This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/ox76ZhFyfb5NKfqzaNwPdW4jg_8.roa File: ox76ZhFyfb5NKfqzaNwPdW4jg_8.roa (raw, json) Hash identifier: ifvLosBJIFWZZ6onaFw2/Uoq86wvUCcmDLTiUhlwA6s= Subject key identifier: A3:1E:FA:66:11:72:7D:BE:4D:29:FA:B3:68:DC:0F:75:6E:23:83:FF Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B7F160918010FF1EFC7648624B4FBE302 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/ox76ZhFyfb5NKfqzaNwPdW4jg_8.roa Signing time: Fri 02 Jan 2026 14:21:48 +0000 ROA not before: Fri 02 Jan 2026 14:21:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132335 IP address blocks: 92.62.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:09:18:01:0f:f1:ef:c7:64:86:24:b4:fb:e3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jan 2 14:21:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a31efa6611727dbe4d29fab368dc0f756e2383ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:e5:e7:41:ca:e0:06:39:a8:cb:75:cd:d9: b8:ec:54:72:3c:13:7d:91:5d:5d:20:44:47:b4:80: e4:c6:f3:5b:14:7b:60:94:21:e4:8c:7d:29:93:38: 98:80:83:8e:d3:7b:a8:9d:02:34:54:3c:8c:e9:9b: c5:b9:bb:31:b8:f7:bc:75:73:cb:4b:48:f4:37:4c: d8:9a:f7:4d:d9:c7:7c:fc:9f:a9:59:db:88:0a:b9: a6:1e:07:a2:53:b1:ec:9d:31:d3:14:1a:29:73:d7: 9c:9b:de:fb:4b:94:40:36:f0:09:22:fc:2e:fb:69: 76:9d:6f:17:a4:69:ad:e7:72:d7:58:ef:28:3a:db: cf:12:17:4b:2a:76:06:7d:61:3a:b7:b9:b4:77:8c: d9:25:a1:1d:cf:b1:25:41:01:eb:87:5e:4a:ec:5f: 9d:00:4a:ba:56:96:c2:e3:b6:cd:6f:aa:b6:dc:1b: ef:07:d4:ed:0d:35:8b:c2:4c:74:4b:ed:dd:ed:d0: 37:fc:bc:b3:3c:b4:d0:88:b3:c7:61:cd:39:ee:61: 83:9e:ed:5f:04:a8:51:17:1e:c5:2a:bb:2d:6d:5e: ce:6f:f6:89:24:d4:e1:61:0b:89:02:42:fc:a9:d2: a1:52:54:bc:79:bf:ec:a0:94:6b:09:4c:30:2a:cf: a4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1E:FA:66:11:72:7D:BE:4D:29:FA:B3:68:DC:0F:75:6E:23:83:FF X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/ox76ZhFyfb5NKfqzaNwPdW4jg_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.62.240.0/24 Signature Algorithm: sha256WithRSAEncryption c8:7f:10:18:64:4f:c6:23:2c:6e:74:14:bf:ad:de:76:b2:b2: 23:e0:db:cd:74:1d:5a:af:00:07:9b:4b:83:a2:36:b4:8a:14: 1e:36:1e:23:1b:e1:31:09:89:83:84:7a:25:35:51:97:6d:fe: 1c:3b:42:90:b9:ef:75:3c:b2:bf:e3:a5:34:3f:58:4e:8f:05: 12:6d:c7:e4:d3:d3:78:2d:25:a5:cc:21:27:4c:3c:c9:0d:47: 0c:96:a6:42:76:17:f1:a9:9d:66:6f:8e:7f:d8:28:8a:84:27: 44:ab:09:47:fe:7c:6a:62:b8:c8:f7:e2:f9:7c:f0:51:8e:62: a6:b8:0c:cf:a1:86:c5:14:35:b5:da:eb:3b:7f:bd:5f:b1:53: 92:c3:5f:f3:d9:76:3d:d2:09:eb:61:e1:98:3e:34:49:65:ef: 15:b4:89:10:a4:4b:95:5f:8e:e3:c8:75:d3:46:a0:b7:43:05: 66:5e:fa:17:3d:26:7a:50:a2:a9:0b:43:1d:17:c3:19:50:59: fd:e5:9e:40:f1:c9:11:e0:63:4f:6e:7b:49:81:ff:69:b2:ea: 4e:47:6c:22:f6:2e:34:83:d2:dc:b6:6d:31:2f:16:61:41:08: 2b:6d:bc:32:a2:5a:5c:4c:26:d2:ef:a7:19:d3:f5:9c:c6:b5: bb:89:fd:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FgkYAQ/x78dkhiS0++MCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjYwMTAyMTQyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzFlZmE2NjExNzI3ZGJlNGQyOWZhYjM2OGRjMGY3NTZlMjM4M2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcvl50HK4AY5qMt1zdm47FRyPBN9 kV1dIERHtIDkxvNbFHtglCHkjH0pkziYgIOO03uonQI0VDyM6ZvFubsxuPe8dXPL S0j0N0zYmvdN2cd8/J+pWduICrmmHgeiU7HsnTHTFBopc9ecm977S5RANvAJIvwu +2l2nW8XpGmt53LXWO8oOtvPEhdLKnYGfWE6t7m0d4zZJaEdz7ElQQHrh15K7F+d AEq6VpbC47bNb6q23BvvB9TtDTWLwkx0S+3d7dA3/LyzPLTQiLPHYc057mGDnu1f BKhRFx7FKrstbV7Ob/aJJNThYQuJAkL8qdKhUlS8eb/soJRrCUwwKs+knQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKMe+mYRcn2+TSn6s2jcD3VuI4P/MB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvb3g3NlpoRnlmYjVOS2ZxemFOd1BkVzRqZ184LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD7wMA0G CSqGSIb3DQEBCwUAA4IBAQDIfxAYZE/GIyxudBS/rd52srIj4NvNdB1arwAHm0uD oja0ihQeNh4jG+ExCYmDhHolNVGXbf4cO0KQue91PLK/46U0P1hOjwUSbcfk09N4 LSWlzCEnTDzJDUcMlqZCdhfxqZ1mb45/2CiKhCdEqwlH/nxqYrjI9+L5fPBRjmKm uAzPoYbFFDW12us7f71fsVOSw1/z2XY90gnrYeGYPjRJZe8VtIkQpEuVX47jyHXT RqC3QwVmXvoXPSZ6UKKpC0MdF8MZUFn95Z5A8ckR4GNPbntJgf9psupOR2wi9i40 g9Lctm0xLxZhQQgrbbwyolpcTCbS76cZ0/WcxrW7if3n -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:32 2026 by rpki-client