This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/OUJf-sc0f-zTH1OOEDEe1u3vDUI.roa File: OUJf-sc0f-zTH1OOEDEe1u3vDUI.roa (raw, json) Hash identifier: jsm1Kc9N3YzBvdT9WWkethSdjz6IIBqoQUC68R7xEgA= Subject key identifier: 39:42:5F:FA:C7:34:7F:EC:D3:1F:53:8E:10:31:1E:D6:ED:EF:0D:42 Certificate issuer: /CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb Certificate serial: 019B77C753D78A6B1B3AEE78F0E9214C1FBE Authority key identifier: BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/OUJf-sc0f-zTH1OOEDEe1u3vDUI.roa Signing time: Thu 01 Jan 2026 04:18:30 +0000 ROA not before: Thu 01 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199697 IP address blocks: 193.37.158.0/24 maxlen: 24 2a12:6040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:53:d7:8a:6b:1b:3a:ee:78:f0:e9:21:4c:1f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39425ffac7347fecd31f538e10311ed6edef0d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7c:dd:cf:4c:eb:48:58:f6:6b:60:23:a6:ea: 61:08:74:e5:0a:f6:7c:a7:52:d5:cf:60:31:75:d0: 6d:01:bb:eb:ef:0a:03:0f:1f:d0:10:46:48:53:bc: 18:7d:8b:09:f5:31:ad:36:00:06:d8:0b:2f:0d:69: 67:f2:32:31:1c:22:d9:dc:ab:81:05:39:14:1e:e1: 95:4a:e8:7c:5e:cd:cd:97:3d:10:25:8c:2e:29:d9: 4d:6f:d4:f6:10:c4:75:ff:9f:6d:35:e9:2e:50:c6: 06:95:43:07:86:85:bf:4d:e7:ee:a0:48:be:92:6f: bb:8a:75:80:eb:ed:26:55:b8:3e:ec:49:83:45:c7: e8:8b:5a:2c:f2:bd:a1:09:52:25:4e:d8:8e:90:a4: e5:48:89:f2:5a:6f:ca:0f:be:bb:4c:c0:02:a7:4f: 74:d5:f5:13:db:6c:32:68:89:ed:1b:ce:74:e0:67: c5:99:82:d8:8d:29:53:69:18:4c:2a:25:ba:2c:6b: eb:92:e0:6c:2b:8b:97:99:60:c4:5d:85:94:5f:ff: 6c:04:8f:f5:14:26:34:75:c6:41:59:57:1b:da:16: cb:45:42:d8:79:bd:80:01:29:38:1c:91:3e:2b:d6: db:c8:12:0a:a0:43:23:c9:0b:12:5c:45:8a:08:f2: 94:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:42:5F:FA:C7:34:7F:EC:D3:1F:53:8E:10:31:1E:D6:ED:EF:0D:42 X509v3 Authority Key Identifier: keyid:BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/OUJf-sc0f-zTH1OOEDEe1u3vDUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.158.0/24 IPv6: 2a12:6040::/29 Signature Algorithm: sha256WithRSAEncryption 7a:08:43:3a:c4:62:23:4a:f1:71:f7:48:91:3a:91:44:d2:ca: f6:70:24:7f:72:04:26:85:21:e9:be:dc:af:1d:88:42:ce:cd: 99:35:e8:66:a4:a6:ea:db:9c:4e:60:be:5b:04:54:c8:91:5c: 10:75:31:49:10:95:fa:7c:27:e6:d2:97:fe:08:db:9f:bf:e2: 75:74:00:64:00:4a:b2:d2:93:ef:78:37:71:1f:76:04:8f:eb: 93:9b:1e:32:1e:89:5b:fe:4b:21:3f:7d:68:f1:e7:08:65:0f: 37:7d:f0:45:14:f9:73:06:21:14:82:d3:3d:8a:18:3e:d7:88: 28:e5:f6:93:ad:14:b1:9d:35:e6:2e:46:ee:42:f2:a4:c6:cb: 34:2a:1e:33:4d:20:f9:93:a9:f6:eb:f4:5d:f4:b1:9d:2d:9a: f3:0d:af:a2:f6:0a:3b:5f:bb:fe:e9:96:23:78:bc:1b:4e:11: 9a:64:b5:42:fb:e6:ef:5e:ac:3c:14:ba:3d:a0:c6:0f:89:e2: 58:70:df:5c:55:38:21:9e:f8:8f:91:75:3b:29:f6:86:7a:2f: e4:43:5a:f8:56:23:ab:df:be:85:03:ed:8e:9e:bd:23:73:85: b1:00:ac:63:c9:95:d7:ab:ea:07:38:28:ab:13:8a:2c:30:1e: d6:5d:d2:b4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x1PXimsbOu548OkhTB++MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYmMxZWNjMTdmNjYwZDViZDg5ZTE2MTY3YjlkNTAzMWJm NmEwY2IwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTQyNWZmYWM3MzQ3ZmVjZDMxZjUzOGUxMDMxMWVkNmVkZWYwZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Xzdz0zrSFj2a2AjpuphCHTlCvZ8 p1LVz2AxddBtAbvr7woDDx/QEEZIU7wYfYsJ9TGtNgAG2AsvDWln8jIxHCLZ3KuB BTkUHuGVSuh8Xs3Nlz0QJYwuKdlNb9T2EMR1/59tNekuUMYGlUMHhoW/TefuoEi+ km+7inWA6+0mVbg+7EmDRcfoi1os8r2hCVIlTtiOkKTlSInyWm/KD767TMACp090 1fUT22wyaIntG8504GfFmYLYjSlTaRhMKiW6LGvrkuBsK4uXmWDEXYWUX/9sBI/1 FCY0dcZBWVcb2hbLRULYeb2AASk4HJE+K9bbyBIKoEMjyQsSXEWKCPKU4QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDlCX/rHNH/s0x9TjhAxHtbt7w1CMB8GA1UdIwQY MBaAFLq8HswX9mDVvYnhYWe51QMb9qDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJ3ZXpCZjJZTlc5aWVGaFo3blZBeHYyb01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jZjEwZGItNzU4Mi00NTUzLWJmMWIt MTc5MTE1OTRhZTUxLzEvT1VKZi1zYzBmLXpUSDFPT0VERWUxdTN2RFVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jZjEwZGItNzU4Mi00NTUzLWJmMWItMTc5MTE1OTRhZTUx LzEvdXJ3ZXpCZjJZTlc5aWVGaFo3blZBeHYyb01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSWeMA0E AgACMAcDBQMqEmBAMA0GCSqGSIb3DQEBCwUAA4IBAQB6CEM6xGIjSvFx90iROpFE 0sr2cCR/cgQmhSHpvtyvHYhCzs2ZNehmpKbq25xOYL5bBFTIkVwQdTFJEJX6fCfm 0pf+CNufv+J1dABkAEqy0pPveDdxH3YEj+uTmx4yHolb/kshP31o8ecIZQ83ffBF FPlzBiEUgtM9ihg+14go5faTrRSxnTXmLkbuQvKkxss0Kh4zTSD5k6n26/Rd9LGd LZrzDa+i9go7X7v+6ZYjeLwbThGaZLVC++bvXqw8FLo9oMYPieJYcN9cVTghnviP kXU7KfaGei/kQ1r4ViOr376FA+2Onr0jc4WxAKxjyZXXq+oHOCirE4osMB7WXdK0 -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:35 2026 by rpki-client