This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/OXINEPIBnVaglpO2WDs_RqIzbkc.roa File: OXINEPIBnVaglpO2WDs_RqIzbkc.roa (raw, json) Hash identifier: aSnB+0+0CnA11ivltYbXw+kEcjRN69vsEQ+sqlBivaA= Subject key identifier: 39:72:0D:10:F2:01:9D:56:A0:96:93:B6:58:3B:3F:46:A2:33:6E:47 Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934 Certificate serial: 019B7834840E0631591D6731B18018616237 Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/OXINEPIBnVaglpO2WDs_RqIzbkc.roa Signing time: Thu 01 Jan 2026 06:17:46 +0000 ROA not before: Thu 01 Jan 2026 06:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201986 IP address blocks: 45.153.212.0/23 maxlen: 23 45.153.214.0/23 maxlen: 23 109.68.127.0/24 maxlen: 24 178.219.56.0/21 maxlen: 21 178.219.58.0/23 maxlen: 23 185.57.68.0/22 maxlen: 22 185.57.69.0/24 maxlen: 24 185.150.164.0/22 maxlen: 22 185.150.164.0/23 maxlen: 23 185.150.166.0/24 maxlen: 24 185.150.167.0/24 maxlen: 24 194.61.88.0/22 maxlen: 24 194.61.90.0/24 maxlen: 24 2a02:5960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:84:0e:06:31:59:1d:67:31:b1:80:18:61:62:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934 Validity Not Before: Jan 1 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39720d10f2019d56a09693b6583b3f46a2336e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fd:89:85:f2:dc:14:fd:3c:5c:14:c5:9f:2a: fe:06:5e:04:70:6c:3f:de:23:83:58:da:19:42:06: db:3d:3b:aa:b5:34:8c:2c:9e:da:17:17:08:e1:73: 6d:88:9c:0c:47:ad:d7:03:4e:b8:18:8f:da:ff:9d: df:f4:ba:ac:d8:a5:c9:43:fb:f1:06:5e:b8:f6:de: a8:12:18:fb:d9:f1:5d:e8:08:9c:ba:13:98:f5:f7: d5:0a:61:43:ea:6a:3f:0f:23:1b:af:14:4f:d8:b1: 0c:f6:f7:5b:9f:0b:84:90:f9:f1:d1:fa:c4:14:7f: 7e:f3:d5:1c:a1:d8:e6:e2:9c:26:73:74:d2:8c:a0: fb:84:7e:4e:70:4a:79:03:26:91:bf:55:d0:9a:6d: 15:56:4e:cc:a3:37:4d:2a:a6:43:32:6d:c0:f5:93: ad:69:89:40:98:64:9d:1e:e7:c2:63:11:15:20:77: 21:6b:f7:c6:71:67:ac:4d:9a:c3:9b:cd:52:a0:e3: 4a:1f:f5:2d:09:7c:51:d9:48:ae:f4:65:a3:45:d9: a6:f0:c5:52:f3:f0:72:de:90:42:6b:01:53:54:13: 2a:cc:9f:98:12:4d:20:58:95:fe:51:d9:1c:2b:68: 2a:21:db:6a:ac:6a:41:5f:99:e7:aa:bb:4c:2e:b0: 1c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:72:0D:10:F2:01:9D:56:A0:96:93:B6:58:3B:3F:46:A2:33:6E:47 X509v3 Authority Key Identifier: keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/OXINEPIBnVaglpO2WDs_RqIzbkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.212.0/22 109.68.127.0/24 178.219.56.0/21 185.57.68.0/22 185.150.164.0/22 194.61.88.0/22 IPv6: 2a02:5960::/32 Signature Algorithm: sha256WithRSAEncryption 5f:07:27:c4:40:2d:c6:72:f9:c5:f1:46:38:33:f7:33:8f:db: 6b:5b:95:c1:55:48:46:7f:10:01:e1:b3:2e:d2:05:09:f5:1b: 2b:a5:d5:ac:e5:db:00:fb:47:2b:02:d3:63:89:56:77:7c:4b: 32:7c:a2:1e:c9:5b:0c:93:14:12:5f:5e:7c:66:a1:57:2f:a9: a1:e1:12:1e:8f:91:07:8d:5b:bc:0d:ba:1f:8a:9b:3e:64:9e: dc:0a:a7:ec:bc:09:21:c8:64:68:93:ec:a8:3b:9f:7d:c1:dc: 61:6e:6d:60:62:e8:a8:10:de:d5:82:56:ec:51:88:4e:b9:38: de:46:0a:f2:00:4e:3f:30:47:69:3e:d0:2e:25:52:83:38:95: 3d:bd:eb:ba:77:a3:75:63:20:e5:6d:a8:f2:49:46:3a:b3:6b: 64:bb:6d:62:56:4d:d4:e2:8c:ba:1f:b9:4d:c2:ca:67:21:ee: cf:06:91:31:3a:4e:af:14:b1:77:ce:95:bd:e0:f2:87:3a:1b: ca:d0:d6:1a:81:34:db:45:42:99:a3:5c:fe:b4:9f:38:cd:1d: 50:f0:16:68:33:80:e4:db:c1:b2:9f:37:97:dc:11:b8:78:a1: c0:e5:fa:1a:ef:81:60:da:ef:e3:23:72:fc:9b:1d:cd:33:c8: ce:5d:4f:9b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt4NIQOBjFZHWcxsYAYYWI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZDBlYzdhYzRjMzkxZTRlY2JhOWQwYTM3NDkxOTFiMThl YmY5MzQwHhcNMjYwMTAxMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTcyMGQxMGYyMDE5ZDU2YTA5NjkzYjY1ODNiM2Y0NmEyMzM2ZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv2JhfLcFP08XBTFnyr+Bl4EcGw/ 3iODWNoZQgbbPTuqtTSMLJ7aFxcI4XNtiJwMR63XA064GI/a/53f9Lqs2KXJQ/vx Bl649t6oEhj72fFd6AicuhOY9ffVCmFD6mo/DyMbrxRP2LEM9vdbnwuEkPnx0frE FH9+89Ucodjm4pwmc3TSjKD7hH5OcEp5AyaRv1XQmm0VVk7MozdNKqZDMm3A9ZOt aYlAmGSdHufCYxEVIHcha/fGcWesTZrDm81SoONKH/UtCXxR2Uiu9GWjRdmm8MVS 8/By3pBCawFTVBMqzJ+YEk0gWJX+UdkcK2gqIdtqrGpBX5nnqrtMLrAccQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFDlyDRDyAZ1WoJaTtlg7P0aiM25HMB8GA1UdIwQY MBaAFDTQ7HrEw5Hk7LqdCjdJGRsY6/k0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUt YjdjMjY5NmJhZTUwLzEvT1hJTkVQSUJuVmFnbHBPMldEc19ScUl6YmtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUtYjdjMjY5NmJhZTUw LzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCLZnUAwQA bUR/AwQDsts4AwQCuTlEAwQCuZakAwQCwj1YMA0EAgACMAcDBQAqAllgMA0GCSqG SIb3DQEBCwUAA4IBAQBfByfEQC3GcvnF8UY4M/czj9trW5XBVUhGfxAB4bMu0gUJ 9RsrpdWs5dsA+0crAtNjiVZ3fEsyfKIeyVsMkxQSX158ZqFXL6mh4RIej5EHjVu8 Dbofips+ZJ7cCqfsvAkhyGRok+yoO599wdxhbm1gYuioEN7VglbsUYhOuTjeRgry AE4/MEdpPtAuJVKDOJU9veu6d6N1YyDlbajySUY6s2tku21iVk3U4oy6H7lNwspn Ie7PBpExOk6vFLF3zpW94PKHOhvK0NYagTTbRUKZo1z+tJ84zR1Q8BZoM4Dk28Gy nzeX3BG4eKHA5foa74Fg2u/jI3L8mx3NM8jOXU+b -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:58 2026 by rpki-client