This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/OgmO1-eTgD9dDZrWj316OjI4JBA.roa File: OgmO1-eTgD9dDZrWj316OjI4JBA.roa (raw, json) Hash identifier: 2J65qaET21q0mAcovvv6olsnYJM+JIut2vJCZjhvWr4= Subject key identifier: 3A:09:8E:D7:E7:93:80:3F:5D:0D:9A:D6:8F:7D:7A:3A:32:38:24:10 Certificate issuer: /CN=b043e621fe1009701f6366843c0abc41e180c144 Certificate serial: 019B7EA518EF2BEC545B4ED6E436ACE037B4 Authority key identifier: B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/OgmO1-eTgD9dDZrWj316OjI4JBA.roa Signing time: Fri 02 Jan 2026 12:18:27 +0000 ROA not before: Fri 02 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8708 IP address blocks: 193.111.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:18:ef:2b:ec:54:5b:4e:d6:e4:36:ac:e0:37:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b043e621fe1009701f6366843c0abc41e180c144 Validity Not Before: Jan 2 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a098ed7e793803f5d0d9ad68f7d7a3a32382410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ed:6e:36:08:c9:8a:82:f2:57:28:36:5e:b6: 30:7f:25:db:f8:01:3e:b5:14:19:c2:30:18:1f:35: 39:61:4c:7b:aa:5f:f1:46:88:4e:68:c5:cd:5d:15: 10:06:53:37:2c:70:8f:a8:25:31:83:fd:2c:63:ba: de:2b:63:72:cb:1a:9c:10:3b:18:30:f7:19:bf:60: f9:7b:c7:9f:5a:6e:e5:85:46:fd:e3:44:f5:7e:7d: 5d:10:ae:95:8f:a0:73:c5:33:67:88:b3:67:42:92: c1:94:aa:f6:bd:b9:84:dc:85:a7:bf:30:37:69:03: fc:7e:73:1e:86:a4:5f:75:05:98:34:7d:66:0d:64: 40:83:65:b0:61:99:9a:11:05:25:01:d4:0d:70:97: 5f:68:91:42:f8:c1:7c:29:20:a5:b9:68:81:4c:e3: d1:4a:19:15:0f:b1:8a:9a:a9:fd:61:9b:b6:a8:8b: 26:af:e2:37:e8:3c:8d:16:a9:cc:b8:65:4e:97:6f: a6:02:aa:cc:71:1d:55:cf:5a:0e:f1:e9:ba:46:9f: 7d:3a:3c:be:00:0f:f5:7f:a7:1c:3e:96:b7:ce:18: a4:42:4c:b5:bc:86:db:0b:be:05:e1:23:68:3f:12: f8:17:dc:41:a6:4c:6e:56:86:91:76:cc:ce:09:8b: 8a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:09:8E:D7:E7:93:80:3F:5D:0D:9A:D6:8F:7D:7A:3A:32:38:24:10 X509v3 Authority Key Identifier: keyid:B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/OgmO1-eTgD9dDZrWj316OjI4JBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.161.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:cd:c8:84:89:7d:87:b4:25:7f:d4:a6:42:66:a2:61:81:fc: 38:4e:b3:cb:60:87:81:91:2a:58:5d:b2:d5:f4:b7:6a:03:6c: 50:31:4c:1c:54:9e:04:6a:96:8b:0c:2f:19:95:f8:9d:10:de: f4:65:65:95:db:1a:05:17:1b:b8:4b:04:8a:52:30:a9:01:4f: f1:65:84:fd:09:85:ab:35:5d:85:e8:84:cd:59:c9:a5:07:b5: eb:38:15:76:bb:e7:c1:06:2c:7f:96:b6:da:3c:de:50:77:63: b7:26:18:11:25:97:dc:65:c2:dc:56:fe:47:7b:e9:41:28:63: 5b:95:84:e6:35:1e:96:87:5d:dd:2e:d7:10:75:b9:4f:7a:1e: ac:b8:4c:38:6b:bd:5d:0d:6f:96:c1:5b:ab:dd:d4:13:73:11: 75:ee:e7:aa:21:23:22:ab:ea:d1:58:91:6f:dc:b3:5f:c4:2b: c2:8b:a0:ad:17:cf:8a:34:fc:71:25:0e:80:a9:4f:87:19:23: 4b:50:c2:f1:19:a1:35:72:e9:64:39:aa:6d:57:92:a3:19:f9: f7:d2:3d:1d:ef:31:e1:fc:8b:b0:e3:bb:49:52:eb:32:63:90: 0a:44:58:12:26:97:e7:f6:3d:d1:0e:50:fd:59:30:a6:19:5f: 4a:52:ce:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pRjvK+xUW07W5Das4De0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNDNlNjIxZmUxMDA5NzAxZjYzNjY4NDNjMGFiYzQxZTE4 MGMxNDQwHhcNMjYwMTAyMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTA5OGVkN2U3OTM4MDNmNWQwZDlhZDY4ZjdkN2EzYTMyMzgyNDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+1uNgjJioLyVyg2XrYwfyXb+AE+ tRQZwjAYHzU5YUx7ql/xRohOaMXNXRUQBlM3LHCPqCUxg/0sY7reK2NyyxqcEDsY MPcZv2D5e8efWm7lhUb940T1fn1dEK6Vj6BzxTNniLNnQpLBlKr2vbmE3IWnvzA3 aQP8fnMehqRfdQWYNH1mDWRAg2WwYZmaEQUlAdQNcJdfaJFC+MF8KSCluWiBTOPR ShkVD7GKmqn9YZu2qIsmr+I36DyNFqnMuGVOl2+mAqrMcR1Vz1oO8em6Rp99Ojy+ AA/1f6ccPpa3zhikQky1vIbbC74F4SNoPxL4F9xBpkxuVoaRdszOCYuKYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDoJjtfnk4A/XQ2a1o99ejoyOCQQMB8GA1UdIwQY MBaAFLBD5iH+EAlwH2NmhDwKvEHhgMFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0VQbUlmNFFDWEFmWTJhRVBBcThRZUdBd1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zOTU2ODQtYzg3Mi00MjE3LWIyN2Mt OGI1ZWE2NjQ4MTc2LzEvT2dtTzEtZVRnRDlkRFpyV2ozMTZPakk0SkJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8zOTU2ODQtYzg3Mi00MjE3LWIyN2MtOGI1ZWE2NjQ4MTc2 LzEvc0VQbUlmNFFDWEFmWTJhRVBBcThRZUdBd1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW+hMA0G CSqGSIb3DQEBCwUAA4IBAQBbzciEiX2HtCV/1KZCZqJhgfw4TrPLYIeBkSpYXbLV 9LdqA2xQMUwcVJ4EapaLDC8ZlfidEN70ZWWV2xoFFxu4SwSKUjCpAU/xZYT9CYWr NV2F6ITNWcmlB7XrOBV2u+fBBix/lrbaPN5Qd2O3JhgRJZfcZcLcVv5He+lBKGNb lYTmNR6Wh13dLtcQdblPeh6suEw4a71dDW+WwVur3dQTcxF17ueqISMiq+rRWJFv 3LNfxCvCi6CtF8+KNPxxJQ6AqU+HGSNLUMLxGaE1culkOaptV5KjGfn30j0d7zHh /Iuw47tJUusyY5AKRFgSJpfn9j3RDlD9WTCmGV9KUs7O -----END CERTIFICATE-----Generated at Mon Jan 26 14:14:13 2026 by rpki-client