This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OHYqSOkqfYpFUNx2q_IJJkbkCuw.roa File: OHYqSOkqfYpFUNx2q_IJJkbkCuw.roa (raw, json) Hash identifier: QTv162WDKSHUvR8ORWwMQvvY+I+nDzK91Q9MHi8W2kE= Subject key identifier: 38:76:2A:48:E9:2A:7D:8A:45:50:DC:76:AB:F2:09:26:46:E4:0A:EC Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B3569BCA426820E6D2F8D398903B6C5 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OHYqSOkqfYpFUNx2q_IJJkbkCuw.roa Signing time: Thu 01 Jan 2026 20:17:36 +0000 ROA not before: Thu 01 Jan 2026 20:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39277 IP address blocks: 194.102.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:69:bc:a4:26:82:0e:6d:2f:8d:39:89:03:b6:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38762a48e92a7d8a4550dc76abf2092646e40aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f2:ab:3e:50:cf:1c:d6:9f:89:1c:94:27:48: a8:31:59:b8:d1:0b:01:76:a6:de:f2:7a:b2:8a:68: 78:0a:97:b8:e4:42:8a:5d:2a:2a:76:5d:d1:77:5e: 71:67:c4:d9:1c:30:62:b8:2b:8b:7a:9d:b8:62:8d: f0:95:5c:63:bb:38:48:21:5a:a7:e1:67:c4:d6:ea: a0:ae:eb:25:d8:b0:66:c9:84:fc:83:3a:6c:d8:a2: 3c:82:50:f9:d5:9d:8c:3a:e6:1f:b7:66:f0:96:2f: 77:e3:f4:d8:3b:30:28:2a:e0:4b:3d:60:e9:48:15: e0:22:11:64:9e:8a:51:b9:4d:c3:36:73:61:26:be: 60:5a:76:e8:98:34:38:43:61:12:28:ed:a3:46:f4: cc:a2:de:b0:d8:6e:e5:17:7e:3c:00:8a:b2:f6:37: e3:20:ff:70:00:6d:18:9b:3c:88:52:ab:fb:f1:df: e4:32:22:f8:24:1a:64:11:ec:d5:03:db:fc:a6:3b: 3d:2e:76:1d:06:a2:f4:38:bc:84:32:52:6c:a1:43: 39:3b:7b:96:c6:72:0a:ed:19:3b:ac:58:4b:0f:60: 98:84:1c:bf:8e:5e:bc:18:41:b5:0f:fe:a4:4e:7f: b3:ad:e9:ee:35:67:6d:72:51:ed:df:9e:2b:9c:2f: 1f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:76:2A:48:E9:2A:7D:8A:45:50:DC:76:AB:F2:09:26:46:E4:0A:EC X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OHYqSOkqfYpFUNx2q_IJJkbkCuw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.102.228.0/24 Signature Algorithm: sha256WithRSAEncryption 97:43:fc:bc:58:b0:28:8c:cf:28:b4:b5:a9:39:3c:95:97:46: d1:9e:93:05:0c:89:6a:b0:db:66:43:22:21:71:48:d5:db:2c: 7b:3b:aa:80:5c:1f:d9:ac:e5:d3:0b:99:24:83:fc:76:fa:4d: 83:d0:7d:87:47:11:f1:7e:4a:48:0a:ca:31:02:55:aa:96:1f: d0:89:b2:dd:b2:22:52:03:f8:5d:24:98:c3:d8:79:82:cc:3c: 26:ac:44:51:f7:20:4d:0d:13:e1:b4:fe:8b:b5:d9:78:92:30: e1:ac:6e:d0:f2:c9:28:af:39:da:0d:4a:19:e1:ce:e9:b6:5d: ca:49:b9:50:59:a0:38:49:44:e2:32:91:8a:d0:2b:26:1a:42: ff:1c:eb:68:04:34:e0:3c:a7:95:3c:50:c6:fd:2a:01:b4:74: 21:e7:d5:bd:aa:3f:d6:72:71:6e:3d:d2:d6:70:2f:ac:59:11: b2:d1:7b:c6:22:d3:f0:18:41:60:42:01:bd:4d:23:1c:ee:ca: c5:20:80:f0:61:0a:2f:98:b4:ed:a4:39:68:81:8f:0e:dc:d2: 91:9a:d9:1e:d7:c4:3e:81:33:af:b3:16:c0:9e:54:f1:1b:42: 75:d8:79:d3:3e:8c:67:8e:0b:fc:b7:c3:dd:65:2a:d7:fa:46: 62:16:59:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NWm8pCaCDm0vjTmJA7bFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODc2MmE0OGU5MmE3ZDhhNDU1MGRjNzZhYmYyMDkyNjQ2ZTQwYWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPKrPlDPHNafiRyUJ0ioMVm40QsB dqbe8nqyimh4Cpe45EKKXSoqdl3Rd15xZ8TZHDBiuCuLep24Yo3wlVxjuzhIIVqn 4WfE1uqgrusl2LBmyYT8gzps2KI8glD51Z2MOuYft2bwli934/TYOzAoKuBLPWDp SBXgIhFknopRuU3DNnNhJr5gWnbomDQ4Q2ESKO2jRvTMot6w2G7lF348AIqy9jfj IP9wAG0YmzyIUqv78d/kMiL4JBpkEezVA9v8pjs9LnYdBqL0OLyEMlJsoUM5O3uW xnIK7Rk7rFhLD2CYhBy/jl68GEG1D/6kTn+zrenuNWdtclHt354rnC8fWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDh2KkjpKn2KRVDcdqvyCSZG5ArsMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvT0hZcVNPa3FmWXBGVU54MnFfSUpKa2JrQ3V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmbkMA0G CSqGSIb3DQEBCwUAA4IBAQCXQ/y8WLAojM8otLWpOTyVl0bRnpMFDIlqsNtmQyIh cUjV2yx7O6qAXB/ZrOXTC5kkg/x2+k2D0H2HRxHxfkpICsoxAlWqlh/QibLdsiJS A/hdJJjD2HmCzDwmrERR9yBNDRPhtP6Ltdl4kjDhrG7Q8skorznaDUoZ4c7ptl3K SblQWaA4SUTiMpGK0CsmGkL/HOtoBDTgPKeVPFDG/SoBtHQh59W9qj/WcnFuPdLW cC+sWRGy0XvGItPwGEFgQgG9TSMc7srFIIDwYQovmLTtpDlogY8O3NKRmtke18Q+ gTOvsxbAnlTxG0J12HnTPoxnjgv8t8PdZSrX+kZiFlnZ -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:59 2026 by rpki-client