This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/oQUSrEROqxA0JRpbiStP3_G82GM.roa File: oQUSrEROqxA0JRpbiStP3_G82GM.roa (raw, json) Hash identifier: XUh60Rhyc+lm/VBx4kH4IarcFH4VCmn/oycmnKA5p14= Subject key identifier: A1:05:12:AC:44:4E:AB:10:34:25:1A:5B:89:2B:4F:DF:F1:BC:D8:63 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 019BDA66FF1945FA493039675EE748EA5B3E Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/oQUSrEROqxA0JRpbiStP3_G82GM.roa Signing time: Tue 20 Jan 2026 07:55:41 +0000 ROA not before: Tue 20 Jan 2026 07:55:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209413 IP address blocks: 176.65.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 07:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:66:ff:19:45:fa:49:30:39:67:5e:e7:48:ea:5b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Jan 20 07:55:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a10512ac444eab1034251a5b892b4fdff1bcd863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cd:3c:0d:79:50:b2:42:50:c8:53:b6:fa:06: e2:c5:fc:f3:49:92:66:5c:1e:cb:67:c1:87:e4:50: d0:b6:9b:16:cf:73:c5:77:69:42:90:38:5b:c1:46: 04:c5:3a:85:99:c3:ad:85:db:27:3b:67:62:f4:38: 5f:14:bb:d2:ff:3f:5e:32:24:d9:f3:78:33:73:92: 78:1b:fd:75:65:d1:55:27:9c:47:e5:6a:41:45:1a: 5c:7d:38:46:84:fa:9e:d1:ae:64:21:50:15:8b:a1: a6:11:04:51:2d:da:68:3b:1e:12:6b:06:25:ef:7b: 81:03:ac:54:8d:b1:73:3a:1d:1b:4f:8c:fe:d9:74: 36:02:85:de:7c:d1:58:a1:d3:28:b5:46:ce:97:bd: ee:97:01:ed:2a:94:1d:f4:98:6c:d7:3c:98:04:0a: 8c:a0:ac:97:42:ed:ae:7d:f3:42:65:98:40:5e:75: f7:e0:a0:c9:8c:a6:28:e6:2b:c3:86:bf:2e:c6:93: 48:16:c5:2d:ce:dc:18:4b:96:13:bb:f8:62:7d:44: c4:99:29:56:ce:a1:fe:80:d8:be:50:b6:a1:17:bf: 06:b8:e1:49:d9:5d:d8:22:e5:68:6d:30:2a:2a:71: ed:71:a2:f8:12:ba:ed:9f:02:98:60:d2:5c:69:16: 82:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:05:12:AC:44:4E:AB:10:34:25:1A:5B:89:2B:4F:DF:F1:BC:D8:63 X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/oQUSrEROqxA0JRpbiStP3_G82GM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.65.144.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:24:2a:9e:b7:08:4d:e3:73:6a:6c:a2:ff:1f:dc:ea:27:d2: 39:7b:34:1a:0a:ae:ec:ae:c7:4c:c9:21:08:66:07:34:03:54: ac:ad:d9:6e:0b:b9:a8:10:27:7e:74:b0:34:e4:78:c3:02:c3: be:57:08:d0:4e:45:bc:f8:ca:10:77:35:e1:7c:a7:25:83:cb: 46:46:b7:0d:99:dc:1f:3e:2e:e8:69:81:f1:91:64:ac:09:f9: 2d:16:ee:10:4c:1c:c0:e2:2c:43:76:68:96:7c:67:f2:79:c6: b2:f7:47:f1:60:23:de:38:7c:55:27:17:72:69:6a:e6:69:3d: 88:b6:84:2b:74:e0:df:ce:a2:52:11:84:04:1d:44:b2:7d:90: e3:34:e2:ff:2c:75:1c:0d:f6:90:db:19:7c:dd:41:93:b3:9c: 9a:a4:3b:a5:93:39:66:bb:53:81:30:db:01:3c:4a:cc:86:b3: 6e:92:30:5d:a7:de:ac:72:8f:75:8f:da:34:98:05:c8:cb:17: 28:30:39:96:94:55:6c:0e:7e:c1:61:88:5a:e2:ea:79:44:1e: a4:49:ad:36:74:df:8b:6b:14:fc:42:d5:e5:c8:46:2b:fb:90: 53:fc:81:8d:42:ce:0e:ad:e5:85:0e:3c:0e:70:ac:1b:f1:90: f9:95:c4:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvaZv8ZRfpJMDlnXudI6ls+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYwMTIwMDc1NTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTA1MTJhYzQ0NGVhYjEwMzQyNTFhNWI4OTJiNGZkZmYxYmNkODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM08DXlQskJQyFO2+gbixfzzSZJm XB7LZ8GH5FDQtpsWz3PFd2lCkDhbwUYExTqFmcOthdsnO2di9DhfFLvS/z9eMiTZ 83gzc5J4G/11ZdFVJ5xH5WpBRRpcfThGhPqe0a5kIVAVi6GmEQRRLdpoOx4SawYl 73uBA6xUjbFzOh0bT4z+2XQ2AoXefNFYodMotUbOl73ulwHtKpQd9Jhs1zyYBAqM oKyXQu2uffNCZZhAXnX34KDJjKYo5ivDhr8uxpNIFsUtztwYS5YTu/hifUTEmSlW zqH+gNi+ULahF78GuOFJ2V3YIuVobTAqKnHtcaL4ErrtnwKYYNJcaRaClQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKEFEqxETqsQNCUaW4krT9/xvNhjMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvb1FVU3JFUk9xeEEwSlJwYmlTdFAzX0c4MkdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsEGQMA0G CSqGSIb3DQEBCwUAA4IBAQAsJCqetwhN43NqbKL/H9zqJ9I5ezQaCq7srsdMySEI Zgc0A1SsrdluC7moECd+dLA05HjDAsO+VwjQTkW8+MoQdzXhfKclg8tGRrcNmdwf Pi7oaYHxkWSsCfktFu4QTBzA4ixDdmiWfGfyecay90fxYCPeOHxVJxdyaWrmaT2I toQrdODfzqJSEYQEHUSyfZDjNOL/LHUcDfaQ2xl83UGTs5yapDulkzlmu1OBMNsB PErMhrNukjBdp96sco91j9o0mAXIyxcoMDmWlFVsDn7BYYha4up5RB6kSa02dN+L axT8QtXlyEYr+5BT/IGNQs4OreWFDjwOcKwb8ZD5lcS8 -----END CERTIFICATE-----Generated at Fri Jan 23 17:46:06 2026 by rpki-client