This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/oPWrTPHgsRKac9XKXkzOwEKhhYA.roa File: oPWrTPHgsRKac9XKXkzOwEKhhYA.roa (raw, json) Hash identifier: DCMOMmyUOYVMhVyrgpjXbMAe0U+XeJfVgywiag8Owrc= Subject key identifier: A0:F5:AB:4C:F1:E0:B1:12:9A:73:D5:CA:5E:4C:CE:C0:42:A1:85:80 Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2 Certificate serial: 019B7B365333EDED8787C32DF8B526194001 Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/oPWrTPHgsRKac9XKXkzOwEKhhYA.roa Signing time: Thu 01 Jan 2026 20:18:36 +0000 ROA not before: Thu 01 Jan 2026 20:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44508 IP address blocks: 91.198.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:53:33:ed:ed:87:87:c3:2d:f8:b5:26:19:40:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2 Validity Not Before: Jan 1 20:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0f5ab4cf1e0b1129a73d5ca5e4ccec042a18580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d3:f9:45:48:7c:c7:39:86:44:fd:50:74:5e: 6a:7c:10:aa:6e:02:aa:91:7b:4c:5e:ec:bd:cc:75: 3a:e3:44:08:87:8d:52:e3:4a:d9:5d:02:c3:79:22: 07:ae:b2:c7:78:16:3e:b6:bc:7f:38:3e:ea:df:7c: 96:0e:92:82:ca:b3:cd:06:c9:e3:ec:7a:d8:48:85: 20:1d:95:42:67:7c:3e:6d:59:32:20:09:da:42:cb: 2d:31:ed:f4:6f:80:2e:13:08:a3:55:81:57:69:6b: 37:7a:d9:02:88:4c:8a:ea:0a:e1:30:fe:42:75:97: 4a:b1:73:f6:a5:be:7f:91:99:86:78:00:9a:4f:60: 56:0c:2d:9b:cc:0b:ac:78:21:94:ca:e7:f4:64:fd: 69:c1:f6:54:08:48:15:34:a6:c2:aa:62:98:4b:83: ae:06:46:dd:f4:be:c5:32:d8:84:7b:6c:dd:4c:a9: ab:69:8f:f7:5a:d1:12:a4:81:26:c8:14:38:07:92: 8c:68:32:71:0d:44:31:69:85:29:6d:53:8d:20:3c: 78:17:09:78:a6:4a:01:70:88:33:bf:8e:d1:c7:f6: 7a:8c:29:80:b2:f5:66:8f:dc:c6:30:e8:d9:ea:ad: 70:c9:92:49:1d:6c:05:b5:85:45:4e:fd:a6:0e:23: 7c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F5:AB:4C:F1:E0:B1:12:9A:73:D5:CA:5E:4C:CE:C0:42:A1:85:80 X509v3 Authority Key Identifier: keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/oPWrTPHgsRKac9XKXkzOwEKhhYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.227.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:f8:1c:8f:57:5f:4e:46:91:eb:13:75:51:5f:6f:ba:a3:07: cf:76:a1:bd:35:4e:47:4a:20:a7:e6:c2:4b:4f:d0:09:0c:61: 29:90:0f:db:35:a4:50:56:e2:b8:e5:be:63:c3:0e:bb:3e:7d: 6e:24:96:12:e6:0a:97:2a:f6:5f:fb:93:b6:9d:d7:e6:09:eb: ca:24:fa:f7:30:80:aa:0a:22:68:43:88:30:bb:36:71:b5:13: c5:7f:19:ac:0a:c6:3f:c6:2b:89:77:fb:69:56:f6:cf:d4:7e: 18:bc:f1:f2:cd:82:9e:b2:2e:5e:09:3d:5f:8a:4c:4b:bd:f6: 15:da:ca:e0:a4:77:5b:ab:f5:a6:3c:7c:26:37:6d:99:ac:79: 4d:c5:1e:4b:60:8c:fa:75:4b:67:f1:67:02:8e:1c:83:91:2d: 34:8f:a0:d8:54:37:de:0b:56:b4:85:b2:0e:29:0f:2a:95:29: 2c:4c:bb:4e:1a:16:65:22:1b:9f:a9:85:7d:9f:13:17:5c:4d: b4:10:31:bb:e1:d2:61:01:71:a9:45:3b:14:b1:c7:a0:42:f6: de:87:d6:af:a8:8a:fe:0c:23:87:6d:82:0a:11:a9:7e:95:51: 7d:e5:2b:77:5e:7d:4f:42:f2:55:43:ab:5c:a4:0a:77:13:06: 2d:95:71:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NlMz7e2Hh8Mt+LUmGUABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Zjg0MzYwMDNkMzc2MDIwMjZiNjU1MzE3NTVjYThmY2Qz MWJlZDIwHhcNMjYwMTAxMjAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGY1YWI0Y2YxZTBiMTEyOWE3M2Q1Y2E1ZTRjY2VjMDQyYTE4NTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tP5RUh8xzmGRP1QdF5qfBCqbgKq kXtMXuy9zHU640QIh41S40rZXQLDeSIHrrLHeBY+trx/OD7q33yWDpKCyrPNBsnj 7HrYSIUgHZVCZ3w+bVkyIAnaQsstMe30b4AuEwijVYFXaWs3etkCiEyK6grhMP5C dZdKsXP2pb5/kZmGeACaT2BWDC2bzAuseCGUyuf0ZP1pwfZUCEgVNKbCqmKYS4Ou Bkbd9L7FMtiEe2zdTKmraY/3WtESpIEmyBQ4B5KMaDJxDUQxaYUpbVONIDx4Fwl4 pkoBcIgzv47Rx/Z6jCmAsvVmj9zGMOjZ6q1wyZJJHWwFtYVFTv2mDiN8UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKD1q0zx4LESmnPVyl5MzsBCoYWAMB8GA1UdIwQY MBaAFKT4Q2AD03YCAmtlUxdVyo/NMb7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQt MjdiZjgzY2RlZDZiLzEvb1BXclRQSGdzUkthYzlYS1hrek93RUtoaFlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQtMjdiZjgzY2RlZDZi LzEvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8bjMA0G CSqGSIb3DQEBCwUAA4IBAQBr+ByPV19ORpHrE3VRX2+6owfPdqG9NU5HSiCn5sJL T9AJDGEpkA/bNaRQVuK45b5jww67Pn1uJJYS5gqXKvZf+5O2ndfmCevKJPr3MICq CiJoQ4gwuzZxtRPFfxmsCsY/xiuJd/tpVvbP1H4YvPHyzYKesi5eCT1fikxLvfYV 2srgpHdbq/WmPHwmN22ZrHlNxR5LYIz6dUtn8WcCjhyDkS00j6DYVDfeC1a0hbIO KQ8qlSksTLtOGhZlIhufqYV9nxMXXE20EDG74dJhAXGpRTsUscegQvbeh9avqIr+ DCOHbYIKEal+lVF95St3Xn1PQvJVQ6tcpAp3EwYtlXFI -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:02 2026 by rpki-client