This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/OEUQTsVKrLP-lQTQ6AZOPlYIssY.roa File: OEUQTsVKrLP-lQTQ6AZOPlYIssY.roa (raw, json) Hash identifier: y4n6H8QWfTANHQ4V6doqPirRmfV8G8F5c8X9riuhcaE= Subject key identifier: 38:45:10:4E:C5:4A:AC:B3:FE:95:04:D0:E8:06:4E:3E:56:08:B2:C6 Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d Certificate serial: 019B7E376ADDE64C4D6C6772456ACACF33C0 Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/OEUQTsVKrLP-lQTQ6AZOPlYIssY.roa Signing time: Fri 02 Jan 2026 10:18:39 +0000 ROA not before: Fri 02 Jan 2026 10:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11506 IP address blocks: 84.235.196.0/24 maxlen: 24 84.235.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:6a:dd:e6:4c:4d:6c:67:72:45:6a:ca:cf:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d Validity Not Before: Jan 2 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3845104ec54aacb3fe9504d0e8064e3e5608b2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1d:53:24:72:c8:1b:ba:f8:f6:44:e3:43:bf: 50:9e:4f:0b:61:2c:da:cd:c8:04:41:e2:fd:f0:40: 20:fc:82:f8:ac:cf:f9:e9:37:4e:67:93:68:01:4d: dd:c4:00:ab:3d:4f:37:35:c2:56:1f:08:43:fe:93: 13:fc:39:0d:84:90:82:4c:07:85:4a:d8:19:55:ad: 17:90:4a:da:91:e8:da:89:47:ca:ea:5e:96:1c:d1: 85:60:4e:fd:18:ec:78:9b:d3:8b:88:d3:49:90:fc: 5a:54:5a:96:86:d5:f6:55:5e:6f:9b:3e:d6:e4:9c: c5:0c:75:db:49:52:6e:39:17:84:b8:29:05:8c:3d: c6:f6:9a:19:78:68:c1:81:0b:6f:f2:4c:43:ae:3b: 18:26:5b:45:7d:ee:7f:3d:a3:43:23:26:15:e5:63: 01:9c:18:12:8c:32:ce:26:9b:3d:cf:a4:cb:3e:f6: 9a:62:f7:98:c2:ea:6e:60:1b:9f:e4:83:05:08:fb: fb:b1:ca:e7:e8:5a:7b:e2:3e:75:65:ed:52:9f:05: 12:27:7c:bc:cb:dd:b7:6a:9b:7c:9a:eb:8e:05:79: c2:ee:a1:7b:08:4c:e3:14:15:19:d6:f3:f1:e2:f4: cf:3c:00:21:35:25:cd:fb:ac:8e:d6:22:0f:8f:ec: 00:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:45:10:4E:C5:4A:AC:B3:FE:95:04:D0:E8:06:4E:3E:56:08:B2:C6 X509v3 Authority Key Identifier: keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/OEUQTsVKrLP-lQTQ6AZOPlYIssY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.235.196.0/23 Signature Algorithm: sha256WithRSAEncryption 64:0d:12:fd:b0:61:94:ce:dc:2c:cb:61:9a:96:39:99:72:05: 10:cc:f3:de:85:52:a0:a8:bf:b5:3c:ff:1b:e8:c4:9d:05:06: 2b:6b:76:61:aa:b7:e4:77:e4:62:d2:95:a5:c1:73:40:41:22: da:c6:52:92:0c:ed:4a:64:36:34:34:95:04:ff:91:f9:e2:9a: 2f:e1:57:c1:51:1d:33:a8:ea:37:77:a6:c9:c1:5e:09:7d:f1: e6:7f:28:3f:b6:bc:81:6b:5a:1e:3b:c6:19:03:89:c6:6f:02: 47:b3:49:1a:40:17:9f:44:c9:eb:29:8b:35:41:bc:71:55:77: b1:7d:68:fa:93:4d:78:09:cd:9d:ed:d7:95:ab:b0:91:23:34: 1d:ba:97:8f:ad:70:2c:ee:a9:74:d2:72:e3:69:98:03:00:75: ee:3d:34:c8:08:2b:9b:67:f7:43:b8:4a:b7:52:a4:fe:c0:a5: 4d:d3:77:b0:4a:3b:0a:2b:1e:de:bc:b2:f9:46:bd:9c:8e:af: fd:3d:a6:77:56:3c:f3:c5:e6:2f:74:c9:72:fc:f0:35:0e:ab: f5:9b:ae:21:e4:1b:c0:f3:01:ae:98:a5:a0:9f:6b:e4:24:a3: 7f:33:d3:8f:c4:c8:03:56:00:0b:33:5b:64:83:25:4b:b0:0a: b2:7d:1d:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N2rd5kxNbGdyRWrKzzPAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzN2M4MzQ0N2QxNzE4MzM4MGY0ODliYzk0NmM4YjllMzAw ZmZiMWQwHhcNMjYwMTAyMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODQ1MTA0ZWM1NGFhY2IzZmU5NTA0ZDBlODA2NGUzZTU2MDhiMmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x1TJHLIG7r49kTjQ79Qnk8LYSza zcgEQeL98EAg/IL4rM/56TdOZ5NoAU3dxACrPU83NcJWHwhD/pMT/DkNhJCCTAeF StgZVa0XkErakejaiUfK6l6WHNGFYE79GOx4m9OLiNNJkPxaVFqWhtX2VV5vmz7W 5JzFDHXbSVJuOReEuCkFjD3G9poZeGjBgQtv8kxDrjsYJltFfe5/PaNDIyYV5WMB nBgSjDLOJps9z6TLPvaaYveYwupuYBuf5IMFCPv7scrn6Fp74j51Ze1SnwUSJ3y8 y923apt8muuOBXnC7qF7CEzjFBUZ1vPx4vTPPAAhNSXN+6yO1iIPj+wA9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDhFEE7FSqyz/pUE0OgGTj5WCLLGMB8GA1UdIwQY MBaAFCN8g0R9FxgzgPSJvJRsi54wD/sdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEt OGIzMzcyMjM0ZGMwLzEvT0VVUVRzVktyTFAtbFFUUTZBWk9QbFlJc3NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEtOGIzMzcyMjM0ZGMw LzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVOvEMA0G CSqGSIb3DQEBCwUAA4IBAQBkDRL9sGGUztwsy2GaljmZcgUQzPPehVKgqL+1PP8b 6MSdBQYra3Zhqrfkd+Ri0pWlwXNAQSLaxlKSDO1KZDY0NJUE/5H54pov4VfBUR0z qOo3d6bJwV4JffHmfyg/tryBa1oeO8YZA4nGbwJHs0kaQBefRMnrKYs1QbxxVXex fWj6k014Cc2d7deVq7CRIzQdupePrXAs7ql00nLjaZgDAHXuPTTICCubZ/dDuEq3 UqT+wKVN03ewSjsKKx7evLL5Rr2cjq/9PaZ3VjzzxeYvdMly/PA1Dqv1m64h5BvA 8wGumKWgn2vkJKN/M9OPxMgDVgALM1tkgyVLsAqyfR1o -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:33 2026 by rpki-client