This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k_oytwtzJ6aPo83jfZF9WWbVSjs.roa File: k_oytwtzJ6aPo83jfZF9WWbVSjs.roa (raw, json) Hash identifier: nmU0j23sH/iaKq9nZghH056SEJGXaejBS/moBWbMIco= Subject key identifier: 93:FA:32:B7:0B:73:27:A6:8F:A3:CD:E3:7D:91:7D:59:66:D5:4A:3B Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2FB72DA722F54EFE76814ADEE89D9 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k_oytwtzJ6aPo83jfZF9WWbVSjs.roa Signing time: Thu 01 Jan 2026 08:18:25 +0000 ROA not before: Thu 01 Jan 2026 08:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43824 IP address blocks: 185.226.173.0/24 maxlen: 24 185.226.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fb:72:da:72:2f:54:ef:e7:68:14:ad:ee:89:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93fa32b70b7327a68fa3cde37d917d5966d54a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ca:7a:8c:ca:9e:b1:c6:d4:be:00:e9:16:7a: 16:a4:27:e9:c1:0b:92:9e:ed:07:2e:54:d3:7f:8b: 19:d4:58:6e:67:60:90:54:d7:9c:3d:12:e0:71:a8: b2:5e:bb:e0:bf:78:45:31:19:91:3d:08:ac:09:ec: 4f:13:b3:1c:ab:8d:83:60:bc:ba:a9:a0:5e:5b:a2: 78:ce:2b:2b:e7:48:1d:2e:60:77:69:1b:44:73:49: 62:84:56:74:b1:46:75:93:af:c6:06:ee:5f:6c:69: 0d:45:b2:a7:c8:cd:0c:96:38:c7:53:f1:2d:68:f6: ab:2f:86:92:b3:20:96:43:5d:93:fe:55:76:7a:9e: 7f:36:97:c3:74:e1:49:c9:41:c2:de:ca:0c:a1:6e: 49:bf:2f:9c:76:e9:46:59:00:51:54:da:d0:fa:17: 17:e7:03:6a:b1:7a:c2:8e:88:d2:d4:ab:4f:2c:04: 1f:75:66:ad:aa:fb:3a:4c:3c:c1:fe:02:09:0f:fb: 4b:ef:b3:c9:97:65:51:ec:f5:35:ed:1d:ac:71:22: 75:d2:b1:ab:5d:8f:7b:16:6d:57:06:33:8b:80:5e: 7a:04:a5:29:81:6e:2b:47:2c:b3:55:0c:87:fd:0e: 6b:dd:f9:52:61:89:b8:19:cd:de:63:99:5a:1a:39: 4e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FA:32:B7:0B:73:27:A6:8F:A3:CD:E3:7D:91:7D:59:66:D5:4A:3B X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k_oytwtzJ6aPo83jfZF9WWbVSjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.173.0/24 185.226.175.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:24:9f:10:88:d7:f0:1d:8b:df:f4:87:c5:ab:f6:23:f1:53: 04:a9:df:a2:ab:9b:79:72:c5:89:ab:00:36:37:a2:e2:8f:db: b3:a0:dc:c4:3e:6e:ed:6a:a9:ad:14:92:c5:6c:8a:fc:e8:90: 81:4c:0b:62:1a:cc:fd:fc:61:82:72:81:a9:e3:3a:42:d6:67: 2a:83:19:46:5e:e3:49:1a:d7:9c:0a:d2:4d:58:c0:06:20:bd: 10:d7:09:5d:a7:75:9a:3b:d5:eb:69:a1:1e:b4:d8:eb:60:0c: 5e:9d:6a:01:be:b8:bb:b4:8e:54:77:92:84:d7:30:28:64:07: 88:ed:46:5b:be:46:c9:d6:4c:5a:4d:3b:a6:58:b5:0b:98:d2: 5a:09:ec:de:ac:d1:4c:86:77:cd:a0:c2:54:cb:66:20:f4:53: 39:55:07:be:78:63:09:b2:90:2e:e5:0f:c1:26:5c:a4:57:1d: b7:e7:2b:18:97:02:e8:af:a5:08:7f:1a:d7:23:e6:88:80:88: 04:db:3f:a4:ec:4b:16:fa:3a:43:e9:01:ee:eb:01:3a:4a:2d: e8:ba:2f:06:45:27:c0:11:f5:4a:07:6c:52:c0:1e:f8:80:f9: 56:40:17:7f:e5:bf:8e:f8:ee:cf:4a:dc:db:2f:24:b7:1c:0c: 7f:2a:ea:9e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ovty2nIvVO/naBSt7onZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2ZhMzJiNzBiNzMyN2E2OGZhM2NkZTM3ZDkxN2Q1OTY2ZDU0YTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysp6jMqescbUvgDpFnoWpCfpwQuS nu0HLlTTf4sZ1FhuZ2CQVNecPRLgcaiyXrvgv3hFMRmRPQisCexPE7Mcq42DYLy6 qaBeW6J4zisr50gdLmB3aRtEc0lihFZ0sUZ1k6/GBu5fbGkNRbKnyM0MljjHU/Et aParL4aSsyCWQ12T/lV2ep5/NpfDdOFJyUHC3soMoW5Jvy+cdulGWQBRVNrQ+hcX 5wNqsXrCjojS1KtPLAQfdWatqvs6TDzB/gIJD/tL77PJl2VR7PU17R2scSJ10rGr XY97Fm1XBjOLgF56BKUpgW4rRyyzVQyH/Q5r3flSYYm4Gc3eY5laGjlOZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJP6MrcLcyemj6PN432RfVlm1Uo7MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEva19veXR3dHpKNmFQbzgzamZaRjlXV2JWU2pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueKtAwQA ueKvMA0GCSqGSIb3DQEBCwUAA4IBAQBbJJ8QiNfwHYvf9IfFq/Yj8VMEqd+iq5t5 csWJqwA2N6Lij9uzoNzEPm7taqmtFJLFbIr86JCBTAtiGsz9/GGCcoGp4zpC1mcq gxlGXuNJGtecCtJNWMAGIL0Q1wldp3WaO9XraaEetNjrYAxenWoBvri7tI5Ud5KE 1zAoZAeI7UZbvkbJ1kxaTTumWLULmNJaCezerNFMhnfNoMJUy2Yg9FM5VQe+eGMJ spAu5Q/BJlykVx235ysYlwLor6UIfxrXI+aIgIgE2z+k7EsW+jpD6QHu6wE6Si3o ui8GRSfAEfVKB2xSwB74gPlWQBd/5b+O+O7PStzbLyS3HAx/Kuqe -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:26 2026 by rpki-client