This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/oGhU7IJoDElhSJr9URGhXOwAaLk.roa File: oGhU7IJoDElhSJr9URGhXOwAaLk.roa (raw, json) Hash identifier: RlkIPIJZ2vJYpwqoiUxVktYoRH+UnOVJBwSR2Sn3Qb0= Subject key identifier: A0:68:54:EC:82:68:0C:49:61:48:9A:FD:51:11:A1:5C:EC:00:68:B9 Certificate issuer: /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee Certificate serial: 019B76EB68BC6FD4741F565D9E66FC76E3B5 Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/oGhU7IJoDElhSJr9URGhXOwAaLk.roa Signing time: Thu 01 Jan 2026 00:18:17 +0000 ROA not before: Thu 01 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41949 IP address blocks: 193.163.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:68:bc:6f:d4:74:1f:56:5d:9e:66:fc:76:e3:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee Validity Not Before: Jan 1 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a06854ec82680c4961489afd5111a15cec0068b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:a3:b0:9e:ae:ec:76:41:21:b2:d2:f0:7e: b1:d0:6e:69:a2:4c:43:74:2d:2a:46:37:38:6b:73: 1d:57:8f:8b:67:81:f5:91:5f:e4:6c:9a:57:3c:c2: a5:0a:2d:57:15:f7:e6:bb:9e:85:62:94:63:ee:da: ce:b2:34:2d:4e:00:3f:fb:c9:55:97:5e:53:50:a7: 3e:e1:71:13:13:7f:68:50:71:8c:38:9d:9a:f7:41: 5b:1f:69:fe:ef:5d:3d:3b:e2:5c:a5:97:75:50:e8: 02:8b:e6:73:53:d5:b8:09:f0:c4:34:90:5a:02:25: cb:b9:1b:45:8a:f9:4c:06:31:09:09:df:a9:1c:70: f5:70:85:8e:aa:48:1f:f2:08:23:7e:49:ff:fa:33: 68:24:f0:21:e3:5c:16:cd:de:40:2c:21:86:f7:ec: 33:f0:53:5a:74:8b:9c:05:ba:c7:52:66:cd:9e:4c: af:36:ac:5d:ad:ee:40:9d:ad:33:b2:bf:7a:ae:94: da:b2:2d:97:81:cd:15:c6:42:44:ab:b7:e5:89:d0: c3:24:3e:e4:de:13:26:b9:09:af:11:55:f1:7a:c6: 0a:14:57:85:c3:7d:45:aa:0a:37:d4:79:a3:30:fd: 18:43:23:bf:fd:c6:41:ee:f6:fb:c5:94:bd:a2:75: 7d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:68:54:EC:82:68:0C:49:61:48:9A:FD:51:11:A1:5C:EC:00:68:B9 X509v3 Authority Key Identifier: keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/oGhU7IJoDElhSJr9URGhXOwAaLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.148.0/24 Signature Algorithm: sha256WithRSAEncryption 60:78:07:db:1e:50:d9:4b:6a:07:09:75:ca:eb:40:ef:96:b9: 63:c2:ff:06:8b:5d:2f:52:37:4f:66:b4:15:d7:48:78:f6:bb: cb:1d:04:71:26:a9:4a:86:82:35:3d:ca:09:fc:0c:b5:2d:99: 39:4c:78:a5:98:df:cd:dd:05:b2:6e:f2:1b:e1:32:f7:ac:d0: d4:90:97:03:8a:9b:1f:7c:b3:98:5e:c0:1b:e4:30:c9:b3:b2: 15:dc:63:07:65:74:55:c9:db:d0:3e:6b:1a:ee:07:bb:41:c9: 7c:ef:fa:01:c9:03:9d:61:34:54:81:01:57:df:36:3c:82:58: 27:e0:12:6a:36:45:f5:04:01:74:3c:ae:42:b9:01:ed:26:94: dc:fc:af:1c:d1:c1:8d:7b:8a:02:5a:a0:f8:0f:2a:55:85:56: 60:6b:bd:f9:5b:ad:b5:b3:ea:de:a2:f4:7c:87:55:8e:8c:7e: 41:05:58:90:24:6f:2f:12:7b:53:91:16:6e:b8:13:b6:dc:32: 80:cb:ad:d3:06:5d:60:b3:af:a3:0c:0c:bf:c1:c1:4c:af:fd: 6f:b9:5e:dd:f4:5c:1d:aa:67:dd:47:b3:72:aa:66:d8:cc:d8: b2:4c:27:84:c2:de:88:8f:b1:07:21:28:c4:8e:10:50:22:51: 56:46:a0:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt262i8b9R0H1Zdnmb8duO1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWQ5NTc2YzkyNzIwMjkxNjhjNGQxYTQxNzVkMWE3Y2Ex YzUxZWUwHhcNMjYwMTAxMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDY4NTRlYzgyNjgwYzQ5NjE0ODlhZmQ1MTExYTE1Y2VjMDA2OGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2ejsJ6u7HZBIbLS8H6x0G5pokxD dC0qRjc4a3MdV4+LZ4H1kV/kbJpXPMKlCi1XFffmu56FYpRj7trOsjQtTgA/+8lV l15TUKc+4XETE39oUHGMOJ2a90FbH2n+7109O+JcpZd1UOgCi+ZzU9W4CfDENJBa AiXLuRtFivlMBjEJCd+pHHD1cIWOqkgf8ggjfkn/+jNoJPAh41wWzd5ALCGG9+wz 8FNadIucBbrHUmbNnkyvNqxdre5Ana0zsr96rpTasi2Xgc0VxkJEq7flidDDJD7k 3hMmuQmvEVXxesYKFFeFw31Fqgo31HmjMP0YQyO//cZB7vb7xZS9onV9aQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKBoVOyCaAxJYUia/VERoVzsAGi5MB8GA1UdIwQY MBaAFJrtlXbJJyApFoxNGkF10afKHFHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXUyVmRza25JQ2tXakUwYVFYWFJwOG9jVWU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lNTI1ZGYtNGM2ZS00MDk5LTgxNGQt ZjE0OGY0YzlkMzlhLzEvb0doVTdJSm9ERWxoU0pyOVVSR2hYT3dBYUxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lNTI1ZGYtNGM2ZS00MDk5LTgxNGQtZjE0OGY0YzlkMzlh LzEvbXUyVmRza25JQ2tXakUwYVFYWFJwOG9jVWU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaOUMA0G CSqGSIb3DQEBCwUAA4IBAQBgeAfbHlDZS2oHCXXK60Dvlrljwv8Gi10vUjdPZrQV 10h49rvLHQRxJqlKhoI1PcoJ/Ay1LZk5THilmN/N3QWybvIb4TL3rNDUkJcDipsf fLOYXsAb5DDJs7IV3GMHZXRVydvQPmsa7ge7Qcl87/oByQOdYTRUgQFX3zY8glgn 4BJqNkX1BAF0PK5CuQHtJpTc/K8c0cGNe4oCWqD4DypVhVZga735W621s+reovR8 h1WOjH5BBViQJG8vEntTkRZuuBO23DKAy63TBl1gs6+jDAy/wcFMr/1vuV7d9Fwd qmfdR7NyqmbYzNiyTCeEwt6Ij7EHISjEjhBQIlFWRqAM -----END CERTIFICATE-----Generated at Sun Jan 25 15:35:22 2026 by rpki-client