This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/oRQRXj6WRM2KR8qW5q4lfZtLLLk.roa File: oRQRXj6WRM2KR8qW5q4lfZtLLLk.roa (raw, json) Hash identifier: XujKbwy4qxwZGruJMV0WtNaktegDTm3Ul80BDoHlNq4= Subject key identifier: A1:14:11:5E:3E:96:44:CD:8A:47:CA:96:E6:AE:25:7D:9B:4B:2C:B9 Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Certificate serial: 019B7E37EC3FBDEC084F382D71EFF0789010 Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/oRQRXj6WRM2KR8qW5q4lfZtLLLk.roa Signing time: Fri 02 Jan 2026 10:19:12 +0000 ROA not before: Fri 02 Jan 2026 10:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204104 IP address blocks: 5.57.33.0/24 maxlen: 24 37.32.43.0/24 maxlen: 24 185.212.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ec:3f:bd:ec:08:4f:38:2d:71:ef:f0:78:90:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Validity Not Before: Jan 2 10:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a114115e3e9644cd8a47ca96e6ae257d9b4b2cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:05:27:2e:90:c3:46:c1:08:28:46:35:b3:f6: 2a:5e:06:e2:98:cb:14:8d:1c:6b:cc:f2:11:37:6a: 04:c1:c0:f4:da:6a:73:06:b8:4e:e2:29:e7:79:1e: c9:df:30:df:e0:29:8e:59:7c:4a:b3:3b:3b:95:96: 24:82:f4:e5:ba:49:bf:c9:5f:56:fa:ee:d1:e3:38: b6:64:fc:b7:2d:f3:47:8a:5d:54:ad:e5:c7:4e:19: 82:6b:27:d3:b7:b7:54:c2:50:b8:52:ed:39:21:ec: b5:51:70:3a:ca:fa:6a:c1:70:8b:dd:e7:0a:4f:87: 03:f2:24:e9:fa:c2:e9:f2:a4:23:11:4a:bd:19:cf: f0:d3:5e:e3:17:93:bf:3c:21:ce:97:55:2a:e9:79: d8:5f:97:00:eb:4a:e1:dd:39:2b:0a:96:de:69:49: 60:9b:a9:bc:90:71:7c:d6:28:b9:b7:7c:e9:da:02: 4b:d4:7a:48:61:47:a9:a7:8e:0e:b0:fe:ff:cf:d5: 13:9e:2d:d6:15:2c:a8:7d:8b:c1:b2:53:51:39:fb: 55:c0:e8:f6:ca:90:e6:5b:ae:5d:54:bc:79:ff:5d: a0:cb:65:5f:90:25:41:a4:89:df:32:8e:b1:10:61: 62:61:90:73:2a:9c:26:dc:6c:9b:4f:73:5f:e3:30: 5c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:14:11:5E:3E:96:44:CD:8A:47:CA:96:E6:AE:25:7D:9B:4B:2C:B9 X509v3 Authority Key Identifier: keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/oRQRXj6WRM2KR8qW5q4lfZtLLLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.33.0/24 37.32.43.0/24 185.212.49.0/24 Signature Algorithm: sha256WithRSAEncryption 79:d4:ce:87:f6:14:05:4d:bc:13:1b:38:ac:c7:4f:56:0a:f4: 7a:bb:0f:ee:56:55:2c:72:cf:7a:e8:be:01:30:0c:88:7e:ae: 4d:5d:b7:0e:43:49:c3:e9:d1:36:da:44:3d:33:61:f7:0c:2b: c3:60:02:d0:e8:1e:d4:d1:b1:62:55:dd:00:59:7c:98:9c:e2: c5:3c:31:fb:3a:ae:78:e3:18:46:93:4e:c4:5f:46:f5:03:c0: 24:9a:5e:4a:3c:d9:ba:6f:fe:5e:1a:f8:fc:49:18:ae:f2:2a: ec:59:46:9b:df:81:cc:e2:61:df:5f:56:11:e5:3d:86:63:d0: f7:ff:26:1a:74:4b:86:75:0f:e9:a0:50:e1:85:44:1f:c5:7d: a1:62:c9:d6:f9:59:9e:62:39:df:2a:22:c3:f7:ea:2f:42:8f: 16:07:46:65:41:f1:85:85:54:a0:1a:68:74:6d:02:26:b9:fc: 86:eb:db:90:b0:27:16:6d:a1:03:83:09:38:44:2b:92:45:54: 14:1c:5a:63:7a:f6:8c:f2:3d:b6:9e:d0:91:f1:ba:65:51:38: e0:d0:9d:0b:f9:56:ca:5a:1f:8a:3f:65:5a:d2:05:43:68:b9: 4d:92:d1:d3:3d:a4:54:31:bf:7e:47:49:49:22:a0:4d:67:40: 4c:8e:02:2e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+N+w/vewITzgtce/weJAQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0 ZDY0NjQwHhcNMjYwMTAyMTAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTE0MTE1ZTNlOTY0NGNkOGE0N2NhOTZlNmFlMjU3ZDliNGIyY2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAUnLpDDRsEIKEY1s/YqXgbimMsU jRxrzPIRN2oEwcD02mpzBrhO4inneR7J3zDf4CmOWXxKszs7lZYkgvTlukm/yV9W +u7R4zi2ZPy3LfNHil1UreXHThmCayfTt7dUwlC4Uu05Iey1UXA6yvpqwXCL3ecK T4cD8iTp+sLp8qQjEUq9Gc/w017jF5O/PCHOl1Uq6XnYX5cA60rh3TkrCpbeaUlg m6m8kHF81ii5t3zp2gJL1HpIYUepp44OsP7/z9UTni3WFSyofYvBslNROftVwOj2 ypDmW65dVLx5/12gy2VfkCVBpInfMo6xEGFiYZBzKpwm3GybT3Nf4zBcxQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKEUEV4+lkTNikfKluauJX2bSyy5MB8GA1UdIwQY MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt OTg5MTY2ODgxOTY5LzEvb1JRUlhqNldSTTJLUjhxVzVxNGxmWnRMTExrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5 LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABTkhAwQA JSArAwQAudQxMA0GCSqGSIb3DQEBCwUAA4IBAQB51M6H9hQFTbwTGzisx09WCvR6 uw/uVlUscs966L4BMAyIfq5NXbcOQ0nD6dE22kQ9M2H3DCvDYALQ6B7U0bFiVd0A WXyYnOLFPDH7Oq544xhGk07EX0b1A8Akml5KPNm6b/5eGvj8SRiu8irsWUab34HM 4mHfX1YR5T2GY9D3/yYadEuGdQ/poFDhhUQfxX2hYsnW+VmeYjnfKiLD9+ovQo8W B0ZlQfGFhVSgGmh0bQImufyG69uQsCcWbaEDgwk4RCuSRVQUHFpjevaM8j22ntCR 8bplUTjg0J0L+VbKWh+KP2Va0gVDaLlNktHTPaRUMb9+R0lJIqBNZ0BMjgIu -----END CERTIFICATE-----Generated at Sun Jan 25 17:42:19 2026 by rpki-client