This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/OXURxrNe03171n8bX9Y6CdBFZZA.roa File: OXURxrNe03171n8bX9Y6CdBFZZA.roa (raw, json) Hash identifier: cfxWumMR7w5M2kaXm/XjKT3g/gie/zgJWrUDlK4masI= Subject key identifier: 39:75:11:C6:B3:5E:D3:7D:7B:D6:7F:1B:5F:D6:3A:09:D0:45:65:90 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F8442DBA3601632990E2DE88AE96D66 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/OXURxrNe03171n8bX9Y6CdBFZZA.roa Signing time: Fri 02 Jan 2026 16:22:12 +0000 ROA not before: Fri 02 Jan 2026 16:22:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 2a0c:9e05::/32 maxlen: 32 2a0e:eb41::/32 maxlen: 32 2a0e:eb42::/32 maxlen: 32 2a0e:eb43::/32 maxlen: 32 2a0e:eb45::/32 maxlen: 32 2a0e:eb46::/32 maxlen: 32 2a0e:eb47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:42:db:a3:60:16:32:99:0e:2d:e8:8a:e9:6d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=397511c6b35ed37d7bd67f1b5fd63a09d0456590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:28:01:00:0c:71:ad:1d:c6:45:3b:a8:1f:69: 89:1c:e0:73:80:53:3d:13:14:69:87:ca:1b:29:41: 4c:0b:c6:be:8f:44:c2:41:1c:28:58:66:39:ff:1c: 9c:5d:f5:f6:51:fa:ba:c0:44:c4:34:36:62:86:b4: 89:70:aa:db:35:19:23:78:9a:a5:e4:c3:1a:d9:8b: 16:37:48:e9:09:45:fd:d8:9b:f0:01:82:9c:f5:d2: 31:12:6d:5b:80:04:a3:99:f6:23:22:13:2d:46:4d: 36:49:fb:c0:cf:7a:1b:b2:2e:4f:1b:7f:19:f2:d5: 67:2d:30:d1:38:e2:77:b7:2a:65:58:1b:f2:67:f1: eb:0a:e4:1a:0d:32:4a:b9:3c:31:b0:cf:e6:b4:e1: 1e:64:94:3c:25:90:42:35:55:f7:f9:c0:c5:99:39: 82:dc:1a:64:b5:dd:be:b8:5d:52:84:9f:8c:6d:5b: 24:db:db:e0:36:6f:76:92:fb:1c:1a:be:39:f3:99: 07:f6:7f:d7:dd:cc:2f:ea:58:75:e6:90:42:7c:fc: d7:f0:c2:14:a3:88:1f:3c:30:6c:f1:af:f2:08:62: fc:8b:0f:03:4b:e2:e9:8b:1e:0f:ce:ea:75:4a:fe: c7:af:85:e2:c1:03:28:74:17:07:bf:a5:15:ef:80: 60:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:75:11:C6:B3:5E:D3:7D:7B:D6:7F:1B:5F:D6:3A:09:D0:45:65:90 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/OXURxrNe03171n8bX9Y6CdBFZZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9e05::/32 2a0e:eb41::-2a0e:eb43:ffff:ffff:ffff:ffff:ffff:ffff 2a0e:eb45::-2a0e:eb47:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 9a:0b:ae:93:94:b0:a1:f8:6d:01:46:3f:4f:46:fc:0a:63:76: 44:fb:f7:81:19:c4:ea:28:ef:ac:ee:27:43:ee:75:78:d8:d3: 45:02:13:26:32:b9:1a:62:f6:2b:45:41:b3:58:6b:9f:2b:b4: ac:51:58:2f:db:a4:b9:07:f3:d7:58:22:ce:1c:75:8f:95:46: 1e:44:ef:cc:22:4b:33:b8:2e:ba:db:ab:99:ef:9f:a9:8f:76: 63:27:f3:a1:c5:7d:8b:f1:68:13:e4:2d:15:ca:69:a3:33:10: 2c:1a:66:d8:70:86:ee:d1:02:e9:e6:6e:82:38:26:f0:ce:f0: 19:95:f2:9d:c3:f6:4b:11:39:5b:5c:22:e1:f8:a4:44:cb:f4: eb:d9:d7:69:7f:05:7e:e6:6e:04:32:e4:cb:f8:17:02:29:6f: da:cb:30:2b:ed:a7:ee:95:9b:d2:8f:34:62:c3:2b:76:49:88: ef:d3:5b:14:38:ed:ab:a3:64:f1:50:46:1e:af:4b:4b:39:bf: 0b:5f:03:16:8e:39:1f:4c:7c:05:d8:2c:22:3e:ca:52:47:c4: 71:6e:b6:bf:cb:7f:b2:ab:fc:33:7f:bc:0c:32:74:91:11:35: fb:34:6c:19:0d:44:6c:4f:21:11:80:29:e2:1f:46:41:8d:74: 4f:99:b4:fa -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/hELbo2AWMpkOLeiK6W1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTc1MTFjNmIzNWVkMzdkN2JkNjdmMWI1ZmQ2M2EwOWQwNDU2NTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0igBAAxxrR3GRTuoH2mJHOBzgFM9 ExRph8obKUFMC8a+j0TCQRwoWGY5/xycXfX2Ufq6wETENDZihrSJcKrbNRkjeJql 5MMa2YsWN0jpCUX92JvwAYKc9dIxEm1bgASjmfYjIhMtRk02SfvAz3obsi5PG38Z 8tVnLTDROOJ3typlWBvyZ/HrCuQaDTJKuTwxsM/mtOEeZJQ8JZBCNVX3+cDFmTmC 3Bpktd2+uF1ShJ+MbVsk29vgNm92kvscGr4585kH9n/X3cwv6lh15pBCfPzX8MIU o4gfPDBs8a/yCGL8iw8DS+Lpix4Pzup1Sv7Hr4XiwQModBcHv6UV74BghwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFDl1EcazXtN9e9Z/G1/WOgnQRWWQMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvT1hVUnhyTmUwMzE3MW44Ylg5WTZDZEJGWlpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAtBAIAAjAnAwUAKgyeBTAO AwUAKg7rQQMFAioO60AwDgMFACoO60UDBQMqDutAMA0GCSqGSIb3DQEBCwUAA4IB AQCaC66TlLCh+G0BRj9PRvwKY3ZE+/eBGcTqKO+s7idD7nV42NNFAhMmMrkaYvYr RUGzWGufK7SsUVgv26S5B/PXWCLOHHWPlUYeRO/MIkszuC6626uZ75+pj3ZjJ/Oh xX2L8WgT5C0VymmjMxAsGmbYcIbu0QLp5m6COCbwzvAZlfKdw/ZLETlbXCLh+KRE y/Tr2ddpfwV+5m4EMuTL+BcCKW/ayzAr7afulZvSjzRiwyt2SYjv01sUOO2ro2Tx UEYer0tLOb8LXwMWjjkfTHwF2CwiPspSR8Rxbra/y3+yq/wzf7wMMnSRETX7NGwZ DURsTyERgCniH0ZBjXRPmbT6 -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:19 2026 by rpki-client