This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/0xOSlFF4qEJ0-V611FUixhfdX0Q.roa File: 0xOSlFF4qEJ0-V611FUixhfdX0Q.roa (raw, json) Hash identifier: 2cl0zm8Cn1RFnkSxPtYibLq9wI+6x0kOdV+BL5DuDG4= Subject key identifier: D3:13:92:94:51:78:A8:42:74:F9:5E:B5:D4:55:22:C6:17:DD:5F:44 Certificate issuer: /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b Certificate serial: 019B7A5B2B52A23BB1C0A154AF70FED4757B Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/0xOSlFF4qEJ0-V611FUixhfdX0Q.roa Signing time: Thu 01 Jan 2026 16:19:13 +0000 ROA not before: Thu 01 Jan 2026 16:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208001 IP address blocks: 2.59.208.0/22 maxlen: 22 91.212.209.0/24 maxlen: 24 185.186.56.0/22 maxlen: 22 2a13:a4c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:2b:52:a2:3b:b1:c0:a1:54:af:70:fe:d4:75:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b Validity Not Before: Jan 1 16:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d31392945178a84274f95eb5d45522c617dd5f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c1:de:ae:ec:85:52:80:09:bd:64:41:0b:20: 3d:90:38:48:18:f4:58:c5:f0:4a:52:a8:7e:28:9d: 3b:03:89:31:fd:1a:da:1a:e6:95:41:ff:ad:1c:7d: 54:e4:2d:ea:fd:ec:82:f1:37:9d:fb:93:de:eb:37: 8c:f5:69:d7:80:46:f2:2f:c3:f2:6f:99:ae:80:4f: 71:2e:f4:a5:4e:d0:f7:69:ab:80:c4:c4:d3:d7:f6: 92:54:db:20:9f:9b:5c:c5:0d:88:cc:f4:eb:57:72: b8:b6:93:67:b2:4e:c8:15:0b:54:7d:8a:49:d5:9e: a0:43:a0:de:75:a0:9f:0a:a7:a3:d3:21:6b:af:33: 7c:aa:51:8e:8c:f4:d8:15:8a:9a:0e:03:e0:82:25: 69:4b:63:cb:01:89:8e:88:f7:a4:f9:13:7a:51:40: 9c:37:a1:66:86:0d:38:03:1f:25:a5:33:f8:13:2e: 27:b8:37:c8:94:0f:c3:f0:6b:5c:05:f6:22:f1:17: 88:df:0d:25:cb:26:3d:f9:75:57:1a:30:e5:35:02: 8c:85:ea:9b:0d:7a:f9:bb:f1:dc:70:c5:f9:0f:22: be:fc:36:05:31:cd:d5:48:7c:62:db:11:50:c8:f2: 87:ff:3c:84:28:90:97:88:6c:dc:63:cc:05:54:96: 9b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:13:92:94:51:78:A8:42:74:F9:5E:B5:D4:55:22:C6:17:DD:5F:44 X509v3 Authority Key Identifier: keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/0xOSlFF4qEJ0-V611FUixhfdX0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.208.0/22 91.212.209.0/24 185.186.56.0/22 IPv6: 2a13:a4c0::/29 Signature Algorithm: sha256WithRSAEncryption 05:ef:96:ce:4f:0b:78:9f:41:74:ab:cd:7c:66:72:cc:68:73: d1:3b:27:ed:8b:ef:56:f3:56:f0:31:6a:fe:42:44:6f:0a:ea: 81:2d:dc:e7:7f:8e:f9:65:5e:1a:60:80:64:06:b7:fd:bf:10: f5:e7:9a:cf:d4:c5:c6:1c:c3:c4:d1:8f:fd:57:6c:66:02:ec: 81:bd:7a:f8:bb:f2:bf:04:e1:63:95:c4:a1:e1:db:82:4c:d6: ee:77:53:d9:0d:8e:bb:11:8b:65:e2:42:3f:d9:bb:12:f5:fc: 50:4d:42:fb:c6:df:a8:45:79:f0:5c:f6:68:63:63:36:18:c2: da:da:b6:e2:ee:11:c7:c7:6a:46:7a:5b:24:3f:20:4d:1d:52: 76:49:02:a8:fb:81:45:60:14:74:63:09:9f:a4:a1:70:e6:ea: 1e:ed:16:dd:aa:e0:9b:15:fc:06:c0:18:f8:4d:ef:51:ed:07: 5b:99:1d:7f:76:f8:ca:9d:2a:87:96:8b:c5:4b:01:fe:df:a1: fc:3a:b1:82:2e:4d:1e:b3:08:00:79:c0:91:83:0e:55:09:a6: 69:fd:e7:71:f6:17:51:b5:fb:ab:8c:82:ee:62:ed:1a:58:e5: af:40:34:dd:59:64:f8:c2:59:3e:be:a3:d3:df:3e:75:dc:62: 7b:61:7a:e3 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6WytSojuxwKFUr3D+1HV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjA4NmFkYzcxY2JlYzVhZWEyYTFmODk1NGRmYTY0MmI1 MzBjM2IwHhcNMjYwMTAxMTYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzEzOTI5NDUxNzhhODQyNzRmOTVlYjVkNDU1MjJjNjE3ZGQ1ZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8HeruyFUoAJvWRBCyA9kDhIGPRY xfBKUqh+KJ07A4kx/RraGuaVQf+tHH1U5C3q/eyC8Ted+5Pe6zeM9WnXgEbyL8Py b5mugE9xLvSlTtD3aauAxMTT1/aSVNsgn5tcxQ2IzPTrV3K4tpNnsk7IFQtUfYpJ 1Z6gQ6DedaCfCqej0yFrrzN8qlGOjPTYFYqaDgPggiVpS2PLAYmOiPek+RN6UUCc N6Fmhg04Ax8lpTP4Ey4nuDfIlA/D8GtcBfYi8ReI3w0lyyY9+XVXGjDlNQKMheqb DXr5u/HccMX5DyK+/DYFMc3VSHxi2xFQyPKH/zyEKJCXiGzcY8wFVJabrwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFNMTkpRReKhCdPletdRVIsYX3V9EMB8GA1UdIwQY MBaAFKEghq3HHL7FrqKh+JVN+mQrUww7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NDR3JjY2N2c1d1b3FINGxVMzZaQ3RURERzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ZDlhMDItZTQyZC00MmUzLWFmMTMt NDg1YTkyYmI5YmEzLzEvMHhPU2xGRjRxRUowLVY2MTFGVWl4aGZkWDBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82ZDlhMDItZTQyZC00MmUzLWFmMTMtNDg1YTkyYmI5YmEz LzEvb1NDR3JjY2N2c1d1b3FINGxVMzZaQ3RURERzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCAjvQAwQA W9TRAwQCubo4MA0EAgACMAcDBQMqE6TAMA0GCSqGSIb3DQEBCwUAA4IBAQAF75bO Twt4n0F0q818ZnLMaHPROyfti+9W81bwMWr+QkRvCuqBLdznf475ZV4aYIBkBrf9 vxD155rP1MXGHMPE0Y/9V2xmAuyBvXr4u/K/BOFjlcSh4duCTNbud1PZDY67EYtl 4kI/2bsS9fxQTUL7xt+oRXnwXPZoY2M2GMLa2rbi7hHHx2pGelskPyBNHVJ2SQKo +4FFYBR0YwmfpKFw5uoe7RbdquCbFfwGwBj4Te9R7QdbmR1/dvjKnSqHlovFSwH+ 36H8OrGCLk0eswgAecCRgw5VCaZp/edx9hdRtfurjILuYu0aWOWvQDTdWWT4wlk+ vqPT3z513GJ7YXrj -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:41 2026 by rpki-client