This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/OqblUTqMRXsZt8pZ5pRXhex6Zkg.roa File: OqblUTqMRXsZt8pZ5pRXhex6Zkg.roa (raw, json) Hash identifier: XCOdkvew4k3OnvrnXuLCOWZ3jOmwLtq3F1NbKBNNtwQ= Subject key identifier: 3A:A6:E5:51:3A:8C:45:7B:19:B7:CA:59:E6:94:57:85:EC:7A:66:48 Certificate issuer: /CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7 Certificate serial: 019B7C805B0071AD1011D87B12D7A28BA776 Authority key identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/OqblUTqMRXsZt8pZ5pRXhex6Zkg.roa Signing time: Fri 02 Jan 2026 02:19:05 +0000 ROA not before: Fri 02 Jan 2026 02:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15580 IP address blocks: 193.29.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5b:00:71:ad:10:11:d8:7b:12:d7:a2:8b:a7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7 Validity Not Before: Jan 2 02:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3aa6e5513a8c457b19b7ca59e6945785ec7a6648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:90:2d:ef:7d:5f:2a:2a:ab:fa:28:69:5f:8b: 63:af:0b:1f:40:a9:ba:59:e8:50:cb:0a:a1:1e:78: c9:a2:65:40:e0:9b:73:81:3e:93:2b:22:ab:2d:2d: d6:94:dd:a4:30:e3:1a:5e:01:95:c4:1d:8b:24:b7: f0:1f:8d:72:cf:6a:41:72:38:9a:9f:0f:ef:42:b9: ae:31:5f:e5:bb:7a:d3:e5:9c:b5:c4:e5:9c:84:0e: 3f:b9:c4:a0:75:05:9b:3a:3b:0a:c8:64:0d:08:10: 05:f6:24:e7:82:a9:8a:f6:fe:f7:98:32:88:4c:55: f2:47:d5:b6:c9:99:37:c2:ea:03:18:ab:f9:54:24: 78:06:65:54:2e:1a:2f:ba:a4:31:4e:14:9b:66:21: 30:91:eb:22:c5:d4:17:b1:58:6c:df:01:ce:d1:89: 7e:0f:29:dc:d1:8e:56:c4:09:57:70:1f:49:f2:ec: 6a:f3:6b:20:84:fc:5a:4a:02:b6:14:99:90:40:ee: ad:1f:b9:4d:bf:55:6d:c0:5f:c5:73:1f:b3:9b:7a: c6:11:bf:07:88:82:b1:69:fe:b2:1a:3b:6e:6b:c0: d5:3c:d1:a5:53:79:eb:67:2a:df:fc:2a:98:f2:7c: 71:16:6f:6f:f5:dc:d5:fb:44:82:ca:fb:fd:ab:a0: 2b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A6:E5:51:3A:8C:45:7B:19:B7:CA:59:E6:94:57:85:EC:7A:66:48 X509v3 Authority Key Identifier: keyid:78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/OqblUTqMRXsZt8pZ5pRXhex6Zkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.52.0/24 Signature Algorithm: sha256WithRSAEncryption a9:c1:98:5b:01:ae:fd:15:ac:a1:b4:c1:d9:40:44:08:a4:a1: 35:70:6b:1a:06:17:8f:35:d8:2e:c5:c1:d6:b0:81:69:0e:8e: 7a:4a:ec:63:30:2c:af:7e:01:5e:08:0d:ec:fa:0c:3e:e8:a0: db:21:9a:41:e6:98:4b:79:40:9a:dc:41:cd:4f:a0:82:86:cf: e0:0b:24:e9:37:0c:f6:98:51:54:54:9d:3c:47:64:05:00:9d: e2:71:a1:56:9a:f6:f9:b1:c8:f4:43:af:85:57:c8:12:bb:d1: 9c:f6:03:1d:88:26:66:5c:f0:51:a4:cf:85:7a:99:c5:18:6b: 63:f5:a5:e7:47:b4:0b:53:04:23:ca:da:e1:3e:5f:8d:8e:05: c8:9f:c4:7a:a5:72:d0:9a:e2:f3:f0:c5:1c:d6:3b:41:19:e1: 11:d3:34:df:aa:4a:7a:7f:ed:b3:60:ab:9c:d3:29:92:8d:62: 68:54:46:b6:1c:31:81:97:d6:55:be:54:e5:f4:8f:1f:85:7f: bc:cb:95:4b:ce:50:6d:95:d7:6f:14:4b:9a:01:e3:84:da:f0: ed:25:47:ba:1f:b0:a2:74:53:15:95:0b:10:72:9f:92:74:9d: b8:b0:ed:c4:14:cc:9f:ec:27:82:b8:5d:e7:43:16:8d:2e:60: c5:0f:0f:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFsAca0QEdh7Eteii6d2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MmY5ZjNiYmJlMGI1MWVhOWU5YjJlOTZjNjg2ODc0OGZh MDc4ZjcwHhcNMjYwMTAyMDIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWE2ZTU1MTNhOGM0NTdiMTliN2NhNTllNjk0NTc4NWVjN2E2NjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5At731fKiqr+ihpX4tjrwsfQKm6 WehQywqhHnjJomVA4JtzgT6TKyKrLS3WlN2kMOMaXgGVxB2LJLfwH41yz2pBcjia nw/vQrmuMV/lu3rT5Zy1xOWchA4/ucSgdQWbOjsKyGQNCBAF9iTngqmK9v73mDKI TFXyR9W2yZk3wuoDGKv5VCR4BmVULhovuqQxThSbZiEwkesixdQXsVhs3wHO0Yl+ Dync0Y5WxAlXcB9J8uxq82sghPxaSgK2FJmQQO6tH7lNv1VtwF/Fcx+zm3rGEb8H iIKxaf6yGjtua8DVPNGlU3nrZyrf/CqY8nxxFm9v9dzV+0SCyvv9q6ArzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDqm5VE6jEV7GbfKWeaUV4XsemZIMB8GA1UdIwQY MBaAFHgvnzu74LUeqemy6WxoaHSPoHj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUMtZk83dmd0UjZwNmJMcGJHaG9kSS1nZVBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lN2YzMjItMzliNS00MzdhLTk5ZmQt NzQzYzMwODAxZmYxLzEvT3FibFVUcU1SWHNadDhwWjVwUlhoZXg2WmtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9lN2YzMjItMzliNS00MzdhLTk5ZmQtNzQzYzMwODAxZmYx LzEvZUMtZk83dmd0UjZwNmJMcGJHaG9kSS1nZVBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR00MA0G CSqGSIb3DQEBCwUAA4IBAQCpwZhbAa79FayhtMHZQEQIpKE1cGsaBhePNdguxcHW sIFpDo56SuxjMCyvfgFeCA3s+gw+6KDbIZpB5phLeUCa3EHNT6CChs/gCyTpNwz2 mFFUVJ08R2QFAJ3icaFWmvb5scj0Q6+FV8gSu9Gc9gMdiCZmXPBRpM+FepnFGGtj 9aXnR7QLUwQjytrhPl+NjgXIn8R6pXLQmuLz8MUc1jtBGeER0zTfqkp6f+2zYKuc 0ymSjWJoVEa2HDGBl9ZVvlTl9I8fhX+8y5VLzlBtlddvFEuaAeOE2vDtJUe6H7Ci dFMVlQsQcp+SdJ24sO3EFMyf7CeCuF3nQxaNLmDFDw+H -----END CERTIFICATE-----Generated at Sun Jan 25 16:40:33 2026 by rpki-client