This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/OgXQseKO3Ow7Mhh_xwXxqG0TMU8.roa File: OgXQseKO3Ow7Mhh_xwXxqG0TMU8.roa (raw, json) Hash identifier: GiPu825S6CpEgmzpgvr6bfnt5L9VQLAkTPxtvMZRAqk= Subject key identifier: 3A:05:D0:B1:E2:8E:DC:EC:3B:32:18:7F:C7:05:F1:A8:6D:13:31:4F Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d Certificate serial: 019B7CEDA7B0B862058E084D322D5897B10B Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/OgXQseKO3Ow7Mhh_xwXxqG0TMU8.roa Signing time: Fri 02 Jan 2026 04:18:28 +0000 ROA not before: Fri 02 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213689 IP address blocks: 92.242.167.0/24 maxlen: 24 164.138.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:a7:b0:b8:62:05:8e:08:4d:32:2d:58:97:b1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d Validity Not Before: Jan 2 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a05d0b1e28edcec3b32187fc705f1a86d13314f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:11:aa:1b:d3:63:6b:99:40:0f:1b:3b:5b:c2: 25:2f:af:fd:b0:61:b6:03:cd:55:a5:a0:2b:d2:1d: aa:78:1f:f1:89:49:56:4c:d3:ef:83:a8:0d:ac:1b: 4b:65:2b:3d:c4:11:6d:59:d8:43:28:8f:69:39:00: 44:dd:32:4e:7e:9c:89:5b:b0:72:26:7e:42:6c:ad: 40:d5:e7:87:3c:51:9c:85:ef:2e:5b:a8:36:ad:32: ba:1d:e0:d5:13:9c:56:b5:53:6a:dc:4f:65:d9:fd: 56:f8:0a:30:bc:2c:11:b5:a7:89:91:d4:45:71:14: 95:0d:3a:79:fd:68:e0:eb:7a:ff:54:30:b5:70:ac: c9:26:5a:5c:20:b7:76:7e:de:6e:34:25:17:34:de: c2:b5:92:d8:67:a3:25:04:5e:a0:47:7f:28:81:dd: a0:ea:1e:bb:02:9d:95:9a:95:45:7c:51:43:7c:1a: 47:cb:b4:fa:9b:3e:87:41:81:0a:9a:f4:a4:8f:6a: c7:84:85:ef:24:6c:a1:22:6b:ae:69:cf:78:07:63: 2b:f4:e4:89:ae:c1:a5:31:15:6a:3e:07:e3:46:2b: 49:ae:c1:de:1b:7f:21:30:bc:c4:0c:83:bb:78:e8: 8f:c4:db:79:fa:1e:18:53:27:75:49:64:78:f7:28: f8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:05:D0:B1:E2:8E:DC:EC:3B:32:18:7F:C7:05:F1:A8:6D:13:31:4F X509v3 Authority Key Identifier: keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/OgXQseKO3Ow7Mhh_xwXxqG0TMU8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.242.167.0/24 164.138.8.0/21 Signature Algorithm: sha256WithRSAEncryption a9:22:d1:8f:28:21:91:ca:88:37:17:39:71:c5:c5:d7:cd:15: 42:42:4f:ca:fc:fa:33:dd:b4:9f:6c:85:c6:ca:9a:bd:92:a4: d8:2c:c1:45:7d:71:bc:20:a7:fa:ef:0d:00:a7:48:0a:5a:84: e0:48:d9:65:54:3e:f2:88:b2:48:c7:dc:7c:91:18:7f:19:63: c5:ad:72:61:5f:e5:ed:f5:5c:26:af:22:68:de:71:2b:83:3e: 10:47:a8:4e:6f:b4:6c:88:5f:80:11:ff:5a:87:2f:02:0e:61: 87:26:6f:bc:11:3a:98:ed:56:21:94:59:22:0f:13:86:83:0e: e6:3b:f5:66:49:56:80:09:d8:b7:25:c1:1a:72:0b:d4:57:fb: 2c:1b:b1:01:79:05:ee:3c:f2:02:fb:ac:fa:f5:6c:26:61:e7: d3:1f:b7:9e:9a:38:2f:7e:a9:6c:e7:c4:bb:63:b9:2a:9c:3d: 69:26:f0:a3:f2:f2:ab:eb:cc:a1:01:49:d3:c0:ee:0d:7a:2f: ba:b1:ec:97:41:83:d7:c9:e4:1e:89:59:73:30:ce:5c:f8:41: fb:98:3a:4e:d5:ea:c8:54:38:5b:c4:7a:ad:88:e7:f1:ef:9f: 2a:9d:6e:0f:13:4b:e3:f8:5d:5b:9b:2a:fb:ab:63:f0:ce:43: b5:ad:a9:a1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87aewuGIFjghNMi1Yl7ELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTI1NDA0YzZkZDQ3MmYxMDAxZWQ5ZmZkZjcyNjc2MmFj NzcwMWQwHhcNMjYwMTAyMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTA1ZDBiMWUyOGVkY2VjM2IzMjE4N2ZjNzA1ZjFhODZkMTMzMTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RGqG9Nja5lADxs7W8IlL6/9sGG2 A81VpaAr0h2qeB/xiUlWTNPvg6gNrBtLZSs9xBFtWdhDKI9pOQBE3TJOfpyJW7By Jn5CbK1A1eeHPFGche8uW6g2rTK6HeDVE5xWtVNq3E9l2f1W+AowvCwRtaeJkdRF cRSVDTp5/Wjg63r/VDC1cKzJJlpcILd2ft5uNCUXNN7CtZLYZ6MlBF6gR38ogd2g 6h67Ap2VmpVFfFFDfBpHy7T6mz6HQYEKmvSkj2rHhIXvJGyhImuuac94B2Mr9OSJ rsGlMRVqPgfjRitJrsHeG38hMLzEDIO7eOiPxNt5+h4YUyd1SWR49yj4YwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDoF0LHijtzsOzIYf8cF8ahtEzFPMB8GA1UdIwQY MBaAFBESVATG3UcvEAHtn/33JnYqx3AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYt NmRmZTBmN2Q1M2JkLzEvT2dYUXNlS08zT3c3TWhoX3h3WHhxRzBUTVU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYtNmRmZTBmN2Q1M2Jk LzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXPKnAwQD pIoIMA0GCSqGSIb3DQEBCwUAA4IBAQCpItGPKCGRyog3FzlxxcXXzRVCQk/K/Poz 3bSfbIXGypq9kqTYLMFFfXG8IKf67w0Ap0gKWoTgSNllVD7yiLJIx9x8kRh/GWPF rXJhX+Xt9VwmryJo3nErgz4QR6hOb7RsiF+AEf9ahy8CDmGHJm+8ETqY7VYhlFki DxOGgw7mO/VmSVaACdi3JcEacgvUV/ssG7EBeQXuPPIC+6z69WwmYefTH7eemjgv fqls58S7Y7kqnD1pJvCj8vKr68yhAUnTwO4Nei+6seyXQYPXyeQeiVlzMM5c+EH7 mDpO1erIVDhbxHqtiOfx758qnW4PE0vj+F1bmyr7q2PwzkO1ramh -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:42 2026 by rpki-client