This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OiJP-dwO8vImOl6PRJoAbSLMINg.roa File: OiJP-dwO8vImOl6PRJoAbSLMINg.roa (raw, json) Hash identifier: 0Dr9pDPBhr67/QuciCB5fTYTs6JIhhJIhgZfGpGJIa4= Subject key identifier: 3A:22:4F:F9:DC:0E:F2:F2:26:3A:5E:8F:44:9A:00:6D:22:CC:20:D8 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E6AD95E03BF4B89E068EBA4BB991F Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OiJP-dwO8vImOl6PRJoAbSLMINg.roa Signing time: Thu 01 Jan 2026 12:18:06 +0000 ROA not before: Thu 01 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25693 IP address blocks: 193.93.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6a:d9:5e:03:bf:4b:89:e0:68:eb:a4:bb:99:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a224ff9dc0ef2f2263a5e8f449a006d22cc20d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:79:89:0e:d5:09:e5:fe:fb:97:13:a5:59:c0: cc:8d:da:e9:71:0c:18:b0:a0:ec:20:3f:af:ae:f4: 8c:11:49:33:ac:7e:f0:5e:4b:4e:c2:1e:8e:ef:83: eb:b1:88:5e:f4:be:d4:43:88:d8:ac:9b:28:d9:89: 02:2f:ff:8f:61:29:46:7f:ef:87:fc:d4:6d:30:43: 31:c9:9e:dd:51:78:0d:1e:b5:d5:2f:ec:f4:1d:fa: 23:45:0a:b0:c2:ca:ea:a7:16:1c:ae:1c:f9:2e:f4: f2:b4:f0:97:0e:3b:93:9b:c1:fb:86:a3:64:06:7f: 93:27:1d:bb:d8:df:d1:39:98:c7:08:e3:e7:30:91: 6f:d2:1e:0b:bb:b7:5b:e1:63:37:20:8a:c7:a2:0b: 29:09:87:00:6c:60:24:61:a5:c9:ae:84:4d:b9:cd: 41:1d:e2:9e:78:84:0e:13:eb:5c:27:55:5e:bf:3d: 5a:f3:41:84:e4:5e:eb:c8:e6:af:d0:96:4c:d0:d2: ef:0d:58:06:87:14:be:2c:26:de:78:d7:83:80:17: ed:1f:e5:d0:0a:28:ef:dd:5a:52:3a:55:48:85:66: 74:ae:76:6b:6d:56:3e:f6:24:5e:d8:7b:41:d2:72: c4:4c:cd:d1:a9:fa:05:f7:ec:f8:20:6c:11:76:b8: 83:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:22:4F:F9:DC:0E:F2:F2:26:3A:5E:8F:44:9A:00:6D:22:CC:20:D8 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OiJP-dwO8vImOl6PRJoAbSLMINg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.93.55.0/24 Signature Algorithm: sha256WithRSAEncryption 72:6f:40:2c:21:e5:d4:d6:e7:17:ed:11:7f:9b:b6:6d:ca:f5: cd:46:a4:19:bb:6e:c9:4c:f6:75:12:b8:6f:09:05:5d:8a:fa: 6e:f4:27:53:c4:d8:f1:d5:0f:db:c1:ba:f3:6d:ef:29:2c:be: a1:16:9b:08:63:9d:f6:45:2e:f4:b2:1e:3d:d3:5a:51:73:76: 58:5c:dd:5d:52:66:5d:a0:16:c5:74:5b:36:5c:45:fc:14:63: fb:c8:3f:f8:75:1a:d3:4b:85:9b:4f:76:36:c5:57:10:0c:69: 8d:ce:9b:28:1d:75:79:9d:9f:4b:25:f8:d8:b9:16:c0:83:72: ad:57:b4:0e:da:19:8f:02:eb:d0:3d:b5:ef:5c:f4:23:e6:da: 69:e6:e5:b8:10:51:e6:e0:8b:e5:3b:7b:55:a8:9a:66:ba:a7: 1a:d5:f9:6e:3e:e8:42:c5:f2:06:c9:32:ec:aa:23:6c:3e:ce: fa:1d:fb:16:53:16:79:05:54:02:14:e3:70:0e:68:68:12:9b: 90:c8:a8:ea:06:6d:ae:7c:e5:52:2d:05:60:e3:5c:ca:a4:9b: c6:ae:79:00:d0:75:02:91:bf:4f:0b:43:aa:cf:a6:21:e0:88: b6:9e:8c:9f:71:b7:28:c9:21:3b:1c:b5:1e:d9:75:b4:9a:a8: e3:f9:1b:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmrZXgO/S4ngaOuku5kfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTIyNGZmOWRjMGVmMmYyMjYzYTVlOGY0NDlhMDA2ZDIyY2MyMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83mJDtUJ5f77lxOlWcDMjdrpcQwY sKDsID+vrvSMEUkzrH7wXktOwh6O74PrsYhe9L7UQ4jYrJso2YkCL/+PYSlGf++H /NRtMEMxyZ7dUXgNHrXVL+z0HfojRQqwwsrqpxYcrhz5LvTytPCXDjuTm8H7hqNk Bn+TJx272N/ROZjHCOPnMJFv0h4Lu7db4WM3IIrHogspCYcAbGAkYaXJroRNuc1B HeKeeIQOE+tcJ1Vevz1a80GE5F7ryOav0JZM0NLvDVgGhxS+LCbeeNeDgBftH+XQ Cijv3VpSOlVIhWZ0rnZrbVY+9iRe2HtB0nLETM3RqfoF9+z4IGwRdriDuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDoiT/ncDvLyJjpej0SaAG0izCDYMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvT2lKUC1kd084dkltT2w2UFJKb0FiU0xNSU5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwV03MA0G CSqGSIb3DQEBCwUAA4IBAQByb0AsIeXU1ucX7RF/m7ZtyvXNRqQZu27JTPZ1Erhv CQVdivpu9CdTxNjx1Q/bwbrzbe8pLL6hFpsIY532RS70sh4901pRc3ZYXN1dUmZd oBbFdFs2XEX8FGP7yD/4dRrTS4WbT3Y2xVcQDGmNzpsoHXV5nZ9LJfjYuRbAg3Kt V7QO2hmPAuvQPbXvXPQj5tpp5uW4EFHm4IvlO3tVqJpmuqca1fluPuhCxfIGyTLs qiNsPs76HfsWUxZ5BVQCFONwDmhoEpuQyKjqBm2ufOVSLQVg41zKpJvGrnkA0HUC kb9PC0Oqz6Yh4Ii2noyfcbcoySE7HLUe2XW0mqjj+Rt7 -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:05 2026 by rpki-client