This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/xspnOhir25ohaDEON_nokDMNa54.roa File: xspnOhir25ohaDEON_nokDMNa54.roa (raw, json) Hash identifier: K76YUwImg7wnbqKcDgw/UjFp86GQnCK+RGi0ceH55xE= Subject key identifier: C6:CA:67:3A:18:AB:DB:9A:21:68:31:0E:37:F9:E8:90:33:0D:6B:9E Certificate issuer: /CN=98907806ddacb48430bdd0254898019e413a2bde Certificate serial: 019B7DCAD4B5D524D0CB39B2D0FC71E25285 Authority key identifier: 98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/xspnOhir25ohaDEON_nokDMNa54.roa Signing time: Fri 02 Jan 2026 08:20:03 +0000 ROA not before: Fri 02 Jan 2026 08:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 193.239.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d4:b5:d5:24:d0:cb:39:b2:d0:fc:71:e2:52:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98907806ddacb48430bdd0254898019e413a2bde Validity Not Before: Jan 2 08:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6ca673a18abdb9a2168310e37f9e890330d6b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dd:c5:7e:74:4d:45:93:9c:41:00:03:75:f6: 3a:84:a7:b5:ba:43:6e:46:52:2b:f5:66:13:ed:29: 87:58:c8:9d:01:84:b0:2a:4e:61:2c:3e:17:3f:65: 51:75:c0:54:f4:46:d1:cf:c8:ec:0c:f7:16:3d:38: 55:0b:eb:00:46:ce:6d:cb:38:b2:d7:69:ea:b2:df: d3:7e:3e:52:c2:9f:3d:bb:a9:2e:ee:e6:72:dd:91: 88:99:fc:a6:b0:a5:92:03:4d:06:ca:9c:48:c2:9a: 91:80:09:ad:79:a0:2a:08:2f:a2:94:ea:05:d6:69: 7a:a0:2b:ec:10:65:d0:3f:92:d9:1a:ff:50:e4:b5: 80:20:7a:b7:3f:2e:38:12:a2:da:0a:df:4b:cf:bd: a8:47:97:19:64:8b:53:63:21:2e:99:3f:a3:a0:5e: a8:06:f5:ae:96:80:b8:22:28:8f:28:2f:81:bb:cf: 3d:5e:ad:9a:3c:20:45:28:4a:52:af:f9:1f:d2:3a: 8d:85:2b:d0:f0:24:bd:fa:b8:1f:07:f6:0a:24:6b: cf:ac:42:18:4a:bd:46:a3:d0:ae:08:be:62:53:6b: 7f:3e:22:1b:87:6a:c7:91:2b:47:13:32:fb:a9:71: 51:d7:96:38:27:dd:62:79:ca:10:b6:80:6d:0a:92: 0a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CA:67:3A:18:AB:DB:9A:21:68:31:0E:37:F9:E8:90:33:0D:6B:9E X509v3 Authority Key Identifier: keyid:98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/xspnOhir25ohaDEON_nokDMNa54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.200.0/23 Signature Algorithm: sha256WithRSAEncryption ac:7e:8d:6d:ac:f8:ac:73:5c:17:dd:6f:3a:a9:53:8b:0a:bb: a6:c0:59:61:83:b9:2e:fb:df:bb:76:b2:9a:37:8b:e2:74:9b: e8:e8:3d:b7:55:be:db:90:73:45:9f:26:78:d0:4f:b6:11:03: c3:25:e9:d0:d5:4d:3a:0c:c1:12:80:f6:9a:56:a4:13:8b:40: 23:a2:cf:b5:a1:9a:53:43:74:98:ff:a0:01:6f:92:94:c0:e0: a5:e1:d9:fa:af:9f:7d:7d:ed:dd:fd:ee:8c:a6:1f:7e:25:ce: 84:b3:b3:69:98:49:37:e0:8f:4d:08:1d:9a:fd:a8:f2:8e:0a: fa:d8:dc:43:b1:fb:d5:99:1a:ed:13:d7:ab:cc:84:92:99:db: d0:59:7e:67:96:0f:f5:1d:c0:0d:8a:5d:e6:e0:c4:8c:dd:b4: 04:43:68:34:68:4d:ed:8b:ef:d4:e6:df:b8:8a:24:49:e3:2e: 23:b6:ad:4a:fe:80:0a:b8:7d:6b:83:bc:e8:de:44:1a:ff:81: 5c:d3:0a:ef:6a:27:34:e1:f3:a0:77:69:70:c0:a2:66:95:0d: 76:d6:aa:6a:32:e1:53:57:68:41:33:37:6e:7c:03:d9:52:89: b6:b5:c8:bb:b4:37:ac:c3:b5:17:e5:83:38:f0:91:75:12:bd: c4:02:62:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ytS11STQyzmy0Pxx4lKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4OTA3ODA2ZGRhY2I0ODQzMGJkZDAyNTQ4OTgwMTllNDEz YTJiZGUwHhcNMjYwMTAyMDgyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmNhNjczYTE4YWJkYjlhMjE2ODMxMGUzN2Y5ZTg5MDMzMGQ2YjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4N3FfnRNRZOcQQADdfY6hKe1ukNu RlIr9WYT7SmHWMidAYSwKk5hLD4XP2VRdcBU9EbRz8jsDPcWPThVC+sARs5tyziy 12nqst/Tfj5Swp89u6ku7uZy3ZGImfymsKWSA00GypxIwpqRgAmteaAqCC+ilOoF 1ml6oCvsEGXQP5LZGv9Q5LWAIHq3Py44EqLaCt9Lz72oR5cZZItTYyEumT+joF6o BvWuloC4IiiPKC+Bu889Xq2aPCBFKEpSr/kf0jqNhSvQ8CS9+rgfB/YKJGvPrEIY Sr1Go9CuCL5iU2t/PiIbh2rHkStHEzL7qXFR15Y4J91iecoQtoBtCpIK6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMbKZzoYq9uaIWgxDjf56JAzDWueMB8GA1UdIwQY MBaAFJiQeAbdrLSEML3QJUiYAZ5BOiveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zZTNiMTctODRjOS00NDcyLWJkMzMt MTI2NzRlNjYxZTEzLzEveHNwbk9oaXIyNW9oYURFT05fbm9rRE1OYTU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zZTNiMTctODRjOS00NDcyLWJkMzMtMTI2NzRlNjYxZTEz LzEvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwe/IMA0G CSqGSIb3DQEBCwUAA4IBAQCsfo1trPisc1wX3W86qVOLCrumwFlhg7ku+9+7drKa N4vidJvo6D23Vb7bkHNFnyZ40E+2EQPDJenQ1U06DMESgPaaVqQTi0Ajos+1oZpT Q3SY/6ABb5KUwOCl4dn6r599fe3d/e6Mph9+Jc6Es7NpmEk34I9NCB2a/ajyjgr6 2NxDsfvVmRrtE9erzISSmdvQWX5nlg/1HcANil3m4MSM3bQEQ2g0aE3ti+/U5t+4 iiRJ4y4jtq1K/oAKuH1rg7zo3kQa/4Fc0wrvaic04fOgd2lwwKJmlQ121qpqMuFT V2hBMzdufAPZUom2tci7tDesw7UX5YM48JF1Er3EAmI7 -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:11 2026 by rpki-client