This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oE1O5uGMlt05gWy6EMnmTgraW8k.roa File: oE1O5uGMlt05gWy6EMnmTgraW8k.roa (raw, json) Hash identifier: /DZ/BcePxC8RHCDv/4OF4LqAQV2sdDiRlC/rnovIjbA= Subject key identifier: A0:4D:4E:E6:E1:8C:96:DD:39:81:6C:BA:10:C9:E6:4E:0A:DA:5B:C9 Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8DDC595A7DD0C46C853BF70ECCC7B Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oE1O5uGMlt05gWy6EMnmTgraW8k.roa Signing time: Thu 01 Jan 2026 18:19:02 +0000 ROA not before: Thu 01 Jan 2026 18:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29322 IP address blocks: 62.39.77.0/24 maxlen: 24 62.39.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:dd:c5:95:a7:dd:0c:46:c8:53:bf:70:ec:cc:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a04d4ee6e18c96dd39816cba10c9e64e0ada5bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:76:c2:9e:0f:1d:d9:c7:f3:61:52:e6:25: e3:54:e2:d4:f6:a6:d5:e9:d3:fc:3a:9b:82:7f:a5: b6:f6:3f:b1:5d:92:af:dc:ef:79:cd:05:b7:90:cb: d1:e2:e2:41:4b:3e:16:48:31:08:11:6d:4d:82:30: 19:5f:56:67:27:fe:62:b4:b6:41:e9:98:e4:0d:34: c4:de:db:b6:fc:1f:a1:e4:b4:ad:41:f7:ca:6d:7c: 98:16:68:3d:d5:6f:c3:24:5e:d0:91:3d:9d:42:a0: 76:ba:e8:70:9d:3e:ab:85:ce:f4:3f:c9:e4:89:93: da:37:8d:66:e3:8b:9f:7a:a1:2d:7f:90:bc:00:3a: 6b:eb:dc:d5:94:4d:fc:fa:0b:5f:2c:cf:3d:3d:63: 80:5d:50:81:58:ae:4c:cb:2a:5b:e4:e5:0d:5b:00: e0:54:32:23:b0:9a:8d:2e:8e:66:23:8d:d8:e3:2c: ef:be:3e:19:81:19:a7:71:ae:db:a1:8b:83:fa:7b: 46:80:2b:a4:db:d5:a5:75:42:96:50:25:c9:4a:34: dd:38:4d:88:22:a3:99:2a:d2:3d:c9:9e:fb:98:66: e9:04:77:8a:86:0a:ef:c1:6d:32:62:96:19:d5:ba: 4b:9d:bf:af:c8:bd:60:dd:36:0f:4f:17:f6:20:23: 41:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4D:4E:E6:E1:8C:96:DD:39:81:6C:BA:10:C9:E6:4E:0A:DA:5B:C9 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oE1O5uGMlt05gWy6EMnmTgraW8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.39.77.0/24 62.39.100.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:74:46:4c:e6:eb:17:73:bb:4d:a8:60:50:af:3c:f5:fd:ea: fd:85:ba:20:23:ba:b0:b2:3e:95:df:b7:45:f9:52:05:42:dc: 85:b2:d1:85:23:b1:90:46:00:cf:5b:f7:d6:f8:ea:0b:4b:d4: 85:ff:e7:ee:e8:c6:88:f3:96:5f:a9:0e:7b:9e:3e:d5:3c:07: 1f:1b:12:76:02:2d:9e:44:97:22:11:ef:6b:4d:d0:fa:f5:bf: 15:99:f2:0d:43:ba:70:ff:62:b7:df:9e:9a:cd:b4:cf:b6:dc: 0c:b9:6e:e9:b9:79:74:2a:89:0c:7c:a4:18:07:f0:a9:40:c4: 81:6a:2b:c3:c3:6a:d9:56:c6:c5:e1:57:56:72:06:12:b1:f2: bd:9f:ff:43:56:59:cb:65:af:46:5c:3b:e1:b8:fc:40:3f:6a: 9b:ed:b2:9f:20:f4:c0:3b:c6:40:fd:3b:e9:dd:f3:03:4a:32: b7:6f:ad:f2:ca:bf:6a:16:8e:56:bf:60:76:9a:0b:0f:26:68: c1:8c:bc:f7:73:1b:39:a4:85:3a:f6:7c:d5:3a:24:62:2f:7f: 83:79:7e:5a:da:20:09:50:18:eb:c1:7a:44:23:e3:89:32:94: 68:30:76:36:33:a8:01:ad:4b:aa:14:d2:8c:58:df:6e:b9:29: af:7d:50:da -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yN3FlafdDEbIU79w7Mx7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDRkNGVlNmUxOGM5NmRkMzk4MTZjYmExMGM5ZTY0ZTBhZGE1YmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq52wp4PHdnH82FS5iXjVOLU9qbV 6dP8OpuCf6W29j+xXZKv3O95zQW3kMvR4uJBSz4WSDEIEW1NgjAZX1ZnJ/5itLZB 6ZjkDTTE3tu2/B+h5LStQffKbXyYFmg91W/DJF7QkT2dQqB2uuhwnT6rhc70P8nk iZPaN41m44ufeqEtf5C8ADpr69zVlE38+gtfLM89PWOAXVCBWK5Myypb5OUNWwDg VDIjsJqNLo5mI43Y4yzvvj4ZgRmnca7boYuD+ntGgCuk29WldUKWUCXJSjTdOE2I IqOZKtI9yZ77mGbpBHeKhgrvwW0yYpYZ1bpLnb+vyL1g3TYPTxf2ICNBfwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKBNTubhjJbdOYFsuhDJ5k4K2lvJMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvb0UxTzV1R01sdDA1Z1d5NkVNbm1UZ3JhVzhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPidNAwQA PidkMA0GCSqGSIb3DQEBCwUAA4IBAQAddEZM5usXc7tNqGBQrzz1/er9hbogI7qw sj6V37dF+VIFQtyFstGFI7GQRgDPW/fW+OoLS9SF/+fu6MaI85ZfqQ57nj7VPAcf GxJ2Ai2eRJciEe9rTdD69b8VmfINQ7pw/2K3356azbTPttwMuW7puXl0KokMfKQY B/CpQMSBaivDw2rZVsbF4VdWcgYSsfK9n/9DVlnLZa9GXDvhuPxAP2qb7bKfIPTA O8ZA/Tvp3fMDSjK3b63yyr9qFo5Wv2B2mgsPJmjBjLz3cxs5pIU69nzVOiRiL3+D eX5a2iAJUBjrwXpEI+OJMpRoMHY2M6gBrUuqFNKMWN9uuSmvfVDa -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:08 2026 by rpki-client