This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/osWiuCxFKK7p5wtHqJimdeaWv-0.roa File: osWiuCxFKK7p5wtHqJimdeaWv-0.roa (raw, json) Hash identifier: uNL2gHPQqgqmPM9/9Y5/YfTqQyz7bRjGXXYyc1z5tGM= Subject key identifier: A2:C5:A2:B8:2C:45:28:AE:E9:E7:0B:47:A8:98:A6:75:E6:96:BF:ED Certificate issuer: /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029 Certificate serial: 019B78A21127F010006A269BE5733345709E Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/osWiuCxFKK7p5wtHqJimdeaWv-0.roa Signing time: Thu 01 Jan 2026 08:17:25 +0000 ROA not before: Thu 01 Jan 2026 08:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20495 IP address blocks: 84.244.128.0/18 maxlen: 18 84.244.128.0/19 maxlen: 32 84.244.160.0/19 maxlen: 32 92.48.192.0/18 maxlen: 18 92.48.192.0/19 maxlen: 19 92.48.192.0/20 maxlen: 32 92.48.208.0/20 maxlen: 32 92.48.224.0/19 maxlen: 19 92.48.224.0/20 maxlen: 32 92.48.240.0/20 maxlen: 32 217.148.160.0/19 maxlen: 19 217.148.160.0/20 maxlen: 32 217.148.176.0/20 maxlen: 32 2001:15c8::/32 maxlen: 32 2001:15c8::/33 maxlen: 128 2001:15c8:8000::/33 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:11:27:f0:10:00:6a:26:9b:e5:73:33:45:70:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029 Validity Not Before: Jan 1 08:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2c5a2b82c4528aee9e70b47a898a675e696bfed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:1d:09:da:7f:bb:33:66:01:7f:8a:d8:64: 9b:ad:25:2c:96:45:5b:d5:87:8e:ea:42:0b:e0:2d: ec:7c:53:d0:66:f3:7e:3a:93:e3:0d:1f:9f:3c:2f: 25:c4:0e:26:f6:a6:b5:be:c0:ed:05:5f:84:d9:51: 59:af:cb:18:5c:3c:cf:2d:5a:e2:25:c6:1e:be:76: 4d:c3:a1:68:b0:a3:3d:28:c0:70:86:3d:43:78:06: 84:a0:ee:48:82:84:5d:0a:c7:59:fb:5f:43:0b:35: 72:b4:6c:42:31:f6:08:ae:f3:f7:be:41:41:75:bc: 6d:fc:9a:23:4b:cb:f8:95:06:e7:1c:ca:2c:64:a3: ab:37:43:d0:73:02:90:24:d9:5f:89:33:e0:f7:71: b8:82:67:ee:27:f7:e0:75:1e:97:2b:02:36:bf:d9: e7:cb:37:27:7f:a1:e9:6b:9a:c8:22:cc:12:24:4d: 69:31:7f:27:af:ae:38:7f:70:72:cb:9f:0f:b7:31: 03:8b:11:fb:02:f4:7c:af:39:e2:cd:c7:95:d6:84: 13:13:50:d3:33:09:79:7e:a8:83:86:71:d1:4c:6c: 0b:26:47:fb:22:14:fa:b8:a5:19:d0:85:ef:21:7e: 95:1c:8a:81:cc:32:25:20:0e:d2:2a:cc:9a:02:84: aa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C5:A2:B8:2C:45:28:AE:E9:E7:0B:47:A8:98:A6:75:E6:96:BF:ED X509v3 Authority Key Identifier: keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/osWiuCxFKK7p5wtHqJimdeaWv-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.244.128.0/18 92.48.192.0/18 217.148.160.0/19 IPv6: 2001:15c8::/32 Signature Algorithm: sha256WithRSAEncryption 51:d8:ba:ae:15:cf:1b:2f:2d:98:39:87:0b:d2:92:5f:5e:38: 01:d2:fb:85:0a:fc:d5:14:6c:62:16:4d:52:45:c6:42:07:73: a3:54:3c:41:a7:8b:de:23:db:14:3c:0c:74:3c:20:5b:1f:f5: 04:17:32:83:6e:15:2b:9a:69:a9:52:0a:1c:f4:b8:86:20:f8: d8:0f:ee:ea:2b:20:2a:02:39:e4:06:cd:46:2b:7b:a3:5a:9b: 6a:50:66:3e:28:df:23:86:c5:b1:78:57:64:4c:76:37:00:a3: 32:e6:51:0e:aa:51:d4:b7:c9:62:ee:6e:f3:fb:3c:bd:4e:06: 13:06:89:f0:79:62:cc:96:35:54:5f:1a:85:be:06:01:9f:ce: 81:51:e5:ab:3e:f0:00:dd:c3:4d:00:21:18:cf:90:07:c2:05: a2:b7:bc:98:88:57:4e:27:76:5d:77:fa:15:a5:08:ef:23:bf: 88:0b:1e:32:46:a7:09:65:52:93:f2:26:80:56:7d:da:4f:24: bc:ed:48:7c:d7:5e:8d:20:f9:dc:e4:3e:96:fb:3c:92:4f:01: 4d:d6:b9:69:57:2b:4f:d5:71:36:57:07:ea:ba:61:47:4a:65: 12:06:e7:3f:da:5e:4a:98:6f:ec:4b:f2:f0:a6:e3:50:05:8f: e7:f6:c9:ad -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4ohEn8BAAaiab5XMzRXCeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTFjZTVlMmY1M2I3YmI4Y2FjOGYzOWUyOTRlODlhNDVi MjAwMjkwHhcNMjYwMTAxMDgxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmM1YTJiODJjNDUyOGFlZTllNzBiNDdhODk4YTY3NWU2OTZiZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbYdCdp/uzNmAX+K2GSbrSUslkVb 1YeO6kIL4C3sfFPQZvN+OpPjDR+fPC8lxA4m9qa1vsDtBV+E2VFZr8sYXDzPLVri JcYevnZNw6FosKM9KMBwhj1DeAaEoO5IgoRdCsdZ+19DCzVytGxCMfYIrvP3vkFB dbxt/JojS8v4lQbnHMosZKOrN0PQcwKQJNlfiTPg93G4gmfuJ/fgdR6XKwI2v9nn yzcnf6Hpa5rIIswSJE1pMX8nr644f3Byy58PtzEDixH7AvR8rznizceV1oQTE1DT Mwl5fqiDhnHRTGwLJkf7IhT6uKUZ0IXvIX6VHIqBzDIlIA7SKsyaAoSqcQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKLForgsRSiu6ecLR6iYpnXmlr/tMB8GA1UdIwQY MBaAFGURzl4vU7e7jKyPOeKU6JpFsgApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85MWIwOTMtYWNiNy00Y2I3LWJmOGYt NWNiOTM0YTU1YjBkLzEvb3NXaXVDeEZLSzdwNXd0SHFKaW1kZWFXdi0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS85MWIwOTMtYWNiNy00Y2I3LWJmOGYtNWNiOTM0YTU1YjBk LzEvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGVPSAAwQG XDDAAwQF2ZSgMA0EAgACMAcDBQAgARXIMA0GCSqGSIb3DQEBCwUAA4IBAQBR2Lqu Fc8bLy2YOYcL0pJfXjgB0vuFCvzVFGxiFk1SRcZCB3OjVDxBp4veI9sUPAx0PCBb H/UEFzKDbhUrmmmpUgoc9LiGIPjYD+7qKyAqAjnkBs1GK3ujWptqUGY+KN8jhsWx eFdkTHY3AKMy5lEOqlHUt8li7m7z+zy9TgYTBonweWLMljVUXxqFvgYBn86BUeWr PvAA3cNNACEYz5AHwgWit7yYiFdOJ3Zdd/oVpQjvI7+ICx4yRqcJZVKT8iaAVn3a TyS87Uh8116NIPnc5D6W+zySTwFN1rlpVytP1XE2VwfqumFHSmUSBuc/2l5KmG/s S/LwpuNQBY/n9smt -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:07 2026 by rpki-client