This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OQw7RREfjuEdzHBS7_qmOp17_mA.roa File: OQw7RREfjuEdzHBS7_qmOp17_mA.roa (raw, json) Hash identifier: 53lYi1HS4lOyA1IRNMU5M9Qz9lNCAycHuTT9+u/RxNM= Subject key identifier: 39:0C:3B:45:11:1F:8E:E1:1D:CC:70:52:EF:FA:A6:3A:9D:7B:FE:60 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8551A88D238F829C5490943C9F9969 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OQw7RREfjuEdzHBS7_qmOp17_mA.roa Signing time: Fri 02 Jan 2026 16:23:22 +0000 ROA not before: Fri 02 Jan 2026 16:23:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49418 IP address blocks: 212.192.250.0/24 maxlen: 24 212.192.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:51:a8:8d:23:8f:82:9c:54:90:94:3c:9f:99:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=390c3b45111f8ee11dcc7052effaa63a9d7bfe60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3d:23:97:22:18:81:e6:29:d1:94:eb:04:21: 18:ac:e6:2f:be:5d:1a:c1:05:19:12:ea:a9:53:77: 92:2f:79:eb:0a:24:38:25:5d:ff:3b:35:b6:03:b0: bf:68:46:4a:b0:a7:52:e0:a5:b0:3a:29:cd:a3:83: 7b:21:0b:2c:cc:63:66:e2:7d:52:25:aa:6b:62:b6: a0:18:1a:ce:f1:91:21:1e:ee:44:ce:4f:4f:10:7d: 3b:8f:7a:a2:e5:61:52:c9:ea:66:29:b4:0b:71:6a: 55:26:ea:66:44:3a:7d:ef:6a:0d:6f:15:11:e5:46: a8:7b:6c:2e:dd:ea:29:b2:22:7d:e9:34:99:dd:a0: b0:66:19:ef:43:e5:42:09:ae:a6:6b:fa:39:32:6b: 3c:8d:8d:62:b3:f7:e4:5e:6c:b9:bb:57:22:9d:d0: 7b:5c:52:80:7d:df:ec:85:51:bd:25:c5:22:b1:97: 4e:a0:14:d7:a7:82:33:71:ed:9b:84:11:06:ae:09: ba:e9:2d:8b:df:ad:53:78:77:07:38:b9:3c:ac:f1: 23:5a:9b:39:9b:27:5f:58:9c:77:07:8b:86:27:5c: b5:a8:29:6e:fb:0e:ad:44:c6:14:66:99:0c:0e:32: 19:80:61:87:8d:d8:8b:6e:41:4c:5c:58:f0:54:1b: 20:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0C:3B:45:11:1F:8E:E1:1D:CC:70:52:EF:FA:A6:3A:9D:7B:FE:60 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OQw7RREfjuEdzHBS7_qmOp17_mA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.192.250.0/24 212.192.255.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:c6:b4:fb:b8:c0:19:2a:12:26:cc:ac:9c:ee:f3:1c:41:d5: 35:88:ea:0d:2e:c4:b2:6f:53:8c:ff:42:6a:90:bb:29:68:c4: ab:9f:09:0f:cb:f3:91:e8:f4:35:ef:61:cf:49:38:08:75:5d: ea:31:58:03:4d:f7:cc:1f:9a:93:b1:68:71:3b:9c:98:7f:65: f2:81:55:75:22:2e:02:50:a3:51:55:b4:b2:8c:ab:70:60:44: c3:31:6e:af:5b:d2:b5:cb:d5:98:b9:28:01:32:5f:e4:6b:b4: 43:76:a0:0d:30:06:30:72:6e:fe:0f:68:2d:4e:7c:b8:29:c3: d1:cd:23:d4:4a:99:fb:3b:48:32:ef:51:5c:bb:27:25:62:47: 0d:4b:c1:a6:29:c7:89:3b:53:14:75:b1:cf:be:2b:b3:00:c4: 0a:d0:09:b2:72:6f:a1:c9:58:f2:66:f1:cd:d3:8c:55:58:40: 15:ca:1d:d0:73:50:5f:18:e2:09:e4:d8:21:ea:5d:6a:77:02: 94:9e:d4:2e:e8:12:8b:4c:7d:3a:99:a3:ff:bc:07:89:03:38: f3:85:41:17:9a:3f:ac:90:eb:64:02:87:03:a4:07:01:57:dd: 7f:dd:ef:a8:8f:a0:59:cc:2c:75:42:2c:16:c5:79:80:2e:60: b6:7e:01:50 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hVGojSOPgpxUkJQ8n5lpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTBjM2I0NTExMWY4ZWUxMWRjYzcwNTJlZmZhYTYzYTlkN2JmZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD0jlyIYgeYp0ZTrBCEYrOYvvl0a wQUZEuqpU3eSL3nrCiQ4JV3/OzW2A7C/aEZKsKdS4KWwOinNo4N7IQsszGNm4n1S JaprYragGBrO8ZEhHu5Ezk9PEH07j3qi5WFSyepmKbQLcWpVJupmRDp972oNbxUR 5Uaoe2wu3eopsiJ96TSZ3aCwZhnvQ+VCCa6ma/o5Mms8jY1is/fkXmy5u1cindB7 XFKAfd/shVG9JcUisZdOoBTXp4Izce2bhBEGrgm66S2L361TeHcHOLk8rPEjWps5 mydfWJx3B4uGJ1y1qClu+w6tRMYUZpkMDjIZgGGHjdiLbkFMXFjwVBsgswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDkMO0URH47hHcxwUu/6pjqde/5gMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvT1F3N1JSRWZqdUVkekhCUzdfcW1PcDE3X21BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1MD6AwQA 1MD/MA0GCSqGSIb3DQEBCwUAA4IBAQBqxrT7uMAZKhImzKyc7vMcQdU1iOoNLsSy b1OM/0JqkLspaMSrnwkPy/OR6PQ172HPSTgIdV3qMVgDTffMH5qTsWhxO5yYf2Xy gVV1Ii4CUKNRVbSyjKtwYETDMW6vW9K1y9WYuSgBMl/ka7RDdqANMAYwcm7+D2gt Tny4KcPRzSPUSpn7O0gy71FcuyclYkcNS8GmKceJO1MUdbHPviuzAMQK0Amycm+h yVjyZvHN04xVWEAVyh3Qc1BfGOIJ5Ngh6l1qdwKUntQu6BKLTH06maP/vAeJAzjz hUEXmj+skOtkAocDpAcBV91/3e+oj6BZzCx1QiwWxXmALmC2fgFQ -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:41 2026 by rpki-client