This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/oyMYaWn1495tEV0rJtuup8PEegg.roa File: oyMYaWn1495tEV0rJtuup8PEegg.roa (raw, json) Hash identifier: xG4lUtMIXDMmK0ptQSxWDryB1RVS07DU1EG3EYDXLQU= Subject key identifier: A3:23:18:69:69:F5:E3:DE:6D:11:5D:2B:26:DB:AE:A7:C3:C4:7A:08 Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed Certificate serial: 019B7BA50142B0A85486FA82842BE418E98D Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/oyMYaWn1495tEV0rJtuup8PEegg.roa Signing time: Thu 01 Jan 2026 22:19:29 +0000 ROA not before: Thu 01 Jan 2026 22:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10753 IP address blocks: 94.136.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:01:42:b0:a8:54:86:fa:82:84:2b:e4:18:e9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed Validity Not Before: Jan 1 22:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a323186969f5e3de6d115d2b26dbaea7c3c47a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bd:fb:d5:8c:6a:06:0f:3b:9c:67:ce:63:86: 2b:4d:a3:9f:14:07:d0:5b:04:70:50:26:31:f6:5c: e2:ec:96:90:a9:65:b5:17:ce:b3:d6:ed:ce:a3:31: 33:e5:e9:84:72:ed:e4:1f:10:9a:83:ee:a6:76:f0: 59:84:b2:50:28:9b:48:cd:4a:53:0e:57:9e:d4:77: bf:85:da:fe:03:b3:00:95:a7:5d:44:53:8a:f9:87: ae:ed:34:2a:f6:33:77:23:2d:a4:d6:06:07:30:a5: 25:36:07:43:bf:b9:3b:e4:5c:ad:31:15:f2:c2:03: 76:b0:dd:c6:56:e1:56:d6:39:4f:46:5d:5d:50:c4: 7d:a7:00:8b:b1:fd:53:05:9f:30:9b:0c:b4:65:48: ad:e0:b2:15:9b:ad:87:da:97:bb:30:c2:6d:d9:90: 84:53:25:56:36:c0:c5:ca:4e:89:df:40:69:7e:09: 1a:25:e4:89:f4:e7:b6:d9:c5:2e:d2:b7:c1:4d:d8: d8:7e:cc:b6:c1:3c:42:3a:13:bd:3e:ba:79:6d:40: 8c:4d:1b:3f:d9:18:7f:87:0b:3b:66:c4:93:8a:05: 8b:3b:f1:fc:f1:28:10:4e:25:91:20:90:90:de:c3: 1b:ca:82:ae:45:c6:23:3f:52:af:ec:87:cf:30:bf: 2d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:23:18:69:69:F5:E3:DE:6D:11:5D:2B:26:DB:AE:A7:C3:C4:7A:08 X509v3 Authority Key Identifier: keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/oyMYaWn1495tEV0rJtuup8PEegg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.136.116.0/24 Signature Algorithm: sha256WithRSAEncryption 18:11:9d:a1:41:4c:a7:8c:db:bb:26:f1:e1:16:d7:a0:73:12: ff:e8:e0:d3:28:a9:8e:0e:cc:9e:67:95:2b:9f:b2:4d:d3:7e: 69:4e:93:65:43:9e:c6:78:e2:d9:70:4f:67:88:47:52:41:bb: 33:04:6a:c7:23:13:21:1a:c8:73:14:57:54:b3:f8:67:a4:2b: dd:ab:6b:e8:20:dd:08:bf:c4:1a:c0:dd:93:1c:37:c7:1b:d7: 57:24:1a:4f:41:13:ea:1a:2d:ae:73:31:07:0f:9d:58:b7:dc: 7d:d7:2e:37:37:d7:01:1c:0c:8a:90:b3:4d:c1:6c:ec:1f:51: 37:30:21:de:1f:48:44:98:e1:c8:ca:53:08:a5:f1:85:52:8d: 4d:0c:e9:55:59:e5:7b:e5:ac:a2:4e:e6:1c:1e:6b:c1:37:5a: 43:29:2d:42:c2:94:8a:79:8a:6f:f2:11:07:a1:a3:b0:e7:5b: 9e:66:30:70:0c:44:14:e0:d6:5a:a2:b8:85:77:2b:f8:af:f9: ce:24:77:24:43:8b:cb:f0:63:ac:0c:1e:39:a3:bc:5b:ed:c4: c5:1d:6f:b7:4c:0a:9e:30:a3:c2:ae:7b:9d:c5:bb:56:67:1f: 7c:2c:9f:77:ce:ec:5c:a7:45:24:39:bf:19:98:b4:86:7f:df: 7c:1f:4a:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pQFCsKhUhvqChCvkGOmNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMzIwZTJmM2M1YWRhZGYxNTNhMDc1OGJjNjAwYjZlYTE0 ZjRlZWQwHhcNMjYwMTAxMjIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzIzMTg2OTY5ZjVlM2RlNmQxMTVkMmIyNmRiYWVhN2MzYzQ3YTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL371YxqBg87nGfOY4YrTaOfFAfQ WwRwUCYx9lzi7JaQqWW1F86z1u3OozEz5emEcu3kHxCag+6mdvBZhLJQKJtIzUpT Dlee1He/hdr+A7MAladdRFOK+Yeu7TQq9jN3Iy2k1gYHMKUlNgdDv7k75FytMRXy wgN2sN3GVuFW1jlPRl1dUMR9pwCLsf1TBZ8wmwy0ZUit4LIVm62H2pe7MMJt2ZCE UyVWNsDFyk6J30BpfgkaJeSJ9Oe22cUu0rfBTdjYfsy2wTxCOhO9Prp5bUCMTRs/ 2Rh/hws7ZsSTigWLO/H88SgQTiWRIJCQ3sMbyoKuRcYjP1Kv7IfPML8tIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKMjGGlp9ePebRFdKybbrqfDxHoIMB8GA1UdIwQY MBaAFDMyDi88WtrfFToHWLxgC26hT07tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNDQ5MDEtYWUyZC00NDE4LTlkOTMt ZTE1NDRjNTdlMzhiLzEvb3lNWWFXbjE0OTV0RVYwckp0dXVwOFBFZWdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yNDQ5MDEtYWUyZC00NDE4LTlkOTMtZTE1NDRjNTdlMzhi LzEvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXoh0MA0G CSqGSIb3DQEBCwUAA4IBAQAYEZ2hQUynjNu7JvHhFtegcxL/6ODTKKmODsyeZ5Ur n7JN035pTpNlQ57GeOLZcE9niEdSQbszBGrHIxMhGshzFFdUs/hnpCvdq2voIN0I v8QawN2THDfHG9dXJBpPQRPqGi2uczEHD51Yt9x91y43N9cBHAyKkLNNwWzsH1E3 MCHeH0hEmOHIylMIpfGFUo1NDOlVWeV75ayiTuYcHmvBN1pDKS1CwpSKeYpv8hEH oaOw51ueZjBwDEQU4NZaoriFdyv4r/nOJHckQ4vL8GOsDB45o7xb7cTFHW+3TAqe MKPCrnudxbtWZx98LJ93zuxcp0UkOb8ZmLSGf998H0rf -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:59 2026 by rpki-client