This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oLXlsGG9sMj6VBzdzV3PtlhUis8.roa File: oLXlsGG9sMj6VBzdzV3PtlhUis8.roa (raw, json) Hash identifier: 6D0MHE9CPJ6/dORDQOOTeJrqwUHEv2VC95kQD5olixU= Subject key identifier: A0:B5:E5:B0:61:BD:B0:C8:FA:54:1C:DD:CD:5D:CF:B6:58:54:8A:CF Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A311669790DAD5E7B4AA3E147DA936 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oLXlsGG9sMj6VBzdzV3PtlhUis8.roa Signing time: Thu 01 Jan 2026 08:18:31 +0000 ROA not before: Thu 01 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60647 IP address blocks: 193.25.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:11:66:97:90:da:d5:e7:b4:aa:3e:14:7d:a9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0b5e5b061bdb0c8fa541cddcd5dcfb658548acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6b:45:95:82:ea:b2:03:6e:72:41:d2:a2:ab: d4:b0:77:9d:df:38:e6:64:08:6d:9d:5b:0a:fa:b2: 2f:56:e0:02:3b:60:a9:f2:e8:fb:b8:0c:77:14:d0: 0a:e3:7d:e6:e5:ea:fa:01:7a:d9:e4:24:66:bf:c1: 8a:39:f5:49:10:68:01:43:ef:b8:41:97:70:26:c8: 44:17:4f:12:79:c8:da:31:27:06:be:48:a8:a5:a5: 0d:9a:68:ac:1f:3a:d8:57:00:75:31:c7:f1:62:b0: 4b:8b:bc:34:aa:ab:3c:92:03:b0:3a:0d:2e:89:86: 09:5f:b1:a9:c1:93:48:de:da:66:df:cb:89:fd:50: 08:88:cc:91:6b:4b:29:c0:2d:78:c8:a3:ef:55:19: 2d:6f:ca:b8:07:5a:c5:9f:83:d7:9d:5e:10:a1:b4: 74:3b:46:d4:ec:bb:f4:b2:65:20:02:ce:1b:7f:18: 2e:90:bd:b9:84:d3:d8:a0:05:57:3f:3e:4b:d5:ee: 8c:c5:9c:e0:84:ef:25:0c:c6:bc:28:df:5b:fa:45: 4a:e7:ee:8e:11:f6:b6:b8:c6:f5:45:c5:9c:b0:f1: 1d:33:00:c9:ab:62:56:3a:bb:ec:77:c5:9d:65:87: be:59:3b:d7:84:f8:bd:21:ad:e4:41:db:3b:4a:bd: d0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B5:E5:B0:61:BD:B0:C8:FA:54:1C:DD:CD:5D:CF:B6:58:54:8A:CF X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oLXlsGG9sMj6VBzdzV3PtlhUis8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.218.0/24 Signature Algorithm: sha256WithRSAEncryption a6:c2:ea:73:b1:df:c1:94:dc:ab:c7:6e:c4:8d:82:69:ba:be: 8a:e7:c7:80:90:88:e6:99:13:04:1f:c7:07:f3:e2:7c:00:24: 29:da:b9:48:9e:68:b8:9d:2e:72:9b:21:64:5b:96:65:55:36: 6d:8e:44:56:31:8f:4b:6e:d0:a7:80:d7:e3:4e:26:93:a4:17: 2c:be:6b:11:b2:5c:20:ac:9f:75:5d:6d:74:c5:3b:63:bb:fc: 2b:08:64:fc:a3:86:e6:9e:aa:fa:ff:49:72:41:5c:e3:c6:71: 7a:e7:97:d6:26:49:66:e9:cb:d2:a5:e9:df:18:a3:5a:6f:55: 84:84:33:46:98:5b:40:05:a4:aa:4a:fd:e5:e2:16:f3:94:4a: 3e:04:e6:0c:e0:5a:7f:e2:ff:b6:43:2f:d5:48:e3:97:47:4d: d1:ea:6e:0c:96:b0:66:0d:bc:10:c4:53:c1:d9:e7:4c:4d:1b: 96:fb:aa:da:51:08:28:f8:b3:6a:b4:59:25:fa:34:66:96:78: 98:cc:45:50:ae:a7:61:bb:63:1b:c7:42:f4:46:3a:30:f1:06: 80:9e:ca:e0:ec:f8:be:54:b0:42:0e:66:2e:2b:89:f3:83:99: 1d:3c:8f:a8:2c:91:df:22:08:7b:35:55:08:dd:30:6a:75:14: b3:0e:b0:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxFml5Da1ee0qj4Ufak2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGI1ZTViMDYxYmRiMGM4ZmE1NDFjZGRjZDVkY2ZiNjU4NTQ4YWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWtFlYLqsgNuckHSoqvUsHed3zjm ZAhtnVsK+rIvVuACO2Cp8uj7uAx3FNAK433m5er6AXrZ5CRmv8GKOfVJEGgBQ++4 QZdwJshEF08SecjaMScGvkiopaUNmmisHzrYVwB1McfxYrBLi7w0qqs8kgOwOg0u iYYJX7GpwZNI3tpm38uJ/VAIiMyRa0spwC14yKPvVRktb8q4B1rFn4PXnV4QobR0 O0bU7Lv0smUgAs4bfxgukL25hNPYoAVXPz5L1e6MxZzghO8lDMa8KN9b+kVK5+6O Efa2uMb1RcWcsPEdMwDJq2JWOrvsd8WdZYe+WTvXhPi9Ia3kQds7Sr3Q5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKC15bBhvbDI+lQc3c1dz7ZYVIrPMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvb0xYbHNHRzlzTWo2VkJ6ZHpWM1B0bGhVaXM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRnaMA0G CSqGSIb3DQEBCwUAA4IBAQCmwupzsd/BlNyrx27EjYJpur6K58eAkIjmmRMEH8cH 8+J8ACQp2rlInmi4nS5ymyFkW5ZlVTZtjkRWMY9LbtCngNfjTiaTpBcsvmsRslwg rJ91XW10xTtju/wrCGT8o4bmnqr6/0lyQVzjxnF655fWJklm6cvSpenfGKNab1WE hDNGmFtABaSqSv3l4hbzlEo+BOYM4Fp/4v+2Qy/VSOOXR03R6m4MlrBmDbwQxFPB 2edMTRuW+6raUQgo+LNqtFkl+jRmlniYzEVQrqdhu2Mbx0L0Rjow8QaAnsrg7Pi+ VLBCDmYuK4nzg5kdPI+oLJHfIgh7NVUI3TBqdRSzDrDJ -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:44 2026 by rpki-client