This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/O0F_WGHY6jnucw_zKVZ8I6LSbPY.roa File: O0F_WGHY6jnucw_zKVZ8I6LSbPY.roa (raw, json) Hash identifier: u7jhlGqpRfEYyjNlngo1C74D4qf+tZ62ssmWPNDXYdc= Subject key identifier: 3B:41:7F:58:61:D8:EA:39:EE:73:0F:F3:29:56:7C:23:A2:D2:6C:F6 Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70 Certificate serial: 019B78343186632C73684B0B4D900560DC40 Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/O0F_WGHY6jnucw_zKVZ8I6LSbPY.roa Signing time: Thu 01 Jan 2026 06:17:25 +0000 ROA not before: Thu 01 Jan 2026 06:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49101 IP address blocks: 176.102.64.0/22 maxlen: 22 2a07:dbc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:31:86:63:2c:73:68:4b:0b:4d:90:05:60:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70 Validity Not Before: Jan 1 06:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b417f5861d8ea39ee730ff329567c23a2d26cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:e1:cf:6c:ac:b8:a0:a4:bf:9a:7f:be:40: 15:09:ad:30:7d:d5:db:9e:ac:7e:b2:34:b7:34:1b: f1:cd:ad:1e:9d:59:35:1c:2c:c1:5e:11:7d:91:79: 58:f7:1d:b1:49:a4:fc:9b:ad:c0:e0:63:25:1a:3f: 7d:34:7b:2d:9b:94:28:d6:f3:80:86:32:ca:fa:53: c4:e6:61:d5:ee:15:51:6e:a2:2f:d6:91:a4:cb:3a: 08:dc:b1:51:0b:f8:80:0a:76:1c:61:48:51:1f:f1: 82:f1:44:22:12:31:39:4b:da:43:8f:e5:ec:6b:87: 51:93:cf:ed:f2:a7:5a:93:11:de:2f:c4:e2:c5:a5: 90:c4:ff:ad:47:3e:c9:8b:50:ad:7b:37:d0:39:e8: c9:50:de:97:16:57:ff:a0:5f:3d:90:66:d4:d6:03: f5:7a:12:9c:5b:27:5e:c9:78:ac:19:74:7f:1e:cf: c3:f3:cc:6d:94:3b:a8:20:8a:62:55:27:80:12:da: e6:90:bf:76:dd:68:02:b3:3b:3c:ad:2d:f9:47:5d: bf:43:39:fb:f2:e2:95:7c:09:41:89:65:45:d0:bb: d9:2f:28:c7:05:d5:d0:6e:c1:85:c5:46:56:bd:58: 42:77:62:3e:29:57:9c:d9:85:3c:3a:2f:fe:70:3b: a7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:41:7F:58:61:D8:EA:39:EE:73:0F:F3:29:56:7C:23:A2:D2:6C:F6 X509v3 Authority Key Identifier: keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/O0F_WGHY6jnucw_zKVZ8I6LSbPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.102.64.0/22 IPv6: 2a07:dbc0::/32 Signature Algorithm: sha256WithRSAEncryption 8a:45:78:98:4c:fb:75:d1:01:18:52:c6:24:3b:58:ca:0b:fe: 26:c3:42:6b:33:2b:84:a3:ad:21:69:68:3f:bc:7e:06:bd:21: 74:2d:08:f5:5b:b1:45:18:ff:29:c6:5f:f0:10:b2:48:33:2b: 61:42:e9:26:cf:65:ab:6f:6e:bc:24:d4:6a:47:b1:61:23:85: 1b:99:9e:f2:d6:bd:5b:59:42:4f:14:92:fa:e4:79:71:59:99: 04:eb:a7:f3:79:70:88:8f:5f:4e:e9:59:5b:72:3b:97:c2:cf: 3b:5e:60:aa:5c:63:33:5c:a4:9a:52:80:a1:be:33:96:64:17: 9e:c2:f0:af:31:eb:1b:49:a5:f6:bb:73:02:4f:71:72:21:8f: 10:e9:63:d0:52:cb:73:d0:0e:30:cb:a0:53:8b:93:c2:ec:96: 53:bb:73:3a:1c:fc:59:68:b0:5f:98:fc:97:88:63:58:5a:72: a5:d1:af:9c:ac:ad:1c:ca:42:02:07:17:f2:ff:02:7b:66:07: c4:c4:f0:a3:ec:0b:b8:36:7f:7f:26:15:29:d6:50:1a:da:78: 11:f4:89:ee:cf:a9:7c:70:91:3b:68:11:d2:d3:3c:b0:06:fd: bb:44:bb:d0:8b:9e:68:c1:92:3f:60:17:97:d9:da:4b:d3:06: 39:ff:36:bd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NDGGYyxzaEsLTZAFYNxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Mjk1Y2U3MTI0NzNkMGUzZTZkYWE3NzdkYjg5MDZmODAw MWRmNzAwHhcNMjYwMTAxMDYxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjQxN2Y1ODYxZDhlYTM5ZWU3MzBmZjMyOTU2N2MyM2EyZDI2Y2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiPhz2ysuKCkv5p/vkAVCa0wfdXb nqx+sjS3NBvxza0enVk1HCzBXhF9kXlY9x2xSaT8m63A4GMlGj99NHstm5Qo1vOA hjLK+lPE5mHV7hVRbqIv1pGkyzoI3LFRC/iACnYcYUhRH/GC8UQiEjE5S9pDj+Xs a4dRk8/t8qdakxHeL8TixaWQxP+tRz7Ji1CtezfQOejJUN6XFlf/oF89kGbU1gP1 ehKcWydeyXisGXR/Hs/D88xtlDuoIIpiVSeAEtrmkL923WgCszs8rS35R12/Qzn7 8uKVfAlBiWVF0LvZLyjHBdXQbsGFxUZWvVhCd2I+KVec2YU8Oi/+cDunoQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDtBf1hh2Oo57nMP8ylWfCOi0mz2MB8GA1UdIwQY MBaAFCQpXOcSRz0OPm2qd324kG+AAd9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8xYTBjNmEtMWE1ZS00MjRiLTlhNjkt OTk1NTMxODYyNDE5LzEvTzBGX1dHSFk2am51Y3dfektWWjhJNkxTYlBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8xYTBjNmEtMWE1ZS00MjRiLTlhNjktOTk1NTMxODYyNDE5 LzEvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCsGZAMA0E AgACMAcDBQAqB9vAMA0GCSqGSIb3DQEBCwUAA4IBAQCKRXiYTPt10QEYUsYkO1jK C/4mw0JrMyuEo60haWg/vH4GvSF0LQj1W7FFGP8pxl/wELJIMythQukmz2Wrb268 JNRqR7FhI4UbmZ7y1r1bWUJPFJL65HlxWZkE66fzeXCIj19O6VlbcjuXws87XmCq XGMzXKSaUoChvjOWZBeewvCvMesbSaX2u3MCT3FyIY8Q6WPQUstz0A4wy6BTi5PC 7JZTu3M6HPxZaLBfmPyXiGNYWnKl0a+crK0cykICBxfy/wJ7ZgfExPCj7Au4Nn9/ JhUp1lAa2ngR9Inuz6l8cJE7aBHS0zywBv27RLvQi55owZI/YBeX2dpL0wY5/za9 -----END CERTIFICATE-----Generated at Mon Jan 26 14:02:14 2026 by rpki-client