This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/OYiESOD3Y0u6sXaj1Hia22EhgGg.roa File: OYiESOD3Y0u6sXaj1Hia22EhgGg.roa (raw, json) Hash identifier: trg4rAcGuGAtaTo+bVVom+wVmxOhN5/r0QlU95Zzm/w= Subject key identifier: 39:88:84:48:E0:F7:63:4B:BA:B1:76:A3:D4:78:9A:DB:61:21:80:68 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7D92203B17B2FC2840150D323076C Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/OYiESOD3Y0u6sXaj1Hia22EhgGg.roa Signing time: Thu 01 Jan 2026 18:17:56 +0000 ROA not before: Thu 01 Jan 2026 18:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201574 IP address blocks: 159.148.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d9:22:03:b1:7b:2f:c2:84:01:50:d3:23:07:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39888448e0f7634bbab176a3d4789adb61218068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1b:19:1e:eb:a6:35:d9:e7:91:61:14:7f:23: 11:24:37:44:84:87:05:da:ab:47:5e:23:0d:f9:60: 54:8f:e3:18:25:8d:40:f3:90:24:dc:6d:81:c0:26: 6d:ee:93:03:c9:3f:18:b8:26:6d:6f:6a:2d:3b:c4: 67:73:a2:2d:4e:14:9d:f8:2a:b8:70:58:db:4a:c5: ca:67:99:75:24:2e:48:bc:b2:bf:51:99:f8:2b:5e: b6:8b:a4:86:35:2b:c6:76:ee:0b:b7:bd:ad:20:c0: aa:35:5d:77:b8:bc:ad:ac:30:44:51:6f:3d:a7:b4: 3b:53:c7:4c:ee:25:df:dc:14:92:dc:a6:de:c0:9e: 45:e2:b3:ec:f4:fb:9f:70:5d:5f:7f:46:29:c9:3e: 5c:e6:72:86:34:3d:73:bb:5e:ee:6a:72:6f:00:10: df:10:c6:c7:b8:97:74:6e:42:83:5c:43:82:53:55: 9c:34:de:5e:0e:e0:ed:16:fd:78:17:99:83:ee:e8: 22:5e:dc:37:6b:61:79:02:fa:fd:13:a3:dd:9c:58: cf:ae:b1:c7:69:86:15:d4:69:b6:85:38:36:d1:9c: e5:67:04:99:83:a8:3c:64:ad:00:f4:50:ed:7b:2e: 7b:02:65:90:70:4a:9b:74:9f:f0:4e:f2:5d:18:33: bd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:88:84:48:E0:F7:63:4B:BA:B1:76:A3:D4:78:9A:DB:61:21:80:68 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/OYiESOD3Y0u6sXaj1Hia22EhgGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.148.197.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:56:6a:ac:ff:97:ab:71:cf:32:9b:d4:bb:19:01:9f:9f:89: 0e:7e:25:ed:71:90:39:2f:aa:60:39:73:3b:b1:6c:ba:14:41: 2a:e9:f4:70:b1:83:5a:6b:bf:07:1e:7f:e9:4b:e9:0d:13:d8: e2:8c:21:d9:c0:9a:4f:c1:d3:65:7e:b1:f4:62:4f:b9:21:12: 85:12:a3:14:d5:16:20:80:0c:8a:1f:0f:c9:4b:6c:db:73:3b: 23:36:21:f4:d9:3c:2e:fe:a2:a4:8d:84:85:81:67:b5:e3:6d: ac:7c:bf:32:79:57:e0:25:9d:d9:b8:5e:25:78:b8:7b:6c:f2: 56:33:24:74:f0:2a:90:9b:3d:a6:56:12:09:c0:b1:ec:f8:67: f9:90:b4:2e:c4:f6:a6:95:38:6d:57:1d:c3:71:7f:83:4c:54: f4:c8:21:50:9d:95:8e:87:6c:6a:99:90:dc:e4:d7:0c:e1:bc: 22:03:de:4e:98:7a:fd:da:73:ef:00:41:ef:6e:b2:f0:70:2d: 76:b9:10:9d:0a:5d:5c:f2:49:1d:f3:d2:57:5a:7d:5f:56:c8: 96:08:b4:46:a8:98:34:dc:5f:2f:fd:be:c9:fc:61:0c:31:38: 10:bd:46:fe:58:d1:54:9d:ff:ce:9e:6e:bc:3f:9a:ff:2d:7b: e0:83:49:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9kiA7F7L8KEAVDTIwdsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTg4ODQ0OGUwZjc2MzRiYmFiMTc2YTNkNDc4OWFkYjYxMjE4MDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRsZHuumNdnnkWEUfyMRJDdEhIcF 2qtHXiMN+WBUj+MYJY1A85Ak3G2BwCZt7pMDyT8YuCZtb2otO8Rnc6ItThSd+Cq4 cFjbSsXKZ5l1JC5IvLK/UZn4K162i6SGNSvGdu4Lt72tIMCqNV13uLytrDBEUW89 p7Q7U8dM7iXf3BSS3KbewJ5F4rPs9PufcF1ff0YpyT5c5nKGND1zu17uanJvABDf EMbHuJd0bkKDXEOCU1WcNN5eDuDtFv14F5mD7ugiXtw3a2F5Avr9E6PdnFjPrrHH aYYV1Gm2hTg20ZzlZwSZg6g8ZK0A9FDtey57AmWQcEqbdJ/wTvJdGDO9FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDmIhEjg92NLurF2o9R4mtthIYBoMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvT1lpRVNPRDNZMHU2c1hhajFIaWEyMkVoZ0dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5TFMA0G CSqGSIb3DQEBCwUAA4IBAQB9Vmqs/5ercc8ym9S7GQGfn4kOfiXtcZA5L6pgOXM7 sWy6FEEq6fRwsYNaa78HHn/pS+kNE9jijCHZwJpPwdNlfrH0Yk+5IRKFEqMU1RYg gAyKHw/JS2zbczsjNiH02Twu/qKkjYSFgWe1422sfL8yeVfgJZ3ZuF4leLh7bPJW MyR08CqQmz2mVhIJwLHs+Gf5kLQuxPamlThtVx3DcX+DTFT0yCFQnZWOh2xqmZDc 5NcM4bwiA95OmHr92nPvAEHvbrLwcC12uRCdCl1c8kkd89JXWn1fVsiWCLRGqJg0 3F8v/b7J/GEMMTgQvUb+WNFUnf/Onm68P5r/LXvgg0kq -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:43 2026 by rpki-client