This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/oxOGLICEA4GzU1uD1B6su4tziyQ.roa File: oxOGLICEA4GzU1uD1B6su4tziyQ.roa (raw, json) Hash identifier: TvZctkDtv5gSKLWgki0lkEZNOjTs1UPnuilELJQxzxc= Subject key identifier: A3:13:86:2C:80:84:03:81:B3:53:5B:83:D4:1E:AC:BB:8B:73:8B:24 Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Certificate serial: 019B7834536C3A9A84EAF1F7984464D396D1 Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/oxOGLICEA4GzU1uD1B6su4tziyQ.roa Signing time: Thu 01 Jan 2026 06:17:33 +0000 ROA not before: Thu 01 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13285 IP address blocks: 62.3.192.0/18 maxlen: 18 81.6.192.0/18 maxlen: 18 81.170.0.0/17 maxlen: 17 81.170.0.0/18 maxlen: 18 81.170.64.0/18 maxlen: 18 82.133.0.0/17 maxlen: 17 82.133.0.0/18 maxlen: 18 82.133.64.0/18 maxlen: 18 91.146.112.0/21 maxlen: 21 92.10.0.0/15 maxlen: 15 92.10.0.0/16 maxlen: 16 92.11.0.0/16 maxlen: 16 92.12.0.0/14 maxlen: 14 92.12.0.0/15 maxlen: 15 92.14.0.0/15 maxlen: 15 185.112.212.0/22 maxlen: 22 185.173.116.0/22 maxlen: 22 213.208.64.0/18 maxlen: 18 217.8.0.0/19 maxlen: 19 217.68.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:53:6c:3a:9a:84:ea:f1:f7:98:44:64:d3:96:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a313862c80840381b3535b83d41eacbb8b738b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:44:f1:a6:77:1c:23:13:a6:55:e8:33:92:a1: 12:6b:60:8a:b5:54:6d:4b:0d:ed:70:44:e5:c3:5e: 10:d5:94:69:65:ff:99:59:8c:8f:8d:d6:57:e6:99: 05:6c:73:c8:93:ca:7d:44:e5:a0:ae:33:39:05:68: ba:b1:aa:a6:01:49:f0:b8:64:c3:e8:e6:be:b1:db: c4:c6:6d:e1:f2:7f:cb:0e:d4:0d:d6:62:64:95:18: b2:ae:99:d8:d8:25:f2:76:97:18:73:2c:30:33:d7: 7f:1f:39:62:05:77:f3:37:c7:a7:0e:60:7a:16:8c: e5:11:8a:ac:90:bb:c8:07:a0:80:c6:c1:5d:1d:6e: 13:69:d7:04:37:0d:8d:03:78:29:72:67:9e:f2:60: 7b:67:18:ce:89:e9:b3:13:c6:4a:9c:5d:a6:4b:06: 63:0b:f8:91:03:fd:ff:a4:6b:55:bd:52:a6:c3:f6: 6e:38:62:17:10:d7:d7:a5:33:56:5d:01:41:a5:99: 8f:f4:71:51:7d:04:0f:48:a6:c5:ed:f5:75:2c:8c: 41:3f:0d:8f:eb:10:34:38:ef:69:4f:e9:db:69:40: 89:7d:ca:f3:1c:0d:fd:cc:47:70:86:67:be:00:38: 2f:97:1c:cf:07:46:24:55:58:0b:90:1d:cd:e8:ff: bb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:13:86:2C:80:84:03:81:B3:53:5B:83:D4:1E:AC:BB:8B:73:8B:24 X509v3 Authority Key Identifier: keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/oxOGLICEA4GzU1uD1B6su4tziyQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.192.0/18 81.6.192.0/18 81.170.0.0/17 82.133.0.0/17 91.146.112.0/21 92.10.0.0-92.15.255.255 185.112.212.0/22 185.173.116.0/22 213.208.64.0/18 217.8.0.0/19 217.68.128.0/20 Signature Algorithm: sha256WithRSAEncryption 90:fd:b4:3b:32:54:3b:30:82:d2:95:56:06:e9:4b:13:d8:a8: a8:69:54:8b:b5:ae:96:e7:59:f9:ff:2c:6c:4b:f0:73:ee:f0: 91:ce:57:e2:2a:cd:a3:f0:a1:e0:0f:b4:40:40:cc:05:c7:8b: 8f:1e:4d:6c:fc:50:ad:c1:f6:aa:03:55:f5:b7:e8:10:12:ab: f5:6b:e9:be:83:45:bd:28:95:ab:6d:d4:81:29:6e:02:e3:ab: d6:91:b8:82:dc:b2:f6:f9:e0:31:6f:12:a4:85:3b:53:a4:54: 51:aa:a9:6a:cb:37:9a:ec:fa:21:2d:7e:b2:6e:44:a9:90:07: ba:ea:2d:1c:a8:d0:8b:61:ea:c2:f5:5d:54:b1:65:c3:d2:a3: d4:6e:97:af:91:cd:b0:77:7e:2c:ef:e1:e9:fd:38:c8:81:5a: d0:f7:b1:b2:1c:f0:70:e0:76:c8:ac:03:db:23:90:eb:90:2c: 3a:4c:49:e0:45:b8:23:4d:2b:7f:13:d8:e3:c2:b7:c6:1f:12: 75:ed:f8:05:d1:df:b1:a8:68:3c:a1:dd:15:2e:33:1e:ba:49: 0b:59:6a:71:51:e5:9b:50:ea:85:03:2a:55:3d:93:33:5f:c6: 8f:e4:71:4b:8c:b7:b4:94:08:2d:ef:ea:aa:89:d4:04:9a:c8: 2d:1c:38:4a -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt4NFNsOpqE6vH3mERk05bRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx MzY5Y2EwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzEzODYyYzgwODQwMzgxYjM1MzViODNkNDFlYWNiYjhiNzM4YjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0TxpnccIxOmVegzkqESa2CKtVRt Sw3tcETlw14Q1ZRpZf+ZWYyPjdZX5pkFbHPIk8p9ROWgrjM5BWi6saqmAUnwuGTD 6Oa+sdvExm3h8n/LDtQN1mJklRiyrpnY2CXydpcYcywwM9d/HzliBXfzN8enDmB6 FozlEYqskLvIB6CAxsFdHW4TadcENw2NA3gpcmee8mB7ZxjOiemzE8ZKnF2mSwZj C/iRA/3/pGtVvVKmw/ZuOGIXENfXpTNWXQFBpZmP9HFRfQQPSKbF7fV1LIxBPw2P 6xA0OO9pT+nbaUCJfcrzHA39zEdwhme+ADgvlxzPB0YkVVgLkB3N6P+7IQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKMThiyAhAOBs1Nbg9QerLuLc4skMB8GA1UdIwQY MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt NGNmZTQwZjA3YTZiLzEvb3hPR0xJQ0VBNEd6VTF1RDFCNnN1NHR6aXlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQGPgPAAwQG UQbAAwQHUaoAAwQHUoUAAwQDW5JwMAoDAwFcCgMDBFwAAwQCuXDUAwQCua10AwQG 1dBAAwQF2QgAAwQE2USAMA0GCSqGSIb3DQEBCwUAA4IBAQCQ/bQ7MlQ7MILSlVYG 6UsT2KioaVSLta6W51n5/yxsS/Bz7vCRzlfiKs2j8KHgD7RAQMwFx4uPHk1s/FCt wfaqA1X1t+gQEqv1a+m+g0W9KJWrbdSBKW4C46vWkbiC3LL2+eAxbxKkhTtTpFRR qqlqyzea7PohLX6ybkSpkAe66i0cqNCLYerC9V1UsWXD0qPUbpevkc2wd34s7+Hp /TjIgVrQ97GyHPBw4HbIrAPbI5DrkCw6TEngRbgjTSt/E9jjwrfGHxJ17fgF0d+x qGg8od0VLjMeukkLWWpxUeWbUOqFAypVPZMzX8aP5HFLjLe0lAgt7+qqidQEmsgt HDhK -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:27 2026 by rpki-client