This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Ouh31jHeIFDI8LO3IB2AU1IZ7JQ.roa File: Ouh31jHeIFDI8LO3IB2AU1IZ7JQ.roa (raw, json) Hash identifier: dDHDnERDhAAD5c2qdqaBPGlvY14Vem8v5SCBJ6zmWN8= Subject key identifier: 3A:E8:77:D6:31:DE:20:50:C8:F0:B3:B7:20:1D:80:53:52:19:EC:94 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B357B7F4B58C97CB5E307E49008D29A Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Ouh31jHeIFDI8LO3IB2AU1IZ7JQ.roa Signing time: Thu 01 Jan 2026 20:17:41 +0000 ROA not before: Thu 01 Jan 2026 20:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50252 IP address blocks: 193.226.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:7b:7f:4b:58:c9:7c:b5:e3:07:e4:90:08:d2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ae877d631de2050c8f0b3b7201d80535219ec94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b4:d9:af:ef:eb:4a:64:d7:66:e4:5f:8d:83: da:7b:43:c8:d3:14:c2:03:26:ae:51:60:f4:60:24: d2:fb:2e:5d:a4:08:04:e9:be:ea:d5:db:78:15:bc: 1c:73:85:42:c5:31:6f:34:4e:6e:84:4f:ed:3c:ca: 97:a1:59:aa:69:9f:d1:67:b3:fa:c8:c6:bc:85:e8: cc:31:66:55:4a:32:5f:89:a6:f7:11:55:97:20:2d: 56:21:92:1e:d1:4e:c2:04:ee:66:d4:e8:c1:2f:13: d4:bb:80:9a:1e:cd:ef:1a:af:e9:65:cd:02:c9:68: 81:5c:3e:1e:79:52:45:df:b9:b1:73:d9:10:6d:49: d7:5d:c1:68:32:15:72:7f:52:27:70:b0:63:2f:0b: 1a:25:4c:69:90:7d:fb:62:44:35:ac:d6:7f:7e:21: c2:3f:ff:21:7a:86:e2:43:05:c8:17:53:0e:b7:c9: 84:df:af:1e:ec:2f:43:43:cf:6e:91:e8:25:bd:ca: 84:9e:58:01:1f:e1:4f:f3:81:df:34:dc:5b:61:fd: 31:6f:94:75:29:f5:89:71:07:f9:4a:3a:17:45:40: 7c:8d:e9:0d:87:d2:84:0f:16:0d:0b:47:dc:74:0c: 70:7c:66:45:d3:74:6c:9a:c9:2f:fe:4a:df:58:2f: e1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E8:77:D6:31:DE:20:50:C8:F0:B3:B7:20:1D:80:53:52:19:EC:94 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Ouh31jHeIFDI8LO3IB2AU1IZ7JQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.226.121.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:91:68:da:ff:02:91:50:db:2f:1e:90:65:c6:7b:6d:df:fc: eb:22:fa:43:39:70:3c:9a:7e:00:e2:2c:0d:43:08:9f:75:88: fb:8a:1d:1f:6f:a6:a6:4f:ef:54:9c:fd:4a:9b:2c:fa:0f:dc: 6a:34:56:c2:89:c0:b7:e9:04:91:d3:ce:32:e2:56:91:3c:97: d2:5c:22:0f:ef:2d:9b:68:b2:6b:72:56:f8:b7:d9:dd:e6:72: f0:ae:25:11:34:45:ca:6a:21:91:d4:10:3b:38:c1:1a:a6:ab: f7:60:a2:47:ef:b4:96:2a:28:4e:a0:f7:a3:05:3a:f2:bb:30: f0:5f:c2:0e:62:16:15:db:77:96:b4:45:9a:90:b9:60:70:6c: 72:ac:6f:11:4f:45:3e:a1:ea:57:70:d5:a5:82:86:9b:5d:50: 92:fb:a8:05:0d:5c:f8:de:c2:67:51:b2:72:68:7c:ab:f8:52: f2:53:97:7d:a8:f0:2e:cf:0a:7f:45:75:8a:da:ba:40:68:3d: b1:cb:05:37:f6:b8:80:cd:01:1b:f0:59:6a:c7:eb:f7:87:98: 86:7e:db:5d:2a:d1:4a:bd:5b:ad:5c:6d:57:2f:d5:36:f3:68: d2:8a:04:b3:82:4c:2c:6e:f5:68:8e:e1:5c:f5:37:a0:42:df: d5:d4:70:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NXt/S1jJfLXjB+SQCNKaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWU4NzdkNjMxZGUyMDUwYzhmMGIzYjcyMDFkODA1MzUyMTllYzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LTZr+/rSmTXZuRfjYPae0PI0xTC AyauUWD0YCTS+y5dpAgE6b7q1dt4Fbwcc4VCxTFvNE5uhE/tPMqXoVmqaZ/RZ7P6 yMa8hejMMWZVSjJfiab3EVWXIC1WIZIe0U7CBO5m1OjBLxPUu4CaHs3vGq/pZc0C yWiBXD4eeVJF37mxc9kQbUnXXcFoMhVyf1IncLBjLwsaJUxpkH37YkQ1rNZ/fiHC P/8heobiQwXIF1MOt8mE368e7C9DQ89ukeglvcqEnlgBH+FP84HfNNxbYf0xb5R1 KfWJcQf5SjoXRUB8jekNh9KEDxYNC0fcdAxwfGZF03Rsmskv/krfWC/hiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDrod9Yx3iBQyPCztyAdgFNSGeyUMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvT3VoMzFqSGVJRkRJOExPM0lCMkFVMUlaN0pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweJ5MA0G CSqGSIb3DQEBCwUAA4IBAQCKkWja/wKRUNsvHpBlxntt3/zrIvpDOXA8mn4A4iwN QwifdYj7ih0fb6amT+9UnP1Kmyz6D9xqNFbCicC36QSR084y4laRPJfSXCIP7y2b aLJrclb4t9nd5nLwriURNEXKaiGR1BA7OMEapqv3YKJH77SWKihOoPejBTryuzDw X8IOYhYV23eWtEWakLlgcGxyrG8RT0U+oepXcNWlgoabXVCS+6gFDVz43sJnUbJy aHyr+FLyU5d9qPAuzwp/RXWK2rpAaD2xywU39riAzQEb8Flqx+v3h5iGfttdKtFK vVutXG1XL9U282jSigSzgkwsbvVojuFc9TegQt/V1HBs -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:19 2026 by rpki-client