:cc:4c:9e:83:44:7a:54:22:10:21:d7:ec:e4:b7:e5:55: 1f:67:bc:c5:87:fe:35:c6:ed:75:94:12:91:de:c0:e0:d4:a6: 56:2b:25:72:c4:d4:bb:76:00:94:90:f2:be:0e:6c:3d:d6:6c: 6a:7a:fb:26:eb:3e:d3:7f:0c:fa:4c:6d:fb:50:a1:72:ff:a1: cc:98:b9:ea:4f:d4:88:65:d5:af:b3:3b:93:55:a2:a2:ed:69: 51:d9:60:51:ca:1e:75:e1:68:b4:4e:e4:7e:4e:6d:c4:17:ea: 23:c9:ec:33:97:82:f3:3b:8d:7b:eb:3d:e3:d3:85:01:f3:f6: 22:c3:ce:22:0e:3c:16:f4:fb:07:d0:47:88:cc:28:a2:1c:e5: f8:9e:4b:78 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/g9bHJy2X+CVpxSnUyeqdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNWY3MmYwZmFjZjUyNzA1NzI3YzAzOWJkYzFmYmI3Y2M5 N2Q0MjgwHhcNMjYwMTAyMTYyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmE3M2ZiMTYzYzRiODg5MjliNDc0M2QxYThhYjE3NGYzNDY5OWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuudz9RpqBQlLchINBXjO6632ihKI TQohKkMLp8RHMyoARua7KeLCdQqRXZQNddE69lF4rewisDbGjrzLyuXZfStwdtAf UCt7fWCrGBUmxvLCBCd6Thx9xnZPJlWhF1cvG+YsGJbEXwHfobj/+xysysHBWGEH dEeyj+oD0lHmKPB6lM4khr/oFwvx83p6ExO5mXPL/pYwSomqFUTd9exf3TIBsalV 67gYlREWfLpAWF1qqKVXGzYH7SMtBOp1P7RNo0wOOWQ/aaFSvsWHFgiD39musmOT KSTr4Msap3jl5+uolpE7P8IJcowKKaK0ILasHsnfR9fjHlkt43jsFm0HawIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFDunP7FjxLiJKbR0PRqKsXTzRpmtMB8GA1UdIwQY MBaAFN1fcvD6z1JwVyfAOb3B+7fMl9QoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yZjMzZWUtNTU5MC00YTIyLWI4ZTIt Mjg4MDYxMjcwNWVlLzEvTzZjX3NXUEV1SWtwdEhROUdvcXhkUE5HbWEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yZjMzZWUtNTU5MC00YTIyLWI4ZTItMjg4MDYxMjcwNWVl LzEvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwY23AwQA wY28MA8EAgACMAkDBwAgAQZ8DRgwDQYJKoZIhvcNAQELBQADggEBAPOESgJUdAOX R4MJRacq1wh+UZY0DHXQdw5qEN4iSM8fIvRXmXoxGHiQiDSCPBNkKjYAHkXRHPol 6UzibOG4OIQCDdXEsLAfEu7cXObxe0/Y7poj/uYn3iJrRsoIhANkSd6OH5ZAhvDY hV3C6mgizEyeg0R6VCIQIdfs5LflVR9nvMWH/jXG7XWUEpHewODUplYrJXLE1Lt2 AJSQ8r4ObD3WbGp6+ybrPtN/DPpMbftQoXL/ocyYuepP1Ihl1a+zO5NVoqLtaVHZ YFHKHnXhaLRO5H5ObcQX6iPJ7DOXgvM7jXvrPePThQHz9iLDziIOPBb0+wfQR4jM KKIc5fieS3g= -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:32 2026 by rpki-client