This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/O-kwG0u-EAwLNDSQPGsH45GyKmc.roa File: O-kwG0u-EAwLNDSQPGsH45GyKmc.roa (raw, json) Hash identifier: D0eYbR2tb19Ooq5pwVaYX8aDfLSa8TeQ3cUeeDsbLk8= Subject key identifier: 3B:E9:30:1B:4B:BE:10:0C:0B:34:34:90:3C:6B:07:E3:91:B2:2A:67 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12F42AD0146C8F2B4CEE779652D437 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/O-kwG0u-EAwLNDSQPGsH45GyKmc.roa Signing time: Fri 02 Jan 2026 00:19:35 +0000 ROA not before: Fri 02 Jan 2026 00:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35276 IP address blocks: 194.6.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f4:2a:d0:14:6c:8f:2b:4c:ee:77:96:52:d4:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3be9301b4bbe100c0b3434903c6b07e391b22a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:af:93:cd:c4:d5:19:0d:85:e5:da:cd:76: f4:03:7e:07:31:9d:af:52:51:02:7c:0f:a8:db:02: cb:e0:2c:9a:bd:60:85:ef:4e:b5:5c:6e:32:0c:a5: 10:ef:9d:ec:04:bf:ef:89:94:5c:86:f9:66:0c:23: 73:ce:13:3b:e0:8f:3a:5d:cc:e6:55:ca:1e:da:b8: 10:45:d0:25:d9:7e:d3:af:a7:24:0e:0c:5a:2d:20: 5d:6a:d8:da:6d:70:39:1a:fa:77:37:bc:61:8e:11: 2d:ed:72:4a:b4:d3:29:67:ac:00:6a:ad:05:ed:3b: fe:b5:2e:6a:00:e8:4b:58:e9:b8:2b:69:71:8a:18: 17:6c:01:e7:1e:a4:3a:bc:5e:01:a3:85:64:6b:f7: 67:c1:d4:d3:63:d3:3d:74:53:8e:3c:36:f6:6d:61: be:16:75:e9:f3:90:e5:a1:52:41:71:da:99:23:c5: 7e:75:3f:f6:9e:6c:ef:37:02:5a:66:72:8f:b0:ad: ac:9f:b1:6d:fa:d6:50:6b:06:9c:77:1d:fa:07:f4: b3:69:da:bd:04:85:48:43:d6:76:6d:8c:9c:9b:6e: 84:e7:cd:be:b6:49:4d:b5:96:bc:4d:12:e4:e5:24: a7:6c:10:23:cd:e0:bb:9c:17:db:64:81:6b:71:76: 97:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E9:30:1B:4B:BE:10:0C:0B:34:34:90:3C:6B:07:E3:91:B2:2A:67 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/O-kwG0u-EAwLNDSQPGsH45GyKmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.6.179.0/24 Signature Algorithm: sha256WithRSAEncryption 75:60:54:dc:22:4a:a6:3a:38:44:3f:d4:02:a4:3f:9e:54:36: f3:72:f4:41:68:9d:03:2c:d4:69:42:65:9b:5e:59:94:95:bf: fa:99:4a:b0:74:52:0c:06:50:6b:1c:dd:fc:99:30:da:33:5b: b2:8b:83:0d:70:eb:fb:fb:5c:14:e2:e3:1f:b1:76:41:0f:e1: 3b:65:98:df:bd:3f:fc:cd:52:73:39:a8:dc:2f:99:07:b3:d4: fa:e5:55:03:4b:3b:88:9e:20:2f:f3:b9:47:fc:13:33:45:0d: f7:3a:6c:a9:24:46:83:ed:a8:b0:28:32:34:f0:9f:73:23:97: 0b:72:68:3e:7f:cc:3c:6a:71:62:f3:6e:b2:a7:e2:79:25:99: 5d:47:02:0b:31:8b:d5:c8:15:ef:25:40:f5:d5:15:2d:37:22: f6:94:fa:f2:a9:33:59:9b:71:8f:ff:2e:03:1b:77:fd:5d:d2: 0f:ff:5c:d9:98:d8:51:5e:a3:7e:19:a6:11:56:85:20:5f:1a: 52:fd:f1:11:70:ed:32:b2:70:b0:fc:b9:d0:2c:03:92:17:6d: 6f:0f:3a:0f:72:93:ae:9a:7b:12:57:38:fc:d3:be:91:5d:0e: 44:32:7b:54:32:cb:86:28:95:62:3d:fa:f0:b4:c7:aa:74:85: d0:69:25:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EvQq0BRsjytM7neWUtQ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmU5MzAxYjRiYmUxMDBjMGIzNDM0OTAzYzZiMDdlMzkxYjIyYTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt92vk83E1RkNheXazXb0A34HMZ2v UlECfA+o2wLL4CyavWCF7061XG4yDKUQ753sBL/viZRchvlmDCNzzhM74I86Xczm Vcoe2rgQRdAl2X7Tr6ckDgxaLSBdatjabXA5Gvp3N7xhjhEt7XJKtNMpZ6wAaq0F 7Tv+tS5qAOhLWOm4K2lxihgXbAHnHqQ6vF4Bo4Vka/dnwdTTY9M9dFOOPDb2bWG+ FnXp85DloVJBcdqZI8V+dT/2nmzvNwJaZnKPsK2sn7Ft+tZQawacdx36B/Szadq9 BIVIQ9Z2bYycm26E582+tklNtZa8TRLk5SSnbBAjzeC7nBfbZIFrcXaXuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDvpMBtLvhAMCzQ0kDxrB+ORsipnMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvTy1rd0cwdS1FQXdMTkRTUVBHc0g0NUd5S21jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgazMA0G CSqGSIb3DQEBCwUAA4IBAQB1YFTcIkqmOjhEP9QCpD+eVDbzcvRBaJ0DLNRpQmWb XlmUlb/6mUqwdFIMBlBrHN38mTDaM1uyi4MNcOv7+1wU4uMfsXZBD+E7ZZjfvT/8 zVJzOajcL5kHs9T65VUDSzuIniAv87lH/BMzRQ33OmypJEaD7aiwKDI08J9zI5cL cmg+f8w8anFi826yp+J5JZldRwILMYvVyBXvJUD11RUtNyL2lPryqTNZm3GP/y4D G3f9XdIP/1zZmNhRXqN+GaYRVoUgXxpS/fERcO0ysnCw/LnQLAOSF21vDzoPcpOu mnsSVzj8076RXQ5EMntUMsuGKJViPfrwtMeqdIXQaSWH -----END CERTIFICATE-----Generated at Mon Jan 26 17:45:41 2026 by rpki-client