This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/OG4lz2aT-P_T1pbKQmVuBGnxAM0.roa File: OG4lz2aT-P_T1pbKQmVuBGnxAM0.roa (raw, json) Hash identifier: OAZhJcMAQC48Syy5KrA0aFBAMfYodkPWCtect72qfTI= Subject key identifier: 38:6E:25:CF:66:93:F8:FF:D3:D6:96:CA:42:65:6E:04:69:F1:00:CD Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00 Certificate serial: 019B7F1577A5657F28FAB1E8132C1ECBE883 Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/OG4lz2aT-P_T1pbKQmVuBGnxAM0.roa Signing time: Fri 02 Jan 2026 14:21:11 +0000 ROA not before: Fri 02 Jan 2026 14:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54282 IP address blocks: 193.135.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:77:a5:65:7f:28:fa:b1:e8:13:2c:1e:cb:e8:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00 Validity Not Before: Jan 2 14:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=386e25cf6693f8ffd3d696ca42656e0469f100cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8e:15:1b:01:91:22:21:5b:d3:19:e7:e8:ae: 9c:4b:18:c2:81:e4:52:9f:4a:1c:f4:10:59:eb:74: e9:4e:e8:99:17:dd:4e:4d:ca:86:f8:80:5b:c3:76: b9:40:db:9b:a0:d2:33:1f:04:0b:f3:b8:34:b3:79: dc:d9:92:0a:a1:0f:13:9b:01:7b:e7:2c:8a:c0:5f: 1a:d3:e8:91:a9:2e:86:58:a8:b9:3b:e0:6b:01:54: fe:ba:c0:65:0f:00:6f:0f:03:d8:33:f1:3f:48:d2: fe:bc:05:51:33:4c:b1:f1:ca:50:70:c0:2d:23:29: 31:73:b5:73:cf:e8:12:d6:51:45:6a:fd:bc:77:69: 23:cd:cf:5c:3b:21:63:21:40:91:39:a9:81:45:eb: 55:2e:61:36:40:9e:db:c5:84:4d:e4:7a:d7:bf:ae: 66:95:1b:af:7d:f5:d1:f1:02:42:ac:4c:42:4e:4e: 26:d7:59:da:3d:b4:5b:6e:41:14:32:8d:44:02:3f: 86:5e:50:f4:f0:e1:a2:9a:18:52:9b:3e:09:81:31: ff:1e:3f:a6:bb:45:08:ce:be:59:e2:a8:b8:47:cc: 3d:61:bb:e4:1b:99:9d:a4:9b:0b:63:7d:5f:a1:b5: d8:56:58:29:ce:24:a3:ae:d3:cc:60:bd:b4:f3:b3: 25:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6E:25:CF:66:93:F8:FF:D3:D6:96:CA:42:65:6E:04:69:F1:00:CD X509v3 Authority Key Identifier: keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/OG4lz2aT-P_T1pbKQmVuBGnxAM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.135.40.0/21 Signature Algorithm: sha256WithRSAEncryption 9b:06:72:e9:b8:d5:bb:8e:da:2f:66:b8:b6:b0:c1:fa:50:7a: d5:c0:5a:e4:17:31:7a:fc:67:e4:c2:95:65:dc:1a:f6:f9:47: 8f:ca:32:bb:61:cf:b5:16:13:6a:b4:e8:52:de:29:a7:14:cb: cc:b4:6c:49:b0:af:ab:46:52:f6:8a:6c:1f:80:8d:5e:3c:86: a2:d0:94:3d:54:3b:c7:17:66:93:c5:e2:71:9a:3c:59:75:8c: 1b:56:98:85:10:93:2b:17:ac:2a:0a:24:cc:52:37:22:c8:a7: 6d:00:61:50:fc:64:31:5b:90:25:f7:ea:d0:d5:5b:7d:d3:f0: 54:d2:37:9f:17:17:54:88:76:0b:c0:50:17:87:ff:49:21:2e: 10:87:06:60:f3:b6:a7:4a:6b:b0:7d:5c:88:07:e6:68:4e:cd: f0:5e:c7:32:62:fb:b0:37:64:da:de:77:9b:83:a9:9b:2d:af: f3:72:f0:97:8b:f7:c8:67:94:e9:3e:b0:88:c7:08:03:16:14: 51:07:24:f7:ae:3c:dc:a2:4d:7e:8e:e4:5b:3e:db:0f:95:92: 88:3a:50:d5:ab:7c:4d:d6:3b:5a:d1:b5:20:bd:5d:0b:21:81: bd:c3:b3:72:29:99:39:df:98:59:fd:25:31:93:32:89:7d:29: 43:0f:cc:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FXelZX8o+rHoEywey+iDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYWQ5YzBjZTViYTM5MDViNDE5NzBhMDRlNTE5NzYwNzZj NjdlMDAwHhcNMjYwMTAyMTQyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODZlMjVjZjY2OTNmOGZmZDNkNjk2Y2E0MjY1NmUwNDY5ZjEwMGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I4VGwGRIiFb0xnn6K6cSxjCgeRS n0oc9BBZ63TpTuiZF91OTcqG+IBbw3a5QNuboNIzHwQL87g0s3nc2ZIKoQ8TmwF7 5yyKwF8a0+iRqS6GWKi5O+BrAVT+usBlDwBvDwPYM/E/SNL+vAVRM0yx8cpQcMAt Iykxc7Vzz+gS1lFFav28d2kjzc9cOyFjIUCROamBRetVLmE2QJ7bxYRN5HrXv65m lRuvffXR8QJCrExCTk4m11naPbRbbkEUMo1EAj+GXlD08OGimhhSmz4JgTH/Hj+m u0UIzr5Z4qi4R8w9YbvkG5mdpJsLY31fobXYVlgpziSjrtPMYL2087Ml9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDhuJc9mk/j/09aWykJlbgRp8QDNMB8GA1UdIwQY MBaAFIqtnAzlujkFtBlwoE5Rl2B2xn4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGIt N2EwZWNlOWMwYWY4LzEvT0c0bHoyYVQtUF9UMXBiS1FtVnVCR254QU0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGItN2EwZWNlOWMwYWY4 LzEvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwYcoMA0G CSqGSIb3DQEBCwUAA4IBAQCbBnLpuNW7jtovZri2sMH6UHrVwFrkFzF6/GfkwpVl 3Br2+UePyjK7Yc+1FhNqtOhS3imnFMvMtGxJsK+rRlL2imwfgI1ePIai0JQ9VDvH F2aTxeJxmjxZdYwbVpiFEJMrF6wqCiTMUjciyKdtAGFQ/GQxW5Al9+rQ1Vt90/BU 0jefFxdUiHYLwFAXh/9JIS4QhwZg87anSmuwfVyIB+ZoTs3wXscyYvuwN2Ta3neb g6mbLa/zcvCXi/fIZ5TpPrCIxwgDFhRRByT3rjzcok1+juRbPtsPlZKIOlDVq3xN 1jta0bUgvV0LIYG9w7NyKZk535hZ/SUxkzKJfSlDD8ym -----END CERTIFICATE-----Generated at Sat Jan 10 07:54:12 2026 by rpki-client