This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/oNKjJGIAPXT8dZall2O4S4AYq6M.roa File: oNKjJGIAPXT8dZall2O4S4AYq6M.roa (raw, json) Hash identifier: 56SmuGoIwTXV/CRw0vPr6Byhn2+aY12OfodEclBMp80= Subject key identifier: A0:D2:A3:24:62:00:3D:74:FC:75:96:A5:97:63:B8:4B:80:18:AB:A3 Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903 Certificate serial: 019B79EC63A79C304A4AD2202B0EDD03C637 Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/oNKjJGIAPXT8dZall2O4S4AYq6M.roa Signing time: Thu 01 Jan 2026 14:18:13 +0000 ROA not before: Thu 01 Jan 2026 14:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201749 IP address blocks: 194.31.93.0/24 maxlen: 24 194.31.193.0/24 maxlen: 24 194.31.199.0/24 maxlen: 24 194.31.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:63:a7:9c:30:4a:4a:d2:20:2b:0e:dd:03:c6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903 Validity Not Before: Jan 1 14:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0d2a32462003d74fc7596a59763b84b8018aba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:51:50:d1:b6:96:29:40:8d:7f:d5:29:64:00: cb:4d:f8:6d:aa:05:fa:8a:32:83:a3:b5:c8:f0:37: 28:d6:dc:ed:3e:5f:67:0e:7f:c6:58:10:7e:b1:ba: 96:9a:57:b6:a3:6f:88:b2:9f:61:59:92:6d:d0:bc: 1e:37:4e:0e:66:ab:46:97:8c:34:e4:5d:38:1f:89: 9e:e8:ad:fb:9d:24:d3:1d:e9:6c:e5:12:4d:38:6f: 46:0d:c8:ce:c6:81:cb:5a:4a:5d:1b:91:63:19:a9: a4:38:6a:60:83:f6:6b:45:06:df:5a:f2:80:fd:de: 89:a4:c4:0b:8e:9e:a2:57:93:80:c7:e6:0f:fe:16: 0f:77:10:e7:9f:47:9b:01:fa:d1:89:c5:d9:90:c3: 87:6f:6d:dc:3b:17:55:5e:46:65:e6:e0:96:8d:14: 18:d5:6f:e9:ab:7a:29:1c:b4:c5:59:26:25:52:fc: 46:3e:b2:0f:0e:56:a3:fa:51:48:bd:b8:3d:76:5f: 34:03:d6:a5:bc:f0:a0:cd:6d:f7:ce:80:d9:20:a9: 4a:91:d1:3b:10:5b:4c:0e:90:c3:ba:5f:53:84:ac: 1c:a4:6a:be:4f:46:c1:ee:5e:e5:37:42:1f:9c:4b: 83:51:82:da:c3:1b:72:c0:fd:d8:4e:60:11:84:b8: dd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D2:A3:24:62:00:3D:74:FC:75:96:A5:97:63:B8:4B:80:18:AB:A3 X509v3 Authority Key Identifier: keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/oNKjJGIAPXT8dZall2O4S4AYq6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.93.0/24 194.31.193.0/24 194.31.199.0/24 194.31.220.0/24 Signature Algorithm: sha256WithRSAEncryption 53:54:90:da:6a:7e:27:55:2b:83:36:12:31:86:30:69:78:25: 47:dc:54:81:fe:c9:03:c3:9e:1e:20:57:90:53:8b:fe:43:e9: 6b:6c:63:c0:90:47:02:a8:ca:a0:73:27:b9:d6:2b:2c:61:b5: b9:4e:17:b5:c9:59:c0:b5:a8:b8:88:66:e8:82:95:b8:2c:bd: 7c:35:68:48:4a:61:9b:7d:30:f9:37:0d:12:28:ee:c0:7d:e1: 61:03:77:2a:76:fd:79:59:5c:58:b5:05:92:a5:77:a4:c8:c9: 1b:62:3e:d5:38:2a:01:1b:1a:e1:1b:b3:d7:53:44:dc:15:ff: c6:4b:93:5b:e9:d7:cc:2c:69:5f:98:a2:d0:3e:20:c6:10:28: 57:95:f7:f8:d9:8b:96:83:6b:e2:91:3c:e5:86:00:e2:20:62: 40:1b:cc:f7:61:4a:99:b2:3d:21:5a:36:f7:7c:6a:7c:fd:94: e3:c0:0f:8e:3e:dd:4c:62:4e:94:80:ee:61:4b:91:8e:22:ca: 41:ea:d5:8d:b7:f1:e4:85:ba:21:18:99:b5:24:f3:d8:40:36: 2b:fd:34:31:47:6e:e4:fc:22:ac:11:26:8e:20:f3:a3:2b:95: 13:83:c6:c9:f3:20:4a:b8:8d:b4:7c:84:44:31:78:68:3a:74: 11:45:56:8a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt57GOnnDBKStIgKw7dA8Y3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYmIyYTQzMDIwOTRmNGMzZjViYWRhNTQ3ZWY0ZjdlZGUx OGU5MDMwHhcNMjYwMTAxMTQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGQyYTMyNDYyMDAzZDc0ZmM3NTk2YTU5NzYzYjg0YjgwMThhYmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FFQ0baWKUCNf9UpZADLTfhtqgX6 ijKDo7XI8Dco1tztPl9nDn/GWBB+sbqWmle2o2+Isp9hWZJt0LweN04OZqtGl4w0 5F04H4me6K37nSTTHels5RJNOG9GDcjOxoHLWkpdG5FjGamkOGpgg/ZrRQbfWvKA /d6JpMQLjp6iV5OAx+YP/hYPdxDnn0ebAfrRicXZkMOHb23cOxdVXkZl5uCWjRQY 1W/pq3opHLTFWSYlUvxGPrIPDlaj+lFIvbg9dl80A9alvPCgzW33zoDZIKlKkdE7 EFtMDpDDul9ThKwcpGq+T0bB7l7lN0IfnEuDUYLawxtywP3YTmARhLjd/QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKDSoyRiAD10/HWWpZdjuEuAGKujMB8GA1UdIwQY MBaAFLu7KkMCCU9MP1utpUfvT37eGOkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jMzk5YTQtNTNiNi00MjcxLTliOTAt MzJiZjE2NDFmYjNiLzEvb05LakpHSUFQWFQ4ZFphbGwyTzRTNEFZcTZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jMzk5YTQtNTNiNi00MjcxLTliOTAtMzJiZjE2NDFmYjNi LzEvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwh9dAwQA wh/BAwQAwh/HAwQAwh/cMA0GCSqGSIb3DQEBCwUAA4IBAQBTVJDaan4nVSuDNhIx hjBpeCVH3FSB/skDw54eIFeQU4v+Q+lrbGPAkEcCqMqgcye51issYbW5The1yVnA tai4iGbogpW4LL18NWhISmGbfTD5Nw0SKO7AfeFhA3cqdv15WVxYtQWSpXekyMkb Yj7VOCoBGxrhG7PXU0TcFf/GS5Nb6dfMLGlfmKLQPiDGEChXlff42YuWg2vikTzl hgDiIGJAG8z3YUqZsj0hWjb3fGp8/ZTjwA+OPt1MYk6UgO5hS5GOIspB6tWNt/Hk hbohGJm1JPPYQDYr/TQxR27k/CKsESaOIPOjK5UTg8bJ8yBKuI20fIREMXhoOnQR RVaK -----END CERTIFICATE-----Generated at Thu Jan 29 12:36:10 2026 by rpki-client