This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/OQT-T2xwDnT3SaaWIX_swo_jqrU.roa File: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (raw, json) Hash identifier: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g= Subject key identifier: 39:04:FE:4F:6C:70:0E:74:F7:49:A6:96:21:7F:EC:C2:8F:E3:AA:B5 Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b Certificate serial: 019B7A5AFCF408F058A44064308AE3991DE8 Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/OQT-T2xwDnT3SaaWIX_swo_jqrU.roa Signing time: Thu 01 Jan 2026 16:19:01 +0000 ROA not before: Thu 01 Jan 2026 16:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51469 IP address blocks: 81.31.224.0/22 maxlen: 22 81.31.228.0/23 maxlen: 23 81.31.236.0/22 maxlen: 22 81.31.240.0/23 maxlen: 23 81.31.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fc:f4:08:f0:58:a4:40:64:30:8a:e3:99:1d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b Validity Not Before: Jan 1 16:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3904fe4f6c700e74f749a696217fecc28fe3aab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bf:b4:c5:1c:4d:25:8c:f4:d5:61:f6:ef:59: 89:7a:4f:8d:54:56:fc:ea:dd:80:cf:53:df:6a:a5: 84:d5:d7:b2:9f:85:14:85:e2:89:b2:91:20:ce:87: 28:27:1e:7e:75:0e:e4:19:23:2d:a6:c6:52:c6:24: 0d:9e:9f:28:b6:98:97:6d:d7:3f:63:5a:0e:dc:05: bd:12:21:a8:f2:c0:d4:4b:d9:70:40:73:ba:49:f3: 02:b5:95:38:19:46:fe:f5:74:72:3b:fa:89:c4:3b: 8f:0c:10:0e:45:ae:14:4b:d0:41:6a:c7:da:dc:c1: 96:65:44:4e:d7:6d:be:f9:ea:77:03:06:af:0c:89: 1b:97:26:c2:96:62:12:8c:66:bf:2c:41:ef:b9:0a: b7:0b:9d:a4:48:cf:25:e7:e2:52:83:c7:e5:eb:91: 58:4b:69:f3:b4:7a:f2:ee:c7:cb:a9:b7:b9:fb:82: 35:ab:a2:9c:40:66:07:9c:90:ea:cb:03:91:b4:e8: a7:35:27:99:df:bf:b4:8a:46:fc:46:de:40:06:44: cb:95:83:f6:7c:02:99:d4:e4:42:e4:18:e5:34:77: 01:80:b2:58:26:30:69:60:d7:0d:82:e7:af:f3:c1: 1f:5a:09:89:2e:92:3f:25:a7:b7:6c:15:23:6b:35: e3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:04:FE:4F:6C:70:0E:74:F7:49:A6:96:21:7F:EC:C2:8F:E3:AA:B5 X509v3 Authority Key Identifier: keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/OQT-T2xwDnT3SaaWIX_swo_jqrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.224.0-81.31.229.255 81.31.236.0-81.31.241.255 81.31.248.0/23 Signature Algorithm: sha256WithRSAEncryption 63:0e:f3:af:9f:ce:c5:db:3c:0a:ed:73:74:3a:8d:00:44:5a: 7e:7c:4a:43:43:cc:0b:5b:a2:04:3b:7b:91:69:58:23:80:6c: ef:6a:d4:8a:e3:61:6e:78:3f:9e:ff:1b:99:38:83:51:b7:b3: 30:5f:da:2b:4b:53:ad:5d:0f:92:9f:5a:af:4d:e6:fa:52:e4: 3f:e3:10:1f:db:b5:f1:b1:09:d5:07:2b:c7:c6:f0:38:5d:e2: 2d:1b:76:a3:3b:b4:06:9b:fb:1d:d7:9f:12:4d:c6:7d:d3:3f: c6:e0:ae:b6:cb:0f:78:ba:18:6c:be:27:2d:0a:82:ca:62:68: 47:56:ca:b9:c8:65:93:3c:31:56:8e:ac:76:1a:25:85:5d:c5: ab:6f:99:41:5f:90:0f:0e:2e:db:25:75:28:f6:28:7c:91:37: 1e:3d:7a:6a:9f:90:9a:7e:3f:01:5a:7b:e5:76:3b:12:1d:3e: 50:d3:10:c3:90:97:8a:b6:dc:be:4d:d8:17:e9:04:6f:05:a3: 9d:b4:a4:77:7e:5b:a0:d2:79:aa:39:d6:33:1c:5c:be:cf:00: 12:8f:98:5b:b5:b0:16:14:9f:2a:77:c1:d9:bc:32:38:bb:91: 04:c5:af:03:b2:aa:a2:eb:25:66:b3:30:33:9c:63:58:f9:54: 12:5f:fc:24 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt6Wvz0CPBYpEBkMIrjmR3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy YjE4MWIwHhcNMjYwMTAxMTYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTA0ZmU0ZjZjNzAwZTc0Zjc0OWE2OTYyMTdmZWNjMjhmZTNhYWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL+0xRxNJYz01WH271mJek+NVFb8 6t2Az1PfaqWE1deyn4UUheKJspEgzocoJx5+dQ7kGSMtpsZSxiQNnp8otpiXbdc/ Y1oO3AW9EiGo8sDUS9lwQHO6SfMCtZU4GUb+9XRyO/qJxDuPDBAORa4US9BBasfa 3MGWZURO122++ep3AwavDIkblybClmISjGa/LEHvuQq3C52kSM8l5+JSg8fl65FY S2nztHry7sfLqbe5+4I1q6KcQGYHnJDqywORtOinNSeZ37+0ikb8Rt5ABkTLlYP2 fAKZ1ORC5BjlNHcBgLJYJjBpYNcNguev88EfWgmJLpI/Jae3bBUjazXj2wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDkE/k9scA5090mmliF/7MKP46q1MB8GA1UdIwQY MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct YWE4NTllMTkyYjE2LzEvT1FULVQyeHdEblQzU2FhV0lYX3N3b19qcXJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2 LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAVRH+AD BAFRH+QwDAMEAlEf7AMEAVEf8AMEAVEf+DANBgkqhkiG9w0BAQsFAAOCAQEAYw7z r5/Oxds8Cu1zdDqNAERafnxKQ0PMC1uiBDt7kWlYI4Bs72rUiuNhbng/nv8bmTiD UbezMF/aK0tTrV0Pkp9ar03m+lLkP+MQH9u18bEJ1Qcrx8bwOF3iLRt2ozu0Bpv7 HdefEk3GfdM/xuCutssPeLoYbL4nLQqCymJoR1bKuchlkzwxVo6sdholhV3Fq2+Z QV+QDw4u2yV1KPYofJE3Hj16ap+Qmn4/AVp75XY7Eh0+UNMQw5CXirbcvk3YF+kE bwWjnbSkd35boNJ5qjnWMxxcvs8AEo+YW7WwFhSfKnfB2bwyOLuRBMWvA7Kqousl ZrMwM5xjWPlUEl/8JA== -----END CERTIFICATE-----Generated at Thu Jan 8 16:20:42 2026 by rpki-client