This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/OQLmyHIHKnOQqtsOG6o6hyfLKFE.roa File: OQLmyHIHKnOQqtsOG6o6hyfLKFE.roa (raw, json) Hash identifier: OAPut5klxvnwxvXekYncRq9ZTcquwuK9N/4Pis2RPnI= Subject key identifier: 39:02:E6:C8:72:07:2A:73:90:AA:DB:0E:1B:AA:3A:87:27:CB:28:51 Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10 Certificate serial: 019B7E382B29BCAD2FA2E85EA65CA25DEDBB Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/OQLmyHIHKnOQqtsOG6o6hyfLKFE.roa Signing time: Fri 02 Jan 2026 10:19:28 +0000 ROA not before: Fri 02 Jan 2026 10:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8987 IP address blocks: 193.24.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2b:29:bc:ad:2f:a2:e8:5e:a6:5c:a2:5d:ed:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10 Validity Not Before: Jan 2 10:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3902e6c872072a7390aadb0e1baa3a8727cb2851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:85:d6:58:9c:7d:74:9c:e4:73:55:92:08: 7a:ec:5a:f7:b2:3b:04:94:14:c0:a7:88:11:df:a0: 2b:3b:f9:1a:9e:e6:01:8f:36:ee:35:e2:8e:0a:61: 7f:82:22:a4:7c:17:38:10:41:82:72:23:54:47:05: 06:09:81:dd:d8:d6:b9:c6:bf:1e:9c:da:71:01:26: 2d:fa:fa:66:34:12:f2:f9:86:1a:98:31:fa:93:27: 24:62:db:36:78:59:22:4a:de:a9:ae:4a:63:b6:ff: 83:59:0d:0b:1a:6c:2e:97:6d:5e:f3:ac:88:29:e1: 41:d7:35:fb:5b:91:36:7e:34:a2:65:36:90:9c:8e: a9:45:5f:c8:09:87:12:79:25:cb:d4:66:43:fa:a9: 9b:a7:fc:13:9b:b7:b0:b7:59:d9:c8:e3:2a:db:3f: e9:40:f8:ca:60:76:e9:4c:22:a3:09:69:48:8f:b0: 55:cf:12:e6:ea:dc:50:89:d6:81:2e:f6:0e:23:73: 54:7b:7c:ef:b2:f5:c3:fb:39:06:21:9f:fd:26:a5: e1:9f:aa:0a:a5:da:92:58:43:c0:09:51:b3:9c:7e: 28:cf:43:1f:25:81:4c:fe:94:7e:84:70:0c:2e:c5: e7:a1:d9:53:35:33:f0:03:4d:de:4b:5f:38:1d:8e: d3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:02:E6:C8:72:07:2A:73:90:AA:DB:0E:1B:AA:3A:87:27:CB:28:51 X509v3 Authority Key Identifier: keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/OQLmyHIHKnOQqtsOG6o6hyfLKFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.42.0/23 Signature Algorithm: sha256WithRSAEncryption b0:95:6e:af:bf:c3:f0:1c:61:1d:0a:2c:91:5a:d5:e6:a2:ca: d3:85:21:2d:6e:b5:0f:18:2e:fb:29:5a:1b:8e:8b:01:7e:75: 28:fc:52:8b:88:84:a5:6d:e6:7e:07:f5:42:46:4e:c2:4c:cc: 8c:84:76:47:67:14:b7:9f:14:03:56:74:d6:94:e2:ff:d4:f5: eb:df:7a:45:ef:ec:7a:ed:ee:75:44:ef:6d:6b:53:6d:64:b3: 76:1e:ab:01:ae:f6:60:8b:38:9c:d8:5c:e6:03:98:62:51:7b: 7c:e1:b5:e8:be:2e:5d:c6:4c:52:cc:19:7e:97:95:83:7a:2f: 22:44:68:72:be:75:9d:8f:16:e0:47:e4:5f:56:6f:ab:9f:78: cb:e2:2e:31:44:e4:c9:2e:06:3f:2b:0a:3e:ee:4c:43:e4:92: ca:68:80:26:fb:86:8f:f3:1c:b6:2d:aa:b8:c1:5b:b5:fc:d6: 02:70:88:76:db:1e:f3:1e:dd:24:8f:49:04:c7:1b:e1:8f:d3: 60:27:f6:87:a6:cd:5b:e9:20:7d:f6:a5:f3:6b:88:7c:a6:92: d9:32:b5:f9:ca:8c:cd:4e:4c:71:e9:f7:6a:6c:9a:08:30:20: 4f:8e:ed:23:7d:90:90:c9:cc:22:22:73:3e:85:00:31:03:58: 03:c2:61:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCspvK0vouheplyiXe27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NmFmNTRlNjU1OGNmYzg2MjUyOTQ2ZTQ2OTJhYjkyNzc3 YzBlMTAwHhcNMjYwMTAyMTAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTAyZTZjODcyMDcyYTczOTBhYWRiMGUxYmFhM2E4NzI3Y2IyODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDCF1licfXSc5HNVkgh67Fr3sjsE lBTAp4gR36ArO/kanuYBjzbuNeKOCmF/giKkfBc4EEGCciNURwUGCYHd2Na5xr8e nNpxASYt+vpmNBLy+YYamDH6kyckYts2eFkiSt6prkpjtv+DWQ0LGmwul21e86yI KeFB1zX7W5E2fjSiZTaQnI6pRV/ICYcSeSXL1GZD+qmbp/wTm7ewt1nZyOMq2z/p QPjKYHbpTCKjCWlIj7BVzxLm6txQidaBLvYOI3NUe3zvsvXD+zkGIZ/9JqXhn6oK pdqSWEPACVGznH4oz0MfJYFM/pR+hHAMLsXnodlTNTPwA03eS184HY7TCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDkC5shyBypzkKrbDhuqOocnyyhRMB8GA1UdIwQY MBaAFIRq9U5lWM/IYlKUbkaSq5J3fA4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQt MDdlMzZlZmM1ZTQyLzEvT1FMbXlISUhLbk9RcXRzT0c2bzZoeWZMS0ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQtMDdlMzZlZmM1ZTQy LzEvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwRgqMA0G CSqGSIb3DQEBCwUAA4IBAQCwlW6vv8PwHGEdCiyRWtXmosrThSEtbrUPGC77KVob josBfnUo/FKLiISlbeZ+B/VCRk7CTMyMhHZHZxS3nxQDVnTWlOL/1PXr33pF7+x6 7e51RO9ta1NtZLN2HqsBrvZgizic2FzmA5hiUXt84bXovi5dxkxSzBl+l5WDei8i RGhyvnWdjxbgR+RfVm+rn3jL4i4xROTJLgY/Kwo+7kxD5JLKaIAm+4aP8xy2Laq4 wVu1/NYCcIh22x7zHt0kj0kExxvhj9NgJ/aHps1b6SB99qXza4h8ppLZMrX5yozN Tkxx6fdqbJoIMCBPju0jfZCQycwiInM+hQAxA1gDwmF9 -----END CERTIFICATE-----Generated at Mon Jan 19 09:49:19 2026 by rpki-client