This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/oU210CVFzLuiQyHcf_YEp8pxk6M.roa File: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (raw, json) Hash identifier: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo= Subject key identifier: A1:4D:B5:D0:25:45:CC:BB:A2:43:21:DC:7F:F6:04:A7:CA:71:93:A3 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019B797ECFE50B798A05E1994F2BAB4E2F63 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/oU210CVFzLuiQyHcf_YEp8pxk6M.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60178 IP address blocks: 79.143.86.0/24 maxlen: 24 87.236.213.0/24 maxlen: 24 87.236.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cf:e5:0b:79:8a:05:e1:99:4f:2b:ab:4e:2f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a14db5d02545ccbba24321dc7ff604a7ca7193a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:c6:77:11:b2:56:a7:c7:f5:d2:de:19:9a: 6d:e9:ff:46:14:6b:06:8c:dc:b6:8a:00:c6:36:96: 44:ee:de:f5:d9:c2:49:72:3f:05:09:e4:90:17:81: 11:31:9e:8e:c9:b6:5f:7f:93:98:f1:da:82:e4:de: 29:40:0c:99:4b:28:82:cf:f9:de:93:e7:92:00:16: 7c:89:f1:88:e9:43:5e:c7:d0:46:1f:4c:34:ce:94: 40:33:37:17:2a:36:e7:98:44:b4:b1:16:b0:48:34: 22:c2:e1:83:80:db:3d:c8:e0:f2:f8:29:4a:4f:97: c9:fc:23:77:ca:38:58:10:5c:8c:fb:20:93:24:06: 93:13:e6:dc:91:cb:42:db:3c:7d:13:b7:4f:0a:8a: 1c:a3:45:a6:26:79:a8:98:f9:54:81:d6:44:03:42: 97:94:b6:ac:f0:aa:30:3e:83:65:a7:7e:de:2f:fb: 4a:53:a1:84:97:95:e4:65:25:60:6f:f2:13:27:cc: 90:c0:f2:84:4f:1a:6d:a8:8e:d5:5e:be:57:9d:2d: 64:cc:b8:3e:15:d4:a3:3c:c8:73:75:ad:c2:c7:ac: 75:b4:03:6e:ed:8b:9d:d2:70:be:06:03:64:6b:00: 51:6f:c7:85:11:89:12:d6:4a:96:81:6f:48:18:27: 05:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4D:B5:D0:25:45:CC:BB:A2:43:21:DC:7F:F6:04:A7:CA:71:93:A3 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/oU210CVFzLuiQyHcf_YEp8pxk6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.143.86.0/24 87.236.213.0-87.236.214.255 Signature Algorithm: sha256WithRSAEncryption 1f:74:00:30:db:7e:af:1a:fc:01:93:1d:a7:0d:03:98:66:7b: b0:29:5b:8c:fa:ee:02:dd:95:24:55:bf:44:28:66:7a:d1:ac: a9:38:d7:4a:05:27:05:a6:ff:ce:c9:68:72:78:07:b6:04:b3: 37:f7:ac:26:5a:e3:cb:e7:51:88:24:e5:ca:6e:ec:dc:a6:4f: 9c:34:67:5c:24:d1:61:04:36:b1:20:60:d6:0a:0b:1a:0b:92: 69:0e:c5:aa:b5:82:76:a9:61:f2:ee:54:18:1e:68:2b:4f:91: 18:db:ae:82:fc:e9:33:f3:ea:84:c9:d4:90:5c:3d:37:96:d5: 4f:65:a1:93:74:2c:f7:dd:d3:fc:79:62:f7:42:1b:a5:dc:5d: 66:19:fb:2d:88:31:54:91:a0:46:95:36:6d:eb:3c:80:2e:a5: a4:64:47:6f:3c:ad:cd:4f:f7:b4:5c:af:0d:66:91:55:90:29: 7b:be:cd:18:e8:3a:55:45:9f:01:36:7c:41:f9:88:59:4b:a4: 2c:d8:c6:79:ee:60:63:d4:a9:6c:bd:ed:25:c5:d2:13:77:6a: a8:e6:3c:ad:60:6f:3e:fa:69:35:c7:f4:fd:cc:d2:de:4b:61: 1b:c8:f0:8d:e0:d1:25:11:e0:a7:e9:7a:08:ef:f7:3c:b0:64: f3:59:72:70 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5fs/lC3mKBeGZTyurTi9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTRkYjVkMDI1NDVjY2JiYTI0MzIxZGM3ZmY2MDRhN2NhNzE5M2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx7GdxGyVqfH9dLeGZpt6f9GFGsG jNy2igDGNpZE7t712cJJcj8FCeSQF4ERMZ6OybZff5OY8dqC5N4pQAyZSyiCz/ne k+eSABZ8ifGI6UNex9BGH0w0zpRAMzcXKjbnmES0sRawSDQiwuGDgNs9yODy+ClK T5fJ/CN3yjhYEFyM+yCTJAaTE+bckctC2zx9E7dPCooco0WmJnmomPlUgdZEA0KX lLas8KowPoNlp37eL/tKU6GEl5XkZSVgb/ITJ8yQwPKETxptqI7VXr5XnS1kzLg+ FdSjPMhzda3Cx6x1tANu7Yud0nC+BgNkawBRb8eFEYkS1kqWgW9IGCcF2wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFKFNtdAlRcy7okMh3H/2BKfKcZOjMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEvb1UyMTBDVkZ6THVpUXlIY2ZfWUVwOHB4azZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAT49WMAwD BABX7NUDBABX7NYwDQYJKoZIhvcNAQELBQADggEBAB90ADDbfq8a/AGTHacNA5hm e7ApW4z67gLdlSRVv0QoZnrRrKk410oFJwWm/87JaHJ4B7YEszf3rCZa48vnUYgk 5cpu7NymT5w0Z1wk0WEENrEgYNYKCxoLkmkOxaq1gnapYfLuVBgeaCtPkRjbroL8 6TPz6oTJ1JBcPTeW1U9loZN0LPfd0/x5YvdCG6XcXWYZ+y2IMVSRoEaVNm3rPIAu paRkR288rc1P97Rcrw1mkVWQKXu+zRjoOlVFnwE2fEH5iFlLpCzYxnnuYGPUqWy9 7SXF0hN3aqjmPK1gbz76aTXH9P3M0t5LYRvI8I3g0SUR4Kfpegjv9zywZPNZcnA= -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:58 2026 by rpki-client