This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/oE6r51K-Hn36jEQK9rwYznVcluY.roa File: oE6r51K-Hn36jEQK9rwYznVcluY.roa (raw, json) Hash identifier: ktgHZDZ0XBs6bzgGz/KVT3sjiszOsWQkRn5c+F0Z0G0= Subject key identifier: A0:4E:AB:E7:52:BE:1E:7D:FA:8C:44:0A:F6:BC:18:CE:75:5C:96:E6 Certificate issuer: /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af Certificate serial: 019B7834A57C5D0173BDD595C34A5E5E6A56 Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/oE6r51K-Hn36jEQK9rwYznVcluY.roa Signing time: Thu 01 Jan 2026 06:17:54 +0000 ROA not before: Thu 01 Jan 2026 06:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1136 IP address blocks: 89.147.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a5:7c:5d:01:73:bd:d5:95:c3:4a:5e:5e:6a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af Validity Not Before: Jan 1 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a04eabe752be1e7dfa8c440af6bc18ce755c96e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:08:ac:a4:2a:d2:d0:da:64:23:9a:69:ea:7b: b8:d8:be:a7:e0:ec:7a:5d:e2:c4:3e:0b:90:e7:f6: 83:4c:ea:f4:68:75:08:9f:b4:dc:ee:3c:42:f9:6f: ee:50:0e:db:2f:e7:0e:f5:37:f6:35:fa:d8:a7:1d: 1e:21:90:4c:60:26:2f:be:59:9a:92:77:8b:bc:24: 35:f4:85:9c:15:de:36:1a:ca:ba:58:e5:ef:77:56: a6:ed:99:1b:6f:7a:62:c7:e5:c1:64:79:1c:6e:15: 2b:1b:29:5b:97:c5:31:9c:6e:a3:8b:b1:c2:e7:bb: 06:35:96:0c:18:30:d9:7a:77:81:9b:f7:53:bb:1e: b3:d9:92:1c:1c:bf:27:37:7d:80:ba:2a:7b:18:6c: 60:9b:44:32:da:db:98:97:f2:7f:44:3b:ec:2b:13: 5b:ea:e0:61:d3:84:9a:18:6a:5a:23:e9:c7:74:7b: af:8e:9d:68:ef:3e:a8:75:b4:8d:4d:15:a1:6f:39: 9e:4e:5e:a8:70:60:e3:1a:c6:63:d8:df:53:6f:07: 66:93:2a:22:5b:69:32:e5:d7:e6:c0:51:13:86:6e: 60:e2:d6:d1:30:5f:a1:f9:6a:76:6d:5c:69:77:e9: b0:85:c4:b3:52:ab:b0:7c:89:fc:7b:89:65:50:3d: 2c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4E:AB:E7:52:BE:1E:7D:FA:8C:44:0A:F6:BC:18:CE:75:5C:96:E6 X509v3 Authority Key Identifier: keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/oE6r51K-Hn36jEQK9rwYznVcluY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.147.32.0/23 Signature Algorithm: sha256WithRSAEncryption 55:f2:61:ac:38:45:52:f1:02:96:88:6b:16:61:d2:c1:fc:96: 9f:4e:be:73:6f:03:b6:62:e6:6d:c3:98:eb:e8:d3:c5:74:6f: 0a:79:96:09:02:bc:72:48:a1:78:0e:30:bb:be:31:ec:32:8d: db:0d:94:0d:61:10:9e:68:fc:15:7c:d8:5b:f5:71:2e:59:12: 61:0b:4f:68:7f:e0:8d:2a:40:88:74:03:82:98:10:5c:2c:ea: e9:12:fb:3f:09:e1:79:8d:e5:63:92:e0:04:05:e2:d0:83:6c: 09:de:da:cc:5a:1d:54:e4:36:18:5a:3e:3d:7a:dc:27:1b:eb: b4:92:d5:37:81:82:f9:07:34:30:f3:2a:a6:63:a5:18:a1:af: ae:85:1b:5e:cf:74:01:4d:4b:25:72:2f:f2:df:46:17:53:2b: 71:1e:39:4b:53:73:35:d6:02:84:2f:45:ec:b8:70:dd:b9:6c: d4:2f:c5:a0:49:d6:5e:21:9c:b6:08:4a:3b:0b:f0:15:fe:82: ee:9a:df:39:21:b3:e7:a7:8e:84:7c:b9:b5:0b:da:79:23:95: ce:55:4f:0d:ec:27:6f:16:fa:1d:04:8c:89:66:07:e2:a5:e4: f2:d3:99:36:cf:7e:e1:d2:53:65:1d:16:86:33:81:b6:43:80: 8e:de:0d:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NKV8XQFzvdWVw0peXmpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZDA2NzRiZDZmMGNjOTE3NTIxOWEzMjhjOGIzOTY4Mjlm NmMwYWYwHhcNMjYwMTAxMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDRlYWJlNzUyYmUxZTdkZmE4YzQ0MGFmNmJjMThjZTc1NWM5NmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAispCrS0NpkI5pp6nu42L6n4Ox6 XeLEPguQ5/aDTOr0aHUIn7Tc7jxC+W/uUA7bL+cO9Tf2NfrYpx0eIZBMYCYvvlma kneLvCQ19IWcFd42Gsq6WOXvd1am7Zkbb3pix+XBZHkcbhUrGylbl8UxnG6ji7HC 57sGNZYMGDDZeneBm/dTux6z2ZIcHL8nN32Auip7GGxgm0Qy2tuYl/J/RDvsKxNb 6uBh04SaGGpaI+nHdHuvjp1o7z6odbSNTRWhbzmeTl6ocGDjGsZj2N9Tbwdmkyoi W2ky5dfmwFEThm5g4tbRMF+h+Wp2bVxpd+mwhcSzUquwfIn8e4llUD0sPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKBOq+dSvh59+oxECva8GM51XJbmMB8GA1UdIwQY MBaAFNfQZ0vW8MyRdSGaMoyLOWgp9sCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2It ODIzMmZhM2U2MjlkLzEvb0U2cjUxSy1IbjM2akVRSzlyd1l6blZjbHVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2ItODIzMmZhM2U2Mjlk LzEvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWZMgMA0G CSqGSIb3DQEBCwUAA4IBAQBV8mGsOEVS8QKWiGsWYdLB/JafTr5zbwO2YuZtw5jr 6NPFdG8KeZYJArxySKF4DjC7vjHsMo3bDZQNYRCeaPwVfNhb9XEuWRJhC09of+CN KkCIdAOCmBBcLOrpEvs/CeF5jeVjkuAEBeLQg2wJ3trMWh1U5DYYWj49etwnG+u0 ktU3gYL5BzQw8yqmY6UYoa+uhRtez3QBTUslci/y30YXUytxHjlLU3M11gKEL0Xs uHDduWzUL8WgSdZeIZy2CEo7C/AV/oLumt85IbPnp46EfLm1C9p5I5XOVU8N7Cdv FvodBIyJZgfipeTy05k2z37h0lNlHRaGM4G2Q4CO3g0Z -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:01 2026 by rpki-client