This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/OxaeKc7pRBgah12v_9xLvX75AHM.roa File: OxaeKc7pRBgah12v_9xLvX75AHM.roa (raw, json) Hash identifier: qygdd+Z/MhrVDqAYLLnF2qLBOy48W3eHlGWo3g+C2qA= Subject key identifier: 3B:16:9E:29:CE:E9:44:18:1A:87:5D:AF:FF:DC:4B:BD:7E:F9:00:73 Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f Certificate serial: 019B7A5A66C6A86C9F67B73D102B42638D43 Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/OxaeKc7pRBgah12v_9xLvX75AHM.roa Signing time: Thu 01 Jan 2026 16:18:23 +0000 ROA not before: Thu 01 Jan 2026 16:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50673 IP address blocks: 91.216.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:66:c6:a8:6c:9f:67:b7:3d:10:2b:42:63:8d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f Validity Not Before: Jan 1 16:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b169e29cee944181a875dafffdc4bbd7ef90073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:ac:16:dc:21:5c:c0:81:b5:38:ce:b3:05: 10:ff:c0:a0:f1:15:86:ce:2b:6e:26:ec:4c:49:dd: de:b9:19:13:79:6d:16:da:40:ea:90:51:89:76:57: ae:a1:4d:99:5b:86:85:36:21:85:88:ed:f0:5c:30: 4a:14:01:d2:0e:91:5e:8a:07:f5:ba:38:09:0c:8b: 3e:8f:07:f4:6d:6b:a8:01:80:f5:5a:3a:37:44:ba: 39:57:43:39:ab:c6:c1:58:46:86:01:5d:11:2c:88: 06:b6:41:82:87:bc:29:1c:1b:cd:17:96:65:35:7e: c2:f2:52:7e:c7:40:e2:73:d6:36:4e:70:b9:16:c2: 73:04:b7:2d:77:d7:c9:27:81:6a:6d:01:4d:ec:89: 5a:43:66:08:97:25:86:bb:cd:bd:13:b3:4b:24:ce: 07:7e:0c:58:33:c6:50:aa:5e:39:75:4d:2b:12:c4: da:02:13:f8:78:c9:76:f5:fe:46:c3:7d:2c:ef:d7: 35:7b:2a:5e:7a:fe:3c:ea:9e:08:f9:c1:cf:de:75: 60:a4:39:de:d7:39:01:28:e7:7f:7a:22:d5:31:dc: f0:fb:83:cd:66:ab:53:ed:10:fa:aa:08:e0:aa:02: b9:59:d8:a6:60:0b:82:a7:1e:89:33:b3:c8:14:b5: a2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:16:9E:29:CE:E9:44:18:1A:87:5D:AF:FF:DC:4B:BD:7E:F9:00:73 X509v3 Authority Key Identifier: keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/OxaeKc7pRBgah12v_9xLvX75AHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.34.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:ef:cd:3e:f0:e3:3d:a6:2b:2b:3e:1f:40:e0:43:64:87:a7: 7f:dd:6a:da:66:21:5a:f7:5a:4d:78:34:64:1f:f5:0b:40:43: d5:c9:4b:16:04:5c:3f:28:40:39:2d:9c:2a:dd:a1:47:0a:06: 0c:cd:cd:aa:77:b3:fb:84:84:cd:5b:6c:1c:db:fc:ae:fb:42: d2:1f:9e:a9:47:86:83:07:09:60:92:ea:1c:15:e4:95:72:7d: 31:1c:11:ea:b3:61:0c:82:f8:f0:04:e0:7c:12:08:c2:cc:8a: b6:be:e8:f2:9d:36:c1:79:97:ae:dc:fe:42:b2:85:77:6e:8d: 61:1e:2a:8a:1a:54:69:ca:2b:0f:cd:a4:46:1a:81:89:ac:52: ad:8c:43:be:5c:8c:e0:00:10:06:7e:f6:e4:d5:c2:2b:fd:9d: ab:0a:8a:ed:ad:1c:f7:02:df:00:73:a8:fa:fa:39:fb:04:10: a3:2a:6f:fc:d5:4f:ab:8d:d8:9e:cf:ce:95:17:9f:10:ba:5f: 5d:b0:ec:a4:6d:dc:66:07:50:98:d2:22:14:1b:bb:9c:22:89: 1e:c1:bf:6b:32:ad:c1:f8:68:37:19:8b:db:0e:74:10:e5:c9: e5:36:e7:e6:cb:cf:f4:46:f9:be:53:95:57:74:7c:56:ef:5f: 2d:10:30:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WmbGqGyfZ7c9ECtCY41DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YzM0MGVlNWI5ZGFmMWE2ODE4ZjBkZjQwN2ZhNTk3NTg4 NmIxMGYwHhcNMjYwMTAxMTYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjE2OWUyOWNlZTk0NDE4MWE4NzVkYWZmZmRjNGJiZDdlZjkwMDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwusFtwhXMCBtTjOswUQ/8Cg8RWG zituJuxMSd3euRkTeW0W2kDqkFGJdleuoU2ZW4aFNiGFiO3wXDBKFAHSDpFeigf1 ujgJDIs+jwf0bWuoAYD1Wjo3RLo5V0M5q8bBWEaGAV0RLIgGtkGCh7wpHBvNF5Zl NX7C8lJ+x0Dic9Y2TnC5FsJzBLctd9fJJ4FqbQFN7IlaQ2YIlyWGu829E7NLJM4H fgxYM8ZQql45dU0rEsTaAhP4eMl29f5Gw30s79c1eypeev486p4I+cHP3nVgpDne 1zkBKOd/eiLVMdzw+4PNZqtT7RD6qgjgqgK5WdimYAuCpx6JM7PIFLWilwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDsWninO6UQYGoddr//cS71++QBzMB8GA1UdIwQY MBaAFOXDQO5bna8aaBjw30B/pZdYhrEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2It NmUxZjJmNjg1MWNmLzEvT3hhZUtjN3BSQmdhaDEydl85eEx2WDc1QUhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2ItNmUxZjJmNjg1MWNm LzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9giMA0G CSqGSIb3DQEBCwUAA4IBAQAd780+8OM9pisrPh9A4ENkh6d/3WraZiFa91pNeDRk H/ULQEPVyUsWBFw/KEA5LZwq3aFHCgYMzc2qd7P7hITNW2wc2/yu+0LSH56pR4aD BwlgkuocFeSVcn0xHBHqs2EMgvjwBOB8EgjCzIq2vujynTbBeZeu3P5CsoV3bo1h HiqKGlRpyisPzaRGGoGJrFKtjEO+XIzgABAGfvbk1cIr/Z2rCortrRz3At8Ac6j6 +jn7BBCjKm/81U+rjdiez86VF58Qul9dsOykbdxmB1CY0iIUG7ucIokewb9rMq3B +Gg3GYvbDnQQ5cnlNufmy8/0Rvm+U5VXdHxW718tEDAH -----END CERTIFICATE-----Generated at Sun Jan 11 11:46:08 2026 by rpki-client