This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/Oigk8x42n2srDK0X7uF3mGQTa5U.roa File: Oigk8x42n2srDK0X7uF3mGQTa5U.roa (raw, json) Hash identifier: XAfo6ieIhAzw5ZZ26D6D8t+cKnugPfgfyLO9JlIq68I= Subject key identifier: 3A:28:24:F3:1E:36:9F:6B:2B:0C:AD:17:EE:E1:77:98:64:13:6B:95 Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429 Certificate serial: 019B79ED31B22156515A428AEBDEFDC8D617 Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/Oigk8x42n2srDK0X7uF3mGQTa5U.roa Signing time: Thu 01 Jan 2026 14:19:06 +0000 ROA not before: Thu 01 Jan 2026 14:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60154 IP address blocks: 192.251.230.0/24 maxlen: 24 193.0.129.0/24 maxlen: 24 193.0.184.0/24 maxlen: 24 193.0.212.0/24 maxlen: 24 2a0f:7ac0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:31:b2:21:56:51:5a:42:8a:eb:de:fd:c8:d6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429 Validity Not Before: Jan 1 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a2824f31e369f6b2b0cad17eee1779864136b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f8:37:6c:13:f4:b6:6a:3b:9f:0a:57:e7:99: cc:ad:d2:fc:17:dd:68:ea:65:0c:10:47:97:e5:8c: ef:4a:02:e1:06:78:27:cf:b3:6b:d1:fd:7e:2a:4e: 86:db:a2:5e:17:de:b1:5e:39:74:3d:26:c4:18:c6: 75:e4:60:26:06:16:49:c5:71:d4:a1:f3:db:b3:95: 2c:cd:27:de:95:11:ac:ce:dd:6a:63:9d:4f:9b:d1: 64:20:35:49:f9:91:a5:1e:aa:48:ab:5c:81:2f:70: 65:e2:11:06:4c:45:7d:8c:69:e7:49:86:d2:c6:27: 47:8a:d6:2a:71:63:53:c2:74:8f:b1:fa:8a:0c:f6: 1f:44:ab:aa:73:51:a6:d5:4c:cd:c0:c4:a2:38:91: ba:c7:9f:0e:73:84:08:b6:69:a1:e0:08:0d:ca:18: a8:7a:aa:6f:3c:1b:e7:69:3c:d3:53:22:ad:4d:c2: 79:e9:eb:f2:77:d7:f9:56:b5:e5:5a:86:ac:60:91: d3:e1:e2:8f:71:53:a8:a2:25:48:e0:51:c1:bf:bd: b8:76:08:76:93:ab:b3:39:3e:1a:05:3c:ca:f0:57: 6e:7f:40:d2:18:c0:29:76:d6:28:4c:72:41:50:c2: a4:96:cb:4f:96:d2:90:a5:4e:7d:f4:ac:cd:da:aa: 50:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:28:24:F3:1E:36:9F:6B:2B:0C:AD:17:EE:E1:77:98:64:13:6B:95 X509v3 Authority Key Identifier: keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/Oigk8x42n2srDK0X7uF3mGQTa5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.251.230.0/24 193.0.129.0/24 193.0.184.0/24 193.0.212.0/24 IPv6: 2a0f:7ac0::/29 Signature Algorithm: sha256WithRSAEncryption 60:64:6b:6d:4b:58:ea:15:ac:0b:36:fa:87:e6:2b:f7:af:36: 4f:36:e2:4a:1a:74:b7:21:1a:fe:a3:2e:89:18:6e:00:d8:92: 1e:fb:7c:18:00:72:f6:93:7b:8a:5d:77:f2:ad:bb:a4:1c:46: 14:85:1d:aa:52:94:8c:df:20:33:81:cf:d9:87:36:39:f7:64: 88:1d:f7:1b:b7:8e:7d:69:60:a7:21:fe:a7:98:55:c1:eb:9c: c9:15:c7:1a:dd:6e:f3:03:85:11:8b:e7:af:09:24:c7:4a:11: 17:63:9a:0d:81:1f:12:7b:8d:78:c6:db:e6:f8:48:5e:f8:d1: 3c:78:35:69:20:de:6f:eb:43:fa:9a:3a:b5:9b:72:73:3e:ed: 61:2c:f9:70:e6:9e:a6:79:79:9b:ed:6f:b7:39:2b:4c:d8:04: 3b:98:e8:dc:be:6c:42:b0:97:01:eb:94:58:de:c0:34:ed:2d: 2c:5f:8e:90:0d:4b:10:76:ec:e1:4f:2a:f9:d3:23:3d:dd:ea: e0:2d:d3:c2:cc:7f:b6:e6:9c:a4:ea:40:48:3f:d7:ae:f9:e2: 9b:43:d0:ef:8f:04:32:b4:2e:06:f6:7a:2c:3e:f0:1c:a5:cb: 72:8c:de:cf:b7:6d:0f:de:a8:88:ed:a0:3a:5b:f5:75:80:76: 46:e1:52:03 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt57TGyIVZRWkKK6979yNYXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTdhNWVjMThjNGYyYzQ0Nzg0YWRjNTAzODM1NmJlNWFl ODk0MjkwHhcNMjYwMTAxMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTI4MjRmMzFlMzY5ZjZiMmIwY2FkMTdlZWUxNzc5ODY0MTM2Yjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPg3bBP0tmo7nwpX55nMrdL8F91o 6mUMEEeX5YzvSgLhBngnz7Nr0f1+Kk6G26JeF96xXjl0PSbEGMZ15GAmBhZJxXHU ofPbs5UszSfelRGszt1qY51Pm9FkIDVJ+ZGlHqpIq1yBL3Bl4hEGTEV9jGnnSYbS xidHitYqcWNTwnSPsfqKDPYfRKuqc1Gm1UzNwMSiOJG6x58Oc4QItmmh4AgNyhio eqpvPBvnaTzTUyKtTcJ56evyd9f5VrXlWoasYJHT4eKPcVOooiVI4FHBv724dgh2 k6uzOT4aBTzK8Fduf0DSGMApdtYoTHJBUMKklstPltKQpU599KzN2qpQOQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFDooJPMeNp9rKwytF+7hd5hkE2uVMB8GA1UdIwQY MBaAFBgXpewYxPLER4StxQODVr5a6JQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC83NzM2NzgtZTIwMC00NmFmLTg2YzEt NmJkODAyMmQyZWFlLzEvT2lnazh4NDJuMnNyREswWDd1RjNtR1FUYTVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC83NzM2NzgtZTIwMC00NmFmLTg2YzEtNmJkODAyMmQyZWFl LzEvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwPvmAwQA wQCBAwQAwQC4AwQAwQDUMA0EAgACMAcDBQMqD3rAMA0GCSqGSIb3DQEBCwUAA4IB AQBgZGttS1jqFawLNvqH5iv3rzZPNuJKGnS3IRr+oy6JGG4A2JIe+3wYAHL2k3uK XXfyrbukHEYUhR2qUpSM3yAzgc/ZhzY592SIHfcbt459aWCnIf6nmFXB65zJFcca 3W7zA4URi+evCSTHShEXY5oNgR8Se414xtvm+Ehe+NE8eDVpIN5v60P6mjq1m3Jz Pu1hLPlw5p6meXmb7W+3OStM2AQ7mOjcvmxCsJcB65RY3sA07S0sX46QDUsQduzh Tyr50yM93ergLdPCzH+25pyk6kBIP9eu+eKbQ9DvjwQytC4G9nosPvAcpctyjN7P t20P3qiI7aA6W/V1gHZG4VID -----END CERTIFICATE-----Generated at Sun Jan 25 21:57:49 2026 by rpki-client